openbsd/src/lib/libcrypto/cms, branch libressl-v4.2.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v4.2.1 2025-09-30T12:51:16+00:00 cms: fix incorrect length check in kek_unwrap_key() 2025-09-30T12:51:16+00:00 tb 2025-09-30T12:51:16+00:00 urn:sha1:0da76a9548849eb542ab090dc5eace7a2be789cb An incorrect length check can result in a 4-byte overwrite and an 8-byte overread. From Stanislav Fort and Viktor Dukhovni via OpenSSL. CVE-2025-9230. ok jsing cms_RecipientInfo_pwri_crypt: fix incorrect return check 2025-09-30T12:49:34+00:00 tb 2025-09-30T12:49:34+00:00 urn:sha1:4867be3b7736b15337f62460c0a92c9f3f6f5005 ok jsing cms_RecipientInfo_pwri_crypt: plug leak of kekalg 2025-09-30T12:46:55+00:00 tb 2025-09-30T12:46:55+00:00 urn:sha1:9c492217dca486db9aacff39780c63445db043a4 ok jsing Rework PKCS7_simple_smimecap() 2025-07-31T02:24:21+00:00 tb 2025-07-31T02:24:21+00:00 urn:sha1:939b14b31a0ec57a91982f54dd055e000bf5f6ac This is nearly identical to CMS_add_simple_smimecap(). We can reuse its doc comment mutatis mutandis and use the same construction. Maybe this wants deduplicating. Maybe not. ok kenjiro Inline cms_add1_signingTime() in its only consumer 2025-07-27T07:16:20+00:00 tb 2025-07-27T07:16:20+00:00 urn:sha1:c8c2f886f887bd8387f9dee0bdf4c876658d2833 Why have seven lines if you can have 30... tweak/ok kenjiro Use err_local.h rather than err.h in most places 2025-05-10T05:54:39+00:00 tb 2025-05-10T05:54:39+00:00 urn:sha1:41e8f99dd1625a9f0c80ce9d4383e95b18e85709 ok jsing More include sweeping in cms. 2024-11-01T18:53:35+00:00 tb 2024-11-01T18:53:35+00:00 urn:sha1:6cc2a625d91ccf898e11d5e3066af3d90b084d4b Fix includes in cms_env.c 2024-11-01T18:42:10+00:00 tb 2024-11-01T18:42:10+00:00 urn:sha1:dd55403804a4ba679ad41e7f59813a41b6cbd7e5 Only include cryptlib.h where it's needed 2024-11-01T18:34:06+00:00 tb 2024-11-01T18:34:06+00:00 urn:sha1:f9a68fe280d96dbf02f5338a1e3437222592c77b Clean up the other includes while there. cms_att.c: tidy includes and add x509_local.h for upcoming change 2024-08-27T01:19:27+00:00 tb 2024-08-27T01:19:27+00:00 urn:sha1:e6600c8781ee3168a9641ab8f28db4d05ef8e881