wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto
History
Viktor Dukhovni bdcd660e33 Bugfix: in asn1parse avoid erroneous len after a sub-sequence 
Introduced in:

    commit 79c7f74d6c
    Author: Ben Laurie <ben@links.org>
    Date:   Tue Mar 29 19:37:57 2016 +0100

    Fix buffer overrun in ASN1_parse().

Problem input:

    https://tools.ietf.org/html/draft-ietf-curdle-pkix-eddsa-00#section-8.1
    -----BEGIN PUBLIC KEY-----
    MC0wCAYDK2VkCgECAyEAGb9ECWmEzf6FQbrBZ9w7lshQhqowtrbLDFw4rXAxZuE=
    -----END PUBLIC KEY-----

Previously:

        0:d=0  hl=2 l=  45 cons: SEQUENCE
        2:d=1  hl=2 l=   8 cons: SEQUENCE
        4:d=2  hl=2 l=   3 prim: OBJECT            :1.3.101.100
        9:d=2  hl=2 l=   1 prim: ENUMERATED        :02
    Error in encoding
    140735164989440:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:../openssl/crypto/asn1/asn1_lib.c:148:

Now:

    0:d=0  hl=2 l=  45 cons: SEQUENCE
    2:d=1  hl=2 l=   8 cons: SEQUENCE
    4:d=2  hl=2 l=   3 prim: OBJECT            :1.3.101.100
    9:d=2  hl=2 l=   1 prim: ENUMERATED        :02
   12:d=1  hl=2 l=  33 prim: BIT STRING
      0000 - 00 19 bf 44 09 69 84 cd-fe 85 41 ba c1 67 dc 3b   ...D.i....A..g.;
      0010 - 96 c8 50 86 aa 30 b6 b6-cb 0c 5c 38 ad 70 31 66   ..P..0....\8.p1f
      0020 - e1                                                .

Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-04-14 02:41:30 -04:00
..
aes PPC assembly pack: remove branch hints. 2016-04-07 21:27:24 +02:00
asn1 Bugfix: in asn1parse avoid erroneous len after a sub-sequence 2016-04-14 02:41:30 -04:00
async Fix memory leak where fdlookup linked list is not freed during 2016-03-21 16:57:34 +00:00
bf Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
bio Rename int_*() functions to *_int() 2016-04-13 08:59:03 +01:00
blake2 Clean-up *_DEBUG options. 2016-04-07 21:18:00 +02:00
bn PPC assembly pack: remove branch hints. 2016-04-07 21:27:24 +02:00
buffer Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
camellia Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
cast Disable some sanitizer checks without PEDANTIC 2016-04-10 01:50:45 +02:00
chacha chacha/asm/chacha-armv8.pl: fix intermittent build failures. 2016-04-13 12:07:31 +02:00
cmac Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
cms Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
comp Remake the way dynamic zlib is loaded 2016-04-13 11:36:46 +02:00
conf Rename int_*() functions to *_int() 2016-04-13 08:59:03 +01:00
ct make update 2016-04-07 14:41:34 -04:00
des Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
dh Add documentation for following DH and DH_METHOD opacity 2016-04-09 10:10:55 +01:00
dsa Fix double free bug in error path 2016-04-09 10:10:55 +01:00
dso VMS: update the properties of symbol search 2016-03-23 19:58:12 +01:00
ec RT 4393: Call EC_GROUP_order_bits in priv2opt. 2016-03-29 20:03:48 +02:00
engine Rename int_*() functions to *_int() 2016-04-13 08:59:03 +01:00
err Need err_load_crypto_strings_int declared. 2016-04-13 16:22:58 -04:00
evp Remove OPENSSL_NO_SHA guards 2016-04-13 21:25:24 +01:00
hmac Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
idea Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
include/internal Move a declaration that's private to libcrypto 2016-04-13 15:23:47 +02:00
kdf Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
lhash Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
md2 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
md4 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
md5 Build system: VC-WIN64I fixups. 2016-03-21 11:44:27 +01:00
mdc2 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
modes Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
objects Remove check_defer() 2016-04-13 15:05:07 +01:00
ocsp Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
pem Make the RSA structure opaque 2016-04-06 16:19:17 +02:00
perlasm PPC assebmly pack: initial POWER9 support tidbits. 2016-04-13 12:09:46 +02:00
pkcs7 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
pkcs12 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
poly1305 Revert "various spelling fixes" 2016-04-04 16:11:43 -04:00
rand Rename int_*() functions to *_int() 2016-04-13 08:59:03 +01:00
rc2 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
rc4 Build system: VC-WIN64I fixups. 2016-03-21 11:44:27 +01:00
rc5 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
ripemd Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
rsa Make the RSA_METHOD structure opaque 2016-04-06 16:19:20 +02:00
seed crypto/seed: add small-footprint path. 2016-03-29 09:53:51 +02:00
sha PPC assembly pack: remove branch hints. 2016-04-07 21:27:24 +02:00
srp Revert "various spelling fixes" 2016-04-04 16:11:43 -04:00
stack Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
ts Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
txt_db Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
ui Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
whrlpool Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
x509 Add SSL_DANE typedef for consistency. 2016-04-08 09:30:23 -04:00
x509v3 Revert "various spelling fixes" 2016-04-04 16:11:43 -04:00
alphacpuid.pl Unified - adapt the generation of cpuid, uplink and buildinf to use GENERATE 2016-03-09 11:09:26 +01:00
arm64cpuid.pl Add assembly support to ios64-cross. 2015-01-23 15:38:41 +01:00
arm_arch.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
armcap.c Add assembly support for 32-bit iOS. 2015-04-20 15:06:22 +02:00
armv4cpuid.pl ARMv4 assembly pack: implement support for Thumb2. 2015-09-25 13:34:02 +02:00
build.info Break out DllMain from crypto/cryptlib.c and use it in shared libs only 2016-03-30 11:22:42 +02:00
c64xpluscpuid.pl C64x+ assembly pack: make it work with older toolchain. 2014-05-04 16:38:32 +02:00
cpt_err.c After renaming init, update errors. 2016-02-10 15:52:32 -05:00
cryptlib.c Break out DllMain from crypto/cryptlib.c and use it in shared libs only 2016-03-30 11:22:42 +02:00
cversion.c Make it possible to get ENGINESDIR info from OpenSSL_versions 2016-02-10 19:36:48 +01:00
dllmain.c Break out DllMain from crypto/cryptlib.c and use it in shared libs only 2016-03-30 11:22:42 +02:00
ebcdic.c Use NON_EMPTY_TRANSLATION_UNIT, consistently. 2016-02-09 20:13:29 -05:00
ex_data.c Rename int_*() functions to *_int() 2016-04-13 08:59:03 +01:00
fips_err.h Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
fips_ers.c Use NON_EMPTY_TRANSLATION_UNIT, consistently. 2016-02-09 20:13:29 -05:00
ia64cpuid.S
init.c Remove check_defer() 2016-04-13 15:05:07 +01:00
LPdir_nyi.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
LPdir_unix.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
LPdir_vms.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
LPdir_win.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
LPdir_win32.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
LPdir_wince.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
Makefile.in Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
mem.c Build fix: remove cleanse_ctr 2016-02-25 10:19:50 -05:00
mem_clr.c RT4116: Change cleanse to just memset 2016-02-25 10:04:00 -05:00
mem_dbg.c Remove the CRYPTO_mem_leaks adjustment for the BIO 2016-03-31 00:12:47 +01:00
mem_sec.c Convert mem_dbg and mem_sec to the new Thread API 2016-03-08 21:06:04 +00:00
o_dir.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
o_fips.c Identify and move common internal libcrypto header files 2015-05-14 17:21:40 +02:00
o_init.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
o_str.c Fix master compile error 2016-02-26 16:50:59 +00:00
o_time.c Remove Netware and OS/2 2016-03-17 17:06:57 -04:00
pariscid.pl
ppc_arch.h PPC assebmly pack: initial POWER9 support tidbits. 2016-04-13 12:09:46 +02:00
ppccap.c PPC assebmly pack: initial POWER9 support tidbits. 2016-04-13 12:09:46 +02:00
ppccpuid.pl PPC assebmly pack: initial POWER9 support tidbits. 2016-04-13 12:09:46 +02:00
s390xcap.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s390xcpuid.S
sparc_arch.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
sparccpuid.S Conversion to UTF-8 where needed 2015-07-14 01:10:01 +02:00
sparcv9cap.c crypto/sparcv9cap.c: add SIGILL-free feature detection for Solaris. 2015-12-02 10:53:33 +01:00
threads_none.c Implement new multi-threading API 2016-02-26 10:00:36 +00:00
threads_pthread.c GH773: Possible leak on CRYPTO_THREAD_lock_new failure 2016-03-03 19:47:01 -05:00
threads_win.c Fix: CRYPTO_THREAD_run_once 2016-04-02 16:56:09 -04:00
uid.c Remove Netware and OS/2 2016-03-17 17:06:57 -04:00
vms_rms.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x86_64cpuid.pl x86[_64]cpuid.pl: add low-level RDSEED. 2014-02-14 17:24:12 +01:00
x86cpuid.pl Unified - adapt the generation of cpuid, uplink and buildinf to use GENERATE 2016-03-09 11:09:26 +01:00