Go to file
David Benjamin 074cc04022 Reject negative shifts for BN_rshift and BN_lshift.
The functions BN_rshift and BN_lshift shift their arguments to the right or
left by a specified number of bits. Unpredicatable results (including
crashes) can occur if a negative number is supplied for the shift value.

Thanks to Mateusz Kocielski (LogicalTrust), Marek Kroemeke and Filip Palian
for discovering and reporting this issue.

(Imported from upstream's 7cc18d8158b5fc2676393d99b51c30c135502107.)

Change-Id: Ib9f5e410a46df3d7f02a61374807fba209612bd3
Reviewed-on: https://boringssl-review.googlesource.com/4892
Reviewed-by: Adam Langley <agl@google.com>
2015-05-27 21:59:35 +00:00
crypto Reject negative shifts for BN_rshift and BN_lshift. 2015-05-27 21:59:35 +00:00
decrepit Eliminate unnecessary includes from low-level crypto modules. 2015-04-13 20:49:18 +00:00
doc Inital import. 2014-06-20 13:17:32 -07:00
include/openssl Reject negative shifts for BN_rshift and BN_lshift. 2015-05-27 21:59:35 +00:00
ssl Release handshake buffer when sending no certificate. 2015-05-27 21:54:30 +00:00
tool Revert "tool: we don't need -lrt." 2015-05-27 19:21:43 +00:00
util Add malloc test support to unit tests. 2015-05-21 17:59:48 +00:00
.clang-format Inital import. 2014-06-20 13:17:32 -07:00
.gitignore Add generated documentation to .gitignore 2015-01-26 18:37:55 +00:00
BUILDING Add support for building with the Android NDK. 2015-05-05 00:31:46 +00:00
CMakeLists.txt Add infrastructure for reference counts. 2015-05-20 19:14:59 +00:00
codereview.settings Add a codereview.settings file. 2014-11-18 22:21:33 +00:00
LICENSE Add LICENSE file. 2015-05-20 17:44:57 +00:00
STYLE Require that FOO_free functions do nothing on NULL. 2015-05-04 22:58:13 +00:00