kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
e6def376fe
boringssl/ssl
History
David Benjamin 8f1ef1d554 Fix double-frees on malloc failure in ssl3_get_client_key_exchange. 
If generating the master secret or applying the PSK post-processing fails,
we'll double-free all the ECDH state.

Change-Id: Id52931af73bdef5eceb06f7e64d32fdda629521e
Reviewed-on: https://boringssl-review.googlesource.com/2063
Reviewed-by: Adam Langley <agl@google.com>
2014-10-29 20:34:25 +00:00
..
pqueue Fix pqueue_test.c memory leak. 2014-10-20 19:18:53 +00:00
test Add tests for ECDHE_PSK. 2014-10-29 20:33:09 +00:00
CMakeLists.txt Merge the get_ssl_method hooks between TLS and SSLv3. 2014-09-30 22:58:59 +00:00
d1_both.c Extended master secret support. 2014-10-24 21:19:44 +00:00
d1_clnt.c Client-side OCSP stapling support. 2014-08-29 00:39:33 +00:00
d1_enc.c Prune some dead quirks and document the SSL_OP_ALL ones. 2014-09-03 20:17:45 +00:00
d1_lib.c Extended master secret support. 2014-10-24 21:19:44 +00:00
d1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
d1_pkt.c Remove SSL_OP_CISCO_ANYCONNECT. 2014-08-18 17:57:01 +00:00
d1_srtp.c Add less dangerous versions of SRTP functions. 2014-10-27 21:58:09 +00:00
d1_srvr.c Extended master secret support. 2014-10-24 21:19:44 +00:00
s3_both.c Extended master secret support. 2014-10-24 21:19:44 +00:00
s3_cbc.c Prune some dead quirks and document the SSL_OP_ALL ones. 2014-09-03 20:17:45 +00:00
s3_clnt.c Refactor ssl3_send_client_key_exchange slightly. 2014-10-29 20:34:07 +00:00
s3_enc.c Extended master secret support. 2014-10-24 21:19:44 +00:00
s3_lib.c Fix build on Windows. 2014-10-27 22:10:39 +00:00
s3_meth.c Merge the get_ssl_method hooks between TLS and SSLv3. 2014-09-30 22:58:59 +00:00
s3_pkt.c Don't compare signed vs. unsigned. 2014-10-01 02:17:38 +00:00
s3_srvr.c Fix double-frees on malloc failure in ssl3_get_client_key_exchange. 2014-10-29 20:34:25 +00:00
s23_clnt.c Handle session resumption in SSLv23_client_method. 2014-09-25 22:04:20 +00:00
s23_lib.c Remove default_timeout hook. 2014-08-18 17:25:20 +00:00
s23_meth.c unifdef a bunch of OPENSSL_NO_* ifdefs. 2014-08-28 00:41:34 +00:00
s23_pkt.c Inital import. 2014-06-20 13:17:32 -07:00
s23_srvr.c Remove Suite B mode. 2014-08-14 22:00:16 +00:00
ssl_algs.c Remove indirection in loading ciphers. 2014-09-15 21:06:10 +00:00
ssl_asn1.c Add SSL_SESSION_to_bytes to replace i2d_SSL_SESSION. 2014-10-28 19:02:59 +00:00
ssl_cert.c Don't compare signed vs. unsigned. 2014-10-01 02:17:38 +00:00
ssl_ciph.c Remove OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL. 2014-09-30 22:59:23 +00:00
ssl_error.c Add SSL_SESSION_to_bytes to replace i2d_SSL_SESSION. 2014-10-28 19:02:59 +00:00
ssl_lib.c Remove T** parameter to ssl_bytes_to_cipher_list. 2014-10-24 02:01:33 +00:00
ssl_locl.h Extended master secret support. 2014-10-24 21:19:44 +00:00
ssl_rsa.c Prune removed key types from SSL_PKEY_*. 2014-08-20 02:15:32 +00:00
ssl_sess.c Remove key_arg and key_arg_length from SSL_SESSION. 2014-10-21 17:55:49 +00:00
ssl_stat.c unifdef a bunch of OPENSSL_NO_* ifdefs. 2014-08-28 00:41:34 +00:00
ssl_test.c Add SSL_SESSION_to_bytes to replace i2d_SSL_SESSION. 2014-10-28 19:02:59 +00:00
ssl_txt.c Remove key_arg and key_arg_length from SSL_SESSION. 2014-10-21 17:55:49 +00:00
t1_enc.c Extended master secret support. 2014-10-24 21:19:44 +00:00
t1_lib.c Extended master secret support. 2014-10-24 21:19:44 +00:00
t1_reneg.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00