boringssl

文件历史

David Benjamin 2a19a17ca7 Limit ASN.1 constructed types recursive definition depth Constructed types with a recursive definition could eventually exceed the stack given malicious input with excessive recursion. Therefore we limit the stack depth. CVE-2018-0739 Credit to OSSFuzz for finding this issue. (Imported from upstream's 9310d45087ae546e27e61ddf8f6367f29848220d.) BoringSSL does not contain any such structures, but import this anyway with a test. Change-Id: I0e84578ea795134f25dae2ac8b565f3c26ef3204 Reviewed-on: https://boringssl-review.googlesource.com/26844 Commit-Queue: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		6 年前
..
CMakeLists.txt	Move PKCS#7 functions into their own directory.	7 年前
asn1.errordata	Limit ASN.1 constructed types recursive definition depth	6 年前
bio.errordata	Get rid of err function codes.	9 年前
bn.errordata	Update BN_enhanced_miller_rabin_primality_test to enforce preconditions and accept BN_prime_checks.	7 年前
cipher.errordata	Enforce incrementing counter for TLS 1.2 AES-GCM.	7 年前
conf.errordata	Fix out-of-memory condition in conf.	7 年前
dh.errordata	Reimplement PKCS #3 DH parameter parsing with crypto/bytestring.	8 年前
digest.errordata	Decouple PKCS#12 hash lookup from the OID table.	7 年前
dsa.errordata	Reimplement DSA parsing logic with crypto/asn1.	8 年前
ec.errordata	Make ECDSA signing 10% faster and plug some timing leaks.	7 年前
ecdh.errordata	Get rid of err function codes.	9 年前
ecdsa.errordata	Get rid of err function codes.	9 年前
engine.errordata	Get rid of err function codes.	9 年前
err.c	Add the ability to save and restore the error state.	7 年前
err_data_generate.go	Make err_data_generator.go silent by default.	8 年前
err_test.cc	Add the ability to save and restore the error state.	7 年前
evp.errordata	Implement scrypt from RFC 7914.	7 年前
hkdf.errordata	Get rid of err function codes.	9 年前
internal.h	Add the ability to save and restore the error state.	7 年前
obj.errordata	Reimplement OBJ_txt2obj and add a lower-level function.	7 年前
pem.errordata	Get rid of err function codes.	9 年前
pkcs7.errordata	Move PKCS#7 functions into their own directory.	7 年前
pkcs8.errordata	Update pkcs8 error data.	7 年前
rsa.errordata	Add RSA_check_fips to support public key validation checks.	7 年前
ssl.errordata	Push an error if custom private keys fail.	6 年前
x509.errordata	Teach crypto/x509 how to verify an Ed25519 signature.	7 年前
x509v3.errordata	Get rid of err function codes.	9 年前