Star0
27
代码
代码
Issues4
Pull Requests4
项目讨论
Wiki
分析
Star0
27
HhhhFunDetect and prevent recursive config parsing
44d73c34创建于 2024年6月5日历史提交
文件最后提交记录最后更新时间
__DECC_INCLUDE_EPILOGUE.H
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
__DECC_INCLUDE_PROLOGUE.H
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
aes.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asn1.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asn1_mac.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asn1err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asn1t.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
async.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
asyncerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bio.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bioerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
blowfish.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bn.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
bnerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
buffer.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
buffererr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
camellia.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cast.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cmac.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cmp.h.in
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
cmp_util.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cmperr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
cms.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cmserr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
comp.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
comperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
conf.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
conf_api.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
conferr.h
Detect and prevent recursive config parsing If a malformed config file is provided such as the following: openssl_conf = openssl_init [openssl_init] providers = provider_sect [provider_sect] = provider_sect The config parsing library will crash overflowing the stack, as it recursively parses the same provider_sect ad nauseum. Prevent this by maintaing a list of visited nodes as we recurse through referenced sections, and erroring out in the event we visit any given section node more than once. Note, adding the test for this revealed that our diagnostic code inadvertently pops recorded errors off the error stack because provider_conf_load returns success even in the event that a configuration parse failed. The call path to provider_conf_load has been updated in this commit to address that shortcoming, allowing recorded errors to be visibile to calling applications. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> (Merged from https://github.com/openssl/openssl/pull/23120) Signed-off-by: hhhFun <fanghaojie@huawei.com>
2 年前
configuration.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
conftypes.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
core.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
core_dispatch.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
core_names.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
core_object.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
crmf.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
crmferr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
crypto.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cryptoerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cryptoerr_legacy.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ct.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
cterr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
decoder.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
decodererr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
des.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
dh.h
Make DH_check_pub_key() and DH_generate_key() safer yet We already check for an excessively large P in DH_generate_key(), but not in DH_check_pub_key(), and none of them check for an excessively large Q. This change adds all the missing excessive size checks of P and Q. It's to be noted that behaviours surrounding excessively sized P and Q differ. DH_check() raises an error on the excessively sized P, but only sets a flag for the excessively sized Q. This behaviour is mimicked in DH_check_pub_key(). Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22518) (cherry picked from commit ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6) Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
dherr.h
Make DH_check_pub_key() and DH_generate_key() safer yet We already check for an excessively large P in DH_generate_key(), but not in DH_check_pub_key(), and none of them check for an excessively large Q. This change adds all the missing excessive size checks of P and Q. It's to be noted that behaviours surrounding excessively sized P and Q differ. DH_check() raises an error on the excessively sized P, but only sets a flag for the excessively sized Q. This behaviour is mimicked in DH_check_pub_key(). Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22518) (cherry picked from commit ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6) Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
dsa.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
dsaerr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
dtls1.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
e_os2.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ebcdic.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ec.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ecdh.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ecdsa.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ecerr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
encoder.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
encodererr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
engine.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
engineerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
err.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ess.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
esserr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
evp.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
evperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
fips_names.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
fipskey.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
hmac.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
http.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
httperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
idea.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
kdf.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
kdferr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
lhash.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
macros.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
md2.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
md4.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
md5.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
mdc2.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
modes.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
obj_mac.h
[Backport] obj: Add SM4 GCM/CCM OID Reference: https://github.com/openssl/openssl/commit/a596d38a8cddca4af3416b2664e120028d96e6a9 Add the following OID: SM4-GCM: 1.2.156.10197.1.104.8 SM4-CCM: 1.2.156.10197.1.104.9 Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/16731) Signed-off-by: lanming <lanming@huawei.com>
2 年前
objects.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
objectserr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ocsp.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ocsperr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
opensslconf.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
opensslv.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ossl_typ.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
param_build.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
params.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pem.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pem2.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pemerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pkcs12.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pkcs12err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pkcs7.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
pkcs7err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
prov_ssl.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
proverr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
provider.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rand.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
randerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rc2.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rc4.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rc5.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ripemd.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rsa.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
rsaerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
safestack.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
seed.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
self_test.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sha.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
srp.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
srtp.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ssl.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ssl2.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ssl3.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
sslerr.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
sslerr_legacy.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
stack.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
store.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
storeerr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
symhacks.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
tls1.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
trace.h
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
ts.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
tserr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
txt_db.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
types.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
ui.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
uierr.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
whrlpool.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
x509.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
x509_vfy.h.in
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
x509err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前
x509v3.h.in
openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
2 年前
x509v3err.h
tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>
3 年前