openssl/fuzz/decoder.c, branch openssl-3.4.0TLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.4.02024-09-05T07:35:49ZCopyright year updates2024-09-05T07:35:49ZTomas Mraztomas@openssl.org2024-09-05T07:35:49Zurn:sha1:7ed6de997f62466271ef7ff6016026e1fdc76963
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
fuzz/decoder.c: Lower the limits on key checks2024-07-05T11:45:53ZTomas Mraztomas@openssl.org2024-07-02T13:36:03Zurn:sha1:29696af689df734cae05181d85ee04470c3839d3
These checks still take too long time on clusterfuzz
so they are longer than the timeout limit.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/24781)
fuzz/decoder.c: Limit the EVP_PKEY_param_check on DHX keys as well2024-04-17T07:30:11ZTomas Mraztomas@openssl.org2024-04-12T13:37:58Zurn:sha1:8d8a0144303374f69f73fc944dd55c68600d15e5
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24126)
fuzz/decoder.c: Limit the key sizes on which checks are run2024-04-10T07:28:59ZTomas Mraztomas@openssl.org2024-04-05T14:29:53Zurn:sha1:9fc61ba0a74dfd910c4e96e711291555ac64b2b4
In particular the DH safe prime check will be limited to 8192 bits
and the private and pairwise checks are limited to 16384 bits on
any key types.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/24049)
Add decoder fuzzer2023-06-23T13:54:54ZKurt Roeckxkurt@roeckx.be2023-01-11T20:14:35Zurn:sha1:a9e6100bc98439ca787aa1fce541550ad1ff3e84
This found CVE-2023-0217
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20269)