mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-01-24 13:55:42 +08:00
Code Issues Packages Projects Releases Wiki Activity
1caaf073b0
openssl/crypto/asn1
History
Neil Horman 0981c20f8e Fix NULL pointer deref when parsing the stable section 
When parsing the stable section of a config such as this:
openssl_conf = openssl_init
[openssl_init]
stbl_section = mstbl
[mstbl]
id-tc26 = min

Can lead to a SIGSEGV, as the parsing code doesnt recognize min as a
proper section name without a trailing colon to associate it with a
value.  As a result the stack of configuration values has an entry with
a null value in it, which leads to the SIGSEGV in do_tcreate when we
attempt to pass NULL to strtoul.

Fix it by skipping any entry in the config name/value list that has a
null value, prior to passing it to stroul

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22988)
2024-01-12 10:37:22 +01:00
..
a_bitstr.c Copyright year updates 2023-09-07 09:59:15 +01:00
a_d2i_fp.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_digest.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_dup.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_gentm.c Update copyright year 2021-04-08 13:04:41 +01:00
a_i2d_fp.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_int.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_mbstr.c Fix error handling in ASN1_mbstring_ncopy 2023-12-29 10:23:29 +01:00
a_object.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_octet.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
a_print.c Update copyright year 2021-09-07 13:35:43 +02:00
a_sign.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_strex.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
a_strnid.c Copyright year updates 2023-09-07 09:59:15 +01:00
a_time.c Copyright year updates 2023-09-07 09:59:15 +01:00
a_type.c Update copyright year 2021-04-08 13:04:41 +01:00
a_utctm.c Update copyright year 2021-04-08 13:04:41 +01:00
a_utf8.c ASN1: limit the Unicode code point range in UTF8_getc() and UTF8_putc() 2021-03-18 14:12:48 +10:00
a_verify.c Copyright year updates 2023-09-07 09:59:15 +01:00
ameth_lib.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
asn1_err.c err: rename err_load_xxx_strings_int functions 2021-05-26 13:01:47 +10:00
asn1_gen.c Do not include crypto/asn1.h from internal/cryptlib.h 2023-10-19 10:15:56 +02:00
asn1_item_list.c Update copyright year 2020-11-26 14:18:57 +00:00
asn1_item_list.h CMS: Export CMS_EnvelopedData and add CMS_EnvelopedData_decrypt() 2022-06-28 17:51:21 +02:00
asn1_lib.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
asn1_local.h libcrypto refactoring: introduce and use ossl_asn1_string_set_bits_left() 2022-07-19 08:44:19 +02:00
asn1_parse.c Copyright year updates 2023-09-07 09:59:15 +01:00
asn_mime.c Copyright year updates 2023-09-07 09:59:15 +01:00
asn_moid.c Harden asn1 oid loader to invalid inputs 2023-12-13 11:10:36 -05:00
asn_mstbl.c Fix NULL pointer deref when parsing the stable section 2024-01-12 10:37:22 +01:00
asn_pack.c Copyright year updates 2023-09-07 09:59:15 +01:00
bio_asn1.c Fix BIO_f_asn1() to properly report some errors 2022-12-22 11:01:06 +01:00
bio_ndef.c Copyright year updates 2023-09-07 09:59:15 +01:00
build.info ASN1: rename asn1_par.c to asn1_parse.c for clarity; simplify asn1_parse2() 2021-06-15 14:23:21 +02:00
charmap.h Fix copyright year issues 2022-01-06 09:27:02 +01:00
charmap.pl Add a local perl module to get year last changed 2021-03-31 13:59:53 +02:00
d2i_param.c Update copyright year 2021-06-17 13:24:59 +01:00
d2i_pr.c Copyright year updates 2023-09-07 09:59:15 +01:00
d2i_pu.c Update copyright year 2022-05-03 13:34:51 +01:00
evp_asn1.c Avoid invoking memcpy if size is zero or the supplied buffer is NULL 2021-08-25 17:02:37 +02:00
f_int.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
f_string.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
i2d_evp.c Copyright year updates 2023-09-07 09:59:15 +01:00
n_pkey.c Update copyright year 2021-06-17 13:24:59 +01:00
nsseq.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
p5_pbe.c Copyright year updates 2023-09-07 09:59:15 +01:00
p5_pbev2.c Copyright year updates 2023-09-07 09:59:15 +01:00
p5_scrypt.c Copyright year updates 2023-09-07 09:59:15 +01:00
p8_pkey.c Update copyright year 2020-04-23 13:55:52 +01:00
standard_methods.h Copyright year updates 2023-09-07 09:59:15 +01:00
t_bitst.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
t_pkey.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
t_spki.c Update copyright year 2021-09-07 13:35:43 +02:00
tasn_dec.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_enc.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_fre.c Update copyright year 2021-04-08 13:04:41 +01:00
tasn_new.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_prn.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_scn.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
tasn_typ.c constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION 2019-03-06 16:10:09 +00:00
tasn_utl.c Copyright year updates 2023-09-07 09:59:15 +01:00
tbl_standard.h Update copyright year 2020-10-15 14:10:06 +01:00
x_algor.c Update copyright year 2022-05-03 13:34:51 +01:00
x_bignum.c Explicitly test against NULL; do not use !p or similar 2019-10-09 21:32:15 +02:00
x_info.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
x_int64.c Cast values to match printf format strings. 2022-11-14 07:47:53 +00:00
x_long.c Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call 2020-11-13 09:35:02 +01:00
x_pkey.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
x_sig.c Reorganize private crypto header files 2019-09-28 20:26:34 +02:00
x_spki.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00
x_val.c Following the license change, modify the boilerplates in crypto/asn1/ 2018-12-06 14:24:40 +01:00