Anatolii Lishchynskyi 34e4a962bc Erase temporary buffer in EVP_PKEY_get_bn_param() ... Function EVP_PKEY_get_bn_param() uses temporary buffer (on stack or heap allocated) to store serialized bignum, but after deserializing it into BIGNUM*, the buffer is not erased and may contain sensitive data. This change makes sure the buffer is erased if it was successfully filled before. Unfortunately, it does not distinguish between public and private key components, and will always erase the buffer. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20639)		2023-04-04 12:05:25 +02:00
..
asymcipher.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
bio_b64.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
bio_enc.c	Fix BIO_f_cipher() flushing	2022-12-22 11:01:06 +01:00
bio_md.c
bio_ok.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
build.info
c_allc.c
c_alld.c
cmeth_lib.c
ctrl_params_translate.c	Coverity 1524597: null pointer dereference	2023-03-30 20:17:12 +02:00
dh_ctrl.c
dh_support.c
digest.c	Add a flag so finalised contexts are not reused	2023-03-15 08:42:59 +11:00
dsa_ctrl.c
e_aes_cbc_hmac_sha1.c
e_aes_cbc_hmac_sha256.c
e_aes.c	crypto: Fix various typos, repeated words, align some spelling to LDP.	2022-10-12 16:55:01 +11:00
e_aria.c	crypto: Fix various typos, repeated words, align some spelling to LDP.	2022-10-12 16:55:01 +11:00
e_bf.c
e_camellia.c
e_cast.c
e_chacha20_poly1305.c	evp: Use functions instead of direct structure field references	2022-08-22 10:14:39 +02:00
e_des3.c
e_des.c
e_idea.c
e_null.c
e_old.c
e_rc2.c
e_rc4_hmac_md5.c
e_rc4.c
e_rc5.c
e_seed.c
e_sm4.c
e_xcbc_d.c
ec_ctrl.c
ec_support.c
encode.c
evp_cnf.c
evp_enc.c	Avoid calling into provider with the same iv_len or key_len	2023-04-03 08:22:28 +10:00
evp_err.c
evp_fetch.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
evp_key.c
evp_lib.c	Fix incomplete checks for EVP_CIPHER_asn1_to_param	2023-01-25 14:27:14 +00:00
evp_local.h	Add OSSL_FUNC_keymgmt_im/export_types function that gets the provider context	2023-02-24 09:53:07 +00:00
evp_pbe.c	Add missing assignment to EVP_get_digestbynid()	2023-03-15 08:33:41 +11:00
evp_pkey.c	Improve the performance of EVP_PKCS82PKEY_ex	2023-03-06 10:53:31 +00:00
evp_rand.c	rand: add set0 calls for the private and public DRBGs	2022-11-02 08:42:46 +11:00
evp_utils.c
exchange.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
kdf_lib.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
kdf_meth.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
kem.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
keymgmt_lib.c	Propagate selection all the way on key export	2022-11-15 12:04:12 +01:00
keymgmt_meth.c	Incorrect null pointer check	2023-03-31 15:09:18 -04:00
legacy_blake2.c
legacy_md2.c
legacy_md4.c
legacy_md5_sha1.c
legacy_md5.c
legacy_mdc2.c
legacy_meth.h
legacy_ripemd.c
legacy_sha.c
legacy_wp.c
m_null.c
m_sigver.c	Add a flag so finalised contexts are not reused	2023-03-15 08:42:59 +11:00
mac_lib.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
mac_meth.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
names.c
p5_crpt2.c	Fix incomplete checks for EVP_CIPHER_asn1_to_param	2023-01-25 14:27:14 +00:00
p5_crpt.c
p_dec.c
p_enc.c
p_legacy.c
p_lib.c	Erase temporary buffer in EVP_PKEY_get_bn_param()	2023-04-04 12:05:25 +02:00
p_open.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
p_seal.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
p_sign.c	Do not fail if ctx dup does not succeed	2023-03-15 08:42:52 +11:00
p_verify.c	Do not fail if ctx dup does not succeed	2023-03-15 08:42:52 +11:00
pbe_scrypt.c
pmeth_check.c
pmeth_gn.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00
pmeth_lib.c	EVP_PKEY_CTX_dup segmentation fault fix	2023-03-27 12:53:25 +02:00
signature.c	Stop raising ERR_R_MALLOC_FAILURE in most places	2022-10-05 14:02:03 +02:00