kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
f297e021f1
boringssl/ssl
History
David Benjamin f297e021f1 Reject unknown fields in d2i_SSL_SESSION. 
The original OpenSSL implementation did the same. M_ASN1_D2I_Finish checks
this. Forwards compatibility with future sessions with unknown fields is
probably not desirable.

Change-Id: I116a8c482cbcc47c3fcc31515c4a3718f66cf268
Reviewed-on: https://boringssl-review.googlesource.com/4941
Reviewed-by: Adam Langley <agl@google.com>
2015-06-01 20:29:07 +00:00
..
pqueue Fix some malloc test crashs. 2015-05-21 18:00:10 +00:00
test Fix DTLS handling of multiple records in a packet. 2015-05-29 22:59:38 +00:00
CMakeLists.txt Add malloc test support to unit tests. 2015-05-21 17:59:48 +00:00
d1_both.c Pass a dtls1_use_epoch enum down to dtls1_seal_record. 2015-05-21 17:59:36 +00:00
d1_clnt.c Remove SSL_in_before and SSL_ST_BEFORE. 2015-05-21 20:51:06 +00:00
d1_lib.c Pass a dtls1_use_epoch enum down to dtls1_seal_record. 2015-05-21 17:59:36 +00:00
d1_meth.c Forbid caller-initiated renegotiations and all renego as a servers. 2015-05-21 20:43:56 +00:00
d1_pkt.c Deprecate SSL_*_read_ahead and enforce DTLS packet boundaries. 2015-05-21 18:29:34 +00:00
d1_srtp.c Fix STACK_OF pointer style. 2015-05-06 22:55:16 +00:00
d1_srvr.c Decide whether or not to request client certificates early. 2015-05-27 21:53:16 +00:00
internal.h Don't make SSL_MODE_*HELLO_TIME configurable. 2015-05-27 21:47:59 +00:00
s3_both.c Don't make SSL_MODE_*HELLO_TIME configurable. 2015-05-27 21:47:59 +00:00
s3_clnt.c Release handshake buffer when sending no certificate. 2015-05-27 21:54:30 +00:00
s3_enc.c Remove unnecessary NULL checks, part 5. 2015-05-04 23:16:19 +00:00
s3_lib.c Remove renegotiation deferral logic. 2015-05-21 20:50:43 +00:00
s3_meth.c Forbid caller-initiated renegotiations and all renego as a servers. 2015-05-21 20:43:56 +00:00
s3_pkt.c Fix DTLS handling of multiple records in a packet. 2015-05-29 22:59:38 +00:00
s3_srvr.c Decide whether or not to request client certificates early. 2015-05-27 21:53:16 +00:00
ssl_aead_ctx.c Factor SSL_AEAD_CTX into a dedicated type. 2015-05-21 17:59:15 +00:00
ssl_algs.c Rename ssl_locl.h to internal.h 2015-04-10 22:14:09 +00:00
ssl_asn1.c Reject unknown fields in d2i_SSL_SESSION. 2015-06-01 20:29:07 +00:00
ssl_cert.c Remove remaining calls to the old lock functions. 2015-05-20 19:18:13 +00:00
ssl_cipher.c Remove dead field from CIPHER_ORDER. 2015-05-06 22:36:31 +00:00
ssl_lib.c Deprecate and no-op SSL_set_state. 2015-05-21 20:52:05 +00:00
ssl_rsa.c Switch EVP_PKEY_dup calls to EVP_PKEY_up_ref. 2015-05-06 22:57:09 +00:00
ssl_sess.c Remove remaining calls to the old lock functions. 2015-05-20 19:18:13 +00:00
ssl_stat.c Remove SSL_in_before and SSL_ST_BEFORE. 2015-05-21 20:51:06 +00:00
ssl_test.cc Reject unknown fields in d2i_SSL_SESSION. 2015-06-01 20:29:07 +00:00
ssl_txt.c Rename ssl_locl.h to internal.h 2015-04-10 22:14:09 +00:00
t1_enc.c Release handshake buffer when sending no certificate. 2015-05-27 21:54:30 +00:00
t1_lib.c Switch three more renegotiate checks to initial_handshake_complete. 2015-05-21 18:31:55 +00:00
t1_reneg.c Include-what-you-use ssl/internal.h. 2015-04-10 22:15:02 +00:00