aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/asn1/a_d2i_fp.c
Commit message (Collapse)AuthorAgeFilesLines
* Harden ASN.1 BIO handling of large amounts of data.Dr. Stephen Henson2016-04-231-10/+26
| | | | | | | | | | | | If the ASN.1 BIO is presented with a large length field read it in chunks of increasing size checking for EOF on each read. This prevents small files allocating excessive amounts of data. CVE-2016-2109 Thanks to Brian Carpenter for reporting this issue. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Remove /* foo.c */ commentsRich Salz2016-01-261-1/+0
| | | | | | | | | | | | This was done by the following find . -name '*.[ch]' | /tmp/pl where /tmp/pl is the following three-line script: print unless $. == 1 && m@/\* .*\.[ch] \*/@; close ARGV if eof; # Close file to reset $. And then some hand-editing of other files. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Identify and move common internal libcrypto header filesRichard Levitte2015-05-141-1/+1
| | | | | | | | | | | | | There are header files in crypto/ that are used by a number of crypto/ submodules. Move those to crypto/include/internal and adapt the affected source code and Makefiles. The header files that got moved are: crypto/cryptolib.h crypto/md32_common.h Reviewed-by: Rich Salz <rsalz@openssl.org>
* free NULL cleanup -- codaRich Salz2015-05-011-6/+3
| | | | | | | | After the finale, the "real" final part. :) Do a recursive grep with "-B1 -w [a-zA-Z0-9_]*_free" to see if any of the preceeding lines are an "if NULL" check that can be removed. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove unnecessary use of ASN1_const_CTXDr. Stephen Henson2015-04-031-12/+14
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove unnecessary asn1_mac.h includes.Dr. Stephen Henson2015-03-301-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-198/+180
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Cleanup OPENSSL_NO_xxx, part 1master-pre-reformatRich Salz2015-01-141-2/+2
| | | | | | | | | | OPENSSL_NO_RIPEMD160, OPENSSL_NO_RIPEMD merged into OPENSSL_NO_RMD160 OPENSSL_NO_FP_API merged into OPENSSL_NO_STDIO Two typo's on #endif comments fixed: OPENSSL_NO_ECB fixed to OPENSSL_NO_OCB OPENSSL_NO_HW_SureWare fixed to OPENSSL_NO_HW_SUREWARE Reviewed-by: Richard Levitte <levitte@openssl.org>
* Check for potentially exploitable overflows in asn1_d2i_read_bioDr. Stephen Henson2012-04-191-14/+40
| | | | | | | | BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer in CRYPTO_realloc_clean. Thanks to Tavis Ormandy, Google Security Team, for discovering this issue and to Adam Langley <agl@chromium.org> for fixing it. (CVE-2012-2110)
* Update util/ck_errf.pl script, and have it run automaticallyBodo Möller2005-05-091-6/+6
| | | | | | | | during "make errors" and thus during "make update". Fix lots of bugs that util/ck_errf.pl can detect automatically. Various others of these are still left to fix; that's why "make update" will complain loudly when run now.
* Resolve signed vs. unsigned.Richard Levitte2005-04-201-1/+1
|
* make sure error queue is totally emptiedNils Larsch2005-04-071-1/+1
| | | | PR: 359
* Simplicate and add lightness.Ben Laurie2005-03-311-6/+2
|
* Give everything prototypes (well, everything that's actually used).Ben Laurie2005-03-311-8/+10
|
* Constify d2i, s2i, c2i and r2i functions and other associatedRichard Levitte2004-03-151-3/+3
| | | | | | | | functions and macros. This change has associated tags: LEVITTE_before_const and LEVITTE_after_const. Those will be removed when this change has been properly reviewed.
* Workaround for GCC-ia64 compiler bug.Andy Polyakov2002-12-061-0/+5
| | | | | | Submitted by: <appro> Reviewed by: PR:
* In asn1_d2i_read_bio, don't assume BIO_read willDr. Stephen Henson2002-12-031-5/+10
| | | | | return the requested number of bytes when reading content.
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-131-2/+2
|
* Make all configuration macros available for application by makingRichard Levitte2001-02-191-2/+2
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* ASN1_ITEM versions of ASN1_d2i_{fp, bio} and replacement ofDr. Stephen Henson2000-12-301-5/+62
| | | | | | most of the old wrappers. A few of the old versions remain because they are non standard and the corresponding ASN1 code has not been reimplemented yet.
* Change #include filenames from <foo.h> to <openssl.h>.Bodo Möller1999-04-231-2/+2
| | | | | | Submitted by: Reviewed by: PR:
* Change functions to ANSI C.Ulf Möller1999-04-191-10/+4
|
* Import of old SSLeay release: SSLeay 0.9.0bRalf S. Engelschall1998-12-211-2/+3
|
* Import of old SSLeay release: SSLeay 0.8.1bRalf S. Engelschall1998-12-211-0/+200
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-14 02:29:21 +0000