root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity
openssl/crypto
History
Eugene Syromiatnikov 35db6a15d4 crypto/rand/randfile.c: avoid signed integer overflow in RAND_load_file 
If a file supplied to RAND_load_file is too big (more than INT_MAX bytes),
it is possible to trigger a signer integer overflow during ret calculation.
Avoid it by returning early when we are about to hit it on the next
iteration.

Reported-by: Liu-Ermeng <liuermeng2@huawei.com>
Resolves: https://github.com/openssl/openssl/issues/28375
Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28379)
 		2025-09-09 20:21:41 +02:00
..
aes Copyright year updates 2025-09-02 13:05:45 +00:00
aria
…
asn1 asn1_parse.c: Fixed typo in comment 2025-09-09 09:48:13 +02:00
async Copyright year updates 2025-09-02 13:05:45 +00:00
bf
…
bio Fix unnecessary casts between int and size_t 2025-09-09 09:51:32 +02:00
bn Copyright year updates 2025-09-02 13:05:45 +00:00
buffer
…
camellia Copyright year updates 2025-09-02 13:05:45 +00:00
cast
…
chacha Copyright year updates 2025-09-02 13:05:45 +00:00
cmac Copyright year updates 2025-09-02 13:05:45 +00:00
cmp Copyright year updates 2025-09-02 13:05:45 +00:00
cms Copyright year updates 2025-09-02 13:05:45 +00:00
comp Copyright year updates 2025-09-02 13:05:45 +00:00
conf Copyright year updates 2025-09-02 13:05:45 +00:00
crmf Copyright year updates 2025-09-02 13:05:45 +00:00
ct Copyright year updates 2025-09-02 13:05:45 +00:00
des Copyright year updates 2025-09-02 13:05:45 +00:00
dh Copyright year updates 2025-09-02 13:05:45 +00:00
dsa Copyright year updates 2025-09-02 13:05:45 +00:00
dso Copyright year updates 2025-09-02 13:05:45 +00:00
ec Add SM2 implementation in generic riscv64 asm 2025-09-08 15:54:57 +10:00
encode_decode Fix missing unlock in decoder_pkey.c 2025-08-12 14:15:50 -04:00
engine Copyright year updates 2025-09-02 13:05:45 +00:00
err Copyright year updates 2025-09-02 13:05:45 +00:00
ess
…
evp Copyright year updates 2025-09-02 13:05:45 +00:00
ffc Copyright year updates 2025-09-02 13:05:45 +00:00
hashtable Remove assert in core_namemap.c 2025-08-12 14:15:50 -04:00
hmac Copyright year updates 2025-09-02 13:05:45 +00:00
hpke Copyright year updates 2025-09-02 13:05:45 +00:00
http libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
idea
…
kdf
…
lhash Copyright year updates 2025-09-02 13:05:45 +00:00
lms lms: convert to using generated parameter decoding 2025-08-22 15:33:03 +10:00
md2
…
md4
…
md5 Copyright year updates 2025-09-02 13:05:45 +00:00
mdc2
…
ml_dsa crypto: use array memory (re)allocation routines 2025-08-08 12:22:10 -04:00
ml_kem Address coverity issue 1655294 2025-07-09 15:20:55 -04:00
modes Copyright year updates 2025-09-02 13:05:45 +00:00
objects Copyright year updates 2025-09-02 13:05:45 +00:00
ocsp Copyright year updates 2025-03-12 13:35:59 +00:00
pem Copyright year updates 2025-09-02 13:05:45 +00:00
perlasm Copyright year updates 2025-09-02 13:05:45 +00:00
pkcs7 Copyright year updates 2025-09-02 13:05:45 +00:00
pkcs12 Copyright year updates 2025-09-02 13:05:45 +00:00
poly1305 Copyright year updates 2025-09-02 13:05:45 +00:00
property libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
rand crypto/rand/randfile.c: avoid signed integer overflow in RAND_load_file 2025-09-09 20:21:41 +02:00
rc2
…
rc4 Copyright year updates 2025-09-02 13:05:45 +00:00
rc5
…
ripemd
…
rsa Only unlock in rsa_get_blinding when locking was successful 2025-09-05 22:19:43 +10:00
seed
…
sha Copyright year updates 2025-09-02 13:05:45 +00:00
siphash Copyright year updates 2025-09-02 13:05:45 +00:00
slh_dsa slh-dsa: add a PCT for key import when in FIPS mode 2025-08-29 14:16:17 -04:00
sm2 Copyright year updates 2025-09-02 13:05:45 +00:00
sm3 Copyright year updates 2025-09-02 13:05:45 +00:00
sm4 Fix test failures on big endian ARMv9 target 2025-04-14 15:43:58 +01:00
srp Copyright year updates 2025-09-02 13:05:45 +00:00
stack Copyright year updates 2025-09-02 13:05:45 +00:00
store Fix OSSL_STORE to consider cached info in the EOF check. 2025-07-26 11:33:56 +02:00
thread Copyright year updates 2025-09-02 13:05:45 +00:00
ts Copyright year updates 2025-09-02 13:05:45 +00:00
txt_db Copyright year updates 2025-09-02 13:05:45 +00:00
ui Copyright year updates 2025-09-02 13:05:45 +00:00
whrlpool Copyright year updates 2025-09-02 13:05:45 +00:00
x509 Add a helper function to delete the extension list 2025-09-09 11:12:57 +02:00
LPdir_nyi.c
…
LPdir_unix.c
…
LPdir_vms.c
…
LPdir_win.c Copyright year updates 2025-09-02 13:05:45 +00:00
LPdir_win32.c
…
LPdir_wince.c
…
README-sparse_array.md
…
alphacpuid.pl Copyright year updates 2025-09-02 13:05:45 +00:00
arm64cpuid.pl
…
arm_arch.h Copyright year updates 2025-09-02 13:05:45 +00:00
armcap.c Copyright year updates 2025-09-02 13:05:45 +00:00
armv4cpuid.pl Copyright year updates 2025-09-02 13:05:45 +00:00
array_alloc.c Add array memory allocation routines 2025-08-08 12:22:10 -04:00
asn1_dsa.c
…
bsearch.c
…
build.info fips: implement deterministic ECDSA 2025-08-21 09:58:55 +10:00
c64xpluscpuid.pl Copyright year updates 2025-09-02 13:05:45 +00:00
comp_methods.c
…
context.c Restore use of crypto_thread_default_context 2025-06-20 13:01:39 -04:00
core_algorithm.c
…
core_fetch.c Copyright year updates 2025-03-12 13:35:59 +00:00
core_namemap.c Remove assert in core_namemap.c 2025-08-12 14:15:50 -04:00
cpt_err.c
…
cpuid.c
…
cryptlib.c Copyright year updates 2025-09-02 13:05:45 +00:00
ctype.c
…
cversion.c Copyright year updates 2025-09-02 13:05:45 +00:00
defaults.c Copyright year updates 2025-09-02 13:05:45 +00:00
der_writer.c
…
deterministic_nonce.c Copyright year updates 2025-09-02 13:05:45 +00:00
dllmain.c Copyright year updates 2025-09-02 13:05:45 +00:00
ebcdic.c
…
ex_data.c Copyright year updates 2025-09-02 13:05:45 +00:00
getenv.c
…
ia64cpuid.S Copyright year updates 2025-09-02 13:05:45 +00:00
indicator_core.c
…
info.c
…
init.c crypto/init.c optimize ossl_(un)likely 2025-07-16 13:07:15 -04:00
initthread.c Copyright year updates 2025-09-02 13:05:45 +00:00
loongarch64cpuid.pl Copyright year updates 2025-03-12 13:35:59 +00:00
loongarch_arch.h
…
loongarchcap.c Copyright year updates 2025-09-02 13:05:45 +00:00
mem.c Copyright year updates 2025-09-02 13:05:45 +00:00
mem_clr.c
…
mem_sec.c Copyright year updates 2025-09-02 13:05:45 +00:00
mips_arch.h
…
o_dir.c
…
o_fopen.c Copyright year updates 2025-09-02 13:05:45 +00:00
o_init.c
…
o_str.c Copyright year updates 2025-09-02 13:05:45 +00:00
o_time.c
…
packet.c Copyright year updates 2025-09-02 13:05:45 +00:00
param_build.c Copyright year updates 2025-09-02 13:05:45 +00:00
param_build_set.c
…
params.c kdf: remove max argument to the param concatenation helper 2025-07-31 20:20:48 +02:00
params_dup.c Copyright year updates 2025-09-02 13:05:45 +00:00
params_from_text.c Copyright year updates 2025-09-02 13:05:45 +00:00
pariscid.pl Copyright year updates 2025-09-02 13:05:45 +00:00
passphrase.c Copyright year updates 2025-09-02 13:05:45 +00:00
ppccap.c Copyright year updates 2025-09-02 13:05:45 +00:00
ppccpuid.pl Copyright year updates 2025-09-02 13:05:45 +00:00
provider.c Copyright year updates 2025-03-12 13:35:59 +00:00
provider_child.c
…
provider_conf.c crypto/provider_conf.c: Fix possible memory leak 2025-05-07 11:49:06 +02:00
provider_core.c Add missing unlock to ossl_provider_new 2025-09-05 21:05:30 +10:00
provider_local.h
…
provider_predefined.c
…
punycode.c Copyright year updates 2025-09-02 13:05:45 +00:00
quic_vlint.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
rcu_internal.h
…
riscv32cpuid.pl RISC-V: Use address for vlenb CSR 2025-09-09 11:18:42 +02:00
riscv64cpuid.pl RISC-V: Use address for vlenb CSR 2025-09-09 11:18:42 +02:00
riscvcap.c Make cpuid_setup non-constructor 2025-04-29 14:19:51 +02:00
s390x_arch.h
…
s390xcap.c s390x: Add new machine generation z17 2025-04-23 11:24:41 +02:00
s390xcpuid.pl Copyright year updates 2025-09-02 13:05:45 +00:00
self_test_core.c
…
sleep.c Copyright year updates 2025-09-02 13:05:45 +00:00
sparccpuid.S Copyright year updates 2025-09-02 13:05:45 +00:00
sparcv9cap.c
…
sparse_array.c Copyright year updates 2025-09-02 13:05:45 +00:00
ssl_err.c Move ssl_err.c into libcrypto 2025-03-01 14:46:03 -05:00
sslerr.h Move ssl_err.c into libcrypto 2025-03-01 14:46:03 -05:00
threads_common.c crypto: use array memory (re)allocation routines 2025-08-08 12:22:10 -04:00
threads_lib.c
…
threads_none.c Copyright year updates 2025-09-02 13:05:45 +00:00
threads_pthread.c Fix failure checking on rcu_read_lock 2025-08-09 09:22:13 -04:00
threads_win.c Fix failure checking on rcu_read_lock 2025-08-09 09:22:13 -04:00
time.c
…
trace.c Copyright year updates 2025-09-02 13:05:45 +00:00
uid.c
…
vms_rms.h
…
x86_64cpuid.pl Copyright year updates 2025-09-02 13:05:45 +00:00
x86cpuid.pl Copyright year updates 2025-09-02 13:05:45 +00:00