boringssl

Historique

David Benjamin 2a19a17ca7 Limit ASN.1 constructed types recursive definition depth Constructed types with a recursive definition could eventually exceed the stack given malicious input with excessive recursion. Therefore we limit the stack depth. CVE-2018-0739 Credit to OSSFuzz for finding this issue. (Imported from upstream's 9310d45087ae546e27e61ddf8f6367f29848220d.) BoringSSL does not contain any such structures, but import this anyway with a test. Change-Id: I0e84578ea795134f25dae2ac8b565f3c26ef3204 Reviewed-on: https://boringssl-review.googlesource.com/26844 Commit-Queue: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		il y a 6 ans
..
CMakeLists.txt	Move PKCS#7 functions into their own directory.	il y a 7 ans
asn1.errordata	Limit ASN.1 constructed types recursive definition depth	il y a 6 ans
bio.errordata	Get rid of err function codes.	il y a 9 ans
bn.errordata	Update BN_enhanced_miller_rabin_primality_test to enforce preconditions and accept BN_prime_checks.	il y a 7 ans
cipher.errordata	Enforce incrementing counter for TLS 1.2 AES-GCM.	il y a 7 ans
conf.errordata	Fix out-of-memory condition in conf.	il y a 7 ans
dh.errordata	Reimplement PKCS #3 DH parameter parsing with crypto/bytestring.	il y a 8 ans
digest.errordata	Decouple PKCS#12 hash lookup from the OID table.	il y a 7 ans
dsa.errordata	Reimplement DSA parsing logic with crypto/asn1.	il y a 8 ans
ec.errordata	Make ECDSA signing 10% faster and plug some timing leaks.	il y a 7 ans
ecdh.errordata	Get rid of err function codes.	il y a 9 ans
ecdsa.errordata	Get rid of err function codes.	il y a 9 ans
engine.errordata	Get rid of err function codes.	il y a 9 ans
err.c	Add the ability to save and restore the error state.	il y a 7 ans
err_data_generate.go	Make err_data_generator.go silent by default.	il y a 8 ans
err_test.cc	Add the ability to save and restore the error state.	il y a 7 ans
evp.errordata	Implement scrypt from RFC 7914.	il y a 7 ans
hkdf.errordata	Get rid of err function codes.	il y a 9 ans
internal.h	Add the ability to save and restore the error state.	il y a 7 ans
obj.errordata	Reimplement OBJ_txt2obj and add a lower-level function.	il y a 7 ans
pem.errordata	Get rid of err function codes.	il y a 9 ans
pkcs7.errordata	Move PKCS#7 functions into their own directory.	il y a 7 ans
pkcs8.errordata	Update pkcs8 error data.	il y a 7 ans
rsa.errordata	Add RSA_check_fips to support public key validation checks.	il y a 7 ans
ssl.errordata	Push an error if custom private keys fail.	il y a 6 ans
x509.errordata	Teach crypto/x509 how to verify an Ed25519 signature.	il y a 7 ans
x509v3.errordata	Get rid of err function codes.	il y a 9 ans