mirror of https://github.com/openssl/openssl.git
6dacee485f
This issue has been discovered by osss-fuzzer [1]. The test function decodes RSA key created by fuzzer and calls EVP_PKEY_pairwise_check() which proceeds to ossl_bn_miller_rabin_is_prime() check which takes too long exceeding timeout (45secs). The idea is to fix OSSL_DECODER_from_data() code path so invalid RSA keys will be refused. [1] https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69134 Test case generated by the fuzzer is added. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25190) |
||
|---|---|---|
| .. | ||
| __DECC_INCLUDE_EPILOGUE.H | ||
| __DECC_INCLUDE_PROLOGUE.H | ||
| aes_platform.h | ||
| aria.h | ||
| asn1.h | ||
| asn1_dsa.h | ||
| asn1err.h | ||
| async.h | ||
| asyncerr.h | ||
| bioerr.h | ||
| bn.h | ||
| bn_conf.h.in | ||
| bn_dh.h | ||
| bn_srp.h | ||
| bnerr.h | ||
| buffererr.h | ||
| chacha.h | ||
| cmac.h | ||
| cmll_platform.h | ||
| cmperr.h | ||
| cmserr.h | ||
| comperr.h | ||
| conferr.h | ||
| context.h | ||
| crmferr.h | ||
| cryptlib.h | ||
| cryptoerr.h | ||
| cterr.h | ||
| ctype.h | ||
| decoder.h | ||
| decodererr.h | ||
| des_platform.h | ||
| dh.h | ||
| dherr.h | ||
| dsa.h | ||
| dsaerr.h | ||
| dso_conf.h.in | ||
| ec.h | ||
| ecerr.h | ||
| ecx.h | ||
| encoder.h | ||
| encodererr.h | ||
| engine.h | ||
| engineerr.h | ||
| err.h | ||
| ess.h | ||
| esserr.h | ||
| evp.h | ||
| evperr.h | ||
| httperr.h | ||
| lhash.h | ||
| md32_common.h | ||
| modes.h | ||
| objects.h | ||
| objectserr.h | ||
| ocsperr.h | ||
| pem.h | ||
| pemerr.h | ||
| pkcs7.h | ||
| pkcs7err.h | ||
| pkcs12err.h | ||
| poly1305.h | ||
| ppc_arch.h | ||
| punycode.h | ||
| rand.h | ||
| rand_pool.h | ||
| randerr.h | ||
| riscv_arch.def | ||
| riscv_arch.h | ||
| rsa.h | ||
| rsaerr.h | ||
| security_bits.h | ||
| sha.h | ||
| siphash.h | ||
| siv.h | ||
| sm2.h | ||
| sm2err.h | ||
| sm4.h | ||
| sm4_platform.h | ||
| sparc_arch.h | ||
| sparse_array.h | ||
| store.h | ||
| storeerr.h | ||
| tserr.h | ||
| types.h | ||
| uierr.h | ||
| x509.h | ||
| x509_acert.h | ||
| x509err.h | ||
| x509v3err.h | ||