master

jing-wang177Fix Edge Cases in Password Callback Handling

87dc4c33创建于 2024年9月13日历史提交

文件	最后提交记录	最后更新时间
build.info	huangjun42@huawei.com Signed-off-by: HJ <huangjun42@huawei.com>	4 年前
pem_all.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pem_err.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pem_info.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pem_lib.c	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
pem_local.h	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pem_oth.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pem_pk8.c	Fix Edge Cases in Password Callback Handling Fixes #8441: Modify the password callback handling to reserve one byte in the buffer for a null terminator, ensuring compatibility with legacy behavior that puts a terminating null byte at the end. Additionally, validate the length returned by the callback to ensure it does not exceed the given buffer size. If the returned length is too large, the process now stops gracefully with an appropriate error, enhancing robustness by preventing crashes from out-of-bounds access. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25330) (cherry picked from commit 5387b71acb833f1f635ab4a20ced0863747ef5c1) Signed-off-by: 王静 <wangjing561@huawei.com>	1 年前
pem_pkey.c	openssl-3.0.9.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	2 年前
pem_sign.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pem_x509.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pem_xaux.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前
pvkfmt.c	tar -xf openssl-openssl-3.0.7.tar.gz Signed-off-by: code4lala <fengziteng2@huawei.com>	3 年前