kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
a84f06fc1e
boringssl/crypto
History
Doug Hogan a84f06fc1e Move free from cbb_init() to only CBB_init(). 
CBB_init_fixed() should not call free because it can lead to use after
free or double free bugs.  The caller should be responsible for
creating and destroying the buffer.

In the current code, ssl3_get_v2_client_hello() may free s->init_buf->data
via CBB_init_fixed().  It can also be freed via SSL_free(s) since
ssl3_get_v2_client_hello() doesn't set it to NULL and CBB_init_fixed()
can't set the caller's pointer to NULL.

Change-Id: Ia05a67ae25af7eb4fb04f08f20d50d912b41e38b
2015-02-02 17:01:32 -08:00
..
aes Change CMakeLists.txt to two-space indent. 2015-01-28 16:37:10 -08:00
asn1 Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
base64 Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
bio Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
bn Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
buf Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
bytestring Move free from cbb_init() to only CBB_init(). 2015-02-02 17:01:32 -08:00
chacha Don't assume alignment of ChaCha key on ARM. 2015-02-03 00:34:17 +00:00
cipher Fix AES-256 NIDs. 2015-02-02 19:56:13 +00:00
conf Change CMakeLists.txt to two-space indent. 2015-01-28 16:37:10 -08:00
des Change CMakeLists.txt to two-space indent. 2015-01-28 16:37:10 -08:00
dh Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
digest Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
dsa Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
ec Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
ecdh Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
ecdsa Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
engine Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
err Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
evp Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
hkdf Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
hmac Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
lhash Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
md4 Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
md5 Change CMakeLists.txt to two-space indent. 2015-01-28 16:37:10 -08:00
modes Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
obj Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
pem Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
perlasm perlasm/x86_64-xlate.pl: handle inter-bank movd. 2014-11-10 13:45:32 -08:00
pkcs8 Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
poly1305 Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
rand Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
rc4 Change CMakeLists.txt to two-space indent. 2015-01-28 16:37:10 -08:00
rsa Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
sha Change CMakeLists.txt to two-space indent. 2015-01-28 16:37:10 -08:00
stack Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
x509 Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
x509v3 Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
arm_arch.h aarch64 support. 2015-01-14 23:38:11 +00:00
CMakeLists.txt Probe for NEON support if getauxval is missing. 2015-02-02 19:51:14 +00:00
constant_time_test.c Update constant-time operations. 2014-11-10 13:48:30 -08:00
cpu-arm-asm.S Probe for NEON support if getauxval is missing. 2015-02-02 19:51:14 +00:00
cpu-arm.c Fix patch collision of d062c8af and 2b2d66d4. 2015-02-02 16:30:27 -08:00
cpu-intel.c Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
cpu-x86_64-asm.pl Inital import. 2014-06-20 13:17:32 -07:00
cpu-x86-asm.pl Use asm directives to protect OPENSSL_cleanse. 2014-07-31 18:49:22 +00:00
crypto_error.c Move public headers to include/openssl/ 2014-07-14 22:42:18 +00:00
crypto_error.h Add ISC header to a handful of files. 2014-06-26 10:26:42 -07:00
crypto.c aarch64 support. 2015-01-14 23:38:11 +00:00
directory_posix.c Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
directory_win.c Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
directory.h Add visibility rules. 2014-07-31 22:03:11 +00:00
ex_data_impl.c Free more memory in cleanup functions. 2015-01-13 00:04:35 +00:00
ex_data.c Don't compare signed vs. unsigned. 2014-10-01 02:17:38 +00:00
header_removed.h Add ISC header to a handful of files. 2014-06-26 10:26:42 -07:00
internal.h aarch64 support. 2015-01-14 23:38:11 +00:00
mem.c Enable more warnings & treat warnings as errors on Windows. 2015-01-31 00:18:55 +00:00
thread.c Remove string.h from base.h. 2015-02-02 19:14:15 +00:00
time_support.c Fix NaCl build. 2014-10-02 22:45:22 +00:00