OpenHarmony-6.0-Release

LlanmingFix memory leak in tls_parse_ctos_psk()

cdfeb90d创建于 2024年10月17日历史提交

文件	最后提交记录	最后更新时间
record	Set rlayer.packet to NULL after we've finished using it In order to ensure we do not have a UAF we reset the rlayer.packet pointer to NULL after we free it. CVE-2024-4741 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24395) (cherry picked from commit d146349171101dec3a876c13eb7a6dea32ba62ba) Signed-off-by: hhhFun <fanghaojie@huawei.com>	2 年前
statem	Fix memory leak in tls_parse_ctos_psk() sess is not NULL at this point, and is freed on the success path, but not on the error path. Fix this by going to the err label such that SSL_SESSION_free(sess) is called. CLA: trivial Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25643) Signed-off-by: lanming <lanming@huawei.com>	1 年前
bio_ssl.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
build.info	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
d1_lib.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
d1_msg.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
d1_srtp.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ktls.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
methods.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pqueue.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
s3_cbc.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
s3_enc.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
s3_lib.c	Fix a bad backport This is causing compilation failure Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22682) (cherry picked from commit 2fd4fd35bf906290a9c14b81f16e7ae01d297122) Signed-off-by: hhhFun <fanghaojie@huawei.com>	2 年前
s3_msg.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_asn1.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_cert.c	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
ssl_cert_table.h	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_ciph.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_conf.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_err.c	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
ssl_err_legacy.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_init.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_lib.c	Fix SSL_select_next_proto Ensure that the provided client list is non-NULL and starts with a valid entry. When called from the ALPN callback the client list should already have been validated by OpenSSL so this should not cause a problem. When called from the NPN callback the client list is locally configured and will not have already been validated. Therefore SSL_select_next_proto should not assume that it is correctly formatted. We implement stricter checking of the client protocol list. We also do the same for the server list while we are about it. CVE-2024-5535 Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24718) (cherry picked from commit 4ada436a1946cbb24db5ab4ca082b69c1bc10f37) Signed-off-by: hhhFun <fanghaojie@huawei.com>	2 年前
ssl_local.h	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_mcnf.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_rsa.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_rsa_legacy.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_sess.c	fix undefined behavior on 3.1 (https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71220) OpenSSL 3.2 and later are not affected, because they use a safemath to do integer arithmetics. This change is specific to 3.1 and 3.0. It changes just fixes ssl_session_calculate_timeout(). It avoids overflow by testing operands before executint the operation. It is implemented as follows: add(a, b) { overflow = MAX_INT - a; if (b > overflow) result = b - overflow else result = a + b } Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25239) (cherry picked from commit a85eb03a5ccaccd7b18f979d4dfb5cc76bb61cea) Signed-off-by: hhhFun <fanghaojie@huawei.com>	1 年前
ssl_stat.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_txt.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
ssl_utst.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
sslerr.h	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
t1_enc.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
t1_lib.c	SSL_set1_groups_list(): Fix memory corruption with 40 groups and more Fixes #23624 The calculation of the size for gid_arr reallocation was wrong. A multiplication by gid_arr array item size was missing. Testcase is added. Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Cherry-pick from https://github.com/openssl/openssl/pull/23625) Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/23661) Signed-off-by: hhhFun <fanghaojie@huawei.com>	2 年前
t1_trce.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
tls13_enc.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
tls_depr.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
tls_srp.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前