You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
hostap/src/tls
Jouni Malinen a6ed414c82 TLS: Be more careful in X.509 Time parsing
sscanf() can apparently read beyond the end of the buffer even if the
maximum length of the integer is specified in the format string. Replace
this parsing mechanism with helper functions that use sscanf() with NUL
terminated string to avoid this.

Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15158
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
5 years ago
..
.gitignore Add rules for building src/tls/libtls.a and use it with eap_example 15 years ago
Makefile TLS: Parse CertificateStatus message 9 years ago
asn1.c TLS: Fix ASN.1 parsing with no room for the header 5 years ago
asn1.h TLS: Fix and complete ASN.1 tag list 9 years ago
bignum.c bignum: Fix documentation for bignum_cmp_d() 5 years ago
bignum.h Remove the GPL notification from files contributed by Jouni Malinen 12 years ago
libtommath.c Remove trailing whitespace 8 years ago
pkcs1.c TLS: Use os_memcmp_const() for hash/password comparisons 10 years ago
pkcs1.h PKCS 1: Add function for checking v1.5 RSA signature 10 years ago
pkcs5.c TLS: Extend PKCS #5 to support PKCS #12 style key decryption 9 years ago
pkcs5.h Remove the GPL notification from files contributed by Jouni Malinen 12 years ago
pkcs8.c Remove the GPL notification from files contributed by Jouni Malinen 12 years ago
pkcs8.h Remove the GPL notification from files contributed by Jouni Malinen 12 years ago
rsa.c Remove trailing whitespace 8 years ago
rsa.h Add function for building RSA public key from n and e parameters 10 years ago
tlsv1_client.c TLS: Add support for RFC 5705 TLS exporter context with internal TLS 5 years ago
tlsv1_client.h TLS: Add support for RFC 5705 TLS exporter context with internal TLS 5 years ago
tlsv1_client_i.h TLS: Parse CertificateStatus message 9 years ago
tlsv1_client_ocsp.c TLS client: Multi-OCSP check to cover intermediate CAs 9 years ago
tlsv1_client_read.c TLS client: Fix peer certificate event checking for probing 5 years ago
tlsv1_client_write.c tests: TLS fuzzing tool 5 years ago
tlsv1_common.c Remove trailing whitespace 8 years ago
tlsv1_common.h TLS server: OCSP stapling with ocsp_multi option (RFC 6961) 9 years ago
tlsv1_cred.c Use os_memdup() 7 years ago
tlsv1_cred.h TLS server: OCSP stapling with ocsp_multi option (RFC 6961) 9 years ago
tlsv1_record.c TLS: Use os_memcmp_const() for hash/password comparisons 10 years ago
tlsv1_record.h Remove the GPL notification from files contributed by Jouni Malinen 12 years ago
tlsv1_server.c TLS: Add support for RFC 5705 TLS exporter context with internal TLS 5 years ago
tlsv1_server.h TLS: Add support for RFC 5705 TLS exporter context with internal TLS 5 years ago
tlsv1_server_i.h TLS server: Add internal callbacks get_failed, get_*_alerts 5 years ago
tlsv1_server_read.c TLS server: Local failure information on verify_data mismatch 5 years ago
tlsv1_server_write.c tests: TLS fuzzing tool 5 years ago
x509v3.c TLS: Be more careful in X.509 Time parsing 5 years ago
x509v3.h TLS client: Multi-OCSP check to cover intermediate CAs 9 years ago