Go to file
Adam Langley 56475207be Add heartbeat extension bounds check.
A missing bounds check in the handling of the TLS heartbeat extension
can be used to reveal up to 64k of memory to a connected client or
server.

Thanks for Neel Mehta of Google Security for discovering this bug and to
Adam Langley <agl@chromium.org> and Bodo Moeller <bmoeller@acm.org> for
preparing the fix (CVE-2014-0160)

(Imported from upstream's 7e840163c06c7692b796a93e3fa85a93136adbb2)
2014-06-20 13:17:39 -07:00
crypto vpaes-[x86_64|ppc].pl: fix typo, which for some reason triggers rkhunter. 2014-06-20 13:17:39 -07:00
doc Inital import. 2014-06-20 13:17:32 -07:00
include/openssl ChaCha20-Poly1305 support. 2014-06-20 13:17:35 -07:00
ssl Add heartbeat extension bounds check. 2014-06-20 13:17:39 -07:00
tool Add client functionality to helper tool. 2014-06-20 13:17:37 -07:00
util ChaCha20-Poly1305 support. 2014-06-20 13:17:35 -07:00
.clang-format Inital import. 2014-06-20 13:17:32 -07:00
.gitignore Inital import. 2014-06-20 13:17:32 -07:00
BUGS Inital import. 2014-06-20 13:17:32 -07:00
BUILDING Inital import. 2014-06-20 13:17:32 -07:00
CMakeLists.txt Inital import. 2014-06-20 13:17:32 -07:00