Manuel Pégourié-Gonnard 9b75305d6a Fix potential buffer overflow in mpi_read_string() ... Found by Guido Vranken. Two possible integer overflows (during << 2 or addition in BITS_TO_LIMB()) could result in far too few memory to be allocated, then overflowing the buffer in the subsequent for loop. Both integer overflows happen when slen is close to or greater than SIZE_T_MAX >> 2 (ie 2^30 on a 32 bit system). Note: one could also avoid those overflows by changing BITS_TO_LIMB(s << 2) to CHARS_TO_LIMB(s >> 1) but the solution implemented looks more robust with respect to future code changes.		2015-10-01 16:59:55 +02:00
..
.gitignore	Added proper gitignores for linux compilation	2012-11-17 00:04:49 +01:00
aes.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
arc4.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
asn1parse.c	Fix potential unintended sign extension	2015-04-23 10:55:04 +02:00
asn1write.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
base64.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
bignum.c	Fix potential buffer overflow in mpi_read_string()	2015-10-01 16:59:55 +02:00
blowfish.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
camellia.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
certs.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
cipher_wrap.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
cipher.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
CMakeLists.txt	Bump version to 1.2.15	2015-09-17 11:55:25 +02:00
ctr_drbg.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
debug.c	Fix thread-safety issue in debug.c	2015-06-29 18:54:28 +02:00
des.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
dhm.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
entropy_poll.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
entropy.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
error.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
gcm.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
havege.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
Makefile	Fix missing -static-libgcc for dlls	2015-08-10 16:41:14 +02:00
md2.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
md4.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
md5.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
md_wrap.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
md.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
net.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
padlock.c	Fix bug in Via Padlock support	2015-04-23 10:55:05 +02:00
pbkdf2.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
pem.c	Accept a trailing space at end of PEM lines	2015-08-10 16:43:28 +02:00
pkcs5.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
pkcs11.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
pkcs12.c	Fix stack buffer overflow in pkcs12	2015-10-01 16:57:47 +02:00
rsa.c	Add counter-measure against RSA-CRT attack	2015-09-09 12:36:49 +02:00
sha1.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
sha2.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
sha4.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
ssl_cache.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
ssl_cli.c	Fix possible client crash on API misuse	2015-09-03 11:01:37 +02:00
ssl_srv.c	Fix version-major intolerance again	2015-04-10 14:12:14 +02:00
ssl_tls.c	Up default server DH params to 2048 bits	2015-07-03 17:43:06 +02:00
timing.c	Fix hardclock with some versions of mingw64	2015-04-23 10:55:05 +02:00
version.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
x509parse.c	Fix invalid memory read in x509_get_sig()	2015-04-23 10:55:05 +02:00
x509write.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
xtea.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00