openssl/crypto/evp
Pauli e0e338c8c5 Fix bug in EVP_CIPHER_CTX_get_iv_length()
Out of range values could possibly be returned due to a lack of range checking.
Very unlikely to be exploitable for our provider because sensible values are
returned for all ciphers.

Also fixed the defaulting code so that the cipher's IV length is returned if
the cipher ctx doesn't support getting.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18875)
2022-08-03 12:25:24 +10:00
..
asymcipher.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
bio_b64.c crypto/evp/bio_b64.c: improve coding style 2022-07-14 07:22:34 +01:00
bio_enc.c
bio_md.c
bio_ok.c
build.info
c_allc.c Update copyright year 2022-05-03 13:34:51 +01:00
c_alld.c
cmeth_lib.c
ctrl_params_translate.c Update copyright year 2022-05-03 13:34:51 +01:00
dh_ctrl.c
dh_support.c
digest.c evp_md: assert digest is provided for algctx reuse 2022-05-08 23:48:34 -07:00
dsa_ctrl.c
e_aes_cbc_hmac_sha1.c Update copyright year 2022-05-03 13:34:51 +01:00
e_aes_cbc_hmac_sha256.c
e_aes.c Fix code format: BLOCK_CIPHER_custom 2022-06-02 15:21:36 +10:00
e_aria.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
e_bf.c
e_camellia.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
e_cast.c
e_chacha20_poly1305.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
e_des3.c Fix Coverity 1201740 & 1201712: uninitialised values 2022-05-08 17:50:04 +10:00
e_des.c Fix Coverity 1201740 & 1201712: uninitialised values 2022-05-08 17:50:04 +10:00
e_idea.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
e_null.c
e_old.c
e_rc2.c
e_rc4_hmac_md5.c
e_rc4.c
e_rc5.c Address coverity 1493382 argument cannot be negative 2021-11-08 08:55:32 +10:00
e_seed.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
e_sm4.c Update copyright year 2022-05-03 13:34:51 +01:00
e_xcbc_d.c
ec_ctrl.c
ec_support.c Update copyright year 2022-05-03 13:34:51 +01:00
encode.c
evp_cnf.c
evp_enc.c Fix check of EVP_CIPHER_CTX_ctrl 2022-05-24 08:57:37 +02:00
evp_err.c
evp_fetch.c "Reserve" the method store when constructing methods 2022-07-20 07:28:17 +01:00
evp_key.c
evp_lib.c Fix bug in EVP_CIPHER_CTX_get_iv_length() 2022-08-03 12:25:24 +10:00
evp_local.h store_result: Add fallback for fetching the keymgmt from the provider of the store 2022-06-28 17:54:56 +02:00
evp_pbe.c Allocate EVP_PBE_CTL with OPENSSL_zalloc. 2022-06-28 17:45:04 +02:00
evp_pkey.c
evp_rand.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00
evp_utils.c
exchange.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00
kdf_lib.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00
kdf_meth.c
kem.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00
keymgmt_lib.c Update copyright year 2022-05-03 13:34:51 +01:00
keymgmt_meth.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00
legacy_blake2.c
legacy_md2.c
legacy_md4.c
legacy_md5_sha1.c
legacy_md5.c
legacy_mdc2.c
legacy_meth.h
legacy_ripemd.c
legacy_sha.c
legacy_wp.c
m_null.c
m_sigver.c Update copyright year 2022-05-03 13:34:51 +01:00
mac_lib.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00
mac_meth.c Fix copyrights 2022-02-03 13:56:38 +01:00
names.c
p5_crpt2.c Update copyright year 2022-05-03 13:34:51 +01:00
p5_crpt.c
p_dec.c Fix possible null pointer dereference of evp_pkey_get_legacy() 2022-06-02 12:06:08 +02:00
p_enc.c Fix possible null pointer dereference of evp_pkey_get_legacy() 2022-06-02 12:06:08 +02:00
p_legacy.c
p_lib.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00
p_open.c Fix the incorrect checks of EVP_CIPHER_CTX_set_key_length 2022-05-27 07:57:43 +02:00
p_seal.c Remove duplicated #include headers 2022-05-04 13:46:10 +10:00
p_sign.c
p_verify.c
pbe_scrypt.c
pmeth_check.c
pmeth_gn.c Update copyright year 2022-05-03 13:34:51 +01:00
pmeth_lib.c int_ctx_new(): Revert extra OPENSSL_init_crypto() call 2022-05-13 08:30:41 +02:00
signature.c evp: make all _is_a functions accept and handle a NULL argument 2022-07-17 17:51:13 +10:00