wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto/asn1
History
Dr. Stephen Henson 556e27b14f Check for potentially exploitable overflows in asn1_d2i_read_bio 
BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer
in CRYPTO_realloc_clean.

Thanks to Tavis Ormandy, Google Security Team, for discovering this
issue and to Adam Langley <agl@chromium.org> for fixing it. (CVE-2012-2110)
2012-04-19 11:36:09 +00:00
..
.cvsignore Add emacs cache files to .cvsignore. 2005-04-11 14:17:07 +00:00
a_bitstr.c improved error checking and some fixes 2005-07-26 20:55:17 +00:00
a_bool.c Constify d2i, s2i, c2i and r2i functions and other associated 2004-03-15 23:15:26 +00:00
a_bytes.c PR: 1835 2009-02-14 21:50:14 +00:00
a_d2i_fp.c Check for potentially exploitable overflows in asn1_d2i_read_bio 2012-04-19 11:36:09 +00:00
a_digest.c Consistency. 2005-03-31 13:57:54 +00:00
a_dup.c Update util/ck_errf.pl script, and have it run automatically 2005-05-09 00:27:37 +00:00
a_enum.c - use BN_set_negative and BN_is_negative instead of BN_set_sign 2005-04-22 20:02:44 +00:00
a_gentm.c Add lots of checks for memory allocation failure, error codes to indicate 2004-12-05 01:03:15 +00:00
a_hdr.c Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts. 2005-04-20 21:48:06 +00:00
a_i2d_fp.c Update util/ck_errf.pl script, and have it run automatically 2005-05-09 00:27:37 +00:00
a_int.c Fix gcc 4.6 warnings. Check TLS server hello extension length. 2010-06-12 13:18:58 +00:00
a_mbstr.c Fix unitialized warnings 2009-10-04 16:53:18 +00:00
a_meth.c Give everything prototypes (well, everything that's actually used). 2005-03-31 09:26:39 +00:00
a_object.c PR: 2556 (partial) 2011-07-14 12:01:08 +00:00
a_octet.c Constify d2i, s2i, c2i and r2i functions and other associated 2004-03-15 23:15:26 +00:00
a_print.c Constification. 2005-03-30 10:26:02 +00:00
a_set.c Simplicate and add lightness. 2005-03-31 10:55:55 +00:00
a_sign.c Check for errors in ASN1 sign and verify routines. 2008-09-25 16:38:07 +00:00
a_strex.c Fix escaping code for string printing. If *any* escaping is enabled we 2011-01-03 01:26:33 +00:00
a_strnid.c PR: 2433 2011-01-24 16:21:00 +00:00
a_time.c Use BUF_strlcpy() instead of strcpy(). 2003-12-27 14:40:17 +00:00
a_type.c Backport some useful ASN1 utility functions from HEAD. 2008-04-02 11:11:51 +00:00
a_utctm.c Remove duplicate lines. 2004-12-12 13:15:49 +00:00
a_utf8.c
a_verify.c Check for errors in ASN1 sign and verify routines. 2008-09-25 16:38:07 +00:00
asn1.h PR: 2433 2011-01-24 16:21:00 +00:00
asn1_err.c Reject leading 0x80 in OID subidentifiers. 2009-08-06 16:22:57 +00:00
asn1_gen.c check new_der for NULL too 2009-11-10 00:46:57 +00:00
asn1_lib.c Backport some useful ASN1 utility functions from HEAD. 2008-04-02 11:11:51 +00:00
asn1_mac.h Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts. 2005-04-20 21:48:06 +00:00
asn1_par.c PR: 2056 2009-10-01 00:12:49 +00:00
asn1t.h Change old obsolete email address... 2008-11-05 18:36:57 +00:00
asn_mime.c corrected fix to PR#2711 and also cover mime_param_cmp 2012-03-12 15:25:53 +00:00
asn_moid.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
asn_pack.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
charmap.h
charmap.pl
d2i_pr.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
d2i_pu.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
evp_asn1.c Add lots of checks for memory allocation failure, error codes to indicate 2004-12-05 01:03:15 +00:00
f_enum.c
f_int.c Security fixes brought forward from 0.9.7. 2002-11-13 15:43:43 +00:00
f_string.c
i2d_pr.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
i2d_pu.c ecc api cleanup; summary: 2005-05-16 10:11:04 +00:00
Makefile Make update: delete duplicate error code. 2008-09-17 17:11:09 +00:00
n_pkey.c Fix gcc 4.6 warnings. Check TLS server hello extension length. 2010-06-12 13:18:58 +00:00
nsseq.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
p5_pbe.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
p5_pbev2.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
p8_key.c
p8_pkey.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
t_bitst.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
t_crl.c Fix gcc 4.6 warnings. Check TLS server hello extension length. 2010-06-12 13:18:58 +00:00
t_pkey.c Fix on the right branch this time :-) 2006-04-15 13:17:53 +00:00
t_req.c Update from HEAD. 2007-05-22 23:33:08 +00:00
t_spki.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
t_x509.c Backport GeneralizedTime fractional seconds support from HEAD. 2009-08-10 15:15:27 +00:00
t_x509a.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_dec.c Fix gcc 4.6 warnings. Check TLS server hello extension length. 2010-06-12 13:18:58 +00:00
tasn_enc.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_fre.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_new.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_prn.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_typ.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
tasn_utl.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_algor.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_attrib.c More linker bloat reorganisation: 2001-07-27 02:22:42 +00:00
x_bignum.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_crl.c gcc 4.2 fixes to avoid use or function pointer casts in OpenSSL. 2007-09-06 12:43:54 +00:00
x_exten.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_info.c
x_long.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
x_name.c Fix memory leak on bad inputs. 2011-09-05 09:56:48 +00:00
x_pkey.c Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts. 2005-04-20 21:48:06 +00:00
x_pubkey.c Fix memory leak cause by race condition when creating public keys. 2012-02-28 14:47:36 +00:00
x_req.c Fix from HEAD. 2006-09-22 17:07:40 +00:00
x_sig.c Get rid of ASN1_ITEM_FUNCTIONS dummy function 2001-02-23 12:47:06 +00:00
x_spki.c Get rid of ASN1_ITEM_FUNCTIONS dummy function 2001-02-23 12:47:06 +00:00
x_val.c Get rid of ASN1_ITEM_FUNCTIONS dummy function 2001-02-23 12:47:06 +00:00
x_x509.c Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(), 2010-10-03 18:55:57 +00:00
x_x509a.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00