<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/asn1, branch libressl-v3.0.1</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=libressl-v3.0.1</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=libressl-v3.0.1'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2019-08-20T13:10:09+00:00</updated>
<entry>
<title>Add static_ASN1_* macro</title>
<updated>2019-08-20T13:10:09+00:00</updated>
<author>
<name>inoguchi</name>
<email></email>
</author>
<published>2019-08-20T13:10:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=f000b328c69a5b2a7836e2ee4437a5a052ce3a1a'/>
<id>urn:sha1:f000b328c69a5b2a7836e2ee4437a5a052ce3a1a</id>
<content type='text'>
- Add static_ASN1_* macro. Patch was provided by steils AT gentoo.org
</content>
</entry>
<entry>
<title>Fix signed overflow in X509_CRL_print().</title>
<updated>2019-05-12T15:56:31+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2019-05-12T15:56:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=ac296778a77bfa718b1390f9ec05c6d3e7d03df7'/>
<id>urn:sha1:ac296778a77bfa718b1390f9ec05c6d3e7d03df7</id>
<content type='text'>
fixes oss-fuzz #14558

ok beck jsing
</content>
</entry>
<entry>
<title>Avoid an undefined shift in ASN1_ENUMERATED_get().</title>
<updated>2019-04-28T05:05:56+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2019-04-28T05:05:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=fe44082204f24f81db325cbf55029e4281c96659'/>
<id>urn:sha1:fe44082204f24f81db325cbf55029e4281c96659</id>
<content type='text'>
(same fix as in a_int.c rev 1.34)

Fixes oss-fuzz issue #13809

ok beck, jsing
</content>
</entry>
<entry>
<title>Avoid an undefined shift in ASN1_INTEGER_get().</title>
<updated>2019-04-28T05:03:56+00:00</updated>
<author>
<name>tb</name>
<email></email>
</author>
<published>2019-04-28T05:03:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=733d79c7c9c40d538016d5044ee64d0de934ab5a'/>
<id>urn:sha1:733d79c7c9c40d538016d5044ee64d0de934ab5a</id>
<content type='text'>
Fixes oss-fuzz issue #13804

ok beck, jsing
</content>
</entry>
<entry>
<title>Avoid undefined behaviour that results from negating a signed long with</title>
<updated>2019-04-20T11:13:15+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2019-04-20T11:13:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=c3ec81b3b52d73654c55239c0018d4f15a76deb2'/>
<id>urn:sha1:c3ec81b3b52d73654c55239c0018d4f15a76deb2</id>
<content type='text'>
minimum value.

Fixes oss-fuzz #14354.

ok beck@ bcook@ tb@
</content>
</entry>
<entry>
<title>Avoid signed integer overflow.</title>
<updated>2019-04-15T17:46:02+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2019-04-15T17:46:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=59ffb61915a18262d2dfa3ff8e3cff60f31fc054'/>
<id>urn:sha1:59ffb61915a18262d2dfa3ff8e3cff60f31fc054</id>
<content type='text'>
Fixes oss-fuzz issue #13843.

ok tb@
</content>
</entry>
<entry>
<title>Avoid an overread caused by d2i_PrivateKey().</title>
<updated>2019-04-10T16:23:55+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2019-04-10T16:23:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=8ab9e3c33c0dd587e42c1c871bbe154fd19af00f'/>
<id>urn:sha1:8ab9e3c33c0dd587e42c1c871bbe154fd19af00f</id>
<content type='text'>
There are cases where the old_priv_decode() function can fail but consume
bytes. This will result in the pp pointer being advanced, which causes
d2i_PKCS8_PRIV_KEY_INFO() to be called with an advanced pointer and
incorrect length.

Fixes oss-fuzz #13803 and #14142.

ok deraadt@ tb@
</content>
</entry>
<entry>
<title>Revert tasn_prn.c r1.18.</title>
<updated>2019-04-07T16:35:50+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2019-04-07T16:35:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a2af4c7dba7453f0994ce278075358a1d3a0e14f'/>
<id>urn:sha1:a2af4c7dba7453f0994ce278075358a1d3a0e14f</id>
<content type='text'>
In this code, just because something is cast to a type doesn't mean it is
necessarily that type - in this case we cannot check the length of the
ASN1_STRING here, since it might be another data type and later handled
as an int (for example, in the V_ASN1_BOOLEAN case).

We will revisit this post release.

ok tb@
</content>
</entry>
<entry>
<title>Implement a print function for BIGNUM_it.</title>
<updated>2019-04-01T15:49:22+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2019-04-01T15:49:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=5cecd6a22c296f340853d47afffabcd24c0c8b33'/>
<id>urn:sha1:5cecd6a22c296f340853d47afffabcd24c0c8b33</id>
<content type='text'>
ok beck@, tb@
</content>
</entry>
<entry>
<title>Correct the return values from long_print.</title>
<updated>2019-04-01T15:48:50+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2019-04-01T15:48:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=01a9fea5da51f3194be3ccfae8edee09154ed07a'/>
<id>urn:sha1:01a9fea5da51f3194be3ccfae8edee09154ed07a</id>
<content type='text'>
BIO_print() returns -1 on failure, whereas the ASN print functions need to
return 0.

ok beck@, tb@
</content>
</entry>
</feed>
