openssl/ssl, branch OpenSSL_1_0_0fTLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_1_0_0f2012-01-04T16:51:14ZSubmitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de>2012-01-04T16:51:14ZDr. Stephen Hensonsteve@openssl.org2012-01-04T16:51:14Zurn:sha1:84c95826de5957fef5f75a50e97e662193be080d
Reviewed by: steve
Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.
add missing part for SGC restart fix (CVE-2011-4619)2012-01-04T16:46:10ZDr. Stephen Hensonsteve@openssl.org2012-01-04T16:46:10Zurn:sha1:63819e6f00a53f2bffa7356831c62844ca723d5eClear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) [include source patch this time!]2012-01-04T15:38:54ZDr. Stephen Hensonsteve@openssl.org2012-01-04T15:38:54Zurn:sha1:8206dba75c7fc1a5274b3a9f8ddc4e77cf34669dOnly allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)2012-01-04T15:27:54ZDr. Stephen Hensonsteve@openssl.org2012-01-04T15:27:54Zurn:sha1:9004c53107aee0e2afae8544bd10a2e8bc621eebSubmitted by: Adam Langley <agl@chromium.org>2012-01-04T14:24:48ZDr. Stephen Hensonsteve@openssl.org2012-01-04T14:24:48Zurn:sha1:22d89c501e43685c594eb9c8917f7e812b9554dc
Reviewed by: steve
Fix memory leaks.
PR: 23262011-12-26T19:38:19ZDr. Stephen Hensonsteve@openssl.org2011-12-26T19:38:19Zurn:sha1:c06916db9fbcefc9be71b7d66afe4eea4fe579ae
Submitted by: Tianjie Mao <tjmao@tjmao.net>
Reviewed by: steve
Fix incorrect comma expressions and goto f_err as alert has been set.
Resolve a stack set-up race condition (if the list of compression2011-12-02T12:51:05ZBodo Möllerbodo@openssl.org2011-12-02T12:51:05Zurn:sha1:44c854ddb9f17a17bb54570abcf33de635f5203b
methods isn't presorted, it will be sorted on first read).
Submitted by: Adam Langley
PR: 26282011-10-27T13:06:34ZDr. Stephen Hensonsteve@openssl.org2011-10-27T13:06:34Zurn:sha1:68b5330040e8fe529b8750098d30bfa06e596a20
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve
Send alert instead of assertion failure for incorrectly formatted DTLS
fragments.
PR: 26282011-10-27T13:01:08ZDr. Stephen Hensonsteve@openssl.org2011-10-27T13:01:08Zurn:sha1:da7ae62abd791c24d623fc80b5894f1e463452ba
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve
Fix for ECC keys and DTLS.
In ssl3_clear, preserve s3->init_extra along with s3->rbuf.2011-10-13T13:05:12ZBodo Möllerbodo@openssl.org2011-10-13T13:05:12Zurn:sha1:48373e55d10c4f18eeb1b54f752b9c98d3d7e136
Submitted by: Bob Buckholz <bbuckholz@google.com>