openssl/crypto/ts
Dr. Stephen Henson b746aa3fe0 Fix OOB read in TS_OBJ_print_bio().
TS_OBJ_print_bio() misuses OBJ_txt2obj: it should print the result
as a null terminated buffer. The length value returned is the total
length the complete text reprsentation would need not the amount of
data written.

CVE-2016-2180

Thanks to Shi Lei for reporting this bug.

Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 0ed26acce3)
2016-07-22 15:16:31 +01:00
..
Makefile Fix the update target and remove duplicate file updates 2015-05-23 06:25:12 +02:00
ts.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_asn1.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_conf.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_lib.c Fix OOB read in TS_OBJ_print_bio(). 2016-07-22 15:16:31 +01:00
ts_req_print.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_req_utils.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_rsp_print.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_rsp_sign.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_rsp_utils.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
ts_rsp_verify.c Fix seg fault in TS_RESP_verify_response() 2016-06-10 14:36:21 +01:00
ts_verify_ctx.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00