openbsd/src/lib/libcrypto/asn1/a_int.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2019-04-28T05:03:56+00:00 Avoid an undefined shift in ASN1_INTEGER_get(). 2019-04-28T05:03:56+00:00 tb 2019-04-28T05:03:56+00:00 urn:sha1:733d79c7c9c40d538016d5044ee64d0de934ab5a Fixes oss-fuzz issue #13804 ok beck, jsing Use limits.h instead of sys/limits.h for portability. 2019-03-26T09:15:07+00:00 jsing 2019-03-26T09:15:07+00:00 urn:sha1:9c473767d3f3f2dfdc038c2b51ddcb358a016077 From phrocker via github. Add range checks to varios ASN1_INTEGER functions to ensure the 2019-03-23T18:48:15+00:00 beck 2019-03-23T18:48:15+00:00 urn:sha1:c7b9ffc836ad7a05586d7c83c368d784af9cacda sizes used remain a positive integer. Should address issue 13799 from oss-fuzz ok tb@ jsing@ Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Replace M_ASN1_INTEGER_(new|free) with ASN1_INTEGER_(new|free) - this is 2015-09-30T17:30:16+00:00 jsing 2015-09-30T17:30:16+00:00 urn:sha1:56c28c591a2d58b6dda7237a4962fc6f6b0eca75 different from the macro expansion, but the result is the same. Also replace some ASN1_STRING_dup() with ASN1_INTEGER_dup(). ok beck@ doug@ Remove unnecessary type assignments - M_ASN1_INTEGER_new() already sets 2015-09-30T17:04:09+00:00 jsing 2015-09-30T17:04:09+00:00 urn:sha1:602784526ade1e28b48ab336966cd6f166bd99da the type to V_ASN1_INTEGER. ok doug@ Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generated 2015-07-29T14:58:34+00:00 jsing 2015-07-29T14:58:34+00:00 urn:sha1:2186614b2e5af6bbfcc1a9f8898ac11ea9c93faf assembly. ok bcook@ Drop stupid (int) casts for the arguments of malloc() and friends. This is 2015-07-19T18:29:31+00:00 miod 2015-07-19T18:29:31+00:00 urn:sha1:a24b14b6bf2c04501ea84182a52caa5bf2ae7635 not 16-bit MS-DOS anymore. ok bcook@ tedu@ Fix several crash causing defects from OpenSSL. 2015-03-19T14:00:22+00:00 tedu 2015-03-19T14:00:22+00:00 urn:sha1:985dda77b7930c0837c4acb74b7bd23252f849c1 These include: CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp CVE-2015-0287 - ASN.1 structure reuse memory corruption CVE-2015-0289 - PKCS7 NULL pointer dereferences Several other issues did not apply or were already fixed. Refer to https://www.openssl.org/news/secadv_20150319.txt joint work with beck, doug, guenther, jsing, miod The IMPLEMENT_STACK_OF and IMPLEMENT_ASN1_SET_OF macros were turned into 2015-02-10T08:33:10+00:00 jsing 2015-02-10T08:33:10+00:00 urn:sha1:398669e54cc64c0b7d0a009b29cd2f2ff9063ca9 noops around 15 years ago. Remove multiple occurances of both that still exist in the code today.