wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto/asn1
History
Emilia Kasper b9a73f5481 Fix OID handling: 
- Upon parsing, reject OIDs with invalid base-128 encoding.
- Always NUL-terminate the destination buffer in OBJ_obj2txt printing function.

CVE-2014-3508

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
2014-08-06 22:02:00 +01:00
..
.cvsignore Add emacs cache files to .cvsignore. 2005-04-11 14:17:07 +00:00
a_bitstr.c improved error checking and some fixes 2005-07-26 20:55:17 +00:00
a_bool.c Constify d2i, s2i, c2i and r2i functions and other associated 2004-03-15 23:15:26 +00:00
a_bytes.c PR: 1835 2009-02-14 21:50:14 +00:00
a_d2i_fp.c Check for potentially exploitable overflows in asn1_d2i_read_bio 2012-04-19 11:36:09 +00:00
a_digest.c Consistency. 2005-03-31 13:57:54 +00:00
a_dup.c Update util/ck_errf.pl script, and have it run automatically 2005-05-09 00:27:37 +00:00
a_enum.c - use BN_set_negative and BN_is_negative instead of BN_set_sign 2005-04-22 20:02:44 +00:00
a_gentm.c Add lots of checks for memory allocation failure, error codes to indicate 2004-12-05 01:03:15 +00:00
a_hdr.c Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts. 2005-04-20 21:48:06 +00:00
a_i2d_fp.c Update util/ck_errf.pl script, and have it run automatically 2005-05-09 00:27:37 +00:00
a_int.c Encode INTEGER correctly. 2013-03-18 14:19:40 +00:00
a_mbstr.c Fix unitialized warnings 2009-10-04 16:53:18 +00:00
a_meth.c Give everything prototypes (well, everything that's actually used). 2005-03-31 09:26:39 +00:00
a_object.c Fix OID handling: 2014-08-06 22:02:00 +01:00
a_octet.c Constify d2i, s2i, c2i and r2i functions and other associated 2004-03-15 23:15:26 +00:00
a_print.c Constification. 2005-03-30 10:26:02 +00:00
a_set.c Simplicate and add lightness. 2005-03-31 10:55:55 +00:00
a_sign.c Check for errors in ASN1 sign and verify routines. 2008-09-25 16:38:07 +00:00
a_strex.c Fix Valgrind warning. 2012-09-24 19:50:07 +00:00
a_strnid.c Set default global mask to UTF8 only. 2014-06-01 15:04:49 +01:00
a_time.c Use BUF_strlcpy() instead of strcpy(). 2003-12-27 14:40:17 +00:00
a_type.c Backport some useful ASN1 utility functions from HEAD. 2008-04-02 11:11:51 +00:00
a_utctm.c Remove duplicate lines. 2004-12-12 13:15:49 +00:00
a_utf8.c Merge from the ASN1 branch of new ASN1 code 2000-12-08 19:09:35 +00:00
a_verify.c Don't try and verify signatures if key is NULL (CVE-2013-0166) 2013-02-05 16:50:31 +00:00
asn1.h PR: 2433 2011-01-24 16:21:00 +00:00
asn1_err.c Reject leading 0x80 in OID subidentifiers. 2009-08-06 16:22:57 +00:00
asn1_gen.c check new_der for NULL too 2009-11-10 00:46:57 +00:00
asn1_lib.c ASN1 sanity check. 2014-07-02 01:01:55 +01:00
asn1_mac.h Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts. 2005-04-20 21:48:06 +00:00
asn1_par.c PR: 2056 2009-10-01 00:12:49 +00:00
asn1t.h Change old obsolete email address... 2008-11-05 18:36:57 +00:00
asn_mime.c Memory leak and NULL dereference fixes. 2014-06-27 15:33:18 +01:00
asn_moid.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
asn_pack.c Memory leak and NULL dereference fixes. 2014-06-27 15:33:18 +01:00
charmap.h New ASN1_STRING_print_ex() and X509_NAME_print_ex() 2000-07-28 01:58:15 +00:00
charmap.pl New ASN1_STRING_print_ex() and X509_NAME_print_ex() 2000-07-28 01:58:15 +00:00
d2i_pr.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
d2i_pu.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
evp_asn1.c Memory leak and NULL dereference fixes. 2014-06-27 15:33:18 +01:00
f_enum.c There have been a number of complaints from a number of sources that names 2000-06-01 22:19:21 +00:00
f_int.c Security fixes brought forward from 0.9.7. 2002-11-13 15:43:43 +00:00
f_string.c There have been a number of complaints from a number of sources that names 2000-06-01 22:19:21 +00:00
i2d_pr.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
i2d_pu.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
Makefile Make update: delete duplicate error code. 2008-09-17 17:11:09 +00:00
n_pkey.c Fix gcc 4.6 warnings. Check TLS server hello extension length. 2010-06-12 13:18:58 +00:00
nsseq.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
p5_pbe.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
p5_pbev2.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
p8_key.c There have been a number of complaints from a number of sources that names 2000-06-01 22:19:21 +00:00
p8_pkey.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
t_bitst.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
t_crl.c Fix gcc 4.6 warnings. Check TLS server hello extension length. 2010-06-12 13:18:58 +00:00
t_pkey.c Print out DSA key if parameters absent. 2013-04-07 22:50:55 +01:00
t_req.c Update from HEAD. 2007-05-22 23:33:08 +00:00
t_spki.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
t_x509.c Memory leak and NULL dereference fixes. 2014-06-27 15:33:18 +01:00
t_x509a.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_dec.c Fix gcc 4.6 warnings. Check TLS server hello extension length. 2010-06-12 13:18:58 +00:00
tasn_enc.c Memory leak and NULL dereference fixes. 2014-06-27 15:33:18 +01:00
tasn_fre.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_new.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_prn.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_typ.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_utl.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_algor.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_attrib.c More linker bloat reorganisation: 2001-07-27 02:22:42 +00:00
x_bignum.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_crl.c gcc 4.2 fixes to avoid use or function pointer casts in OpenSSL. 2007-09-06 12:43:54 +00:00
x_exten.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_info.c Merge from the ASN1 branch of new ASN1 code 2000-12-08 19:09:35 +00:00
x_long.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_name.c Fix memory leak on bad inputs. 2011-09-05 09:56:48 +00:00
x_pkey.c Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts. 2005-04-20 21:48:06 +00:00
x_pubkey.c PR: 2813 2012-05-11 13:49:15 +00:00
x_req.c Fix from HEAD. 2006-09-22 17:07:40 +00:00
x_sig.c Get rid of ASN1_ITEM_FUNCTIONS dummy function 2001-02-23 12:47:06 +00:00
x_spki.c Get rid of ASN1_ITEM_FUNCTIONS dummy function 2001-02-23 12:47:06 +00:00
x_val.c Get rid of ASN1_ITEM_FUNCTIONS dummy function 2001-02-23 12:47:06 +00:00
x_x509.c Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(), 2010-10-03 18:55:57 +00:00
x_x509a.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00