openssl/crypto
Matt Caswell 6a009812b2 Check for 0 modulus in BN_MONT_CTX_set
The function BN_MONT_CTX_set was assuming that the modulus was non-zero
and therefore that |mod->top| > 0. In an error situation that may not be
the case and could cause a seg fault.

This is a follow on from CVE-2015-1794.

Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-08-11 19:57:01 +01:00
..
aes RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
asn1 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
bf RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
bio Check dgram_sctp_write() return value. 2015-06-28 18:21:06 +02:00
bn Check for 0 modulus in BN_MONT_CTX_set 2015-08-11 19:57:01 +01:00
buffer More secure storage of key material. 2015-06-23 17:09:35 -04:00
camellia RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
cast RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
cmac Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
cms RT3917: add cleanup on an error path 2015-06-21 17:52:12 -04:00
comp Fix -DZLIB build for opaque COMP types 2015-06-09 12:49:50 -04:00
conf RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
des RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
dh RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
dsa RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
dso Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
ec RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
ecdh RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
ecdsa RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
engine Rewrite crypto/ex_data 2015-07-20 01:16:28 -04:00
err Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
evp RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
hmac Fix ABI break with HMAC 2015-06-12 13:16:09 +01:00
idea RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
include/internal
jpake Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
lhash RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
md2 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
md4 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
md5 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
mdc2 Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
modes Conversion to UTF-8 where needed 2015-07-14 01:10:01 +02:00
objects Add $! to errors, use script basename. 2015-06-23 08:39:52 -04:00
ocsp Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
pem RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
perlasm
pkcs7 PKCS#7: Fix NULL dereference with missing EncryptedContent. 2015-06-11 11:06:31 +01:00
pkcs12 Don't output bogus errors in PKCS12_parse 2015-06-25 04:55:05 +01:00
pqueue Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
rand RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
rc2 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
rc4 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
rc5 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
ripemd RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
rsa RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
seed Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
sha RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
srp Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
stack RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
store Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
threads Cleanup mttest.c : because we no longer use stdio here, don't include it 2015-06-21 21:45:48 +02:00
ts Set error code, no fprintf stderr, on errors. 2015-06-04 18:03:33 -04:00
txt_db RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
ui Fix the update target and remove duplicate file updates 2015-05-22 18:44:33 +02:00
whrlpool Conversion to UTF-8 where needed 2015-07-14 01:10:01 +02:00
x509 RT3999: Remove sub-component version strings 2015-08-10 12:13:32 -04:00
x509v3 Conversion to UTF-8 where needed 2015-07-14 01:10:01 +02:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h
armcap.c
armv4cpuid.pl
c64xpluscpuid.pl
cpt_err.c Rewrite crypto/ex_data 2015-07-20 01:16:28 -04:00
cryptlib.c
crypto-lib.com Remove obsolete key formats. 2015-07-16 01:06:48 -04:00
cversion.c
ebcdic.c
ex_data.c Rewrite crypto/ex_data 2015-07-20 01:16:28 -04:00
fips_err.h
fips_ers.c
ia64cpuid.S
install-crypto.com
lock.c
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
Makefile More secure storage of key material. 2015-06-23 17:09:35 -04:00
mem_clr.c
mem_dbg.c
mem.c More secure storage of key material. 2015-06-23 17:09:35 -04:00
o_dir_test.c
o_dir.c
o_fips.c
o_init.c
o_str.c
o_time.c
opensslconf.h.in Make preprocessor error into real preprocessor error 2015-06-16 13:10:24 +02:00
pariscid.pl
ppc_arch.h
ppccap.c RT3990: Fix #include path. 2015-08-05 22:06:01 -04:00
ppccpuid.pl
s390xcap.c
s390xcpuid.S
sec_mem.c Only define PAGE_SIZE if not already defined. 2015-07-31 20:50:07 +01:00
sparc_arch.h
sparccpuid.S Conversion to UTF-8 where needed 2015-07-14 01:10:01 +02:00
sparcv9cap.c
thr_id.c
uid.c
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl