openbsd, branch OPENBSD_7_1

Fix a number of out of bound reads in DNS response parsing.

2023-03-16T13:28:54+00:00

from millert@; originally from djm@; OK deraadt@ florian@ bluhm@ this is errata/7.1/026_resolv.patch.sig

Fix arbitrary memory read in GENERAL_NAME_cmp()

2023-02-07T15:59:30+00:00

The ASN.1 template for GENERAL_NAME and its corresponding C structure disagree on the type of the x400Address member. This results in an ASN.1 string to be considered as an ASN.1 type, which allows an attacker to read (essentially) arbitrary memory. Fix this by forcing comparison as strings. While the underlying type confusion has been present since time immemorial, this particular bug came with the EdiPartyName fix (6.8/008_asn1.patch.sig). Reported by David Benjamin, fix suggested by jsing. Release date for this was set to be January 31. Unilaterally pushed back to February 7 by OpenSSL by way of announcement of many completely unrelated embargoed issues, some of which they had been sitting on since July 2020. from tb@; OK beck@ jsing@ this is errata/7.1/022_x509.patch.sig

Fix d2i_ASN1_OBJECT()

2022-05-14T15:06:09+00:00

Due to a confusion of two CBS, the API would incorrectly advance the *der_in pointer, resulting in a DER parse failure. Issue reported by Aram Sargsyan ok jsing This is patches/7.1/004_asn1.patch.sig

This commit was manufactured by cvs2git to create branch 'OPENBSD_7_1'.

2022-04-10T12:42:35+00:00

Set ASN1_OBJECT_FLAG_DYNAMIC_DATA flag with t2i_ASN1_OBJECT_internal

2022-04-10T12:42:33+00:00

'flags' should have ASN1_OBJECT_FLAG_DYNAMIC_DATA bit to free 'data' by ASN1_OBJECT_free as c2i_ASN1_OBJECT_cbs does. ok jsing@ tb@

Avoid infinite loop on parsing DSA private keys

2022-04-07T17:38:24+00:00

DSA private keys with ill-chosen g could cause an infinite loop on deserializing. Add a few sanity checks that ensure that g is according to the FIPS 186-4: check 1 < g < p and g^q == 1 (mod p). This is enough to ascertain that g is a generator of a multiplicative group of order q once we know that q is prime (which is checked a bit later). Issue reported with reproducers by Hanno Boeck. Additional variants and analysis by David Benjamin. ok beck jsing

Avoid infinite loop for custom curves of order 1

2022-04-07T17:37:25+00:00

If a private key encoded with EC parameters happens to have order 1 and is used for ECDSA signatures, this causes an infinite loop since a random integer x in the interval [0,1) will be 0, so do ... while (x == 0); will loop indefinitely. Found and reported with a reproducer by Hanno Boeck. Helpful comments and analysis from David Benjamin. ok beck jsing

Initialize the mutex before making us of it from many threads. Prevents

2022-04-03T16:52:50+00:00

a race in which one thread is currently initializing the mutex which is not an atomic operation whereas another thread tries to use it too early. With and ok schwarze@

man pages: fix some typos found while looking for other issues

2022-03-31T17:30:05+00:00

man pages: add missing commas between subordinate and main clauses

2022-03-31T17:27:26+00:00

jmc@ dislikes a comma before "then" in a conditional, so leave those untouched. ok jmc@