openssl/fuzz, branch openssl-3.1TLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.12025-02-25T10:59:27Zfix: add OOM handler for x509 fuzz test2025-02-25T10:59:27ZBurkov Egoreburkov@rvision.ru2025-02-19T13:42:07Zurn:sha1:2560c117ae5bcb49939f7734b47bb3e6aaf3d847
CLA: trivial
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26830)
(cherry picked from commit 6d42072e0b9e52fbeee28cb451e2ec269b329708)
Fix error handling in CMS_EncryptedData_encrypt2024-11-13T16:12:23ZBernd Edlingerbernd.edlinger@hotmail.de2023-09-07T16:05:44Zurn:sha1:8d723690b0863cafcbae206acf48f9a8d3115fd0
That caused several memory leaks in case of error.
Also when the CMS object that is created by CMS_EncryptedData_encrypt
is not used in the normal way, but instead just deleted
by CMS_ContentInfo_free some memory was lost.
Fixes #21985
Reviewed-by: Hugo Landau <hlandau@devever.net>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22044)
Copyright year updates2024-09-03T12:55:43ZTomas Mraztomas@openssl.org2024-09-03T12:55:43Zurn:sha1:f361ec693bf9efbc56e2a84dbf47268941791aed
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
limit bignums to 128 bytes2024-08-09T12:28:27ZNeil Hormannhorman@openssl.org2024-07-26T15:01:05Zurn:sha1:7fb2cc622993892a9d5ac564a902bd8bf8ae6936
Keep us from spinning forever doing huge amounts of math in the fuzzer
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/25013)
(cherry picked from commit f0768376e1639d12a328745ef69c90d584138074)
Copyright year updates2024-06-04T14:18:59ZTomas Mraztomas@openssl.org2024-06-04T14:18:59Zurn:sha1:738af157ab82d0f459bd5010c7bb1ebf3f1db2d2
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
Don't print excessively long ASN1 items in fuzzer2024-02-21T16:48:14ZMatt Caswellmatt@openssl.org2024-02-20T15:11:26Zurn:sha1:c8dd22a2b654bbc16c18da031921511ec7ba1db0
Prevent spurious fuzzer timeouts by not printing ASN1 which is excessively
long.
This fixes a false positive encountered by OSS-Fuzz.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/23640)
(cherry picked from commit 4a6f70c03182b421d326831532edca32bcdb3fb1)
Copyright year updates2023-09-19T12:57:48ZRichard Levittelevitte@openssl.org2023-09-19T12:57:48Zurn:sha1:aad5c78403ea4781402988769846815fa1b8dd94
Reviewed-by: Matt Caswell <matt@openssl.org>
Release: yes
Update X509 fuzzer to verify a chain2023-09-01T09:14:25ZKurt Roeckxkurt@roeckx.be2022-12-18T19:54:15Zurn:sha1:869d95b00e22b68897a541abf3bcee3589d2d519
It add supports for verifying that it's been signed by a CA, and
checks the CRL and OCSP status
Can find CVE-2022-4203 and CVE-2023-0286
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20243)
(cherry picked from commit 399c2da08ab9c6a382f8e9950742a022e847fec0)
Update copyright year2022-12-01T11:47:05ZTomas Mraztomas@openssl.org2022-12-01T11:29:01Zurn:sha1:967f20144025e51d6bce5d115f5eaebea328394d
Reviewed-by: Matt Caswell <matt@openssl.org>
Release: yes
(Merged from https://github.com/openssl/openssl/pull/19803)
Use <openssl/e_os2.h> rather than <stdint.h>2022-11-17T10:10:55ZRichard Levittelevitte@openssl.org2022-11-16T15:20:57Zurn:sha1:7fe68ca8382f60c5bf58dfaab4cb06da902763d9
<stdint.h> is C99, which means that on older compiler, it can't be included.
We have code in <openssl/e_os2.h> that compensates.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19697)
(cherry picked from commit 7bc5ce4a79c61ab7238b188f9af48f41ff1392f9)