granicus.if.org Git - openssl/commit

]> granicus.if.org Git - openssl/commit

author	Dr. Stephen Henson <steve@openssl.org>
	Thu, 10 May 2012 16:03:52 +0000 (16:03 +0000)
committer	Dr. Stephen Henson <steve@openssl.org>
	Thu, 10 May 2012 16:03:52 +0000 (16:03 +0000)
commit	c46ecc3a55bcbbe4ff31da3864d015e343b0189f
tree	9596e19677fc82e9605006d8f35320bfd32ec52d	tree \| snapshot
parent	7388b43cae035484036f5dc46c231ce6282a1367	commit \| diff

Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 and
DTLS to fix DoS attack.

Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic
fuzzing as a service testing platform.
(CVE-2012-2333)

CHANGES		diff \| blob \| history
ssl/d1_enc.c		diff \| blob \| history
ssl/t1_enc.c		diff \| blob \| history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom