boringssl

Historik

David Benjamin 2a19a17ca7 Limit ASN.1 constructed types recursive definition depth Constructed types with a recursive definition could eventually exceed the stack given malicious input with excessive recursion. Therefore we limit the stack depth. CVE-2018-0739 Credit to OSSFuzz for finding this issue. (Imported from upstream's 9310d45087ae546e27e61ddf8f6367f29848220d.) BoringSSL does not contain any such structures, but import this anyway with a test. Change-Id: I0e84578ea795134f25dae2ac8b565f3c26ef3204 Reviewed-on: https://boringssl-review.googlesource.com/26844 Commit-Queue: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		6 år sedan
..
CMakeLists.txt	Move PKCS#7 functions into their own directory.	7 år sedan
asn1.errordata	Limit ASN.1 constructed types recursive definition depth	6 år sedan
bio.errordata	Get rid of err function codes.	9 år sedan
bn.errordata	Update BN_enhanced_miller_rabin_primality_test to enforce preconditions and accept BN_prime_checks.	7 år sedan
cipher.errordata	Enforce incrementing counter for TLS 1.2 AES-GCM.	7 år sedan
conf.errordata	Fix out-of-memory condition in conf.	7 år sedan
dh.errordata	Reimplement PKCS #3 DH parameter parsing with crypto/bytestring.	8 år sedan
digest.errordata	Decouple PKCS#12 hash lookup from the OID table.	7 år sedan
dsa.errordata	Reimplement DSA parsing logic with crypto/asn1.	8 år sedan
ec.errordata	Make ECDSA signing 10% faster and plug some timing leaks.	7 år sedan
ecdh.errordata	Get rid of err function codes.	9 år sedan
ecdsa.errordata	Get rid of err function codes.	9 år sedan
engine.errordata	Get rid of err function codes.	9 år sedan
err.c	Add the ability to save and restore the error state.	7 år sedan
err_data_generate.go	Make err_data_generator.go silent by default.	8 år sedan
err_test.cc	Add the ability to save and restore the error state.	7 år sedan
evp.errordata	Implement scrypt from RFC 7914.	7 år sedan
hkdf.errordata	Get rid of err function codes.	9 år sedan
internal.h	Add the ability to save and restore the error state.	7 år sedan
obj.errordata	Reimplement OBJ_txt2obj and add a lower-level function.	7 år sedan
pem.errordata	Get rid of err function codes.	9 år sedan
pkcs7.errordata	Move PKCS#7 functions into their own directory.	7 år sedan
pkcs8.errordata	Update pkcs8 error data.	7 år sedan
rsa.errordata	Add RSA_check_fips to support public key validation checks.	7 år sedan
ssl.errordata	Push an error if custom private keys fail.	6 år sedan
x509.errordata	Teach crypto/x509 how to verify an Ed25519 signature.	7 år sedan
x509v3.errordata	Get rid of err function codes.	9 år sedan