kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4fae069c00
boringssl/ssl
History
David Benjamin 9c33ae8562 Fix TLS 1.3 NewSessionTicket processing. 
08b65f4e31 introduced a memory leak and
also got enums confused. Also fix a codepath that was missing an error
code.

Thanks to OSS-Fuzz which appears to have found it in a matter of hours.

Change-Id: Ia9e926c28a01daab3e6154d363d0acda91209a22
Reviewed-on: https://boringssl-review.googlesource.com/13104
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>
2017-01-09 03:37:19 +00:00
..
test Fix TLS 1.3 NewSessionTicket processing. 2017-01-09 03:37:19 +00:00
CMakeLists.txt
custom_extensions.c Pass explicit hs parameters into custom_extensions.c. 2016-12-06 19:49:36 +00:00
d1_both.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
d1_lib.c Add a helper function for resetting SSL_get_error state. 2017-01-04 04:48:44 +00:00
d1_pkt.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
d1_srtp.c Fix ssl_ctx_make_profiles error handling. 2016-09-27 13:27:06 +00:00
dtls_method.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
dtls_record.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
handshake_client.c Don't clear cert_request in ssl3_send_client_certificate. 2017-01-04 04:50:00 +00:00
handshake_server.c Clean up certificate auto-chaining. 2017-01-04 01:36:26 +00:00
internal.h Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00
s3_both.c Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00
s3_enc.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
s3_lib.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
s3_pkt.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
ssl_aead_ctx.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
ssl_asn1.c Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00
ssl_buffer.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
ssl_cert.c Clean up certificate auto-chaining. 2017-01-04 01:36:26 +00:00
ssl_cipher.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
ssl_ecdh.c Remove New Hope key agreement. 2016-12-10 01:06:31 +00:00
ssl_file.c Check for sk_X509_NAME_push failures. 2016-09-27 13:18:37 +00:00
ssl_lib.c Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00
ssl_rsa.c Rename X.509 members in |SSL_SESSION| and |CERT|. 2016-11-09 20:07:57 +00:00
ssl_session.c Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00
ssl_stat.c Move state and next_state to SSL_HANDSHAKE. 2016-12-12 22:09:01 +00:00
ssl_test.cc Add tests around SSL_write's retry behavior. 2017-01-04 04:54:04 +00:00
t1_enc.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
t1_lib.c Add experimental TLS 1.3 short record header extension. 2016-12-21 22:06:44 +00:00
tls13_both.c Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00
tls13_client.c Fix TLS 1.3 NewSessionTicket processing. 2017-01-09 03:37:19 +00:00
tls13_enc.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
tls13_server.c Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00
tls_method.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
tls_record.c Enabling 0-RTT on new Session Tickets. 2017-01-06 16:24:43 +00:00