Skip to content
  1. Sep 05, 2014
    • Adam Langley's avatar
      psk_client_callback, 128-byte id bug. · 442ca2bd
      Adam Langley authored
      
      
      Fix a bug in handling of 128 byte long PSK identity in
      psk_client_callback.
      
      OpenSSL supports PSK identities of up to (and including) 128 bytes in
      length. PSK identity is obtained via the psk_client_callback,
      implementors of which are expected to provide a NULL-terminated
      identity. However, the callback is invoked with only 128 bytes of
      storage thus making it impossible to return a 128 byte long identity and
      the required additional NULL byte.
      
      This CL fixes the issue by passing in a 129 byte long buffer into the
      psk_client_callback. As a safety precaution, this CL also zeroes out the
      buffer before passing it into the callback, uses strnlen for obtaining
      the length of the identity returned by the callback, and aborts the
      handshake if the identity (without the NULL terminator) is longer than
      128 bytes.
      
      (Original patch amended to achieve strnlen in a different way.)
      
      Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
      (cherry picked from commit be0d8517)
      442ca2bd
  2. Sep 04, 2014
  3. Sep 03, 2014
  4. Sep 02, 2014
  5. Aug 30, 2014
  6. Aug 29, 2014
  7. Aug 28, 2014
  8. Aug 27, 2014
  9. Aug 26, 2014
  10. Aug 25, 2014
  11. Aug 24, 2014
  12. Aug 22, 2014
  13. Aug 21, 2014
  14. Aug 19, 2014
  15. Aug 15, 2014
  16. Aug 13, 2014
  17. Aug 06, 2014