kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
956665b32b
boringssl/ssl
History
Adam Langley 4c65f3a2f1 Fix off-by-one errors in ssl_cipher_get_evp() 
In the ssl_cipher_get_evp() function, fix off-by-one errors in index
validation before accessing arrays.

PR#3375

(Imported from upstream's 3d86077427f93dc46b18fee706b567ec32ac232a)
2014-06-20 13:17:42 -07:00
..
pqueue Inital import. 2014-06-20 13:17:32 -07:00
test Fix test of first of 255 CBC padding bytes. 2014-06-20 13:17:37 -07:00
CMakeLists.txt Unit/regression test for TLS heartbeats. 2014-06-20 13:17:40 -07:00
d1_both.c Fix null pointer errors. 2014-06-20 13:17:42 -07:00
d1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
d1_enc.c Inital import. 2014-06-20 13:17:32 -07:00
d1_lib.c Free up s->d1->buffered_app_data.q properly. 2014-06-20 13:17:41 -07:00
d1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
d1_pkt.c Added SSLErr call for internal error in dtls1_buffer_record 2014-06-20 13:17:41 -07:00
d1_srtp.c Inital import. 2014-06-20 13:17:32 -07:00
d1_srvr.c Fix TLS-PSK identity hint implementation issues. 2014-06-20 13:17:36 -07:00
dtls1.h Inital import. 2014-06-20 13:17:32 -07:00
heartbeat_test.c Unit/regression test for TLS heartbeats. 2014-06-20 13:17:40 -07:00
s3_both.c ChannelID support. 2014-06-20 13:17:33 -07:00
s3_cbc.c Fix test of first of 255 CBC padding bytes. 2014-06-20 13:17:37 -07:00
s3_clnt.c Make tls_session_secret_cb work with CVE-2014-0224 fix. 2014-06-20 13:17:41 -07:00
s3_enc.c Fixed incorrect return code handling in ssl3_final_finish_mac. 2014-06-20 13:17:42 -07:00
s3_lib.c Update strength_bits for 3DES. 2014-06-20 13:17:42 -07:00
s3_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s3_pkt.c Added OPENSSL_assert check as per PR#3377 reported by Rainer Jung <rainer.jung@kippdata.de> 2014-06-20 13:17:42 -07:00
s3_srvr.c Fix for CVE-2014-0224 2014-06-20 13:17:41 -07:00
s23_clnt.c TLS extension limit check fixes. 2014-06-20 13:17:36 -07:00
s23_lib.c Inital import. 2014-06-20 13:17:32 -07:00
s23_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s23_pkt.c Inital import. 2014-06-20 13:17:32 -07:00
s23_srvr.c Inital import. 2014-06-20 13:17:32 -07:00
srtp.h Inital import. 2014-06-20 13:17:32 -07:00
ssl2.h Inital import. 2014-06-20 13:17:32 -07:00
ssl3.h Fix for CVE-2014-0224 2014-06-20 13:17:41 -07:00
ssl23.h Inital import. 2014-06-20 13:17:32 -07:00
ssl_algs.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_asn1.c fix coverity issue 966597 - error line is not always initialised 2014-06-20 13:17:40 -07:00
ssl_cert.c Update chain building function. 2014-06-20 13:17:39 -07:00
ssl_ciph.c Fix off-by-one errors in ssl_cipher_get_evp() 2014-06-20 13:17:42 -07:00
ssl_error.c Early callback support. 2014-06-20 13:17:36 -07:00
ssl_lib.c Avoid out-of-bounds write in SSL_get_shared_ciphers 2014-06-20 13:17:40 -07:00
ssl_locl.h Early callback support. 2014-06-20 13:17:36 -07:00
ssl_rsa.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_sess.c Fix TLS-PSK identity hint implementation issues. 2014-06-20 13:17:36 -07:00
ssl_stat.c Add support for asynchronous session lookup. 2014-06-20 13:17:32 -07:00
ssl_txt.c SSL AEAD support. 2014-06-20 13:17:34 -07:00
ssl.h Remove unimplemented functions. 2014-06-20 13:17:42 -07:00
t1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
t1_enc.c Use correct digest when exporting keying material. 2014-06-20 13:17:40 -07:00
t1_lib.c Check there is enough room for extension. 2014-06-20 13:17:41 -07:00
t1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
t1_reneg.c Inital import. 2014-06-20 13:17:32 -07:00
t1_srvr.c Inital import. 2014-06-20 13:17:32 -07:00
tls1.h Set TLS padding extension value. 2014-06-20 13:17:39 -07:00