openssl/ssl
Matt Caswell 1f8a8c1de9 Fix a use-after-free in qrx_proces_pkt
When calling qrx_relocate_buffer, both the rxe and the pointer to the token
may be changing locations. We have to use a temporary copy of the token
pointer to avoid referencing the old location of the rxe.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22368)
2023-10-23 10:08:12 +01:00
..
quic Fix a use-after-free in qrx_proces_pkt 2023-10-23 10:08:12 +01:00
record Pass the dtls record version to the record layer msg_callback function. 2023-10-04 12:56:53 +02:00
statem Ignore a bad signature in a CertificateVerify message while fuzzing 2023-10-23 10:08:12 +01:00
bio_ssl.c Copyright year updates 2023-09-07 09:59:15 +01:00
build.info Revise build.info 2023-03-30 11:14:17 +01:00
d1_lib.c Print record version for DTLSv1_listen() 2023-10-04 12:56:53 +02:00
d1_msg.c Copyright year updates 2023-09-07 09:59:15 +01:00
d1_srtp.c Copyright year updates 2023-09-07 09:59:15 +01:00
event_queue.c Remove a spurious inclusion of the sparse array header file 2023-09-25 07:45:32 +10:00
methods.c
pqueue.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
priority_queue.c Copyright year updates 2023-09-07 09:59:15 +01:00
s3_enc.c Copyright year updates 2023-09-07 09:59:15 +01:00
s3_lib.c Fix the SSL_CIPHER_find() function when used with a QCSO 2023-09-12 15:29:00 +02:00
s3_msg.c Resolve a TODO in ssl3_dispatch_alert 2022-11-14 10:14:41 +01:00
ssl_asn1.c RFC7250 (RPK) support 2023-03-28 13:49:54 -04:00
ssl_cert_comp.c Copyright year updates 2023-09-07 09:59:15 +01:00
ssl_cert_table.h Copyright year updates 2023-09-07 09:59:15 +01:00
ssl_cert.c tls: update to structure based atomics 2023-07-01 21:18:25 +10:00
ssl_ciph.c "foo * bar" should be "foo *bar" 2023-09-11 10:15:30 +02:00
ssl_conf.c "foo * bar" should be "foo *bar" 2023-09-11 10:15:30 +02:00
ssl_err_legacy.c
ssl_err.c QUIC APL: Implement backpressure on stream creation 2023-08-25 15:10:43 +02:00
ssl_init.c Copyright year updates 2023-09-28 14:23:29 +01:00
ssl_lib.c QUIC: Add handling of SSL_get_shutdown() 2023-10-20 16:29:28 +01:00
ssl_local.h Fix the SSL_CIPHER_find() function when used with a QCSO 2023-09-12 15:29:00 +02:00
ssl_mcnf.c
ssl_rsa_legacy.c
ssl_rsa.c Copyright year updates 2023-09-07 09:59:15 +01:00
ssl_sess.c fix memory allocation and reference counting issues 2023-07-05 08:34:00 +10:00
ssl_stat.c Add support for compressed certificates (RFC8879) 2022-10-18 09:30:22 -04:00
ssl_txt.c Cast values to match printf format strings. 2022-11-14 07:47:53 +00:00
ssl_utst.c Remove the old buffer management code 2022-10-20 14:39:33 +01:00
sslerr.h Provide better errors for some QUIC failures 2023-03-20 09:35:38 +11:00
t1_enc.c Copyright year updates 2023-09-07 09:59:15 +01:00
t1_lib.c Minor fixes 2023-07-05 09:03:04 +10:00
t1_trce.c Fix an SSL_trace bug 2023-05-24 12:18:33 +01:00
tls13_enc.c Copyright year updates 2023-09-07 09:59:15 +01:00
tls_depr.c SSL object refactoring using SSL_CONNECTION object 2022-07-28 10:04:28 +01:00
tls_srp.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00