boringssl

Историја

David Benjamin 2a19a17ca7 Limit ASN.1 constructed types recursive definition depth Constructed types with a recursive definition could eventually exceed the stack given malicious input with excessive recursion. Therefore we limit the stack depth. CVE-2018-0739 Credit to OSSFuzz for finding this issue. (Imported from upstream's 9310d45087ae546e27e61ddf8f6367f29848220d.) BoringSSL does not contain any such structures, but import this anyway with a test. Change-Id: I0e84578ea795134f25dae2ac8b565f3c26ef3204 Reviewed-on: https://boringssl-review.googlesource.com/26844 Commit-Queue: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		пре 6 година
..
CMakeLists.txt	Move PKCS#7 functions into their own directory.	пре 7 година
asn1.errordata	Limit ASN.1 constructed types recursive definition depth	пре 6 година
bio.errordata	Get rid of err function codes.	пре 9 година
bn.errordata	Update BN_enhanced_miller_rabin_primality_test to enforce preconditions and accept BN_prime_checks.	пре 7 година
cipher.errordata	Enforce incrementing counter for TLS 1.2 AES-GCM.	пре 7 година
conf.errordata	Fix out-of-memory condition in conf.	пре 7 година
dh.errordata	Reimplement PKCS #3 DH parameter parsing with crypto/bytestring.	пре 8 година
digest.errordata	Decouple PKCS#12 hash lookup from the OID table.	пре 7 година
dsa.errordata	Reimplement DSA parsing logic with crypto/asn1.	пре 8 година
ec.errordata	Make ECDSA signing 10% faster and plug some timing leaks.	пре 7 година
ecdh.errordata	Get rid of err function codes.	пре 9 година
ecdsa.errordata	Get rid of err function codes.	пре 9 година
engine.errordata	Get rid of err function codes.	пре 9 година
err.c	Add the ability to save and restore the error state.	пре 7 година
err_data_generate.go	Make err_data_generator.go silent by default.	пре 8 година
err_test.cc	Add the ability to save and restore the error state.	пре 7 година
evp.errordata	Implement scrypt from RFC 7914.	пре 7 година
hkdf.errordata	Get rid of err function codes.	пре 9 година
internal.h	Add the ability to save and restore the error state.	пре 7 година
obj.errordata	Reimplement OBJ_txt2obj and add a lower-level function.	пре 7 година
pem.errordata	Get rid of err function codes.	пре 9 година
pkcs7.errordata	Move PKCS#7 functions into their own directory.	пре 7 година
pkcs8.errordata	Update pkcs8 error data.	пре 7 година
rsa.errordata	Add RSA_check_fips to support public key validation checks.	пре 7 година
ssl.errordata	Push an error if custom private keys fail.	пре 6 година
x509.errordata	Teach crypto/x509 how to verify an Ed25519 signature.	пре 7 година
x509v3.errordata	Get rid of err function codes.	пре 9 година