openssl/ssl
Matt Caswell d813f9eb38 SSL_check_chain fix
If SSL_check_chain is called with a NULL X509 object or a NULL EVP_PKEY
or the type of the public key is unrecognised then the local variable
|cpk| in tls1_check_chain does not get initialised. Subsequently an
attempt is made to deref it (after the "end" label), and a seg fault will
result.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2015-03-12 09:25:32 +00:00
..
bio_ssl.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_both.c Fix DTLS1_BAD_VER regression 2015-03-09 10:51:57 +00:00
d1_clnt.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_lib.c Wrong SSL version in DTLS1_BAD_VER ClientHello 2015-03-09 11:04:39 +00:00
d1_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
d1_pkt.c Harmonize return values in dtls1_buffer_record 2015-03-10 12:18:18 -07:00
d1_srtp.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_srvr.c Remove NETSCAPE_HANG_BUG 2015-02-26 23:27:09 +00:00
dtls1.h Fix d2i_SSL_SESSION for DTLS1_BAD_VER 2015-02-27 20:29:03 +00:00
heartbeat_test.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
install-ssl.com Install srtp.h 2012-07-05 13:20:19 +00:00
kssl.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
kssl.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
kssl_lcl.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
Makefile RT478: Add uninstall make target 2015-01-12 10:28:05 -05:00
s3_both.c OPENSSL_NO_XXX cleanup: OPENSSL_NO_BUF_FREELISTS 2015-01-27 16:43:53 -05:00
s3_cbc.c OPENSSL_NO_xxx cleanup: SHA 2015-01-27 12:34:45 -05:00
s3_clnt.c ssl/s3_clnt.c: fix intermittent failures. 2015-03-12 08:54:28 +01:00
s3_enc.c Cleanse buffers 2015-03-11 10:40:44 +00:00
s3_lib.c Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
s3_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s3_pkt.c Use constants not numbers 2015-03-05 09:25:53 +00:00
s3_srvr.c Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
s23_clnt.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
s23_lib.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s23_meth.c OPENSSL_NO_XXX cleanup: NO_TLS, NO_TLS1 2015-01-27 15:14:12 -05:00
s23_pkt.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s23_srvr.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
srtp.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl-lib.com VMS adjustments: 2015-01-30 14:43:57 +01:00
ssl.h Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
ssl2.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl3.h Make libssl opaque. Move all structures that were previously protected by 2015-01-31 18:06:45 +00:00
ssl23.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_algs.c Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
ssl_asn1.c Fix d2i_SSL_SESSION for DTLS1_BAD_VER 2015-02-27 20:29:03 +00:00
ssl_cert.c Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
ssl_ciph.c Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
ssl_conf.c Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
ssl_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_err2.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_lib.c Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
ssl_locl.h Merge OPENSSL_NO_EC{DH,DSA} into OPENSSL_NO_EC 2015-03-11 09:29:37 -04:00
ssl_rsa.c clang on Linux x86_64 complains about unreachable code. 2015-01-29 01:54:09 +01:00
ssl_sess.c Add SSL_SESSION_get0_ticket API function. 2015-02-10 22:54:27 +00:00
ssl_stat.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_task.c Make the libssl opaque changes compile on VMS 2015-01-31 18:07:32 +00:00
ssl_txt.c Extended master secret extension support. 2015-02-03 14:50:07 +00:00
ssl_utst.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssltest.c ssl/s3_clnt.c: fix intermittent failures. 2015-03-12 08:54:28 +01:00
t1_clnt.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_enc.c Cleanse buffers 2015-03-11 10:40:44 +00:00
t1_ext.c Remove support for opaque-prf 2015-01-28 15:37:16 -05:00
t1_lib.c SSL_check_chain fix 2015-03-12 09:25:32 +00:00
t1_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_reneg.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_srvr.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_trce.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
tls1.h Remove experimental 56bit export ciphers 2015-03-01 16:18:16 -05:00
tls_srp.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00