Commit 36800c36 authored Mar 17, 2004 by Mark J. Cox

Fix null-pointer assignment in do_change_cipher_spec() revealed

by using the Codenomicon TLS Test Tool (CAN-2004-0079)

Prepare for 0.9.6m release

Submitted by: Steven Henson
Reviewed by: Joe Orton
Approved by: Mark Cox

parent c08c1f76

CHANGES

+4 −2

Original line number	Diff line number	Diff line
		@@ -2,9 +2,11 @@
		OpenSSL CHANGES
		_______________

		Changes between 0.9.6l and 0.9.6m [xx XXX xxxx]
		Changes between 0.9.6l and 0.9.6m [17 Mar 2004]

		*)
		*) Fix null-pointer assignment in do_change_cipher_spec() revealed
		by using the Codenomicon TLS Test Tool (CAN-2004-0079)
		[Joe Orton, Steve Henson]

		Changes between 0.9.6k and 0.9.6l [04 Nov 2003]

FAQ

+1 −1

Original line number	Diff line number	Diff line
		@@ -63,7 +63,7 @@ OpenSSL - Frequently Asked Questions
		* Which is the current version of OpenSSL?

		The current version is available from <URL: http://www.openssl.org>.
		OpenSSL 0.9.7c was released on September 30, 2003.
		OpenSSL 0.9.7d was released on March 17, 2004.

		In addition to the current stable release, you can also access daily
		snapshots of the OpenSSL development version at <URL:

LICENSE

+1 −1

Original line number	Diff line number	Diff line
		@@ -12,7 +12,7 @@
		---------------

		/* ====================================================================
		* Copyright (c) 1998-2003 The OpenSSL Project. All rights reserved.
		* Copyright (c) 1998-2004 The OpenSSL Project. All rights reserved.
		*
		* Redistribution and use in source and binary forms, with or without
		* modification, are permitted provided that the following conditions

NEWS

+4 −0

Original line number	Diff line number	Diff line
		@@ -5,6 +5,10 @@
		This file gives a brief overview of the major changes between each OpenSSL
		release. For more details please read the CHANGES file.

		Major changes between OpenSSL 0.9.6l and OpenSSL 0.9.6m:

		o Security: fix null-pointer bug leading to crash

		Major changes between OpenSSL 0.9.6k and OpenSSL 0.9.6l:

		o Security: fix ASN1 bug leading to large recursion

README

+2 −2

Original line number	Diff line number	Diff line

		OpenSSL 0.9.6l [engine] 04 Nov 2003
		OpenSSL 0.9.6m [engine] 17 Mar 2004

		Copyright (c) 1998-2003 The OpenSSL Project
		Copyright (c) 1998-2004 The OpenSSL Project
		Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
		All rights reserved.