Dr. Stephen Henson 731f431497 Add heartbeat extension bounds check. ... A missing bounds check in the handling of the TLS heartbeat extension can be used to reveal up to 64k of memory to a connected client or server. Thanks for Neel Mehta of Google Security for discovering this bug and to Adam Langley <agl@chromium.org> and Bodo Moeller <bmoeller@acm.org> for preparing the fix (CVE-2014-0160) (cherry picked from commit 96db9023b8)		2014-04-07 19:44:38 +01:00
..
.cvsignore
bio_ssl.c
d1_both.c	Add heartbeat extension bounds check.	2014-04-07 19:44:38 +01:00
d1_clnt.c	DTLS/SCTP Finished Auth Bug	2013-11-01 21:41:52 +00:00
d1_enc.c	misspellings fixes by https://github.com/vlajos/misspell_fixer	2013-09-05 21:39:42 +01:00
d1_lib.c	bss_dgram.c,d1_lib.c: make it compile with mingw.	2014-03-06 14:04:56 +01:00
d1_meth.c	Dual DTLS version methods.	2013-04-09 14:02:48 +01:00
d1_pkt.c	DTLS version usage fixes.	2013-09-17 18:55:41 +01:00
d1_srtp.c
d1_srvr.c	use SSL_kDHE throughout instead of SSL_kEDH	2014-01-09 15:43:28 +00:00
dtls1.h	Dual DTLS version methods.	2013-04-09 14:02:48 +01:00
install-ssl.com
kssl_lcl.h
kssl.c
kssl.h	Fix for WIN32 builds with KRB5	2014-02-26 15:33:11 +00:00
Makefile	make depend	2014-02-20 18:48:56 +00:00
s2_clnt.c	Security framework.	2014-03-28 14:56:30 +00:00
s2_enc.c	Experimental encrypt-then-mac support.	2013-09-08 13:14:03 +01:00
s2_lib.c
s2_meth.c
s2_pkt.c
s2_srvr.c	Security framework.	2014-03-28 14:56:30 +00:00
s3_both.c	Security framework.	2014-03-28 14:56:30 +00:00
s3_cbc.c	misspellings fixes by https://github.com/vlajos/misspell_fixer	2013-09-05 21:39:42 +01:00
s3_clnt.c	Security framework.	2014-03-28 14:56:30 +00:00
s3_enc.c	Experimental encrypt-then-mac support.	2013-09-08 13:14:03 +01:00
s3_lib.c	Security framework.	2014-03-28 14:56:30 +00:00
s3_meth.c
s3_pkt.c	ssl/s3_pkt.c: detect RAND_bytes error in multi-block.	2014-02-14 17:43:31 +01:00
s3_srvr.c	Security framework.	2014-03-28 14:56:30 +00:00
s23_clnt.c	Security framework.	2014-03-28 14:56:30 +00:00
s23_lib.c
s23_meth.c
s23_pkt.c
s23_srvr.c	Security framework.	2014-03-28 14:56:30 +00:00
srtp.h
ssl2.h
ssl3.h	Update custom TLS extension and supplemental data 'generate' callbacks to support sending an alert.	2014-02-05 18:25:46 +00:00
ssl23.h
ssl_algs.c	Add AES-SHA256 stitch.	2013-05-13 22:49:58 +02:00
ssl_asn1.c
ssl_cert.c	For more than 160 bits of security disable SHA1 HMAC	2014-04-05 13:39:35 +01:00
ssl_ciph.c	Set security level in cipher string.	2014-03-28 14:56:43 +00:00
ssl_conf.c	Add -no_resumption_on_reneg to SSL_CONF.	2014-03-27 16:12:40 +00:00
ssl_err2.c
ssl_err.c	Security framework.	2014-03-28 14:56:30 +00:00
ssl_lib.c	Security framework.	2014-03-28 14:56:30 +00:00
ssl_locl.h	Security framework.	2014-03-28 14:56:30 +00:00
ssl_rsa.c	Security framework.	2014-03-28 14:56:30 +00:00
ssl_sess.c	Add callbacks supporting generation and retrieval of supplemental data entries, facilitating RFC 5878 (TLS auth extensions)	2013-09-06 13:59:13 +01:00
ssl_stat.c	Add callbacks supporting generation and retrieval of supplemental data entries, facilitating RFC 5878 (TLS auth extensions)	2013-09-06 13:59:13 +01:00
ssl_task.c
ssl_txt.c	Experimental encrypt-then-mac support.	2013-09-08 13:14:03 +01:00
ssl-lib.com
ssl.h	Security framework.	2014-03-28 14:56:30 +00:00
ssltest.c	Set security level to zero is ssltest	2014-03-28 14:56:43 +00:00
t1_clnt.c	Use appropriate versions of SSL3_ENC_METHOD	2013-03-18 14:53:59 +00:00
t1_enc.c	ssl/t1_enc.c: check EVP_MD_CTX_copy return value.	2014-02-25 22:21:54 +01:00
t1_lib.c	Add heartbeat extension bounds check.	2014-04-07 19:44:38 +01:00
t1_meth.c	Use appropriate versions of SSL3_ENC_METHOD	2013-03-18 14:53:59 +00:00
t1_reneg.c
t1_srvr.c	Use appropriate versions of SSL3_ENC_METHOD	2013-03-18 14:53:59 +00:00
t1_trce.c	use SSL_kDHE throughout instead of SSL_kEDH	2014-01-09 15:43:28 +00:00
tls1.h	Set TLS padding extension value.	2014-04-05 20:43:54 +01:00
tls_srp.c