Age | Commit message (Collapse) | Author | Files | Lines |
|
Change-Id: I254f6095d312777427a57af3ed346986a28f3aaa
|
|
|
|
|
|
|
|
|
|
On indefinite string decoding, setting a maximum level of recursions
protects the BER decoder from a stack exhaustion due to large amounts
of recursion.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
(cherry-picked from upstream c593ae84cfcde8fea45787e53950e0ac71e9ca97)
Change-Id: If3eb039487979b9639b42b314c3b0c89f18737fa
Signed-off-by: Tomasz Swierczek <t.swierczek@samsung.com>
|
|
The patch fixes CVE-2017-10790 vulnerability:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10790
https://bugzilla.redhat.com/show_bug.cgi?id=1464141#c5
The _asn1_check_identifier function caused a NULL pointer dereference
and crashed when a NULL value was assigned to value member in
asn1_node. It could lead to a remote DOS attack.
(cherry-picked from upstream d8d805e1f2e6799bb2dff4871a8598dc83088a39)
Change-Id: I4136fe2df14980581cfdc6ec619742967449349c
|
|
Files on GPLv3 are not taken for build, the C library is on LGPLv2 licence.
Tools are licenced under GPLv3 - licence added.
Change-Id: I627a59412420a7946e0e14fd902ee04098702642
(cherry picked from commit 28b2e0b5e3fb8b89bc4c49d2d67b728eb6ee90d8)
|
|
This prevents a stack overflow in asn1_find_node() which
is triggered by too long variable names in the definitions
files. That means that applications have to deliberately
pass a too long 'name' constant to asn1_write_value()
and friends. Reported by Jakub Jirasek.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
(cherry-picked from upstream 5520704d075802df25ce4ffccc010ba1641bd484)
Change-Id: I893834c68ede90cd5953289a2c207c79e2971b51
|
|
Change-Id: I6a83621b105d4c428d1df8e52499b53185577419
Signed-off-by: sangsu <sangsu.choi@samsung.com>
|
|
Change-Id: I25e57ece28b9ebb637a2b7356f57e11b7f2eb807
Signed-off-by: sangsu <sangsu.choi@samsung.com>
|
|
Change-Id: Ica1810d38708822a278307e6110d9b9bb20b98d8
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
|
|
Also add missing dependency to help2man.
Change-Id: I1ed6cf5ea84b3f418b9742d6b89ae54ad3d37fef
Signed-off-by: Kévin THIERRY <kevin.thierry@open.eurogiciel.org>
|
|
Alignment Tizen and Yocto package versions
[kevin.thierry: set correct version in spec file, remove unnecessary
.gbs.conf file.]
Bug-Tizen: TC-1926
Change-Id: I1f82c87d1f7828aff43e256ac05bb18a772956e2
Signed-off-by: Sabera Djelti (sdi2) <sabera.djelti@open.eurogiciel.org>
Signed-off-by: Kévin THIERRY <kevin.thierry@open.eurogiciel.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
That will allow using asn1_der_decoding_startEnd() without
performing decoding.
|
|
asn1_der_coding().
|
|
|
|
|
|
|
|
|
|
|
|
Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
|
|
|
|
|
|
|
|
|
|
_asn1_append_sequence_set.
|