openbsd/src/lib/libcrypto/cms/cms_pwri.c, branch OPENBSD_7_9

cms: fix incorrect length check in kek_unwrap_key()

2025-09-30T12:51:16+00:00

An incorrect length check can result in a 4-byte overwrite and an 8-byte overread. From Stanislav Fort and Viktor Dukhovni via OpenSSL. CVE-2025-9230. ok jsing

cms_RecipientInfo_pwri_crypt: fix incorrect return check

2025-09-30T12:49:34+00:00

ok jsing

cms_RecipientInfo_pwri_crypt: plug leak of kekalg

2025-09-30T12:46:55+00:00

ok jsing

Use err_local.h rather than err.h in most places

2025-05-10T05:54:39+00:00

ok jsing

Tidy a few more includes in cms/

2024-01-14T18:40:24+00:00

Clean up includes in cms_pwri.c

2023-12-20T18:38:19+00:00

Hide symbols in cms, comp, conf, and buffer

2023-07-08T08:26:26+00:00

ok jsing@

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Check return value from EVP_CIPHER_CTX_new in cms_pwri.c

2022-01-19T13:47:44+00:00

CID 345137 ok jsing@ tb@

Inline the equivalent of ASN1_TYPE_unpack_sequence().

2019-08-12T18:04:57+00:00