openssl/crypto/srp
Dr. Stephen Henson 966fe81f9b Fix SRP buffer overrun vulnerability.
Invalid parameters passed to the SRP code can be overrun an internal
buffer. Add sanity check that g, A, B < N to SRP code.

Thanks to Sean Devlin and Watson Ladd of Cryptography Services, NCC
Group for reporting this issue.
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
2014-08-06 20:27:51 +01:00
..
.cvsignore Ignorance. 2011-11-14 02:42:26 +00:00
Makefile make update 2014-01-06 13:33:27 +00:00
srp.h Add SRP. 2011-03-16 11:26:40 +00:00
srp_grps.h srp/srp_grps.h: make it Compaq C-friendly. 2013-11-12 22:20:45 +01:00
srp_lcl.h Add SRP. 2011-03-16 11:26:40 +00:00
srp_lib.c Fix SRP buffer overrun vulnerability. 2014-08-06 20:27:51 +01:00
srp_vfy.c - fix coverity issues 966593-966596 2014-05-06 00:07:34 +01:00
srptest.c Add SRP. 2011-03-16 11:26:40 +00:00