aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBodo Möller <bodo@openssl.org>2002-10-11 17:51:25 +0000
committerBodo Möller <bodo@openssl.org>2002-10-11 17:51:25 +0000
commitc30ab1639619e0ae41864f29f9aeea38aea3c02d (patch)
tree21d934139a2979a565b7367814276f4f08f96618
parentad1b6d0df360310dd4ed7fa86b24557285131711 (diff)
downloadopenssl-c30ab1639619e0ae41864f29f9aeea38aea3c02d.tar.gz
fix some entries for 0.9.6d and 0.9.6e (should look as in the
0.9.7-stable branch)
-rw-r--r--CHANGES12
1 files changed, 9 insertions, 3 deletions
diff --git a/CHANGES b/CHANGES
index c16d076638..693d49b0ad 100644
--- a/CHANGES
+++ b/CHANGES
@@ -48,6 +48,12 @@
Changes between 0.9.6d and 0.9.6e [30 Jul 2002]
+ *) Add various sanity checks to asn1_get_length() to reject
+ the ASN1 length bytes if they exceed sizeof(long), will appear
+ negative or the content length exceeds the length of the
+ supplied buffer.
+ [Steve Henson, Adi Stav <stav@mercury.co.il>, James Yonan <jim@ntlp.com>]
+
*) Fix cipher selection routines: ciphers without encryption had no flags
for the cipher strength set and where therefore not handled correctly
by the selection routines (PR #130).
@@ -79,7 +85,7 @@
*) Add various sanity checks to asn1_get_length() to reject
the ASN1 length bytes if they exceed sizeof(long), will appear
negative or the content length exceeds the length of the
- supplied buffer.
+ supplied buffer. (CAN-2002-0659)
[Steve Henson, Adi Stav <stav@mercury.co.il>, James Yonan <jim@ntlp.com>]
*) Assertions for various potential buffer overflows, not known to
@@ -184,8 +190,8 @@
value is 0.
[Richard Levitte]
- *) [In 0.9.6c-engine release:]
- Fix a crashbug and a logic bug in hwcrhk_load_pubkey()
+ *) [In 0.9.6d-engine release:]
+ Fix a crashbug and a logic bug in hwcrhk_load_pubkey().
[Toomas Kiisk <vix@cyber.ee> via Richard Levitte]
*) Add the configuration target linux-s390x.