Matt Caswell 3ab5f981ed Ensure we have length checks for all extensions ...

The previous commit inspired a review of all the length checks for the
extension adding code. This adds more robust checks and adds checks where
some were missing previously. The real solution for this is to use WPACKET
which is currently in master - but that cannot be applied to release
branches.

Reviewed-by: Rich Salz <rsalz@openssl.org>

2016-10-28 09:40:55 +01:00

..

record

A zero return from BIO_read()/BIO_write() could be retryable

2016-10-28 09:17:30 +01:00

statem

Fix missing NULL checks in NewSessionTicket construction

2016-09-29 16:17:54 +01:00

bio_ssl.c

Fix BIO_pop for SSL BIOs

2016-07-29 14:09:57 +01:00

build.info

Update build.info files for auto-init/de-init

2016-02-09 15:11:38 +00:00

d1_lib.c

Fix DTLS buffered message DoS attack

2016-08-22 10:53:55 +01:00

d1_msg.c

Whitespace cleanup in ssl folder

2016-06-29 09:56:39 -04:00

d1_srtp.c

Indent ssl/

2016-08-18 14:02:29 +02:00

methods.c

Indent ssl/

2016-08-18 14:02:29 +02:00

packet_locl.h

Indent ssl/

2016-08-18 14:02:29 +02:00

pqueue.c

Copyright consolidation 01/10

2016-05-17 14:19:19 -04:00

s3_cbc.c

Indent ssl/

2016-08-18 14:02:29 +02:00

s3_enc.c

Indent ssl/

2016-08-18 14:02:29 +02:00

s3_lib.c

Put DES into "not default" category.

2016-08-24 14:05:52 +01:00

s3_msg.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_asn1.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_cert.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_ciph.c

Remove trailing zeros

2016-08-26 15:19:40 -04:00

ssl_conf.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_err.c

Fix missing NULL checks in NewSessionTicket construction

2016-09-29 16:17:54 +01:00

ssl_init.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_lib.c

Fix comment about return value of ct_extract_tls_extension_scts

2016-08-24 13:58:19 +01:00

ssl_locl.h

Fix DTLS buffered message DoS attack

2016-08-22 10:53:55 +01:00

ssl_mcnf.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_rsa.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_sess.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_stat.c

Add missing debug strings.

2016-09-07 16:09:01 -04:00

ssl_txt.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_utst.c

Copyright consolidation 01/10

2016-05-17 14:19:19 -04:00

t1_enc.c

Indent ssl/

2016-08-18 14:02:29 +02:00

t1_ext.c

Indent ssl/

2016-08-18 14:02:29 +02:00

t1_lib.c

Ensure we have length checks for all extensions

2016-10-28 09:40:55 +01:00

t1_reneg.c

Indent ssl/

2016-08-18 14:02:29 +02:00

t1_trce.c

Ensure trace recognises X25519

2016-09-08 12:36:46 +01:00

tls_srp.c

Indent ssl/

2016-08-18 14:02:29 +02:00