openssl/crypto/x509
Viktor Dukhovni 39c76ceb2d Better handling of verify param id peername field
Initialize pointers in param id by the book (explicit NULL assignment,
rather than just memset 0).

In x509_verify_param_zero() set peername to NULL after freeing it.

In x509_vfy.c's internal check_hosts(), avoid potential leak of
possibly already non-NULL peername.  This is only set when a check
succeeds, so don't need to do this repeatedly in the loop.

Reviewed-by: Richard Levitte <levitte@openssl.org>

(cherry picked from commit a0724ef1c9)
2015-09-02 10:01:23 -04:00
..
.cvsignore
by_dir.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
by_file.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
Makefile Add test for CVE-2015-1793 2015-07-07 21:48:55 +01:00
verify_extra_test.c Add test for CVE-2015-1793 2015-07-07 21:48:55 +01:00
vpm_int.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_att.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_cmp.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_d2.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_def.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_ext.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_lu.c Add NULL checks from master 2015-05-13 12:55:03 -04:00
x509_obj.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_r2x.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509_req.c Check public key is not NULL. 2015-03-02 15:26:41 +00:00
x509_set.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_trs.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_txt.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_v3.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_vfy.c Better handling of verify param id peername field 2015-09-02 10:01:23 -04:00
x509_vfy.h Add flag to inhibit checking for alternate certificate chains. Setting this 2015-04-20 13:42:17 +01:00
x509_vpm.c Better handling of verify param id peername field 2015-09-02 10:01:23 -04:00
x509cset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509name.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509rset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509spki.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509type.c Correctly check for export size limit 2015-05-20 22:19:34 +02:00
x_all.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00