wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto
History
Dr. Stephen Henson 436dead2e2 Calculate sequence length properly. 
Use correct length in old ASN.1 indefinite length sequence decoder
(only used by SSL_SESSION).

This bug was discovered by Hanno Böck using libfuzzer.

Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-08-03 00:13:03 +01:00
..
aes aes/asm/bsaes-armv7.pl: omit redundant stores in XTS subroutines. 2016-06-20 12:31:39 +02:00
asn1 Calculate sequence length properly. 2016-08-03 00:13:03 +01:00
bf RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
bio Change usage of RAND_pseudo_bytes to RAND_bytes 2016-06-27 15:00:08 +01:00
bn Convert memset calls to OPENSSL_cleanse 2016-06-30 15:53:44 +01:00
buffer BUF_strndup: tidy 2015-09-22 20:04:01 +02:00
camellia Fix URLs mangled by reformat 2015-12-19 14:43:43 +00:00
cast RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
cmac Switch to FIPS implementation for CMAC. 2016-02-16 22:52:59 +00:00
cms Change usage of RAND_pseudo_bytes to RAND_bytes 2016-06-27 15:00:08 +01:00
comp Avoid double declaration of COMP_METHOD 2016-05-18 13:38:27 -04:00
conf Run the refreshed scripts 2016-05-18 19:57:06 +02:00
des SPARC assembly pack: enforce V8+ ABI constraints. 2016-07-01 14:26:21 +02:00
dh Parameter copy sanity checks. 2016-05-31 13:26:54 +01:00
dsa Change usage of RAND_pseudo_bytes to RAND_bytes 2016-06-27 15:00:08 +01:00
dso Fix two possible leaks 2016-02-27 17:05:32 -05:00
ec Fix ASN.1 private encode of EC_KEY to not change the input key 2016-07-15 15:17:31 +02:00
ecdh RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
ecdsa RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
engine cryptodev_asym, zapparams: use OPENSSL_* allocation routines, handle errors 2016-06-03 20:31:24 +01:00
err Cleanup openssl.ec 2016-05-18 22:32:21 +02:00
evp Note cipher BIO write errors too. 2016-07-26 22:45:04 +01:00
hmac hmac/hmac.c: switch to OPENSSL_cleanse. 2016-06-12 13:47:32 +02:00
idea RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
jpake Fix missing malloc return value checks 2015-11-09 22:54:19 +00:00
krb5 RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
lhash RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
md2 Convert memset calls to OPENSSL_cleanse 2016-06-30 15:53:44 +01:00
md4 RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
md5 RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
mdc2 RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
modes SPARC assembly pack: enforce V8+ ABI constraints. 2016-07-01 14:26:21 +02:00
objects Fix a mem leak on an error path in OBJ_NAME_add() 2016-05-24 00:12:04 +01:00
ocsp OCSP_request_add0_id() inconsistent error return 2016-07-20 01:29:16 -04:00
pem Change usage of RAND_pseudo_bytes to RAND_bytes 2016-06-27 15:00:08 +01:00
perlasm SPARC assembly pack: enforce V8+ ABI constraints. 2016-07-01 14:26:21 +02:00
pkcs7 Change usage of RAND_pseudo_bytes to RAND_bytes 2016-06-27 15:00:08 +01:00
pkcs12 Change usage of RAND_pseudo_bytes to RAND_bytes 2016-06-27 15:00:08 +01:00
pqueue RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
rand Convert memset calls to OPENSSL_cleanse 2016-06-30 15:53:44 +01:00
rc2 RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
rc4 Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
rc5 RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
ripemd RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
rsa Fix compilation with CMS disabled 2016-07-06 08:44:51 +03:00
seed Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
sha s390x assembly pack: cache capability query results. 2016-04-25 11:54:38 +02:00
srp Change usage of RAND_pseudo_bytes to RAND_bytes 2016-06-27 15:00:08 +01:00
stack if no comparison function set make sk_sort no op 2016-02-06 18:49:56 +00:00
store Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
threads Cleanup mttest.c : because we no longer use stdio here, don't include it 2015-06-21 22:12:07 +02:00
ts Fix OOB read in TS_OBJ_print_bio(). 2016-07-22 15:16:31 +01:00
txt_db RT4044: Remove .cvsignore files. 2015-09-15 11:58:27 -04:00
ui Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
whrlpool Convert memset calls to OPENSSL_cleanse 2016-06-30 15:53:44 +01:00
x509 Fix CRL time comparison. 2016-07-29 18:49:12 +01:00
x509v3 Fix an error path leak in do_ext_nconf() 2016-06-10 16:44:06 +01:00
alphacpuid.pl
arm64cpuid.S
arm_arch.h
armcap.c
armv4cpuid.S
constant_time_locl.h
constant_time_test.c
cpt_err.c
cryptlib.c GH102: Add volatile to CRYPTO_memcmp 2016-01-30 14:41:23 -05:00
cryptlib.h
crypto-lib.com
crypto.h GH102: Add volatile to CRYPTO_memcmp 2016-01-30 14:41:23 -05:00
cversion.c
ebcdic.c Appease clang -Wempty-translation-unit 2015-04-08 17:59:40 +02:00
ebcdic.h
ex_data.c Root cause discovered and fixed, this fix became unnecessary 2016-01-13 01:23:34 +01:00
fips_err.h
fips_ers.c
ia64cpuid.S
install-crypto.com
LPdir_nyi.c Remove the silly CVS markers from LPdir_*.c 2016-07-16 09:04:56 +02:00
LPdir_unix.c Remove the silly CVS markers from LPdir_*.c 2016-07-16 09:04:56 +02:00
LPdir_vms.c
LPdir_win.c
LPdir_win32.c Remove the silly CVS markers from LPdir_*.c 2016-07-16 09:04:56 +02:00
LPdir_wince.c Remove the silly CVS markers from LPdir_*.c 2016-07-16 09:04:56 +02:00
Makefile Fix the update target and remove duplicate file updates 2015-05-23 06:25:12 +02:00
md32_common.h Convert memset calls to OPENSSL_cleanse 2016-06-30 15:53:44 +01:00
mem.c crypto/mem.c: drop reference to cleanse_ctr and fix no-asm builds. 2016-06-12 23:59:24 +02:00
mem_clr.c crypto/mem_clr.c: switch to OPENSSL_cleanse implementation from master. 2016-06-12 13:47:57 +02:00
mem_dbg.c
o_dir.c Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
o_dir.h Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
o_dir_test.c Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
o_fips.c
o_init.c RT3752: Add FIPS callback for thread id 2016-06-21 16:49:26 -04:00
o_str.c Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
o_str.h Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
o_time.c Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
o_time.h Remove the "eay" c-file-style indicators 2015-12-18 13:39:34 +01:00
opensslconf.h.in Use both sun and __sun 2015-11-24 23:44:05 +01:00
opensslv.h Prepare for 1.0.2i-dev 2016-05-03 14:47:32 +01:00
ossl_typ.h Fix SSL compression symbol exporting 2016-05-17 09:23:36 +01:00
pariscid.pl
ppc_arch.h
ppccap.c RT3990: Fix #include path. 2015-08-05 22:06:22 -04:00
ppccpuid.pl
s390xcap.c
s390xcpuid.S s390x assembly pack: cache capability query results. 2016-04-25 11:54:38 +02:00
sparc_arch.h
sparccpuid.S crypto/sparccpuid.S: limit symbol visibility. 2016-06-14 19:44:56 +02:00
sparcv9cap.c crypto/sparcv9cap.c: add SIGILL-free feature detection for Solaris. 2015-12-02 10:56:27 +01:00
symhacks.h
uid.c
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl