| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
Fix some memory leaks in the openssl app In some error cases the normal cleanup did not happen, but instead an exit(1) which caused some memory leaks, as reported in #22049. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/22055) (cherry picked from commit 8c040c086ca11a519975c58961a5dc933aa6524a) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
Fix coverity-1604661 Coverity called out an error in asn1parse_main, indicating that the for(;;) loop which repeatedly reads from a bio and updates the length value num, may overflow said value prior to exiting the loop. We could probably call this a false positive, but on very large PEM file, I suppose it could happen, so just add a check to ensure that num doesn't go from a large positive to a large negative value inside the loop Fixes openssl/private#571 Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24910) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 1 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
Fix a possible memory leak in make_receipt_request When the CMS_ReceiptRequest cannot be created, the rct_to and rct_from may be leaked. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22742) (cherry picked from commit bed7a878107818c297301c6602013d364b266c67) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
Fix some memory leaks in the openssl app In some error cases the normal cleanup did not happen, but instead an exit(1) which caused some memory leaks, as reported in #22049. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/22055) (cherry picked from commit 8c040c086ca11a519975c58961a5dc933aa6524a) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
Fix some memory leaks in the openssl app In some error cases the normal cleanup did not happen, but instead an exit(1) which caused some memory leaks, as reported in #22049. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/22055) (cherry picked from commit 8c040c086ca11a519975c58961a5dc933aa6524a) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
Fix some memory leaks in the openssl app In some error cases the normal cleanup did not happen, but instead an exit(1) which caused some memory leaks, as reported in #22049. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/22055) (cherry picked from commit 8c040c086ca11a519975c58961a5dc933aa6524a) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
apps/enc.c: avoid signed integer overflow on bufsize assignment The calculated option value, while being long-typed, is not checked for fitting into int-sized bufsize. Avoid overflow by throwing error if it is bigger than INT_MAX and document that behaviour. Fixes: 7e1b7485706c "Big apps cleanup (option-parsing, etc)" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665149 References: https://github.com/openssl/project/issues/1362 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28408) (cherry picked from commit 98cb959999e4db9be524a972dccaf6b0c8167431) Signed-off-by: jing-wang177 <wangjing561@huawei.com> | 10 个月前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
Fix some memory leaks in the openssl app In some error cases the normal cleanup did not happen, but instead an exit(1) which caused some memory leaks, as reported in #22049. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/22055) (cherry picked from commit 8c040c086ca11a519975c58961a5dc933aa6524a) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
Fix some memory leaks in the openssl app In some error cases the normal cleanup did not happen, but instead an exit(1) which caused some memory leaks, as reported in #22049. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/22055) (cherry picked from commit 8c040c086ca11a519975c58961a5dc933aa6524a) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
Fix some memory leaks in the openssl app In some error cases the normal cleanup did not happen, but instead an exit(1) which caused some memory leaks, as reported in #22049. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/22055) (cherry picked from commit 8c040c086ca11a519975c58961a5dc933aa6524a) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
apps/ocsp.c: avoid using NULL resp There are some code paths where resp is used without a previous check for being non-NULL (specifically, OCSP_response_create() can return NULL, and do_responder() can return -1, that would also lead to resp being NULL). Avoid hitting NULL dereferences by wrapping the code that uses resp in "if (resp != NULL)". Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665155 References: https://github.com/openssl/project/issues/1362 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28408) (cherry picked from commit e59fa197bafa0dbbff33ce2dee772539a6e70e9e) Signed-off-by: jing-wang177 <wangjing561@huawei.com> | 10 个月前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
apps/openssl.c: Add OPENSSL_free() to avoid memory leak Add OPENSSL_free() to release trace_data if trace_data is not NULL but other errors occur to avoid memory leak. Fixes: 682b444f8a ("apps/openssl.c: Adapt to enable tracing output") Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27911) Signed-off-by: lichaochen <lichaochen@huawei.com> | 1 年前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
Add NULL check before accessing PKCS7 encrypted algorithm Printing content of an invalid test certificate causes application crash, because of NULL dereference: user@user:~/openssl$ openssl pkcs12 -in test/recipes/80-test_pkcs12_data/bad2.p12 -passin pass: -info MAC: sha256, Iteration 2048 MAC length: 32, salt length: 8 PKCS7 Encrypted data: Segmentation fault (core dumped) Added test cases for pkcs12 bad certificates Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23632) (cherry picked from commit a4cbffcd8998180b98bb9f7ce6065ed37d079d8b) Signed-off-by: zxz*3 <zhangxiaozan1@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
apps/pkeyutl.c: Add OPENSSL_free() to avoid a memory leak If EVP_PKEY_CTX_ctrl_str() fails, the code jumps to 'end' label without freeing passwd, causing a memory leak. Fixes: 9d1bf5f7de ("Add option to read pkeyopts interactively") Signed-off-by: zzh <zhangzhaohua2@huawei.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27470) (cherry picked from commit 0dc6ea55a13dbe27af234b5328527d0a31ae68eb) Change-Id: I1566727efa8accb8641d7ad64a6703a269b5a487 | 1 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
Fix a possible memory leak in req_main if the private key is output to stdout using the HARNESS_OSSL_PREFIX, out is a stack of BIOs and must therefore free'd using BIO_free_all. Steps to reproduce: $ HARNESS_OSSL_PREFIX=x OPENSSL_CONF=apps/openssl.cnf util/shlib_wrap.sh apps/openssl req -new -keyout - -passout pass: </dev/null [...] Direct leak of 128 byte(s) in 1 object(s) allocated from: #0 0x7f6f692b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69 #1 0x7f6f686eda00 in CRYPTO_malloc crypto/mem.c:202 #2 0x7f6f686edba0 in CRYPTO_zalloc crypto/mem.c:222 #3 0x7f6f68471bdf in BIO_new_ex crypto/bio/bio_lib.c:83 #4 0x7f6f68491a8f in BIO_new_fp crypto/bio/bss_file.c:95 #5 0x555c5f58b378 in dup_bio_out apps/lib/apps.c:3014 #6 0x555c5f58f9ac in bio_open_default_ apps/lib/apps.c:3175 #7 0x555c5f58f9ac in bio_open_default apps/lib/apps.c:3203 #8 0x555c5f528537 in req_main apps/req.c:683 #9 0x555c5f50e315 in do_cmd apps/openssl.c:426 #10 0x555c5f4c5575 in main apps/openssl.c:307 #11 0x7f6f680461c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58 SUMMARY: AddressSanitizer: 128 byte(s) leaked in 1 allocation(s). Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23365) (cherry picked from commit ff78d94b131d7bb3b761509d3ce0dd864b1420e3) Signed-off-by: hhhFun <fanghaojie@huawei.com> | 2 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
Ensure ASN1 types are checked before use. Some of these were fixed by LibreSSL in commit https://github.com/openbsd/src/commit/aa1f637d454961d22117b4353f98253e984b3ba8 this fix includes the other fixes in that commit, as well as fixes for others found by a scan for a similar unvalidated access paradigm in the tree. Fixes CVE-2026-22795, CVE-2026-22796 Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/29582) Signed-off-by: jing-wang177 <wangjing561@huawei.com> | 6 个月前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 2 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
apps/storeutl.c: avoid signed integer overflow in indent_printf() As two arbitrarily large printf return values can trigger signed integer overflow, rewrite the return value handling to avoid it. Fixes: fb43ddceda79 "Add a recursive option to 'openssl storeutl'" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665428 References: https://github.com/openssl/project/issues/1432 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28649) Signed-off-by: jing-wang177 <wangjing561@huawei.com> | 9 个月前 | |
huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com> | 4 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 | |
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com> | 3 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 4 年前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 10 个月前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 10 个月前 | ||
| 2 年前 | ||
| 1 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 2 年前 | ||
| 2 年前 | ||
| 4 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 2 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 6 个月前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 4 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 2 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 9 个月前 | ||
| 4 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 | ||
| 3 年前 |