Neil Horman a552c23c65 Harden asn1 oid loader to invalid inputs ... In the event that a config file contains this sequence: ======= openssl_conf = openssl_init config_diagnostics = 1 [openssl_init] oid_section = oids [oids] testoid1 = 1.2.3.4.1 testoid2 = A Very Long OID Name, 1.2.3.4.2 testoid3 = ,1.2.3.4.3 ====== The leading comma in testoid3 can cause a heap buffer overflow, as the parsing code will move the string pointer back 1 character, thereby pointing to an invalid memory space correct the parser to detect this condition and handle it by treating it as if the comma doesn't exist (i.e. an empty long oid name) Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22957)		2023-12-13 11:10:36 -05:00
..
a_bitstr.c	Copyright year updates	2023-09-07 09:59:15 +01:00
a_d2i_fp.c
a_digest.c
a_dup.c
a_gentm.c
a_i2d_fp.c
a_int.c
a_mbstr.c
a_object.c
a_octet.c
a_print.c
a_sign.c
a_strex.c
a_strnid.c	Copyright year updates	2023-09-07 09:59:15 +01:00
a_time.c	Copyright year updates	2023-09-07 09:59:15 +01:00
a_type.c
a_utctm.c
a_utf8.c
a_verify.c	Copyright year updates	2023-09-07 09:59:15 +01:00
ameth_lib.c
asn1_err.c
asn1_gen.c	Do not include crypto/asn1.h from internal/cryptlib.h	2023-10-19 10:15:56 +02:00
asn1_item_list.c
asn1_item_list.h
asn1_lib.c
asn1_local.h
asn1_parse.c	Copyright year updates	2023-09-07 09:59:15 +01:00
asn_mime.c	Copyright year updates	2023-09-07 09:59:15 +01:00
asn_moid.c	Harden asn1 oid loader to invalid inputs	2023-12-13 11:10:36 -05:00
asn_mstbl.c
asn_pack.c	Copyright year updates	2023-09-07 09:59:15 +01:00
bio_asn1.c
bio_ndef.c	Copyright year updates	2023-09-07 09:59:15 +01:00
build.info
charmap.h
charmap.pl
d2i_param.c
d2i_pr.c	Copyright year updates	2023-09-07 09:59:15 +01:00
d2i_pu.c
evp_asn1.c
f_int.c
f_string.c
i2d_evp.c	Copyright year updates	2023-09-07 09:59:15 +01:00
n_pkey.c
nsseq.c
p5_pbe.c	Copyright year updates	2023-09-07 09:59:15 +01:00
p5_pbev2.c	Copyright year updates	2023-09-07 09:59:15 +01:00
p5_scrypt.c	Copyright year updates	2023-09-07 09:59:15 +01:00
p8_pkey.c
standard_methods.h	Copyright year updates	2023-09-07 09:59:15 +01:00
t_bitst.c
t_pkey.c
t_spki.c
tasn_dec.c
tasn_enc.c
tasn_fre.c
tasn_new.c
tasn_prn.c
tasn_scn.c
tasn_typ.c
tasn_utl.c	Copyright year updates	2023-09-07 09:59:15 +01:00
tbl_standard.h
x_algor.c
x_bignum.c
x_info.c
x_int64.c
x_long.c
x_pkey.c
x_sig.c
x_spki.c
x_val.c