openssl/crypto/ts
Dr. Stephen Henson 6adf409c74 Fix OOB read in TS_OBJ_print_bio().
TS_OBJ_print_bio() misuses OBJ_txt2obj: it should print the result
as a null terminated buffer. The length value returned is the total
length the complete text reprsentation would need not the amount of
data written.

CVE-2016-2180

Thanks to Shi Lei for reporting this bug.

Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 0ed26acce3)
2016-07-22 15:17:38 +01:00
..
Makefile Fix the update target and remove duplicate file updates 2015-05-23 11:22:10 +02:00
ts.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_asn1.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_conf.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_lib.c Fix OOB read in TS_OBJ_print_bio(). 2016-07-22 15:17:38 +01:00
ts_req_print.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_req_utils.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_rsp_print.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_rsp_sign.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_rsp_utils.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts_rsp_verify.c Fix X509_STORE_CTX_cleanup() 2016-01-04 21:50:01 -05:00
ts_verify_ctx.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00