boringssl/crypto
David Benjamin 52a3bf2835 Add checks to X509_NAME_oneline()
Sanity check field lengths and sums to avoid potential overflows and reject
excessively large X509_NAME structures.

Issue reported by Guido Vranken.

(Imported from upstream's 9b08619cb45e75541809b1154c90e1a00450e537.)

Change-Id: Ib2e1e7cd086f9c3f0d689d61947f8ec3e9220049
Reviewed-on: https://boringssl-review.googlesource.com/7842
Reviewed-by: Adam Langley <agl@google.com>
2016-05-03 16:34:59 +00:00
..
aes Switch all 'num' parameters in crypto/modes to unsigned. 2016-04-19 17:56:25 +00:00
asn1 Fix buffer overrun in ASN1_parse() and signed/unsigned warning. 2016-04-26 18:49:09 +00:00
base64 Remove calls to ERR_load_crypto_strings. 2016-01-25 23:09:08 +00:00
bio Only use recv/send for socket BIOs on Windows. 2016-04-15 20:31:05 +00:00
bn Fix memory leak on error in BN_mpi2bn. 2016-04-29 16:20:14 +00:00
buf
bytestring Merge documentation from chromium's net/der into cbs.c 2016-04-28 19:39:40 +00:00
chacha chacha/asm/chacha-armv8.pl: fix intermittent build failures. 2016-04-14 20:50:36 +00:00
cipher Switch all 'num' parameters in crypto/modes to unsigned. 2016-04-19 17:56:25 +00:00
cmac Fix some malloc test failures. 2016-03-28 17:17:32 +00:00
conf Add missing internal includes. 2016-03-20 16:38:54 +00:00
curve25519 Appease sanitizers in x25519_ge_scalarmult. 2016-03-10 19:08:42 +00:00
des
dh Make return value of |BN_MONT_CTX_set_locked| int. 2016-04-18 23:19:08 +00:00
digest Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
dsa Make return value of |BN_MONT_CTX_set_locked| int. 2016-04-18 23:19:08 +00:00
ec Use different bit tricks to extend the LSB. 2016-04-25 23:05:20 +00:00
ecdh
ecdsa Drop support for engines-provided signature verification. 2016-04-18 20:40:17 +00:00
engine
err Add checks to X509_NAME_oneline() 2016-05-03 16:34:59 +00:00
evp Fix memory leak on invalid ecPublicKey parameters. 2016-04-15 19:43:26 +00:00
hkdf Start assuming MSVC 2015. 2016-05-02 19:46:25 +00:00
hmac Reimplement PKCS#12 key derivation. 2016-04-19 18:16:38 +00:00
lhash
md4 Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
md5 Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
modes Start assuming MSVC 2015. 2016-05-02 19:46:25 +00:00
newhope newhope: use less stack to compute client key 2016-04-27 19:25:25 +00:00
obj Fix build. 2016-04-26 15:53:09 +00:00
pem Reject inappropriate private key encryption ciphers. 2016-05-03 16:30:08 +00:00
perlasm perlasm/x86_64-xlate.pl: handle binary constants early. 2016-03-17 18:23:40 +00:00
pkcs8 Add standalone PKCS#8 and SPKI fuzzers. 2016-04-25 21:57:28 +00:00
poly1305 Use UINT64_C instead of unsigned long long integer constant. 2016-04-11 16:08:14 +00:00
rand Add a deterministic PRNG for fuzzing. 2016-03-03 01:36:19 +00:00
rc4 Remove RC4_options from rc4-586.pl. 2016-04-22 21:14:11 +00:00
rsa Require the public exponent to be available in RSA blinding. 2016-04-18 23:34:46 +00:00
sha Revert md_len removal from SHA256_CTX and SHA512_CTX. 2016-04-27 19:01:23 +00:00
stack If no comparison function is set, sk_sort is a NOP 2016-02-25 20:02:53 +00:00
test Start assuming MSVC 2015. 2016-05-02 19:46:25 +00:00
x509 Add checks to X509_NAME_oneline() 2016-05-03 16:34:59 +00:00
x509v3 Check for malloc failure in r2i_certpol. 2016-04-29 16:22:05 +00:00
CMakeLists.txt Banish SSL_add_dir_cert_subjects_to_stack and OPENSSL_DIR_CTX to decrepit. 2016-04-27 18:40:25 +00:00
constant_time_test.c
cpu-aarch64-linux.c Rewrite ARM feature detection. 2016-03-26 04:54:44 +00:00
cpu-arm-linux.c Make CRYPTO_is_NEON_capable aware of the buggy CPU. 2016-04-28 16:42:21 +00:00
cpu-arm.c Rewrite ARM feature detection. 2016-03-26 04:54:44 +00:00
cpu-intel.c Add missing internal includes. 2016-03-20 16:38:54 +00:00
crypto.c Add |CRYPTO_is_confidential_build|. 2016-05-03 16:24:50 +00:00
ex_data.c
internal.h Another OPENSSL_NO_THREADS build fix. 2016-04-28 17:32:42 +00:00
mem.c Fix some indentation. 2016-01-28 00:51:45 +00:00
refcount_c11.c
refcount_lock.c
refcount_test.c
thread_none.c
thread_pthread.c Remove call to |fprintf| in |CRYPTO_once|. 2016-03-03 18:01:43 +00:00
thread_test.c Use nanosleep instead of usleep. 2016-04-19 21:54:26 +00:00
thread_win.c Replace CRYPTO_once_t on Windows with INIT_ONCE. 2016-04-19 21:34:20 +00:00
thread.c
time_support.c