openssl/crypto/x509
Matt Caswell 2919516136 Prevent EBCDIC overread for very long strings
ASN1 Strings that are over 1024 bytes can cause an overread in
applications using the X509_NAME_oneline() function on EBCDIC systems.
This could result in arbitrary stack data being returned in the buffer.

Issue reported by Guido Vranken.

CVE-2016-2176

Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-05-03 10:28:00 +01:00
..
by_dir.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
by_file.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
Makefile Add test for CVE-2015-1793 2015-07-07 22:52:31 +01:00
verify_extra_test.c Fix alt chains bug 2015-07-07 22:57:36 +01:00
x509.h Add checks to X509_NAME_oneline() 2016-04-29 19:55:56 +01:00
x509_att.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_cmp.c Avoid SHA1 weakness 2015-10-09 17:06:21 -04:00
x509_d2.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_def.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_err.c Add checks to X509_NAME_oneline() 2016-04-29 19:55:56 +01:00
x509_ext.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_lu.c Remove useless code 2015-10-23 20:47:53 +02:00
x509_obj.c Prevent EBCDIC overread for very long strings 2016-05-03 10:28:00 +01:00
x509_r2x.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
x509_req.c Check public key is not NULL. 2015-03-02 15:26:47 +00:00
x509_set.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_trs.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_txt.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_v3.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_vfy.c Fix X509_STORE_CTX_cleanup() 2016-01-04 21:50:01 -05:00
x509_vfy.h Fix X509_STORE_CTX_cleanup() 2016-01-04 21:50:01 -05:00
x509_vpm.c X509_VERIFY_PARAM_free: Check param for NULL 2015-04-11 20:57:43 +02:00
x509cset.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509name.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
x509rset.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509spki.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509type.c Correctly check for export size limit 2015-05-20 22:23:28 +02:00
x_all.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00