openssl/crypto/cmp
Matt Caswell 95f8c1e142 Fix CMP code to not assume NUL terminated strings
ASN.1 strings may not be NUL terminated. Don't assume they are.

CVE-2021-3712

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: David Benjamin <davidben@google.com>
2021-08-24 14:22:06 +01:00
..
build.info
cmp_asn.c Update copyright year 2021-06-17 13:24:59 +01:00
cmp_client.c OSSL_CRMF_{CERTTEMPLATE,CERTID}_get0_serialNumber(): Make result const for consistency 2021-06-30 10:38:23 +02:00
cmp_ctx.c cmp: remove TODOs 2021-06-02 16:30:15 +10:00
cmp_err.c CMP: Add missing getter functions to CRMF API and CMP API 2021-06-30 10:38:23 +02:00
cmp_hdr.c Fix CMP code to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
cmp_http.c Use <> for #include openssl/xxx 2021-05-27 09:56:41 +10:00
cmp_local.h Fix CMP code to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
cmp_msg.c Fix CMP code to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
cmp_protect.c cmp: remove TODOs 2021-06-02 16:30:15 +10:00
cmp_server.c OSSL_CRMF_{CERTTEMPLATE,CERTID}_get0_serialNumber(): Make result const for consistency 2021-06-30 10:38:23 +02:00
cmp_status.c Fix CMP code to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
cmp_util.c Fix CMP code to not assume NUL terminated strings 2021-08-24 14:22:06 +01:00
cmp_vfy.c CMP: Add missing getter functions to CRMF API and CMP API 2021-06-30 10:38:23 +02:00