Mirrors/openssl
0
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2026-01-18 17:11:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
b6aed64e47b831305c05a4132e7c7f21257ea663
openssl/crypto
History
Neil Horman b6aed64e47 Fix overflow in EVP_EncodeFinal 
https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1677829

With recent changes, evp_encodeblock_int may return a negative value,
which EVP_EncodeFinal does not anticipate.  As the latter sets out[ret]
to "\0" where ret is the return value of evp_encodeblock_int, we may
underflow the array index and access invalid memory locations.

Only update the output buffer if the return value is greater or equal to
zero.

Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29525)
2026-01-04 17:51:56 -05:00
..
aes
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
aria
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
asn1
Remove the ASN1_STRING_FLAG_X509_TIME flag
2026-01-03 09:27:31 -05:00
async
Fix silent failure in ASYNC_start_job when size is 0
2025-12-18 17:34:42 +01:00
bf
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
bio
bss_acpt.c: Free strings returned from previous BIO_ADDR_hostname_string() calls
2025-12-31 13:50:06 +01:00
bn
This PR performs further optimization based on the already merged "Implement Montgomery multiplication assembly optimization for RV64GC" (#28012).
2025-12-30 08:22:46 -05:00
buffer
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
camellia
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
cast
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
chacha
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
cmac
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
cmp
Add new public API for checking certificate times.
2025-12-18 13:34:58 -05:00
cms
Constify return value of X509_get_X509_PUBKEY()
2025-12-23 08:16:37 -05:00
comp
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
conf
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
crmf
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ct
Constify return value of X509_get_X509_PUBKEY()
2025-12-23 08:16:37 -05:00
des
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
dh
Clean up some final vistigial remnants of EVP_PKEY_METHOD
2025-12-18 10:57:39 +00:00
dsa
Clean up some final vistigial remnants of EVP_PKEY_METHOD
2025-12-18 10:57:39 +00:00
dso
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ec
Clean up some final vistigial remnants of EVP_PKEY_METHOD
2025-12-18 10:57:39 +00:00
encode_decode
New -encopt option for pkey(1) and genpkey(1)
2025-12-17 13:40:17 +01:00
err
Rename SSL3 error codes to TLS equivalents
2025-12-23 10:54:08 -05:00
ess
Missed a spot!
2025-12-17 10:19:43 -05:00
evp
Fix overflow in EVP_EncodeFinal
2026-01-04 17:51:56 -05:00
ffc
Clean up some final vistigial remnants of EVP_PKEY_METHOD
2025-12-18 10:57:39 +00:00
hashtable
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
hmac
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
hpke
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
http
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
idea
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
kdf
…
lhash
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
lms
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
md2
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
md4
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
md5
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
mdc2
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ml_dsa
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ml_kem
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
modes
Fix register save/restore issue in ppc
2025-12-31 16:38:21 -05:00
objects
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ocsp
Constify the return value of X509_get0_pubkey_bitstr()
2025-12-23 08:06:00 -05:00
pem
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
perlasm
SM4-CBC performance improvement on RISC-V
2025-12-31 13:46:34 +01:00
pkcs7
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
pkcs12
Check return code of UTF8_putc
2025-12-18 11:23:09 +01:00
poly1305
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
property
method store performance improvements
2025-12-17 12:29:17 +01:00
rand
Disable clang-format around this macro
2025-12-09 07:01:47 -07:00
rc2
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
rc4
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
rc5
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ripemd
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
rsa
Remove unused SSLv3 specific error codes
2025-12-23 10:54:08 -05:00
seed
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
sha
SHA512 performance optimized by RISCV RVV
2025-12-23 14:50:26 +11:00
siphash
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
slh_dsa
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
sm2
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
sm3
SM3: Performance optimized with RISC-V Vector Crypto
2025-12-31 13:43:19 +01:00
sm4
SM4-CBC performance improvement on RISC-V
2025-12-31 13:46:34 +01:00
srp
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
stack
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
store
Missed a spot!
2025-12-17 10:19:43 -05:00
thread
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ts
Add a few more ASN.1 related StatementMacros
2025-12-17 10:19:43 -05:00
txt_db
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ui
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
whrlpool
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
x509
Constify return value of X509_get_X509_PUBKEY()
2025-12-23 08:16:37 -05:00
aligned_alloc.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
alphacpuid.pl
Copyright year updates
2025-09-02 13:05:45 +00:00
arm64cpuid.pl
crypto/poly1305: Add SVE2 vector-length agnostic implementation.
2025-12-02 08:04:24 +11:00
arm_arch.h
Fix error in PAC/BTI AArch64 build
2025-12-17 13:17:09 +01:00
armcap.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
armv4cpuid.pl
Copyright year updates
2025-09-02 13:05:45 +00:00
array_alloc.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
asn1_dsa.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
bsearch.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
build.info
Remove crypto/engine dir.
2025-12-04 07:32:18 -05:00
c64xpluscpuid.pl
Copyright year updates
2025-09-02 13:05:45 +00:00
comp_methods.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
context.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
core_algorithm.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
core_fetch.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
core_namemap.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
cpt_err.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
cpuid.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
cryptlib.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ctype.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
cversion.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
defaults.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
der_writer.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
deterministic_nonce.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
dllmain.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ebcdic.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ex_data.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
getenv.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ia64cpuid.S
Copyright year updates
2025-09-02 13:05:45 +00:00
indicator_core.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
info.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
init.c
Update NEWS.md
2025-12-19 12:06:38 -05:00
initthread.c
Update NEWS.md
2025-12-19 12:06:38 -05:00
loongarch64cpuid.pl
Copyright year updates
2025-03-12 13:35:59 +00:00
loongarch_arch.h
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
loongarchcap.c
Copyright year updates
2025-09-02 13:05:45 +00:00
LPdir_nyi.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
LPdir_unix.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
LPdir_vms.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
LPdir_win32.c
Disable clang format around .c includes
2025-12-03 14:40:56 +01:00
LPdir_win.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
LPdir_wince.c
Disable clang format around .c includes
2025-12-03 14:40:56 +01:00
mem_clr.c
…
mem_sec.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
mem.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
mips_arch.h
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
o_dir.c
Disable clang format around .c includes
2025-12-03 14:40:56 +01:00
o_fopen.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
o_init.c
Update copyright year
2022-05-03 13:34:51 +01:00
o_str.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
packet.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
param_build_set.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
param_build.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
params_dup.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
params_from_text.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
params.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
pariscid.pl
Copyright year updates
2025-09-02 13:05:45 +00:00
passphrase.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ppccap.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ppccpuid.pl
Copyright year updates
2025-09-02 13:05:45 +00:00
provider_child.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
provider_conf.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
provider_core.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
provider_local.h
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
provider_predefined.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
provider.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
punycode.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
quic_vlint.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
rcu_internal.h
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
README-sparse_array.md
Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md files
2020-07-05 11:29:43 +02:00
riscv32cpuid.pl
RISC-V: Use address for vlenb CSR
2025-09-09 11:18:42 +02:00
riscv64cpuid.pl
RISC-V: Use address for vlenb CSR
2025-09-09 11:18:42 +02:00
riscvcap.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
s390x_arch.h
Update NEWS.md
2025-12-19 12:06:38 -05:00
s390xcap.c
Update NEWS.md
2025-12-19 12:06:38 -05:00
s390xcpuid.pl
s390x: Return condition code of kdsa instruction
2025-12-03 14:32:07 +01:00
self_test_core.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
sleep.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
sparccpuid.S
Copyright year updates
2025-09-02 13:05:45 +00:00
sparcv9cap.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
sparse_array.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
ssl_err.c
Rename SSL3 error codes to TLS equivalents
2025-12-23 10:54:08 -05:00
sslerr.h
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
threads_common.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
threads_lib.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
threads_none.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
threads_pthread.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
threads_win.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
time.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
trace.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
uid.c
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
vms_rms.h
4.0-POST-CLANG-FORMAT-WEBKIT
2025-12-09 00:28:19 -07:00
x86_64cpuid.pl
Copyright year updates
2025-09-02 13:05:45 +00:00
x86cpuid.pl
Copyright year updates
2025-09-02 13:05:45 +00:00