openbsd/src/lib/libcrypto/asn1, branch libressl-v2.4.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.1 2016-05-20T15:46:21+00:00 Fix a short-read bug in the previous version of asn1_d2i_read_bio 2016-05-20T15:46:21+00:00 bcook 2016-05-20T15:46:21+00:00 urn:sha1:a7a8b3e28bac1bac9b00c9e9b10856c6f5283ad9 The outer while() loop is missing, so we only read up to chunk_max bytes. internal only negative types should not be handled here. 2016-05-04T15:00:24+00:00 tedu 2016-05-04T15:00:24+00:00 urn:sha1:7c0bc19bc9eea1c1ac306f1b3f93fd10d3dd4ff8 CVE-2016-2108 from openssl. be careful about consuming excessive memory by reading in chunks. 2016-05-04T14:58:09+00:00 tedu 2016-05-04T14:58:09+00:00 urn:sha1:e205809b7a0b1df763f03b64d1cc28bfec3d8b71 CVE-2016-2109 from openssl. revert the big change from yesterday to prepare for smaller commits. 2016-05-04T14:53:29+00:00 tedu 2016-05-04T14:53:29+00:00 urn:sha1:519d297fc2fe7aa90db3d99be37ea38e11547106 patch from openssl for multiple issues: 2016-05-03T12:38:53+00:00 tedu 2016-05-03T12:38:53+00:00 urn:sha1:c6409771d22d6e819d9017d650687b93c835ed3a missing padding check in aesni functions overflow in evp encode functions use of invalid negative asn.1 types ok beck explicit_bzero for asn1 objects on free. Too often these contain sensitive information 2016-03-17T03:51:49+00:00 beck 2016-03-17T03:51:49+00:00 urn:sha1:a40c5f7320dab09c9216fa636bbf22949be11912 and they should not be a performance bottleneck ok miod@ krw@ X509_free(3) is NULL-safe, so remove NULL checks before its calls. 2016-03-11T07:08:45+00:00 mmcc 2016-03-11T07:08:45+00:00 urn:sha1:3935f3d5bc0215b231fcd3c9f9ebd7cf653cfcde ok doug@ explict_bzero for some asn1 free's - ok miod@ 2016-03-06T18:05:00+00:00 beck 2016-03-06T18:05:00+00:00 urn:sha1:46c4bf4fb70d4a4a2f608347e391626b02e372db remove NULL-checks before free() 2015-12-23T20:37:23+00:00 mmcc 2015-12-23T20:37:23+00:00 urn:sha1:0acfd6965d2e7de3e9d3fff1348f689e59164fb7 assign pointer NULL rather than 0 2015-12-23T01:50:26+00:00 mmcc 2015-12-23T01:50:26+00:00 urn:sha1:9aa6664d2b19fc6a669e2d548bbb7e3bec9e6012