openssl/fuzz, branch OpenSSL_1_1_1w

Fix error handling in CMS_EncryptedData_encrypt

2023-09-11T08:22:43Z

That caused several memory leaks in case of error. Also when the CMS object that is created by CMS_EncryptedData_encrypt is not used in the normal way, but instead just deleted by CMS_ContentInfo_free some memory was lost. Fixes #21985 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/22008)

Backport a missing bug-fix from master

2022-05-21T03:57:34Z

This is a backport of the following commit from master: commit 61b0fead5e6079ca826594df5b9ca00e65883cb0 Author: Matt Caswell Date: Thu Nov 19 13:58:21 2020 +0000 Don't Overflow when printing Thawte Strong Extranet Version When printing human readable info on the Thawte Strong Extranet extension the version number could overflow if the version number == LONG_MAX. This is undefined behaviour. Issue found by OSSFuzz. Reviewed-by: Ben Kaduk (Merged from https://github.com/openssl/openssl/pull/13452) Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/18347)

Backport some fuzzing data files from master

2022-05-21T03:57:34Z

This is a backport of the following commit from master: commit 415e6ac80405e13b20b083315747e431274fbd33 Author: Tavis Ormandy Date: Tue Sep 21 15:48:27 2021 -0700 increase x509 code coverage metrics Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/16651) Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/18347)

Fix the error handling in i2v_AUTHORITY_KEYID

2021-08-24T12:19:04Z

Previously if an error path is entered a leak could result. Reviewed-by: Viktor Dukhovni Reviewed-by: Paul Dale

Update copyright year

2021-03-25T13:21:32Z

Reviewed-by: Tomas Mraz

Test that X509_issuer_and_serial_hash doesn't crash

2021-02-16T11:34:03Z

Provide a certificate with a bad issuer and check that X509_issuer_and_serial_hash doesn't crash. Reviewed-by: Richard Levitte Reviewed-by: Paul Dale (cherry picked from commit 55869f594f052561b11a2db6a7c42690051868de)

Update copyright year

2020-09-22T12:45:08Z

Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/12949)

fuzz/asn1.c: Add missing #include

2020-04-27T22:05:18Z

gets included via ts.h... except when 'no-ts' has been configured. Fixes #11597 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/11640) (cherry picked from commit 60ebc0ca5a829e2ae939a9ab13658af202b6dfc7)

Fix GOST OID

2019-05-24T09:36:06Z

CLA: trivial Reviewed-by: Shane Lontis Reviewed-by: Richard Levitte Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/8979)

Update copyright year

2018-11-20T13:27:36Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/7669)