Mercurial > dropbear
view .hgtags @ 1306:34e6127ef02e
merge fixes from PuTTY import.c
toint() from misc.c
(revids are from hggit conversion)
changeset: 4620:60a336a6c85c
user: Simon Tatham <[email protected]>
date: Thu Feb 25 20:26:33 2016 +0000
files: import.c
description:
Fix potential segfaults in reading OpenSSH's ASN.1 key format.
The length coming back from ber_read_id_len might have overflowed, so
treat it as potentially negative. Also, while I'm here, accumulate it
inside ber_read_id_len as an unsigned, so as to avoid undefined
behaviour on integer overflow, and toint() it before return.
Thanks to Hanno Böck for spotting this, with the aid of AFL.
(cherry picked from commit 5b7833cd474a24ec098654dcba8cb9509f3bf2c1)
Conflicts:
import.c
(cherry-picker's note: resolving the conflict involved removing an
entire section of the original commit which fixed ECDSA code not
present on this branch)
changeset: 4619:9c6c638d98d8
user: Simon Tatham <[email protected]>
date: Sun Jul 14 10:45:54 2013 +0000
files: import.c ssh.c sshdss.c sshpubk.c sshrsa.c
description:
Tighten up a lot of casts from unsigned to int which are read by one
of the GET_32BIT macros and then used as length fields. Missing bounds
checks against zero have been added, and also I've introduced a helper
function toint() which casts from unsigned to int in such a way as to
avoid C undefined behaviour, since I'm not sure I trust compilers any
more to do the obviously sensible thing.
[originally from svn r9918]
changeset: 4618:3957829f24d3
user: Simon Tatham <[email protected]>
date: Mon Jul 08 22:36:04 2013 +0000
files: import.c sshdss.c sshrsa.c
description:
Add an assortment of extra safety checks.
[originally from svn r9896]
changeset: 4617:2cddee0bce12
user: Jacob Nevins <[email protected]>
date: Wed Dec 07 00:24:45 2005 +0000
files: import.c
description:
Institutional failure to memset() things pointed at rather than pointers.
Things should now be zeroed and memory not leaked. Spotted by Brant Thomsen.
[originally from svn r6476]
changeset: 4616:24ac78a9c71d
user: Simon Tatham <[email protected]>
date: Wed Feb 11 13:58:27 2004 +0000
files: import.c
description:
Jacob's last-minute testing found a couple of trivial bugs in
import.c, and my attempts to reproduce them in cmdgen found another
one there :-)
[originally from svn r3847]
changeset: 4615:088d39a73db0
user: Simon Tatham <[email protected]>
date: Thu Jan 22 18:52:49 2004 +0000
files: import.c
description:
Placate some gcc warnings.
[originally from svn r3761]
changeset: 4614:e4288bad4d93
parent: 1758:108b8924593d
user: Simon Tatham <[email protected]>
date: Fri Oct 03 21:21:23 2003 +0000
files: import.c
description:
My ASN.1 decoder returned wrong IDs for anything above 0x1E! Good
job it's never had to yet. Ahem.
[originally from svn r3479]
| author | Matt Johnston <matt@ucc.asn.au> |
|---|---|
| date | Tue, 12 Jul 2016 23:00:01 +0800 |
| parents | 32cdbbe4b67e |
| children | 70705edee9dd 9030ffdbe562 |
line wrap: on
line source
03f65e461915a940939e4cc689fc89721ffc40de DROPBEAR_0.48.1 0f967bfef5cd0056b7ec60e2305d917e51cbf30d DROPBEAR_0.44 170329dc8ce5dfcf6298e1ad6699f109bf78e73d DROPBEAR_0.51 1dbd2473482f320ea59f76ce961385cb3a0150a9 DROPBEAR_0.46 2098857ab826dd42ae05a9a22c3ce2cc835b9844 DROPBEAR_0.45 36160290a1b27451178be36752ed038840f59cdd LTC_DB_0.46 39d5d58461d6e93337636e69d4cdf184a09c8d24 LTC_1.05 55a99934db873be2e63b5968fb6532e5d9bd02e4 DROPBEAR_0.48 59400faa4b44708c5d0b595e81193bc621e752d3 libtomcrypt-1.05 66087d87c3555c78b47cf01f32bb5a32054c3ceb DROPBEAR_0.44test4 677843bfa734238a67636b461a02c110c462ffaf DROPBEAR_0.44test1 7faae8f46238e23975430876547b8950b4e75481 t:ltc-0.95-orig 8220862baae829ebc762587b99c662480d57bb23 DROPBEAR_0.53 86e0b50a9b588239c3fc9cc9cfe255ef586df17b ltm-0.30-orig 88e0a1ad951add46b795511dc2698e36b4aee922 DROPBEAR_0.44test3 8e94663164c6e106ccc5c9e997dedf6e04d77dd2 LTM_DB_0.44 91fbc376f01084037cd5f6a5bf2e2db4903e8e99 libtommath-0.35 97db060d0ef5f8cf8e67eb602ef037055a185ca9 libtommath-0.40 aa2f51a6b81d33de5e9898a7f27c792a173d9b26 DROPBEAR_0.53.1 ab370c629d363f8c9a3eca512bfa86e362034654 DROPBEAR_0.49 c2ac796b130eeb6fa840873d8c230544c8ec7e4b DROPBEAR_0.44test2 cd1143579f00b0248c79f63ca70efee4a35a57e8 LTC_DB_0.44 ce104c8b0be1ff3f2c2590b7cdc3fd6870c865cd DROPBEAR_0.52 d5faf4814ddbc5abd9e209409bb9e7a4686c8cd7 libtomcrypt-1.16 d7da3b1e15401eb234ec866d5eac992fc4cd5878 t:ltc-0.95-db-merge1 d8254fc979e99560c93ca2cece77a6df31927ea5 LTM_0.35 e109027b9edfb02f0bdf96ec45bb1cd9ad41e7da LTM_DB_0.46 e109027b9edfb02f0bdf96ec45bb1cd9ad41e7da LTM_DB_0.47 e37b160c414cab6466622f63b0c4dcbf6ebc47a9 DROPBEAR_0.47 e430a26064ee86ab79aef372118d6d03b2441996 DROPBEAR_0.50 e5d119ea4c63656bc54ecfd865d04591ac2ed225 LTC_DB_0.47 3f12086c2ef2b9ffe36a822fdb3ff647fcec1831 DROPBEAR_2011.54 d354464b2aa6f6ba0bf44d43bcae5aa798435393 DROPBEAR_2012.55 7faae8f46238e23975430876547b8950b4e75481 t:ltc-0.95-orig 0000000000000000000000000000000000000000 t:ltc-0.95-orig d7da3b1e15401eb234ec866d5eac992fc4cd5878 t:ltc-0.95-db-merge1 0000000000000000000000000000000000000000 t:ltc-0.95-db-merge1 1b8b2b9d6e94bc3cc5e61b620476ea36cc466e1b DROPBEAR_2013.56 96b8bcb88017815040949a417caa55686271e8a9 DROPBEAR_2013.57 e76614145aea67f66e4a4257685c771efba21aa1 DROPBEAR_2013.58 7b68e581985fd4ea50869f8608ab95cda5d17876 DROPBEAR_2013.59 a50a1dc743317fad9b3737bc68fbca640659bb6d DROPBEAR_2013.60 e894dbc015ba7ff4c3bf897ee20e28ca90c55a16 DROPBEAR_2013.61test 3d1d7d151c0ce3a79da62e86463f5632fa2b144a DROPBEAR_2013.62 2351b2da8e0d08dcc6e64fcc328b53b9630bda68 DROPBEAR_2014.63 0d2d39957c029adb7f4327d37fe6b4900f0736d9 DROPBEAR_2014.64 e9579816f20ea85affc6135e87f8477992808948 DROPBEAR_2014.65 735511a4c761141416ad0e6728989d2dafa55bc2 DROPBEAR_2014.66 cbd674d63cd4f3781464a8d4056a5506c8ae926f DROPBEAR_2015.67 809feaa9408f036734129c77f2b3c7e779d4f099 DROPBEAR_2015.68 1637dbd262124d113e52967df46afd6c715e4fad DROPBEAR_2015.69 79a6ef02307d05cb9dda10465cb5b807baa8f62e DROPBEAR_2015.70 9a944a243f08be6b22d32f166a0690eb4872462b DROPBEAR_2015.71 78b12b6549be08b0bea3da329b2578060a76ca31 DROPBEAR_2016.72