openssl/crypto
Emilia Kasper 80770da39e X509 time: tighten validation per RFC 5280
- Reject fractional seconds
- Reject offsets
- Check that the date/time digits are in valid range.
- Add documentation for X509_cmp_time

GH issue 2620

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
2017-02-24 17:37:08 +01:00
..
aes Don't call memcpy if len is zero. 2017-02-20 19:17:53 -05:00
aria Implementation of the ARIA cipher as described in RFC 5794. 2017-02-21 11:51:45 +01:00
asn1 Fix potential memory leak in ASN1_TIME_to_generalizedtime() 2017-02-23 17:14:48 -05:00
async Further improvements to ASYNC_WAIT_CTX_clear_fd 2017-02-13 15:29:43 +00:00
bf
bio
blake2 Fix some extra or missing whitespaces... 2017-01-25 09:06:34 +00:00
bn Fix typo in x86_64-mont5.pl CFI directives 2017-02-17 10:32:13 +01:00
buffer
camellia
cast
chacha x86_64 assembly pack: Win64 SEH face-lift. 2017-02-06 08:21:42 +01:00
cmac
cms
comp
conf
ct Fix faulty free 2017-01-29 15:31:01 +01:00
des DES keys are not 7 days long. 2017-02-13 11:50:44 +01:00
dh Better check of DH parameters in TLS data 2017-01-26 10:54:01 +00:00
dsa Style 2017-01-25 09:06:34 +00:00
dso
ec Increase the size of the stack buffer to prevent an overflow. 2017-02-24 00:00:32 +01:00
engine
err
evp Implementation of the ARIA cipher as described in RFC 5794. 2017-02-21 11:51:45 +01:00
hmac
idea
include/internal Implementation of the ARIA cipher as described in RFC 5794. 2017-02-21 11:51:45 +01:00
kdf
lhash
md2
md4
md5 {md5,rc4}/asm/*-x86_64.pl: add CFI annotations. 2017-02-13 14:16:01 +01:00
mdc2
modes Don't call memcpy if len is zero. 2017-02-20 19:17:53 -05:00
objects Implementation of the ARIA cipher as described in RFC 5794. 2017-02-21 11:51:45 +01:00
ocsp
pem
perlasm Fix a few typos 2017-02-14 15:48:51 -05:00
pkcs7
pkcs12 Fix memory leak in pkcs12 -export 2017-02-21 14:47:18 -05:00
poly1305
rand
rc2
rc4 {md5,rc4}/asm/*-x86_64.pl: add CFI annotations. 2017-02-13 14:16:01 +01:00
rc5
ripemd
rsa
seed Use _WIN32 over WIN32 for preprocessor conditional 2017-02-16 08:59:47 -05:00
sha sha/asm/*-x86_64.pl: add CFI annotations. 2017-02-15 15:43:05 +01:00
siphash Add support for parameterized SipHash 2017-02-01 14:14:36 -05:00
srp Prevent OOB in SRP base64 code. 2017-02-21 13:07:13 -05:00
stack
ts
txt_db Fix a few memleaks in TXT_DB. 2017-02-21 14:13:58 -05:00
ui
whrlpool x86_64 assembly pack: Win64 SEH face-lift. 2017-02-06 08:21:42 +01:00
x509 X509 time: tighten validation per RFC 5280 2017-02-24 17:37:08 +01:00
x509v3 Fix a crash with malformed user notice policy numbers 2017-02-05 01:04:39 +01:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h
armcap.c crypto/armcap.c: short-circuit processor capability probe in iOS builds. 2017-02-15 23:16:23 +01:00
armv4cpuid.pl ARMv4 assembly pack: harmonize Thumb-ification of iOS build. 2017-02-15 23:16:01 +01:00
build.info
c64xpluscpuid.pl
cpt_err.c
cryptlib.c Revert "Use memcmp() instead of CRYPTO_memcmp() when fuzzing" 2017-02-20 18:54:39 +01:00
cversion.c
dllmain.c
ebcdic.c
ex_data.c Combined patch against master branch for the following issues: 2017-02-03 20:39:52 +01:00
ia64cpuid.S
init.c
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
mem_clr.c
mem_dbg.c
mem_sec.c Ensure minsize >= sizeof(SH_LIST) 2017-02-21 09:44:50 -05:00
mem.c Removed ugly size_t less than zero check. 2017-02-21 12:30:23 -05:00
mips_arch.h
o_dir.c Fix typo, missing || 2017-02-22 19:51:04 +01:00
o_fips.c
o_fopen.c
o_init.c
o_str.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
o_time.c Remove obsolete comment 2017-02-14 14:52:24 -05:00
pariscid.pl
ppc_arch.h
ppccap.c
ppccpuid.pl
s390xcap.c
s390xcpuid.S
sparc_arch.h
sparccpuid.S
sparcv9cap.c
threads_none.c
threads_pthread.c Grouped data declarations [skip ci] 2017-02-03 13:48:44 +01:00
threads_win.c
uid.c
vms_rms.h
x86_64cpuid.pl crypto/x86_64cpuid.pl: detect if kernel preserves %zmm registers. 2017-02-03 12:21:50 +01:00
x86cpuid.pl