<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openssl/fuzz/decoder.c, branch openssl-3.3.2</title>
<subtitle>TLS/SSL and crypto library.</subtitle>
<id>http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.3.2</id>
<link rel='self' href='http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.3.2'/>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/'/>
<updated>2024-07-05T11:57:12Z</updated>
<entry>
<title>fuzz/decoder.c: Lower the limits on key checks</title>
<updated>2024-07-05T11:57:12Z</updated>
<author>
<name>Tomas Mraz</name>
<email>tomas@openssl.org</email>
</author>
<published>2024-07-02T13:36:03Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=658e53b4efa1ca55e9ea2ad8f03971fcc85aad17'/>
<id>urn:sha1:658e53b4efa1ca55e9ea2ad8f03971fcc85aad17</id>
<content type='text'>
These checks still take too long time on clusterfuzz
so they are longer than the timeout limit.

Reviewed-by: Neil Horman &lt;nhorman@openssl.org&gt;
Reviewed-by: Kurt Roeckx &lt;kurt@roeckx.be&gt;
(Merged from https://github.com/openssl/openssl/pull/24781)

(cherry picked from commit 29696af689df734cae05181d85ee04470c3839d3)
</content>
</entry>
<entry>
<title>Copyright year updates</title>
<updated>2024-06-04T12:50:58Z</updated>
<author>
<name>Tomas Mraz</name>
<email>tomas@openssl.org</email>
</author>
<published>2024-06-04T12:50:58Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=ecb03cdeaa8f3dfaba1c8f6dae1cffd243451517'/>
<id>urn:sha1:ecb03cdeaa8f3dfaba1c8f6dae1cffd243451517</id>
<content type='text'>
Reviewed-by: Neil Horman &lt;nhorman@openssl.org&gt;
Release: yes
</content>
</entry>
<entry>
<title>fuzz/decoder.c: Limit the EVP_PKEY_param_check on DHX keys as well</title>
<updated>2024-04-17T07:30:39Z</updated>
<author>
<name>Tomas Mraz</name>
<email>tomas@openssl.org</email>
</author>
<published>2024-04-12T13:37:58Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=20c6924d5e3f2615f9132bf730e7e2fd9206a336'/>
<id>urn:sha1:20c6924d5e3f2615f9132bf730e7e2fd9206a336</id>
<content type='text'>
Reviewed-by: Neil Horman &lt;nhorman@openssl.org&gt;
Reviewed-by: Richard Levitte &lt;levitte@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/24126)

(cherry picked from commit 8d8a0144303374f69f73fc944dd55c68600d15e5)
</content>
</entry>
<entry>
<title>fuzz/decoder.c: Limit the key sizes on which checks are run</title>
<updated>2024-04-10T07:29:46Z</updated>
<author>
<name>Tomas Mraz</name>
<email>tomas@openssl.org</email>
</author>
<published>2024-04-05T14:29:53Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=297312b24742b25fa7d0c15e92fe89afbc11123e'/>
<id>urn:sha1:297312b24742b25fa7d0c15e92fe89afbc11123e</id>
<content type='text'>
In particular the DH safe prime check will be limited to 8192 bits
and the private and pairwise checks are limited to 16384 bits on
any key types.

Reviewed-by: Neil Horman &lt;nhorman@openssl.org&gt;
Reviewed-by: Shane Lontis &lt;shane.lontis@oracle.com&gt;
(Merged from https://github.com/openssl/openssl/pull/24049)

(cherry picked from commit 9fc61ba0a74dfd910c4e96e711291555ac64b2b4)
</content>
</entry>
<entry>
<title>Add decoder fuzzer</title>
<updated>2023-06-23T13:54:54Z</updated>
<author>
<name>Kurt Roeckx</name>
<email>kurt@roeckx.be</email>
</author>
<published>2023-01-11T20:14:35Z</published>
<link rel='alternate' type='text/html' href='http://git.bktus.com/gpgfrontend/openssl/commit/?id=a9e6100bc98439ca787aa1fce541550ad1ff3e84'/>
<id>urn:sha1:a9e6100bc98439ca787aa1fce541550ad1ff3e84</id>
<content type='text'>
This found CVE-2023-0217

Reviewed-by: Paul Dale &lt;pauli@openssl.org&gt;
Reviewed-by: Matt Caswell &lt;matt@openssl.org&gt;
(Merged from https://github.com/openssl/openssl/pull/20269)
</content>
</entry>
</feed>
