summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2018-06-15Merge branch 'upstream' into tizensubmit/tizen_5.0/20181101.000007submit/tizen/20180615.093304accepted/tizen/unified/20180620.131427accepted/tizen/5.0/unified/20181102.030257Pawel Kowalski198-2985/+6229
Change-Id: I254f6095d312777427a57af3ed346986a28f3aaa
2018-06-15Imported Upstream version 4.13upstream/4.13Dariusz Michaluk16-46/+96
2018-06-15Imported Upstream version 4.12upstream/4.12Dariusz Michaluk44-155/+238
2018-06-15Imported Upstream version 4.10upstream/4.10Dariusz Michaluk167-2149/+4902
2018-06-15Imported Upstream version 4.9upstream/4.9Dariusz Michaluk29-771/+1157
2018-05-21BACKPORT: _asn1_decode_simple_ber: restrict the levels of recursion to 3Nikos Mavrogiannopoulos1-2/+19
On indefinite string decoding, setting a maximum level of recursions protects the BER decoder from a stack exhaustion due to large amounts of recursion. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> (cherry-picked from upstream c593ae84cfcde8fea45787e53950e0ac71e9ca97) Change-Id: If3eb039487979b9639b42b314c3b0c89f18737fa Signed-off-by: Tomasz Swierczek <t.swierczek@samsung.com>
2017-10-03Fix CVE-2017-10790 vulnerabilitysubmit/tizen/20171005.115455accepted/tizen/unified/20171011.150545Pawel Kowalski1-5/+10
The patch fixes CVE-2017-10790 vulnerability: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10790 https://bugzilla.redhat.com/show_bug.cgi?id=1464141#c5 The _asn1_check_identifier function caused a NULL pointer dereference and crashed when a NULL value was assigned to value member in asn1_node. It could lead to a remote DOS attack. (cherry-picked from upstream d8d805e1f2e6799bb2dff4871a8598dc83088a39) Change-Id: I4136fe2df14980581cfdc6ec619742967449349c
2017-09-08Removed GPLv3 licence from main RPM & added to 'tools'submit/tizen/20170914.015357submit/tizen/20170908.054611accepted/tizen/unified/20170914.154314Tomasz Swierczek1-1/+2
Files on GPLv3 are not taken for build, the C library is on LGPLv2 licence. Tools are licenced under GPLv3 - licence added. Change-Id: I627a59412420a7946e0e14fd902ee04098702642 (cherry picked from commit 28b2e0b5e3fb8b89bc4c49d2d67b728eb6ee90d8)
2017-06-16BACKPORT: asn1_find_node: added safety check on asn1_find_node()submit/tizen_4.0/20170828.100006submit/tizen_4.0/20170811.094300submit/tizen/20170616.143116accepted/tizen/unified/20170620.174035accepted/tizen/4.0/unified/20170828.222817accepted/tizen/4.0/unified/20170816.011243Nikos Mavrogiannopoulos1-0/+6
This prevents a stack overflow in asn1_find_node() which is triggered by too long variable names in the definitions files. That means that applications have to deliberately pass a too long 'name' constant to asn1_write_value() and friends. Reported by Jakub Jirasek. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> Signed-off-by: Rafal Krypa <r.krypa@samsung.com> (cherry-picked from upstream 5520704d075802df25ce4ffccc010ba1641bd484) Change-Id: I893834c68ede90cd5953289a2c207c79e2971b51
2016-06-08Merge branch 'upstream' into tizentizen_4.0.m1_releasesubmit/tizen_unified/20170308.100414submit/tizen_3.0_wearable/20161015.000003submit/tizen_3.0_tv/20161015.000003submit/tizen_3.0_mobile/20161015.000004submit/tizen_3.0_ivi/20161010.000004submit/tizen_3.0_common/20161104.104000submit/tizen_3.0.m2/20170104.093753submit/tizen/20160613.080449accepted/tizen/wearable/20160614.041230accepted/tizen/unified/20170309.035942accepted/tizen/tv/20160614.041238accepted/tizen/mobile/20160614.041226accepted/tizen/ivi/20160614.041245accepted/tizen/common/20160614.143706accepted/tizen/3.0/wearable/20161015.083140accepted/tizen/3.0/tv/20161016.004829accepted/tizen/3.0/mobile/20161015.033615accepted/tizen/3.0/ivi/20161011.050502accepted/tizen/3.0/common/20161114.111043accepted/tizen/3.0.m2/wearable/20170105.025000accepted/tizen/3.0.m2/tv/20170105.024831accepted/tizen/3.0.m2/mobile/20170105.024646tizen_3.0_tvtizen_3.0.m2accepted/tizen_wearableaccepted/tizen_tvaccepted/tizen_mobileaccepted/tizen_iviaccepted/tizen_commonaccepted/tizen_3.0.m2_wearableaccepted/tizen_3.0.m2_tvaccepted/tizen_3.0.m2_mobilesangsu257-2910/+98537
Change-Id: I6a83621b105d4c428d1df8e52499b53185577419 Signed-off-by: sangsu <sangsu.choi@samsung.com>
2016-06-08Imported Upstream version 4.8upstream/4.8submit/upstream/20160613.071414sangsu256-2909/+98536
Change-Id: I25e57ece28b9ebb637a2b7356f57e11b7f2eb807 Signed-off-by: sangsu <sangsu.choi@samsung.com>
2015-12-28Update license from GPL-3.0 to GPL-3.0+submit/tizen/20160303.025319accepted/tizen/wearable/20160305.090107accepted/tizen/tv/20160305.090049accepted/tizen/mobile/20160305.090022accepted/tizen/ivi/20160305.090124accepted/tizen/common/20160303.110301sangwan.kwon1-1/+1
Change-Id: Ica1810d38708822a278307e6110d9b9bb20b98d8 Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>
2014-12-30Packaging: clean spec filetizen_3.0_ivi_releasetizen_3.0.m2.a1_tv_releasetizen_3.0.m2.a1_mobile_releasetizen_3.0.m1_tv_releasetizen_3.0.m1_mobile_releasesubmit/tizen_wearable/20150128.000000submit/tizen_wearable/20150127.000001submit/tizen_tv/20150323.050640submit/tizen_tv/20150320.000002submit/tizen_tv/20150130.050505submit/tizen_tv/20150130.000000submit/tizen_mobile/20150223.000001submit/tizen_mobile/20150213.000000submit/tizen_mobile/20150129.000000submit/tizen_ivi/20160217.000006submit/tizen_ivi/20160217.000000submit/tizen_ivi/20150116.666666submit/tizen_ivi/20150116.444444submit/tizen_ivi/20150116.222222submit/tizen_common/20151019.135620submit/tizen_common/20151015.190624submit/tizen_common/20150114.133045accepted/tizen/wearable/20150129.005740accepted/tizen/tv/20150324.014555accepted/tizen/mobile/20150224.002803accepted/tizen/ivi/20160218.025246accepted/tizen/ivi/20150117.065458accepted/tizen/common/20150116.082239tizen_3.0_ivitizen_3.0.m1_tvtizen_3.0.m1_mobiletizen_3.0.2015.q2_commontizen_3.0.2015.q1_commontizen_3.0.2014.q4_commonsandbox/kevinthierry/bump-4.0Kévin THIERRY1-9/+5
Also add missing dependency to help2man. Change-Id: I1ed6cf5ea84b3f418b9742d6b89ae54ad3d37fef Signed-off-by: Kévin THIERRY <kevin.thierry@open.eurogiciel.org>
2014-11-26Bump to version 4.0Sabera Djelti (sdi2)2-3/+4
Alignment Tizen and Yocto package versions [kevin.thierry: set correct version in spec file, remove unnecessary .gbs.conf file.] Bug-Tizen: TC-1926 Change-Id: I1f82c87d1f7828aff43e256ac05bb18a772956e2 Signed-off-by: Sabera Djelti (sdi2) <sabera.djelti@open.eurogiciel.org> Signed-off-by: Kévin THIERRY <kevin.thierry@open.eurogiciel.org>
2014-11-10resetting manifest requested domain to floorAlexandru Cornea2-0/+10
2014-11-10tools belongs to Security/Crypto LibrariesAnas Nashif2-1/+4
2014-11-10require libtasn1-toolsAnas Nashif2-0/+5
2014-11-10Fixed package groupAnas Nashif1-0/+3
2014-11-10Fixed package groupAnas Nashif1-4/+18
2014-11-10update to 2.14Anas Nashif1-1/+1
2014-11-10update to 2.14Anas Nashif2-3/+2
2014-11-10add packagingAnas Nashif2-0/+59
2014-06-26released 4.0upstream/4.0Nikos Mavrogiannopoulos1-1/+1
2014-06-26doc: Added new functionsNikos Mavrogiannopoulos1-0/+4
2014-06-26doc updateNikos Mavrogiannopoulos1-1/+1
2014-06-20bumped versionNikos Mavrogiannopoulos1-1/+1
2014-06-20doc updateNikos Mavrogiannopoulos1-0/+6
2014-06-20Renamed asn1_der_decoding_relaxed(), added ASN1_DECODE_FLAG_ALLOW_PADDING.Karel Slany3-24/+18
2014-06-20Added asn1_der_decoding_relaxed().Karel Slany3-13/+61
2014-06-19doc updateNikos Mavrogiannopoulos1-2/+3
2014-06-19bumped versionNikos Mavrogiannopoulos1-4/+4
2014-06-19doc updateNikos Mavrogiannopoulos1-2/+1
2014-06-17doc updateNikos Mavrogiannopoulos1-0/+3
2014-06-17doc updateNikos Mavrogiannopoulos1-1/+7
2014-06-17doc updateNikos Mavrogiannopoulos1-1/+1
2014-06-17corrected file nameNikos Mavrogiannopoulos1-1/+1
2014-06-09doc updateNikos Mavrogiannopoulos1-2/+2
2014-06-09When encoding DER note the positions of the DER start and end.Nikos Mavrogiannopoulos1-0/+3
That will allow using asn1_der_decoding_startEnd() without performing decoding.
2014-06-09Added new test that combines asn1_der_decoding_startEnd() with ↵Nikos Mavrogiannopoulos3-3/+233
asn1_der_coding().
2014-06-09Added copyright informationNikos Mavrogiannopoulos1-0/+20
2014-06-09Added test for asn1_der_decoding_startEnd() after an asn1_dup_node().Nikos Mavrogiannopoulos1-0/+27
2014-06-09When duplicating a node, keep the DER start and end information.Nikos Mavrogiannopoulos1-0/+2
2014-06-09decoding: corrected the end position of the total structure.Nikos Mavrogiannopoulos1-1/+1
2014-06-08remove -Werror from automakeNikos Mavrogiannopoulos1-1/+1
2014-06-08build: tests: fix Test_choice within separate builddirAlon Bar-Lev2-2/+6
Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
2014-06-05Document that ider and ider_len are optional in asn1_der_decoding_startEnd()Nikos Mavrogiannopoulos1-0/+6
2014-06-05updated map file for asn1_dup_nodeNikos Mavrogiannopoulos1-1/+1
2014-06-05renamed asn1_copy_node2 to asn1_dup_nodeNikos Mavrogiannopoulos4-7/+7
2014-06-04doc updateNikos Mavrogiannopoulos1-0/+2
2014-06-04DER decoding: optimize tail seek by using the value providing by ↵Nikos Mavrogiannopoulos1-6/+2
_asn1_append_sequence_set.