openssl/apps
Benny Baumann aac6ae3774 Avoid unchecked string concatenation
To avoid the issue of overflowing the buffer start while
building up the help string prefix this rewrite of the
string building logic does multiple smaller writes to
opt_printf_stderr. While this is slower it completely
avoids the buffer overflow issue and does not place
any (unchecked) length constraints on the name of passed
options. Instead such long options are gracefully
wrapped onto the next line.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12265)
2022-05-23 10:07:09 +10:00
..
demoSRP Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
include Update copyright year 2022-05-03 13:34:51 +01:00
lib Avoid unchecked string concatenation 2022-05-23 10:07:09 +10:00
asn1parse.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
build.info CMP test server: move apps/{,lib/}cmp_mock_srv.c and apps/{,include/}cmp_mock_srv.h 2021-05-20 16:23:27 +02:00
ca-cert.srl
ca-key.pem
ca-req.pem
ca.c str[n]casecmp => OPENSSL_strncasecmp 2022-04-22 11:34:41 +02:00
CA.pl.in Abstract out policy and extensions in CA.pl 2021-11-16 15:48:08 +00:00
cert.pem
ciphers.c Update copyright year 2022-05-03 13:34:51 +01:00
client.pem
cmp.c Update copyright year 2022-05-03 13:34:51 +01:00
cms.c Update copyright year 2022-05-03 13:34:51 +01:00
crl2pkcs7.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
crl.c Update copyright year 2022-05-03 13:34:51 +01:00
ct_log_list.cnf Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
dgst.c Update copyright year 2022-05-03 13:34:51 +01:00
dhparam.c openssl: dhparam: Print warning if -in argument is ignored 2022-05-04 09:29:17 +02:00
dsa512.pem
dsa1024.pem
dsa-ca.pem
dsa-pca.pem
dsa.c Update copyright year 2022-05-03 13:34:51 +01:00
dsap.pem
dsaparam.c Update copyright year 2022-05-03 13:34:51 +01:00
ec.c Update copyright year 2022-05-03 13:34:51 +01:00
ecparam.c Update copyright year 2022-05-03 13:34:51 +01:00
enc.c Update copyright year 2022-05-03 13:34:51 +01:00
engine.c Update copyright year 2021-05-06 13:03:23 +01:00
errstr.c Check non-option arguments 2020-12-15 11:47:17 +01:00
fipsinstall.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
gendsa.c Update copyright year 2022-05-03 13:34:51 +01:00
genpkey.c Update copyright year 2022-05-03 13:34:51 +01:00
genrsa.c Update copyright year 2022-05-03 13:34:51 +01:00
info.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
insta.ca.crt openssl-cmp.pod.in: Update and extend example using Insta Demo CA 2020-08-04 12:11:46 +02:00
kdf.c kdf: use the app's libctx and property query when searching for algorithms 2021-06-15 18:26:47 +10:00
list.c Update copyright year 2022-05-03 13:34:51 +01:00
mac.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
nseq.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
ocsp.c Update copyright year 2022-05-03 13:34:51 +01:00
openssl-vms.cnf Disclaimer about the default provider activation added to config 2021-08-12 09:59:34 +02:00
openssl.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
openssl.cnf Disclaimer about the default provider activation added to config 2021-08-12 09:59:34 +02:00
passwd.c Update copyright year 2022-05-03 13:34:51 +01:00
pca-cert.srl
pca-key.pem
pca-req.pem
pkcs7.c Update copyright year 2022-05-03 13:34:51 +01:00
pkcs8.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
pkcs12.c Update copyright year 2022-05-03 13:34:51 +01:00
pkey.c Update copyright year 2022-05-03 13:34:51 +01:00
pkeyparam.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
pkeyutl.c Update copyright year 2022-05-03 13:34:51 +01:00
prime.c Update copyright year 2022-05-03 13:34:51 +01:00
privkey.pem
progs.pl Update copyright year 2022-05-03 13:34:51 +01:00
rand.c Update copyright year 2022-05-03 13:34:51 +01:00
rehash.c Update copyright year 2022-05-03 13:34:51 +01:00
req.c Update copyright year 2022-05-03 13:34:51 +01:00
req.pem
rsa8192.pem Fix rsa8192.pem 2020-05-13 06:28:36 +02:00
rsa.c Update copyright year 2022-05-03 13:34:51 +01:00
rsautl.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
s512-key.pem
s512-req.pem
s1024key.pem
s1024req.pem
s_client.c s_client -proxy / -starttls shouldn't be mutually exclusive 2022-05-05 13:36:23 +02:00
s_server.c s_serve: Report an error if init-connection fails without an attempt to read. 2022-05-06 14:57:07 +02:00
s_time.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
server2.pem
server.pem Replace apps/server.pem with certificate with a sha256 signature. 2020-01-25 14:10:40 +01:00
server.srl
sess_id.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
smime.c Update copyright year 2022-05-03 13:34:51 +01:00
speed.c Fix Coverity 1503314 unchecked return value 2022-05-04 17:15:20 +10:00
spkac.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
srp.c openssl srp: make index.txt parsing error more verbose 2021-05-24 14:37:00 +02:00
storeutl.c Update copyright year 2022-05-03 13:34:51 +01:00
testCA.pem
testdsa.h Replace OSSL_PARAM_BLD_free_params() with OSSL_PARAM_free(). 2021-04-12 16:55:30 +10:00
testrsa.h Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
timeouts.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
ts.c Update copyright year 2022-05-03 13:34:51 +01:00
tsget.in convert tabs to spaces in two distributed Perl scripts 2021-09-14 07:21:22 +10:00
verify.c Update copyright year 2022-05-03 13:34:51 +01:00
version.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
vms_decc_init.c VMS: move copy_argc to its own module and make it an aux source 2019-03-05 08:51:09 +01:00
x509.c Update copyright year 2022-05-03 13:34:51 +01:00