openssl/fuzz, branch openssl-3.3.2TLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.3.22024-09-03T12:44:27ZCopyright year updates2024-09-03T12:44:27ZTomas Mraztomas@openssl.org2024-09-03T12:44:27Zurn:sha1:96782e34ddf480d10ca4781cabbd2a7d4feff982
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
limit bignums to 128 bytes2024-08-09T12:28:50ZNeil Hormannhorman@openssl.org2024-07-26T15:01:05Zurn:sha1:2113294c8c5cb84ae3534f9d9457433a6a33d9e1
Keep us from spinning forever doing huge amounts of math in the fuzzer
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/25013)
(cherry picked from commit f0768376e1639d12a328745ef69c90d584138074)
fuzz/decoder.c: Lower the limits on key checks2024-07-05T11:57:12ZTomas Mraztomas@openssl.org2024-07-02T13:36:03Zurn:sha1:658e53b4efa1ca55e9ea2ad8f03971fcc85aad17
These checks still take too long time on clusterfuzz
so they are longer than the timeout limit.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/24781)
(cherry picked from commit 29696af689df734cae05181d85ee04470c3839d3)
Copyright year updates2024-06-04T12:50:58ZTomas Mraztomas@openssl.org2024-06-04T12:50:58Zurn:sha1:ecb03cdeaa8f3dfaba1c8f6dae1cffd243451517
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
fuzz/decoder.c: Limit the EVP_PKEY_param_check on DHX keys as well2024-04-17T07:30:39ZTomas Mraztomas@openssl.org2024-04-12T13:37:58Zurn:sha1:20c6924d5e3f2615f9132bf730e7e2fd9206a336
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24126)
(cherry picked from commit 8d8a0144303374f69f73fc944dd55c68600d15e5)
fuzz/decoder.c: Limit the key sizes on which checks are run2024-04-10T07:29:46ZTomas Mraztomas@openssl.org2024-04-05T14:29:53Zurn:sha1:297312b24742b25fa7d0c15e92fe89afbc11123e
In particular the DH safe prime check will be limited to 8192 bits
and the private and pairwise checks are limited to 16384 bits on
any key types.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/24049)
(cherry picked from commit 9fc61ba0a74dfd910c4e96e711291555ac64b2b4)
Copyright year updates2024-03-20T12:07:54ZRichard Levittelevitte@openssl.org2024-03-20T12:07:54Zurn:sha1:0ce7d1f355c1240653e320a3f6f8109c1f05f8c0
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
Add Content Type OID for id-ct-rpkiSignedPrefixList2024-03-15T08:10:22ZJob Snijdersjob@sobornost.net2024-01-29T20:40:32Zurn:sha1:c5e097dec5e93828837f4208c6968a0b7f38291e
References: draft-ietf-sidrops-rpki-prefixlist
Title: "A profile for Signed Prefix Lists for Use in the Resource Public Key Infrastructure (RPKI)"
OID assigned under 'SMI Security for S/MIME CMS Content Type (1.2.840.113549.1.9.16.1)'
https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-1
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23426)
Add fuzzing for DTLS2024-03-12T19:10:40ZFrederik Wedel-Heinenfrederik.wedel-heinen@dencrypt.dk2024-02-14T09:09:55Zurn:sha1:7649b5548e5c0352b91d9d3ed695e42a2ac1e99c
Update the fuzz corpora submodule with the DTLS fuzz corpus.
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23585)
Don't print excessively long ASN1 items in fuzzer2024-02-21T16:45:33ZMatt Caswellmatt@openssl.org2024-02-20T15:11:26Zurn:sha1:4a6f70c03182b421d326831532edca32bcdb3fb1
Prevent spurious fuzzer timeouts by not printing ASN1 which is excessively
long.
This fixes a false positive encountered by OSS-Fuzz.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/23640)