openssl/ssl
Matt Caswell 38690cab18 Only free the read buffers if we're not using them
If we're part way through processing a record, or the application has
not released all the records then we should not free our buffer because
they are still needed.

CVE-2024-4741

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24395)
2024-05-28 13:28:13 +01:00
..
quic QUIC TXP: Fix reserve calculations for PING frames 2024-04-18 17:42:26 +02:00
record Only free the read buffers if we're not using them 2024-05-28 13:28:13 +01:00
rio
statem Move stack of compression methods from libssl to OSSL_LIB_CTX 2024-05-28 08:56:13 +02:00
bio_ssl.c Copyright year updates 2024-04-09 13:43:26 +02:00
build.info
d1_lib.c Remove SSL_ENC_FLAG_EXPLICIT_IV which is only set and never read. 2024-05-14 15:34:07 +02:00
d1_msg.c
d1_srtp.c Copyright year updates 2024-04-09 13:43:26 +02:00
event_queue.c
methods.c
pqueue.c
priority_queue.c
s3_enc.c Copyright year updates 2024-04-09 13:43:26 +02:00
s3_lib.c Add support for integrity-only cipher suites for TLS v1.3 2024-05-14 15:39:15 +02:00
s3_msg.c
ssl_asn1.c
ssl_cert_comp.c
ssl_cert_table.h
ssl_cert.c
ssl_ciph.c Move stack of compression methods from libssl to OSSL_LIB_CTX 2024-05-28 08:56:13 +02:00
ssl_conf.c Copyright year updates 2024-04-09 13:43:26 +02:00
ssl_err_legacy.c
ssl_err.c Add reason codes with the correct offset for two alerts 2024-05-14 15:27:17 +02:00
ssl_init.c Move stack of compression methods from libssl to OSSL_LIB_CTX 2024-05-28 08:56:13 +02:00
ssl_lib.c Make conf_diagnostics apply also to the SSL conf errors 2024-05-09 09:20:25 +02:00
ssl_local.h Move stack of compression methods from libssl to OSSL_LIB_CTX 2024-05-28 08:56:13 +02:00
ssl_mcnf.c Set SSL_CONF_FLAG_SHOW_ERRORS when conf_diagnostics is enabled 2024-05-09 09:20:58 +02:00
ssl_rsa_legacy.c
ssl_rsa.c
ssl_sess.c Typo fixes 2024-05-13 11:10:35 +02:00
ssl_stat.c
ssl_txt.c Move stack of compression methods from libssl to OSSL_LIB_CTX 2024-05-28 08:56:13 +02:00
ssl_utst.c
sslerr.h
t1_enc.c Copyright year updates 2024-04-09 13:43:26 +02:00
t1_lib.c Remove SSL_ENC_FLAG_EXPLICIT_IV which is only set and never read. 2024-05-14 15:34:07 +02:00
t1_trce.c Add support for integrity-only cipher suites for TLS v1.3 2024-05-14 15:39:15 +02:00
tls13_enc.c Add support for integrity-only cipher suites for TLS v1.3 2024-05-14 15:39:15 +02:00
tls_depr.c
tls_srp.c