kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
56475207be
boringssl/ssl
History
Adam Langley 56475207be Add heartbeat extension bounds check. 
A missing bounds check in the handling of the TLS heartbeat extension
can be used to reveal up to 64k of memory to a connected client or
server.

Thanks for Neel Mehta of Google Security for discovering this bug and to
Adam Langley <agl@chromium.org> and Bodo Moeller <bmoeller@acm.org> for
preparing the fix (CVE-2014-0160)

(Imported from upstream's 7e840163c06c7692b796a93e3fa85a93136adbb2)
2014-06-20 13:17:39 -07:00
..
pqueue Inital import. 2014-06-20 13:17:32 -07:00
test Fix test of first of 255 CBC padding bytes. 2014-06-20 13:17:37 -07:00
CMakeLists.txt Inital import. 2014-06-20 13:17:32 -07:00
d1_both.c Add heartbeat extension bounds check. 2014-06-20 13:17:39 -07:00
d1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
d1_enc.c Inital import. 2014-06-20 13:17:32 -07:00
d1_lib.c Inital import. 2014-06-20 13:17:32 -07:00
d1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
d1_pkt.c CBC record splitting. 2014-06-20 13:17:35 -07:00
d1_srtp.c Inital import. 2014-06-20 13:17:32 -07:00
d1_srvr.c Fix TLS-PSK identity hint implementation issues. 2014-06-20 13:17:36 -07:00
dtls1.h Inital import. 2014-06-20 13:17:32 -07:00
s3_both.c ChannelID support. 2014-06-20 13:17:33 -07:00
s3_cbc.c Fix test of first of 255 CBC padding bytes. 2014-06-20 13:17:37 -07:00
s3_clnt.c psk_client_callback, 128-byte id bug. 2014-06-20 13:17:37 -07:00
s3_enc.c Fallback SCSV. 2014-06-20 13:17:36 -07:00
s3_lib.c Return per-certificate chain if extra chain is NULL. 2014-06-20 13:17:38 -07:00
s3_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s3_pkt.c Fix use-after-free after a deferred alert. 2014-06-20 13:17:36 -07:00
s3_srvr.c Fix TLS-PSK identity hint implementation issues. 2014-06-20 13:17:36 -07:00
s23_clnt.c TLS extension limit check fixes. 2014-06-20 13:17:36 -07:00
s23_lib.c Inital import. 2014-06-20 13:17:32 -07:00
s23_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s23_pkt.c Inital import. 2014-06-20 13:17:32 -07:00
s23_srvr.c Inital import. 2014-06-20 13:17:32 -07:00
srtp.h Inital import. 2014-06-20 13:17:32 -07:00
ssl2.h Inital import. 2014-06-20 13:17:32 -07:00
ssl3.h Add SSL_get_client_certificate_types. 2014-06-20 13:17:36 -07:00
ssl23.h Inital import. 2014-06-20 13:17:32 -07:00
ssl_algs.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_asn1.c ChannelID support. 2014-06-20 13:17:33 -07:00
ssl_cert.c Update chain building function. 2014-06-20 13:17:39 -07:00
ssl_ciph.c Const correctness. 2014-06-20 13:17:36 -07:00
ssl_error.c Early callback support. 2014-06-20 13:17:36 -07:00
ssl_lib.c Fix TLS-PSK identity hint implementation issues. 2014-06-20 13:17:36 -07:00
ssl_locl.h Early callback support. 2014-06-20 13:17:36 -07:00
ssl_rsa.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_sess.c Fix TLS-PSK identity hint implementation issues. 2014-06-20 13:17:36 -07:00
ssl_stat.c Add support for asynchronous session lookup. 2014-06-20 13:17:32 -07:00
ssl_txt.c SSL AEAD support. 2014-06-20 13:17:34 -07:00
ssl.h Update chain building function. 2014-06-20 13:17:39 -07:00
t1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
t1_enc.c ssl/t1_enc.c: check EVP_MD_CTX_copy return value. 2014-06-20 13:17:38 -07:00
t1_lib.c Add heartbeat extension bounds check. 2014-06-20 13:17:39 -07:00
t1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
t1_reneg.c Inital import. 2014-06-20 13:17:32 -07:00
t1_srvr.c Inital import. 2014-06-20 13:17:32 -07:00
tls1.h Set TLS padding extension value. 2014-06-20 13:17:39 -07:00