mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-21 01:15:20 +08:00
Code Issues Packages Projects Releases Wiki Activity
a4cbffcd89
openssl/apps
History
Viliam Lejčík a4cbffcd89 Add NULL check before accessing PKCS7 encrypted algorithm 
Printing content of an invalid test certificate causes application crash, because of NULL dereference:

user@user:~/openssl$ openssl pkcs12 -in test/recipes/80-test_pkcs12_data/bad2.p12 -passin pass: -info
MAC: sha256, Iteration 2048
MAC length: 32, salt length: 8
PKCS7 Encrypted data: Segmentation fault (core dumped)

Added test cases for pkcs12 bad certificates

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23632)
2024-03-25 18:26:24 +01:00
..
demoSRP apps & al : Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:28 +11:00
include Add option SSL_OP_PREFER_NO_DHE_KEX, allowing the server to prefer non-dhe psk key exchange over psk with dhe (config file option PreferNoDHEKEX, server option prefer_no_dhe_kex). 2023-11-24 15:08:04 +00:00
lib s_cb.c: Add missing return value checks 2024-02-22 12:45:59 +01:00
asn1parse.c Harden asn1 oid loader to invalid inputs 2023-12-13 11:10:36 -05:00
build.info CMP test server: move apps/{,lib/}cmp_mock_srv.c and apps/{,include/}cmp_mock_srv.h 2021-05-20 16:23:27 +02:00
ca-cert.srl
ca-key.pem
ca-req.pem
ca.c Copyright year updates 2023-09-07 09:59:15 +01:00
CA.pl.in Abstract out policy and extensions in CA.pl 2021-11-16 15:48:08 +00:00
cert.pem
ciphers.c Check that sk_SSL_CIPHER_value returns non-NULL value. 2022-09-20 18:27:17 +02:00
client.pem
cmp.c apps/cmp: improve -reqin option to read fallback public key from first request message file given 2024-03-06 08:49:28 +01:00
cms.c Fix a possible memleak in cms_main 2023-12-12 19:45:09 +01:00
crl2pkcs7.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
crl.c Update copyright year 2022-05-03 13:34:51 +01:00
ct_log_list.cnf
dgst.c Fix some memory leaks in the openssl app 2023-09-21 14:39:36 +02:00
dhparam.c Copyright year updates 2023-09-28 14:23:29 +01:00
dsa512.pem
dsa1024.pem
dsa-ca.pem
dsa-pca.pem
dsa.c Copyright year updates 2023-09-07 09:59:15 +01:00
dsap.pem
dsaparam.c Fix some memory leaks in the openssl app 2023-09-21 14:39:36 +02:00
ec.c Copyright year updates 2023-09-07 09:59:15 +01:00
ecparam.c Support decode SM2 parameters 2022-08-23 11:08:11 +10:00
enc.c Add appropriate NULL checks in EVP_CIPHER api 2024-01-25 08:27:53 -05:00
engine.c apps/engine: add EC to list of capabilities 2024-02-25 09:10:13 +01:00
errstr.c Fix some invalid use of sscanf 2023-12-12 16:12:32 +00:00
fipsinstall.c Copyright year updates 2023-09-07 09:59:15 +01:00
gendsa.c Copyright year updates 2023-09-28 14:23:29 +01:00
genpkey.c Add missing genpkey -rand support 2024-01-16 11:40:01 +01:00
genrsa.c Copyright year updates 2023-09-28 14:23:29 +01:00
info.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
insta.ca.crt openssl-cmp.pod.in: Update and extend example using Insta Demo CA 2020-08-04 12:11:46 +02:00
kdf.c kdf: use the app's libctx and property query when searching for algorithms 2021-06-15 18:26:47 +10:00
list.c Make 'openssl list' less sensitive for providers without params 2023-12-04 15:12:34 +01:00
mac.c Always use FORMAT_BINARY for infile 2022-09-20 08:18:25 +01:00
nseq.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
ocsp.c Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-vms.cnf Convert jdkTrustedKeyUsage to be a pkcs12 cmd line option 2023-10-20 16:30:43 +01:00
openssl.c APPS: remove duplicate definition of trace_data_stack 2023-09-18 09:06:47 +10:00
openssl.cnf Convert jdkTrustedKeyUsage to be a pkcs12 cmd line option 2023-10-20 16:30:43 +01:00
passwd.c Update copyright year 2022-05-03 13:34:51 +01:00
pca-cert.srl
pca-key.pem
pca-req.pem
pkcs7.c Update copyright year 2022-05-03 13:34:51 +01:00
pkcs8.c Added a 'saltlen' option to the openssl pkcs8 command line app. 2023-09-04 14:15:34 +10:00
pkcs12.c Add NULL check before accessing PKCS7 encrypted algorithm 2024-03-25 18:26:24 +01:00
pkey.c Copyright year updates 2023-09-07 09:59:15 +01:00
pkeyparam.c APPS: pkeyparam: Support setting properties 2022-08-17 09:20:41 +02:00
pkeyutl.c Copyright year updates 2023-09-07 09:59:15 +01:00
prime.c Update copyright year 2022-05-03 13:34:51 +01:00
privkey.pem
progs.pl Copyright year updates 2023-09-28 14:23:29 +01:00
rand.c Augment rand argument parsing to allow scaling 2023-11-13 12:21:34 +01:00
rehash.c Add a missing space in an error message 2024-02-06 12:33:39 +01:00
req.c Fix a possible memory leak in req_main 2024-01-24 11:54:21 +01:00
req.pem
rsa8192.pem Fix rsa8192.pem 2020-05-13 06:28:36 +02:00
rsa.c Copyright year updates 2023-09-07 09:59:15 +01:00
rsautl.c Copyright year updates 2023-09-07 09:59:15 +01:00
s512-key.pem
s512-req.pem
s1024key.pem
s1024req.pem
s_client.c Don't error if s_client receives exactly BUFSIZZ data 2023-11-01 10:20:19 +00:00
s_server.c Use the untrusted certificate chain to create a valid certificate ID for OCSP_request 2024-03-12 14:02:13 +01:00
s_time.c Remove receiving of unused return value 2024-01-15 17:19:34 +01:00
server2.pem
server.pem Replace apps/server.pem with certificate with a sha256 signature. 2020-01-25 14:10:40 +01:00
server.srl
sess_id.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
smime.c Fix a possible memleak in smime_main 2023-12-12 19:47:07 +01:00
speed.c openssl-speed: support KMAC128 & KMAC256, refactor mac setup/teardown 2023-11-24 13:58:14 +01:00
spkac.c Copyright year updates 2023-09-07 09:59:15 +01:00
srp.c openssl srp: make index.txt parsing error more verbose 2021-05-24 14:37:00 +02:00
storeutl.c Fix openssl storeutl to allow serial + issuer 2022-12-14 09:33:25 +01:00
testCA.pem
testdsa.h Replace OSSL_PARAM_BLD_free_params() with OSSL_PARAM_free(). 2021-04-12 16:55:30 +10:00
testrsa.h
timeouts.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
ts.c Copyright year updates 2023-09-07 09:59:15 +01:00
tsget.in convert tabs to spaces in two distributed Perl scripts 2021-09-14 07:21:22 +10:00
verify.c apps & al : Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:28 +11:00
version.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
vms_decc_init.c
x509.c apps/x509.c: No warning reading from stdin if redirected 2024-03-15 09:07:51 +01:00