mirror of
https://github.com/openssl/openssl.git
synced 2025-03-01 19:28:10 +08:00
The ClientHello processing is insufficiently rigorous in its checks to make sure that we don't read past the end of the message. This does not have security implications due to the size of the underlying buffer - but still needs to be fixed. With thanks to Qinghao Tang for reporting this issue. Reviewed-by: Rich Salz <rsalz@openssl.org> |
||
---|---|---|
.. | ||
record | ||
bio_ssl.c | ||
d1_both.c | ||
d1_clnt.c | ||
d1_lib.c | ||
d1_meth.c | ||
d1_msg.c | ||
d1_srtp.c | ||
d1_srvr.c | ||
install-ssl.com | ||
kssl_lcl.h | ||
kssl.c | ||
Makefile | ||
s3_both.c | ||
s3_cbc.c | ||
s3_clnt.c | ||
s3_enc.c | ||
s3_lib.c | ||
s3_meth.c | ||
s3_msg.c | ||
s3_srvr.c | ||
s23_clnt.c | ||
s23_lib.c | ||
s23_meth.c | ||
s23_srvr.c | ||
ssl_algs.c | ||
ssl_asn1.c | ||
ssl_cert.c | ||
ssl_ciph.c | ||
ssl_conf.c | ||
ssl_err2.c | ||
ssl_err.c | ||
ssl_lib.c | ||
ssl_locl.h | ||
ssl_rsa.c | ||
ssl_sess.c | ||
ssl_stat.c | ||
ssl_txt.c | ||
ssl_utst.c | ||
ssl-lib.com | ||
t1_clnt.c | ||
t1_enc.c | ||
t1_ext.c | ||
t1_lib.c | ||
t1_meth.c | ||
t1_reneg.c | ||
t1_srvr.c | ||
t1_trce.c | ||
tls_srp.c |