usa 5450329ad1 asn1: fix out-of-bounds read in decoding constructed objects ...

* OpenSSL::ASN1.{decode,decode_all,traverse}: have a bug of
  out-of-bounds read. int_ossl_asn1_decode0_cons() does not give the
  correct available length to ossl_asn1_decode() when decoding the
  inner components of a constructed object. This can cause
  out-of-bounds read if a crafted input given.

Reference: https://hackerone.com/reports/170316
https://github.com/ruby/openssl/commit/1648afef33c1d97fb203c82291b8a61269e85d3b


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@59903 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

2017-09-14 11:41:59 +00:00

..

lib

merge revision(s) 51409,51453: [Backport #10910]

2015-08-12 15:16:42 +00:00

depend

Update dependencies.

2014-12-19 13:34:54 +00:00

deprecation.rb

* ext/openssl/deprecation.rb (OpenSSL.check_func): check if header is

2012-05-01 05:18:02 +00:00

extconf.rb

merge revision(s) 49576: [Backport #12288]

2016-04-22 07:37:36 +00:00

openssl_missing.c

merge revision(s) 55074: [Backport #12868]

2016-11-11 22:36:50 +00:00

openssl_missing.h

merge revision(s) 55074: [Backport #12868]

2016-11-11 22:36:50 +00:00

ossl_asn1.c

asn1: fix out-of-bounds read in decoding constructed objects

2017-09-14 11:41:59 +00:00

ossl_asn1.h

* ext/**/*.[ch]: removed trailing spaces.

2010-04-22 08:04:13 +00:00

ossl_bio.c

ext: prefer RB_TYPE_P over comparison TYPE with constants

2014-08-03 01:56:01 +00:00

ossl_bio.h

* ext/openssl: all files are reviewed to simplify and avoid memory leak.

2003-09-17 09:05:02 +00:00

ossl_bn.c

merge revision(s) 55047: [Backport #12441]

2016-08-16 11:55:03 +00:00

ossl_bn.h

* ext/openssl/ossl_bn.c: More documentation.

2007-04-03 07:02:44 +00:00

ossl_cipher.c

ossl_cipher.c: workaround of OpenSSL API

2014-12-23 02:42:16 +00:00

ossl_cipher.h

* ext/openssl/ossl_pkcs5.c: New module.

2007-04-05 05:59:22 +00:00

ossl_config.c

protoize no-arguments functions

2014-09-30 05:25:32 +00:00

ossl_config.h

* ext/openssl/ossl.h: include openssl/conf.h and openssl/conf_api.h.

2003-09-08 10:31:38 +00:00

ossl_digest.c

ossl_digest.c: typed data

2014-12-12 21:57:44 +00:00

ossl_digest.h

* ext/openssl/ossl_pkcs5.c: New module.

2007-04-05 05:59:22 +00:00

ossl_engine.c

ossl_engine.c: typed data

2014-12-12 21:57:49 +00:00

ossl_engine.h

* ext/openssl/ossl_engine.c: add a new module OpenSSL::Engine.

2003-10-02 08:47:11 +00:00

ossl_hmac.c

ossl_hmac.c: typed data

2014-12-12 21:57:56 +00:00

ossl_hmac.h

* ext/openssl: imported.

2003-07-23 16:12:24 +00:00

ossl_ns_spki.c

ossl_ns_spki.c: typed data

2014-12-12 21:58:03 +00:00

ossl_ns_spki.h

* ext/openssl: imported.

2003-07-23 16:12:24 +00:00

ossl_ocsp.c

ossl_ocsp.c: typed data

2014-12-12 21:58:22 +00:00

ossl_ocsp.h

* ext/openssl: imported.

2003-07-23 16:12:24 +00:00

ossl_pkcs5.c

protoize no-arguments functions

2014-09-30 05:25:32 +00:00

ossl_pkcs5.h

* ext/dl/cfunc.c (rb_dlcfunc_call): adjust format. [ruby-dev:31222]

2007-07-15 13:24:39 +00:00

ossl_pkcs7.c

ossl_pkcs7.c: typed data

2014-12-12 22:38:01 +00:00

ossl_pkcs7.h

* ext/openssl/ossl_pkcs5.c: New module.

2007-04-05 05:59:22 +00:00

ossl_pkcs12.c

ossl_pkcs12.c: typed data

2014-12-12 22:37:53 +00:00

ossl_pkcs12.h

* ext/openssl/ossl_pkcs5.c: New module.

2007-04-05 05:59:22 +00:00

ossl_pkey_dh.c

merge revision(s) 55175: [Backport #12428]

2016-08-16 11:33:35 +00:00

ossl_pkey_dsa.c

merge revision(s) 55175: [Backport #12428]

2016-08-16 11:33:35 +00:00

ossl_pkey_ec.c

ossl_pkey_ec.c: typed data

2014-12-12 23:19:24 +00:00

ossl_pkey_rsa.c

merge revision(s) 55175: [Backport #12428]

2016-08-16 11:33:35 +00:00

ossl_pkey.c

merge revision(s) 52556,52557: [Backport #10735]

2015-11-18 15:37:52 +00:00

ossl_pkey.h

ossl_pkey.c: typed data

2014-12-12 23:19:07 +00:00

ossl_rand.c

merge revision(s) 49576: [Backport #12288]

2016-04-22 07:37:36 +00:00

ossl_rand.h

* ext/openssl: imported.

2003-07-23 16:12:24 +00:00

ossl_ssl_session.c

ossl_ssl_session.c: typed data

2014-12-12 21:58:25 +00:00

ossl_ssl.c

merge revision(s) 53064: [Backport #11810]

2016-11-15 06:33:36 +00:00

ossl_ssl.h

ossl_ssl.c: typed data

2014-12-12 21:58:34 +00:00

ossl_version.h

* ext/openssl/ossl_ssl.c: Switch stats hash key from string to symbol.

2008-04-20 22:32:06 +00:00

ossl_x509.c

protoize no-arguments functions

2014-09-30 05:25:32 +00:00

ossl_x509.h

* ext/openssl/ossl_ssl.c (ossl_ssl_peer_cert_chain): add new method

2003-11-01 09:24:55 +00:00

ossl_x509attr.c

ossl_x509attr.c: typed data

2014-12-12 23:38:44 +00:00

ossl_x509cert.c

ossl_x509cert.c: typed data

2014-12-12 23:38:55 +00:00

ossl_x509crl.c

ossl_x509crl.c: typed data

2014-12-12 23:39:04 +00:00

ossl_x509ext.c

ossl_x509ext.c: typed data

2014-12-12 23:46:42 +00:00

ossl_x509name.c

ossl_x509name.c: typed data

2014-12-12 23:59:19 +00:00

ossl_x509req.c

ossl_x509req.c: typed data

2014-12-12 23:59:28 +00:00

ossl_x509revoked.c

ossl_x509revoked.c: typed data

2014-12-12 23:59:36 +00:00

ossl_x509store.c

merge revision(s) 55074: [Backport #12868]

2016-11-11 22:36:50 +00:00

ossl.c

merge revision(s) 55074: [Backport #12868]

2016-11-11 22:36:50 +00:00

ossl.h

merge revision(s) 55074: [Backport #12868]

2016-11-11 22:36:50 +00:00

ruby_missing.h

* ext/openssl/extconf.rb: remove checks for available functions.

2011-11-26 01:49:36 +00:00