zzy/openssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
openssl/crypto
History
Jiasheng Jiang f60b3c5fdc crypto/pkcs12/p12_mutl.c: Add check and EVP_MD_free() for EVP_MD_fetch() 
Add check and EVP_MD_free() for EVP_MD_fetch() to avoid NULL pointer
dereference and memory leak, like "md_fetch".

Fixes: fe79159be0 ("Implementation of the RFC 9579, PBMAC1 in PKCS#12")
Signed-off-by: Jiasheng Jiang <jiashengjiangcool@outlook.com>

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25370)
2024-09-05 17:30:28 +02:00
..
aes
Copyright year updates
2024-09-05 09:35:49 +02:00
aria
Change loops conditions to make zero loop risk more obvious.
2022-05-24 14:11:20 +10:00
asn1
Copyright year updates
2024-09-05 09:35:49 +02:00
async
Copyright year updates
2024-09-05 09:35:49 +02:00
bf
Avoid duplicating symbols in legacy.a with some build options
2023-01-31 11:10:22 +11:00
bio
crypto: fix missing <winsock.h> indirection inclusion.
2024-09-05 17:02:51 +02:00
bn
Copyright year updates
2024-09-05 09:35:49 +02:00
buffer
Stop raising ERR_R_MALLOC_FAILURE in most places
2022-10-05 14:02:03 +02:00
camellia
Copyright year updates
2024-09-05 09:35:49 +02:00
cast
Copyright year updates
2023-09-07 09:59:15 +01:00
chacha
Copyright year updates
2024-09-05 09:35:49 +02:00
cmac
Add FIPS indicator to CMAC.
2024-07-31 09:04:17 +10:00
cmp
Copyright year updates
2024-09-05 09:35:49 +02:00
cms
Fix memleak in rsa_cms_sign error path
2024-09-05 17:04:59 +02:00
comp
Copyright year updates
2023-09-07 09:59:15 +01:00
conf
Copyright year updates
2024-09-05 09:35:49 +02:00
crmf
Copyright year updates
2024-09-05 09:35:49 +02:00
ct
Stop raising ERR_R_MALLOC_FAILURE in most places
2022-10-05 14:02:03 +02:00
des
Copyright year updates
2024-09-05 09:35:49 +02:00
dh
Copyright year updates
2024-04-09 13:43:26 +02:00
dsa
Copyright year updates
2024-09-05 09:35:49 +02:00
dso
Copyright year updates
2024-04-09 13:43:26 +02:00
ec
Copyright year updates
2024-09-05 09:35:49 +02:00
encode_decode
Copyright year updates
2024-04-09 13:43:26 +02:00
engine
Copyright year updates
2024-09-05 09:35:49 +02:00
err
Add ED25519 and ED448 support for EVP_PKEY_{sign,verify}_init_ex2()
2024-08-29 19:13:07 +02:00
ess
Copyright year updates
2024-09-05 09:35:49 +02:00
evp
Copyright year updates
2024-09-05 09:35:49 +02:00
ffc
Copyright year updates
2024-09-05 09:35:49 +02:00
hashtable
ossl_ht_insert(): Allow for 4 iterations of grow_hashtable()
2024-08-22 14:52:43 +02:00
hmac
s390x: Disable HMAC hardware acceleration when an engine is used for the digest
2024-09-03 21:15:00 +02:00
hpke
open brace '{' following struct go on the same line
2024-07-22 06:55:35 -04:00
http
Copyright year updates
2024-04-09 13:43:26 +02:00
idea
Copyright year updates
2024-09-05 09:35:49 +02:00
kdf
…
lhash
Copyright year updates
2024-04-09 13:43:26 +02:00
md2
Avoid duplicating symbols in legacy.a with some build options
2023-01-31 11:10:22 +11:00
md4
Avoid duplicating symbols in legacy.a with some build options
2023-01-31 11:10:22 +11:00
md5
md5: add assembly implementation for loongarch64
2023-12-27 10:15:29 +01:00
mdc2
Avoid duplicating symbols in legacy.a with some build options
2023-01-31 11:10:22 +11:00
modes
Copyright year updates
2024-09-05 09:35:49 +02:00
objects
feat: add TCG / platform certificate OIDs
2024-09-05 17:22:40 +02:00
ocsp
Copyright year updates
2024-09-05 09:35:49 +02:00
pem
Copyright year updates
2024-09-05 09:35:49 +02:00
perlasm
Copyright year updates
2024-09-05 09:35:49 +02:00
pkcs7
Copyright year updates
2024-09-05 09:35:49 +02:00
pkcs12
crypto/pkcs12/p12_mutl.c: Add check and EVP_MD_free() for EVP_MD_fetch()
2024-09-05 17:30:28 +02:00
poly1305
Copyright year updates
2024-09-05 09:35:49 +02:00
property
Copyright year updates
2024-09-05 09:35:49 +02:00
rand
Copyright year updates
2024-09-05 09:35:49 +02:00
rc2
Copyright year updates
2023-09-07 09:59:15 +01:00
rc4
Copyright year updates
2023-09-07 09:59:15 +01:00
rc5
Copyright year updates
2023-09-07 09:59:15 +01:00
ripemd
Avoid duplicating symbols in legacy.a with some build options
2023-01-31 11:10:22 +11:00
rsa
Copyright year updates
2024-09-05 09:35:49 +02:00
seed
Avoid duplicating symbols in legacy.a with some build options
2023-01-31 11:10:22 +11:00
sha
Copyright year updates
2024-09-05 09:35:49 +02:00
siphash
crypto/*: Fix various typos, repeated words, align some spelling to LDP.
2022-10-12 16:55:01 +11:00
sm2
Copyright year updates
2024-09-05 09:35:49 +02:00
sm3
Copyright year updates
2024-09-05 09:35:49 +02:00
sm4
Copyright year updates
2024-09-05 09:35:49 +02:00
srp
Copyright year updates
2023-09-28 14:23:29 +01:00
stack
Copyright year updates
2024-04-09 13:43:26 +02:00
store
Copyright year updates
2024-09-05 09:35:49 +02:00
thread
Copyright year updates
2023-09-07 09:59:15 +01:00
ts
Copyright year updates
2024-09-05 09:35:49 +02:00
txt_db
Copyright year updates
2023-09-07 09:59:15 +01:00
ui
Copyright year updates
2023-09-07 09:59:15 +01:00
whrlpool
Copyright year updates
2024-09-05 09:35:49 +02:00
x509
Copyright year updates
2024-09-05 09:35:49 +02:00
alphacpuid.pl
…
arm64cpuid.pl
Update copyright year
2022-05-03 13:34:51 +01:00
arm_arch.h
Copyright year updates
2024-04-09 13:43:26 +02:00
armcap.c
Add support for elf_aux_info() on OpenBSD
2024-09-02 16:12:48 +02:00
armv4cpuid.pl
Copyright year updates
2023-09-07 09:59:15 +01:00
asn1_dsa.c
Update copyright year
2021-04-08 13:04:41 +01:00
bsearch.c
…
build.info
Add FIPS indicator callback.
2024-07-11 08:29:43 +10:00
c64xpluscpuid.pl
…
comp_methods.c
Move stack of compression methods from libssl to OSSL_LIB_CTX
2024-05-28 08:56:13 +02:00
context.c
Add FIPS indicator callback.
2024-07-11 08:29:43 +10:00
core_algorithm.c
Stop raising ERR_R_MALLOC_FAILURE in most places
2022-10-05 14:02:03 +02:00
core_fetch.c
"Reserve" the method store when constructing methods
2022-07-20 07:28:17 +01:00
core_namemap.c
Copyright year updates
2024-09-05 09:35:49 +02:00
cpt_err.c
Use the new hashtable for core_namemap
2024-08-21 15:21:26 +02:00
cpuid.c
Copyright year updates
2023-09-28 14:23:29 +01:00
cryptlib.c
Copyright year updates
2023-09-07 09:59:15 +01:00
ctype.c
Copyright year updates
2023-09-07 09:59:15 +01:00
cversion.c
Copyright year updates
2024-09-05 09:35:49 +02:00
defaults.c
Fix typos found by codespell
2024-08-07 19:09:43 +02:00
der_writer.c
der_writer: Use uint32_t instead of long.
2022-06-27 10:58:40 +02:00
deterministic_nonce.c
Copyright year updates
2024-09-05 09:35:49 +02:00
dllmain.c
Update copyright year
2022-05-03 13:34:51 +01:00
ebcdic.c
…
ex_data.c
Fix error handling in CRYPTO_get_ex_new_index
2023-09-21 14:43:08 +02:00
getenv.c
Update copyright year
2022-05-03 13:34:51 +01:00
ia64cpuid.S
…
indicator_core.c
Add FIPS indicator callback.
2024-07-11 08:29:43 +10:00
info.c
Copyright year updates
2024-09-05 09:35:49 +02:00
init.c
Copyright year updates
2024-04-09 13:43:26 +02:00
initthread.c
Recycle the TLS key that holds thread_event_handler
2024-09-05 17:19:53 +02:00
loongarch64cpuid.pl
LoongArch64 assembly pack: Really implement OPENSSL_rdtsc
2023-12-19 18:34:34 +01:00
loongarch_arch.h
Copyright year updates
2023-09-07 09:59:15 +01:00
loongarchcap.c
Copyright year updates
2023-09-07 09:59:15 +01:00
LPdir_nyi.c
…
LPdir_unix.c
Copyright year updates
2023-09-07 09:59:15 +01:00
LPdir_vms.c
…
LPdir_win32.c
…
LPdir_win.c
…
LPdir_wince.c
…
mem_clr.c
…
mem_sec.c
Copyright year updates
2024-09-05 09:35:49 +02:00
mem.c
Copyright year updates
2024-09-05 09:35:49 +02:00
mips_arch.h
…
o_dir.c
Update copyright year
2022-05-03 13:34:51 +01:00
o_fopen.c
Copyright year updates
2024-09-05 09:35:49 +02:00
o_init.c
Update copyright year
2022-05-03 13:34:51 +01:00
o_str.c
crypto: factorize to hex chars conversion code.
2024-08-07 19:25:10 +02:00
o_time.c
…
packet.c
Copyright year updates
2023-09-07 09:59:15 +01:00
param_build_set.c
ossl_param_build_set_multi_key_bn(): Do not set NULL BIGNUMs
2023-10-18 18:07:13 +02:00
param_build.c
params: drop INT_MAX checks
2023-12-29 10:21:10 +01:00
params_dup.c
Stop raising ERR_R_MALLOC_FAILURE in most places
2022-10-05 14:02:03 +02:00
params_from_text.c
Copyright year updates
2024-04-09 13:43:26 +02:00
params_idx.c.in
params: provide a faster TRIE based param lookup.
2023-06-02 15:13:20 +10:00
params.c
uefi: move variables
2024-05-30 18:38:12 +02:00
pariscid.pl
…
passphrase.c
Stop raising ERR_R_MALLOC_FAILURE in most places
2022-10-05 14:02:03 +02:00
ppccap.c
Copyright year updates
2024-09-05 09:35:49 +02:00
ppccpuid.pl
Update copyright year
2022-05-03 13:34:51 +01:00
provider_child.c
Copyright year updates
2023-09-07 09:59:15 +01:00
provider_conf.c
Fix remaining provider config settings to be decisive in value
2023-12-27 09:32:48 +01:00
provider_core.c
Add FIPS indicator callback.
2024-07-11 08:29:43 +10:00
provider_local.h
make struct provider_info_st a full type
2021-06-24 14:48:15 +01:00
provider_predefined.c
make struct provider_info_st a full type
2021-06-24 14:48:15 +01:00
provider.c
Copyright year updates
2023-09-07 09:59:15 +01:00
punycode.c
Copyright year updates
2023-09-07 09:59:15 +01:00
quic_vlint.c
QUIC: Enable building with QUIC support disabled
2023-01-13 13:20:16 +00:00
rcu_internal.h
Copyright year updates
2024-04-09 13:43:26 +02:00
README-sparse_array.md
…
riscv32cpuid.pl
Copyright year updates
2024-09-05 09:35:49 +02:00
riscv64cpuid.pl
riscv: Add basic vector extension support
2023-10-26 15:55:49 +01:00
riscvcap.c
Copyright year updates
2024-09-05 09:35:49 +02:00
s390x_arch.h
s390x: support CPACF sha3/shake performance improvements
2024-08-29 19:26:06 +02:00
s390xcap.c
Copyright year updates
2023-09-07 09:59:15 +01:00
s390xcpuid.pl
Copyright year updates
2024-09-05 09:35:49 +02:00
self_test_core.c
Copyright year updates
2024-09-05 09:35:49 +02:00
sleep.c
For Unix, refactor OSSL_sleep() to use nanosleep() instead of usleep()
2024-05-22 09:59:32 +02:00
sparccpuid.S
…
sparcv9cap.c
Split bignum code out of the sparcv9cap.c
2021-07-15 09:33:04 +02:00
sparse_array.c
Copyright year updates
2024-09-05 09:35:49 +02:00
threads_lib.c
Define threads_lib.c functions only for OPENSSL_SYS_UNIX
2022-11-14 07:47:53 +00:00
threads_none.c
threads: follow formatting rules
2024-09-05 17:09:50 +02:00
threads_pthread.c
threads: follow formatting rules
2024-09-05 17:09:50 +02:00
threads_win.c
threads_win: fix improper cast to long * instead of LONG *
2024-09-05 17:09:50 +02:00
time.c
crypto: fix missing <winsock.h> indirection inclusion.
2024-09-05 17:02:51 +02:00
trace.c
"foo * bar" should be "foo *bar"
2023-09-11 10:15:30 +02:00
uid.c
Copyright year updates
2023-09-07 09:59:15 +01:00
vms_rms.h
…
x86_64cpuid.pl
Update copyright year
2021-04-08 13:04:41 +01:00
x86cpuid.pl
…