root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity
openssl/apps
History
Benny Baumann 0d1a0ed63d Avoid potential OOB if width > sizeof(start) 
This can't currently happen due to sizeof(start) being way larger than MAX_OPT_HELP_WIDTH,
but wasn't checked for previously. With this patch there still remains one (static) OOB,
when the length of the option name and the valtype2param string for that argument overflow
the buffer in opt_print. This is kinda unlikely, unless someone intentionally crafts a
long option name, in which case this would become some trivial stack buffer overrun with
possibility to overwrite pointer to the OPTIONS structure (a long o->name is critical here).

I sincerely hope we trust our built-in documentation to not exploit ourselves.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12265)
 		2022-05-23 10:07:09 +10:00
..
demoSRP Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
include Update copyright year 2022-05-03 13:34:51 +01:00
lib Avoid potential OOB if width > sizeof(start) 2022-05-23 10:07:09 +10:00
CA.pl.in Abstract out policy and extensions in CA.pl 2021-11-16 15:48:08 +00:00
asn1parse.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
build.info CMP test server: move apps/{,lib/}cmp_mock_srv.c and apps/{,include/}cmp_mock_srv.h 2021-05-20 16:23:27 +02:00
ca-cert.srl
…
ca-key.pem
…
ca-req.pem
…
ca.c str[n]casecmp => OPENSSL_strncasecmp 2022-04-22 11:34:41 +02:00
cert.pem
…
ciphers.c Update copyright year 2022-05-03 13:34:51 +01:00
client.pem
…
cmp.c Update copyright year 2022-05-03 13:34:51 +01:00
cms.c Update copyright year 2022-05-03 13:34:51 +01:00
crl.c Update copyright year 2022-05-03 13:34:51 +01:00
crl2pkcs7.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
ct_log_list.cnf Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
dgst.c Update copyright year 2022-05-03 13:34:51 +01:00
dhparam.c openssl: dhparam: Print warning if -in argument is ignored 2022-05-04 09:29:17 +02:00
dsa-ca.pem
…
dsa-pca.pem
…
dsa.c Update copyright year 2022-05-03 13:34:51 +01:00
dsa512.pem
…
dsa1024.pem
…
dsap.pem
…
dsaparam.c Update copyright year 2022-05-03 13:34:51 +01:00
ec.c Update copyright year 2022-05-03 13:34:51 +01:00
ecparam.c Update copyright year 2022-05-03 13:34:51 +01:00
enc.c Update copyright year 2022-05-03 13:34:51 +01:00
engine.c Update copyright year 2021-05-06 13:03:23 +01:00
errstr.c Check non-option arguments 2020-12-15 11:47:17 +01:00
fipsinstall.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
gendsa.c Update copyright year 2022-05-03 13:34:51 +01:00
genpkey.c Update copyright year 2022-05-03 13:34:51 +01:00
genrsa.c Update copyright year 2022-05-03 13:34:51 +01:00
info.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
insta.ca.crt openssl-cmp.pod.in: Update and extend example using Insta Demo CA 2020-08-04 12:11:46 +02:00
kdf.c kdf: use the app's libctx and property query when searching for algorithms 2021-06-15 18:26:47 +10:00
list.c Update copyright year 2022-05-03 13:34:51 +01:00
mac.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
nseq.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
ocsp.c Update copyright year 2022-05-03 13:34:51 +01:00
openssl-vms.cnf Disclaimer about the default provider activation added to config 2021-08-12 09:59:34 +02:00
openssl.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
openssl.cnf Disclaimer about the default provider activation added to config 2021-08-12 09:59:34 +02:00
passwd.c Update copyright year 2022-05-03 13:34:51 +01:00
pca-cert.srl
…
pca-key.pem
…
pca-req.pem
…
pkcs7.c Update copyright year 2022-05-03 13:34:51 +01:00
pkcs8.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
pkcs12.c Update copyright year 2022-05-03 13:34:51 +01:00
pkey.c Update copyright year 2022-05-03 13:34:51 +01:00
pkeyparam.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
pkeyutl.c Update copyright year 2022-05-03 13:34:51 +01:00
prime.c Update copyright year 2022-05-03 13:34:51 +01:00
privkey.pem
…
progs.pl Update copyright year 2022-05-03 13:34:51 +01:00
rand.c Update copyright year 2022-05-03 13:34:51 +01:00
rehash.c Update copyright year 2022-05-03 13:34:51 +01:00
req.c Update copyright year 2022-05-03 13:34:51 +01:00
req.pem
…
rsa.c Update copyright year 2022-05-03 13:34:51 +01:00
rsa8192.pem Fix rsa8192.pem 2020-05-13 06:28:36 +02:00
rsautl.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
s512-key.pem
…
s512-req.pem
…
s1024key.pem
…
s1024req.pem
…
s_client.c s_client -proxy / -starttls shouldn't be mutually exclusive 2022-05-05 13:36:23 +02:00
s_server.c s_serve: Report an error if init-connection fails without an attempt to read. 2022-05-06 14:57:07 +02:00
s_time.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
server.pem Replace apps/server.pem with certificate with a sha256 signature. 2020-01-25 14:10:40 +01:00
server.srl
…
server2.pem
…
sess_id.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
smime.c Update copyright year 2022-05-03 13:34:51 +01:00
speed.c Fix Coverity 1503314 unchecked return value 2022-05-04 17:15:20 +10:00
spkac.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
srp.c openssl srp: make index.txt parsing error more verbose 2021-05-24 14:37:00 +02:00
storeutl.c Update copyright year 2022-05-03 13:34:51 +01:00
testCA.pem
…
testdsa.h Replace OSSL_PARAM_BLD_free_params() with OSSL_PARAM_free(). 2021-04-12 16:55:30 +10:00
testrsa.h Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
timeouts.h Fix header file include guard names 2019-09-28 20:26:36 +02:00
ts.c Update copyright year 2022-05-03 13:34:51 +01:00
tsget.in convert tabs to spaces in two distributed Perl scripts 2021-09-14 07:21:22 +10:00
verify.c Update copyright year 2022-05-03 13:34:51 +01:00
version.c APPS: Improve diagnostics on missing/extra args and unknown cipher/digest 2021-12-07 15:26:40 +01:00
vms_decc_init.c VMS: move copy_argc to its own module and make it an aux source 2019-03-05 08:51:09 +01:00
x509.c Update copyright year 2022-05-03 13:34:51 +01:00