wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto
History
Emilia Kasper 57de3216e2 Fix length checks in X509_cmp_time to avoid out-of-bounds reads. 
Also tighten X509_cmp_time to reject more than three fractional
seconds in the time; and to reject trailing garbage after the offset.

CVE-2015-1789

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-06-11 15:10:48 +01:00
..
aes Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
asn1 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
bf Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
bio Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
bn Fix off-by-one error in BN_bn2hex 2015-06-04 09:31:08 +01:00
buffer Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
camellia Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
cast Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
cms Fix infinite loop in CMS 2015-06-11 15:10:48 +01:00
comp Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
conf Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
des Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
dh Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
dsa Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
dso Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
ec EC_POINT_is_on_curve does not return a boolean 2015-06-10 10:57:05 +01:00
ecdh Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
ecdsa Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
engine Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
err Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
evp Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
hmac Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
idea Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
jpake Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
krb5 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
lhash Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
md2 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
md4 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
md5 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
mdc2 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
modes Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
objects return correct NID for undefined object 2015-06-08 21:47:24 +01:00
ocsp Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
pem check for error when creating PKCS#8 structure 2015-05-28 18:02:43 +01:00
perlasm x86_64-xlate.pl: remove old kludge. 2012-03-13 19:19:57 +00:00
pkcs7 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
pkcs12 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
pqueue Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
rand Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
rc2 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
rc4 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
rc5 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
ripemd Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
rsa Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
seed Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
sha Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
stack Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
store Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
threads Re-align some comments after running the reformat script. 2015-01-22 09:46:52 +00:00
ts Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
txt_db Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
ui Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
whrlpool Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
x509 Fix length checks in X509_cmp_time to avoid out-of-bounds reads. 2015-06-11 15:10:48 +01:00
x509v3 Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
.cvsignore
alphacpuid.pl Alpha assembler fixes from HEAD. 2011-08-12 12:32:10 +00:00
constant_time_locl.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
constant_time_test.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
cpt_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
cryptlib.c RT3820: Don't call GetDesktopWindow() 2015-05-02 08:02:18 -04:00
cryptlib.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
crypto-lib.com Spaces were added in some strings for better readability. However, those spaces do not belong in file names, so when picking out the individual parts, remove the spaces 2014-10-15 11:32:17 +02:00
crypto.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
cversion.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
ebcdic.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
ebcdic.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
ex_data.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
ia64cpuid.S
install-crypto.com Fixup installation script for VMS 2015-01-14 19:17:17 +01:00
LPdir_nyi.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
LPdir_unix.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
LPdir_vms.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
LPdir_win.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
LPdir_win32.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
LPdir_wince.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
Makefile Fix the update target and remove duplicate file updates 2015-05-23 11:17:35 +02:00
md32_common.h Fix warnings. 2015-03-08 16:57:46 +00:00
mem.c Fix CRYPTO_strdup 2015-04-22 17:26:20 +01:00
mem_clr.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
mem_dbg.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
o_dir.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
o_dir.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
o_dir_test.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
o_str.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
o_str.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
o_time.c Re-align some comments after running the reformat script. 2015-01-22 09:46:52 +00:00
o_time.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
opensslconf.h.in
opensslv.h Prepare for 1.0.0s-dev 2015-03-19 13:45:41 +00:00
ossl_typ.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
ppccpuid.pl ppccpuid.pl: branch hints in OPENSSL_cleanse impact small block performance 2012-04-27 20:21:26 +00:00
s390xcap.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
s390xcpuid.S
sparccpuid.S sparccpuid.S: work around emulator bug on T1. 2013-02-11 10:42:32 +01:00
sparcv9cap.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
symhacks.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
uid.c Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
vms_rms.h Run util/openssl-format-source -v -c . 2015-01-22 09:46:18 +00:00
x86_64cpuid.pl x86_64 assembly pack: make Windows build more robust [from master]. 2013-01-22 23:00:02 +01:00
x86cpuid.pl x86cpuid.pl: make it work with older CPUs. 2013-03-18 19:51:13 +01:00