Rich Salz c6a9f005be Prevent OOB in SRP base64 code. ...

Change size comparison from > (GT) to >= (GTE) to ensure an additional
byte of output buffer, to prevent OOB reads/writes later in the function
Reject input strings larger than 2GB
Detect invalid output buffer size and return early

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2672)

(cherry picked from commit ecca16632a73bb80ee27cdec8a97f6def0a4714d)

2017-02-21 13:15:07 -05:00

..

build.info

unified build scheme: add build.info files

2016-02-01 12:46:58 +01:00

srp_lib.c

SRP code tidy.

2016-10-01 14:13:02 +01:00

srp_vfy.c

Prevent OOB in SRP base64 code.

2017-02-21 13:15:07 -05:00