wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto
History
Dr. Stephen Henson d9a9d10f4f Check for potentially exploitable overflows in asn1_d2i_read_bio 
BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer
in CRYPTO_realloc_clean.

Thanks to Tavis Ormandy, Google Security Team, for discovering this
issue and to Adam Langley <agl@chromium.org> for fixing it. (CVE-2012-2110)
2012-04-19 16:19:56 +00:00
..
aes C64x+ assembler pack. linux-c64xplus build is *not* tested nor can it be 2012-04-18 13:01:36 +00:00
asn1 Check for potentially exploitable overflows in asn1_d2i_read_bio 2012-04-19 16:19:56 +00:00
bf Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
bio OPENSSL_NO_SOCK fixes. 2012-04-16 17:42:36 +00:00
bn C64x+ assembler pack. linux-c64xplus build is *not* tested nor can it be 2012-04-18 13:01:36 +00:00
buffer Check for potentially exploitable overflows in asn1_d2i_read_bio 2012-04-19 16:19:56 +00:00
camellia Update dependencies. 2011-02-21 17:51:59 +00:00
cast Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
cmac fix reset fix 2012-04-11 15:05:07 +00:00
cms Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and 2012-03-12 16:31:39 +00:00
comp Assorted bugfixes: 2011-02-03 12:03:51 +00:00
conf PR: 2576 2011-09-02 11:20:15 +00:00
des Allow for dynamic base in Win64 FIPS module. 2011-09-14 20:48:49 +00:00
dh make update 2011-12-27 14:46:03 +00:00
dsa return error if counter exceeds limit and seed value supplied 2011-11-25 16:03:42 +00:00
dso make update 2011-09-05 09:46:15 +00:00
ec Add new APIs EC_curve_nist2nid and EC_curve_nid2nist which convert 2012-02-21 14:41:13 +00:00
ecdh add cofactor ECDH support from fips branch 2011-12-10 13:35:11 +00:00
ecdsa fix warning (revert original patch) 2012-01-10 14:36:41 +00:00
engine eng_all.c: revert previous "disable Padlock" commit, which was unjustified. 2012-03-19 20:20:41 +00:00
err make update 2011-09-05 09:46:15 +00:00
evp recognise X9.42 DH certificates on servers 2012-04-18 17:03:29 +00:00
hmac Fix some warnings caused by __owur. Temporarily (I hope) remove the more 2011-11-14 00:36:10 +00:00
idea Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
jpake Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
krb5 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
lhash Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
md2 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
md4 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
md5 md5-x86_86.pl: remove redundant instructions. 2011-06-28 12:33:58 +00:00
mdc2 Update dependencies. 2011-02-21 17:51:59 +00:00
modes C64x+ assembler pack. linux-c64xplus build is *not* tested nor can it be 2012-04-18 13:01:36 +00:00
objects incomplete provisional OAEP CMS decrypt support 2012-01-02 18:25:37 +00:00
ocsp Fix the ECDSA timing attack mentioned in the paper at: 2011-05-25 14:52:21 +00:00
pem make update 2011-12-27 14:46:03 +00:00
perlasm perlasm/x86masm.pl: fix last fix. 2012-03-29 18:09:36 +00:00
pkcs7 Submitted by: Markus Friedl <mfriedl@gmail.com> 2012-03-22 15:44:51 +00:00
pkcs12 PR: 2737 2012-02-27 16:46:34 +00:00
pqueue Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
rand Fix OPNESSL vs. OPENSSL typos. 2012-01-15 13:39:10 +00:00
rc2 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
rc4 Configure: reimplement commit#21695. 2011-11-15 12:32:18 +00:00
rc5 Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
ripemd Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
rsa Additional compatibility fix for MDC2 signature format. 2012-02-15 14:27:25 +00:00
seed seed.c: incredibly enough seed.c can fail to compile on Solaris with certain 2012-02-26 21:52:43 +00:00
sha C64x+ assembler pack. linux-c64xplus build is *not* tested nor can it be 2012-04-18 13:01:36 +00:00
srp PR: 2727 2012-02-23 13:49:35 +00:00
stack Add DTLS-SRTP. 2011-11-15 22:59:20 +00:00
store Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
threads
ts Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
txt_db Change AR to ARX to allow exclusion of fips object modules 2011-01-26 16:08:08 +00:00
ui PR: 2717 2012-02-11 23:41:19 +00:00
whrlpool crypto/whrlpool/wp_block.c: harmonize OPENSSL_ia32cap_P. 2011-06-28 12:42:10 +00:00
x509 Minor compatibility fixes. 2012-04-16 17:35:30 +00:00
x509v3 PR: 2696 2012-02-23 21:31:37 +00:00
.cvsignore
alphacpuid.pl alphacpuid.pl: fix alignment bug. 2011-08-12 12:28:52 +00:00
arm_arch.h arm_arch.h: allow to specify __ARM_ARCH__ elsewhere. 2011-11-09 20:08:44 +00:00
armcap.c typo 2011-10-24 13:23:51 +00:00
armv4cpuid.S armv4cpuid.S, armv4-gf2m.pl: make newest code compilable by older assembler. 2011-11-05 13:07:18 +00:00
c64xpluscpuid.pl C64x+ assembler pack. linux-c64xplus build is *not* tested nor can it be 2012-04-18 13:01:36 +00:00
cpt_err.c Implement FIPS_mode and FIPS_mode_set 2011-05-19 18:09:02 +00:00
cryptlib.c cryptlib.c: sscanf warning. 2012-01-15 17:13:57 +00:00
cryptlib.h Add a symbol for the first parameter to OPENSSL_showfatal(). 2011-06-23 09:46:27 +00:00
crypto-lib.com Typo... 2011-10-30 14:43:53 +00:00
crypto.h Allow for dynamic base in Win64 FIPS module. 2011-09-14 20:48:49 +00:00
cversion.c
ebcdic.c
ebcdic.h
ex_data.c
fips_err.h Check for selftest failure in various places. 2011-10-22 17:24:27 +00:00
fips_ers.c Rename crypto/fips_err.c to fips_ers.c to avoid clash with other fips_err.c 2011-02-03 16:16:30 +00:00
ia64cpuid.S IA-64 assembler pack: fix typos and make it work on HP-UX. 2011-05-07 20:36:05 +00:00
install-crypto.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
lock.c Include support for an add_lock callback to tiny FIPS locking API. 2011-02-14 17:05:42 +00:00
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
LPdir_win.c
LPdir_win32.c
LPdir_wince.c
Makefile Remove o_init.o special case from Makefile: this doesn't work. 2011-10-12 17:27:08 +00:00
md32_common.h md32_common.h: modify MD32_REG_T pre-processing logic [triggered by clang]. 2010-08-02 09:32:26 +00:00
mem.c Check for potentially exploitable overflows in asn1_d2i_read_bio 2012-04-19 16:19:56 +00:00
mem_clr.c
mem_dbg.c
o_dir.c
o_dir.h
o_dir_test.c
o_fips.c Implement FIPS_mode and FIPS_mode_set 2011-05-19 18:09:02 +00:00
o_init.c Extensive reorganisation of PRNG handling in FIPS module: all calls 2011-04-05 15:24:10 +00:00
o_str.c
o_str.h
o_time.c After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
o_time.h new function to diff tm structures 2010-04-15 13:25:26 +00:00
opensslconf.h.in
opensslv.h
ossl_typ.h Support routines for ASN1 scanning function, doesn't do much yet. 2010-12-13 18:15:28 +00:00
pariscid.pl Multiple assembler packs: add experimental memory bus instrumentation. 2011-04-17 12:46:00 +00:00
ppccap.c ppccap.c: addenum to recent EC optimizations. 2011-05-21 10:17:02 +00:00
ppccpuid.pl PPC assembler pack: adhere closer to ABI specs, add PowerOpen traceback data. 2011-05-27 13:32:34 +00:00
s390xcap.c s390x assembler pack: extend OPENSSL_s390xcap_P to 128 bits. 2010-09-18 08:46:53 +00:00
s390xcpuid.S Multiple assembler packs: add experimental memory bus instrumentation. 2011-04-17 12:46:00 +00:00
sparccpuid.S SPARC assembler pack: fix FIPS linking errors. 2011-08-12 21:38:19 +00:00
sparcv9cap.c spacrv9cap.c: addenum to recent EC optimizations. 2011-05-23 08:14:32 +00:00
symhacks.h PR: 1794 2011-12-14 22:17:06 +00:00
thr_id.c Allow for dynamic base in Win64 FIPS module. 2011-09-14 20:48:49 +00:00
uid.c
vms_rms.h After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
x86_64cpuid.pl cryptlib.c, etc.: fix linker warnings in 64-bit Darwin build. 2011-11-12 13:10:00 +00:00
x86cpuid.pl x86cpuid.pl: fix processor capability detection on pre-586. 2012-02-28 14:20:21 +00:00