Matt Caswell e6941c7814 Don't call memcmp with a NULL pointer ...

If early data is sent to a server, but ALPN is not used then memcmp is
called with a NULL pointer which is undefined behaviour.

Fixes #2841

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2845)

2017-03-04 23:58:03 +00:00

..

record

Don't attempt to write more early_data than we know the server will accept

2017-03-02 17:44:15 +00:00

statem

Don't call memcmp with a NULL pointer

2017-03-04 23:58:03 +00:00

bio_ssl.c

Remove some #if 0 code in ssl, crypto/bio

2017-02-28 09:32:41 -05:00

build.info

Move client parsing of ServerHello extensions into new framework

2016-12-08 17:18:25 +00:00

d1_lib.c

Code health: Stop using timeb.h / ftime() (VMS only)

2017-02-28 15:32:01 +01:00

d1_msg.c

Remove some obsolete/obscure internal define switches:

2017-03-01 10:44:49 +01:00

d1_srtp.c

Move client parsing of ServerHello extensions into new framework

2016-12-08 17:18:25 +00:00

methods.c

Add the SSL_METHOD for TLSv1.3 and all other base changes required

2016-11-02 13:08:21 +00:00

packet_locl.h

Miscellaneous style tweaks based on feedback received

2017-01-30 10:18:23 +00:00

packet.c

Use for loop in WPACKET_fill_lengths instead of do...while

2017-01-30 10:18:24 +00:00

pqueue.c

Fix a missed size_t variable declaration

2016-11-04 12:09:46 +00:00

s3_cbc.c

Clean up references to FIPS

2017-02-28 15:26:25 +01:00

s3_enc.c

fix a memory leak in ssl3_generate_key_block fix the error handling in ssl3_change_cipher_state

2017-01-23 11:41:59 +01:00

s3_lib.c

Remove some commented out code in libssl

2017-02-28 16:02:11 +00:00

s3_msg.c

Provide functions to write early data

2017-03-02 17:44:14 +00:00

ssl_asn1.c

Only accept early_data if the negotiated ALPN is the same

2017-03-02 17:44:15 +00:00

ssl_cert.c

Tidy up certificate type handling.

2017-02-24 01:23:38 +00:00

ssl_ciph.c

Remove some obsolete/obscure internal define switches:

2017-03-01 10:44:49 +01:00

ssl_conf.c

Test mac-then-encrypt

2016-11-28 12:23:36 +01:00

ssl_err.c

Add basic TLSv1.3 cookie support

2017-03-04 23:32:39 +00:00

ssl_init.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_lib.c

Add basic TLSv1.3 cookie support

2017-03-04 23:32:39 +00:00

ssl_locl.h

Add basic TLSv1.3 cookie support

2017-03-04 23:32:39 +00:00

ssl_mcnf.c

Fix misc size_t issues causing Windows warnings in 64 bit

2016-11-04 12:09:46 +00:00

ssl_rsa.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_sess.c

Add a SSL_SESSION_get_max_early_data() function

2017-03-02 17:44:15 +00:00

ssl_stat.c

Add missing debug strings.

2016-09-07 16:08:38 -04:00

ssl_txt.c

Move extension data into sub-structs

2017-01-09 22:26:47 -05:00

ssl_utst.c

Remove heartbeat support

2016-11-13 16:24:02 -05:00

t1_enc.c

Remove some TLSv1.3 TODOs that are no longer relevant

2017-03-02 17:44:15 +00:00

t1_ext.c

Rework error handling of custom_ext_meth_add towards strong exception safety.

2017-02-15 08:37:52 -05:00

t1_lib.c

Set specific error is we have no valid signature algorithms set

2017-03-03 22:02:39 +00:00

t1_trce.c

Construct the early_data extension

2017-03-02 17:44:14 +00:00

tls13_enc.c

Silence some more clang warnings

2017-03-03 00:05:57 +00:00

tls_srp.c

Indent ssl/

2016-08-18 14:02:29 +02:00