Aris Adamantiadis 3091025472 buffers: Fix a possible null pointer dereference ...

This is an addition to CVE-2015-3146 to fix the null pointer
dereference. The patch is not required to fix the CVE but prevents
issues in future.

Signed-off-by: Aris Adamantiadis <aris@0xbadc0de.be>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2015-04-23 10:33:52 +02:00

..

external

cmake: Check for sys/param.h header file

2015-04-10 13:07:12 +02:00

threads

threads: Fix building with POSIX threads in MinGW.

2015-01-20 19:01:15 +01:00

agent.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

auth1.c

src: Remove enter_function() and leave_function().

2013-07-14 13:31:24 +02:00

auth.c

include: We should use __func__ which is C99

2015-04-02 10:58:36 +02:00

base64.c

buffer: fix use-before-nullcheck (coverity #1267979)

2015-02-03 22:21:22 +01:00

bignum.c

bignum: no-op make_string_bn_inplace for LIBGCRYPT

2014-12-09 19:20:46 +01:00

bind.c

bind: Correctly close sockets and invalidate them.

2015-04-10 13:32:09 +02:00

buffer.c

buffers: Fix a possible null pointer dereference

2015-04-23 10:33:52 +02:00

callbacks.c

src: Update my mail address.

2014-01-07 16:08:23 +01:00

channels1.c

channels1: Fix pty request state

2015-01-20 18:58:13 +01:00

channels.c

buffers: adapt channels.c to ssh_buffer_(un)pack()

2014-08-06 09:33:03 +02:00

client.c

options: Fix setting the port.

2014-12-25 12:32:16 +01:00

CMakeLists.txt

cmake: Require cmake version 2.8.0

2015-04-10 13:32:09 +02:00

config.c

options: Fix setting the port.

2014-12-25 12:32:16 +01:00

connect.c

connect: Fix a memory leak.

2015-01-14 15:20:52 +01:00

crc32.c

priv: Create crc32.h.

2011-09-18 21:37:17 +02:00

curve25519.c

ec: Fix build on CentOS.

2014-08-18 10:08:00 +02:00

dh.c

dh: Fix packing a pointer into the buffer.

2014-08-25 12:23:17 +02:00

ecdh.c

ec: Fix build on CentOS.

2014-08-18 10:08:00 +02:00

error.c

doc: Fix description of error parameter for ssh_get_error*

2014-01-22 09:45:45 +01:00

gcrypt_missing.c

priv: Move gcrypt functions to gcrypt header.

2011-09-18 21:37:17 +02:00

getpass.c

update copyright information

2014-01-07 15:18:15 +01:00

gssapi.c

gssapi: ssh_gssapi_set_creds() is a client side function

2014-10-12 15:41:15 +02:00

gzip.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

init.c

init: Some initialization fixes.

2011-05-01 19:42:50 +02:00

kex1.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

kex.c

kex: Add support for ed25519 on client connections.

2015-02-02 14:45:52 +01:00

known_hosts.c

options: Fix setting the port.

2014-12-25 12:32:16 +01:00

legacy.c

src: Do not use deprecated functions.

2014-01-16 15:27:46 +01:00

libcrypto.c

libcrypto: Fix Windows build with ssh_reseed().

2014-12-17 19:39:18 +01:00

libgcrypt.c

crypto: check malloc return in ssh_mac_ctx_init

2014-10-02 08:25:53 +02:00

log.c

log: Add check for return value.

2014-06-10 13:52:38 +02:00

match.c

match: Don't dereference 's' directly.

2012-10-09 11:09:34 +02:00

messages.c

messages: Don't leak memory after callback execution

2015-04-02 16:13:20 +02:00

misc.c

src: Define MAX_BUF_SIZE globally and use it.

2014-02-02 22:19:46 +01:00

options.c

server: Add support for ed25519 keys in the server.

2015-02-02 14:45:52 +01:00

packet1.c

log: Fix log levels.

2014-04-22 09:35:33 +02:00

packet_cb.c

CVE-2015-3146: Fix state validation in packet handlers

2015-04-23 10:15:47 +02:00

packet_crypt.c

crypto: fix secure burning, structure members naming

2014-08-06 10:05:19 +02:00

packet.c

packet: Check return value of ssh_buffer_unpack().

2014-08-15 12:29:20 +02:00

pcap.c

buffers: adapt pcap.c to ssh_buffer_(un)pack()

2014-08-06 09:46:14 +02:00

pki_container_openssh.c

ed25519: Add support for OpenSSH encrypted container export

2015-02-02 14:45:52 +01:00

pki_crypto.c

libcrypto: Make the PEM parser ed25519 aware

2015-02-02 14:45:52 +01:00

pki_ed25519.c

ed25519: fix leak in pki_ed25519_sign

2014-10-02 08:28:51 +02:00

pki_gcrypt.c

Revert "pki_gcrypt: fix warnings for SSH_KEYTYPE_ED25519"

2015-02-03 09:58:28 +01:00

pki.c

ed25519: Add support to export OpenSSH container keys

2015-02-02 14:45:52 +01:00

poll.c

poll: Fix compilation with struct ssh_timestamp

2015-04-02 15:02:29 +02:00

scp.c

Revert f2c2687ca6

2014-02-05 22:29:22 +01:00

server.c

CVE-2015-3146: Fix state validation in packet handlers

2015-04-23 10:15:47 +02:00

session.c

server: Add support for ed25519 keys in the server.

2015-02-02 14:45:52 +01:00

sftp.c

Fix leak of sftp->ext when sftp_new() fails

2015-04-14 20:56:56 +02:00

sftpserver.c

buffers: adapt sftpserver.c to ssh_buffer_(un)pack()

2014-08-06 09:52:29 +02:00

socket.c

socket: Cleanup ssh_socket_close() code.

2015-04-10 13:32:09 +02:00

string.c

string: Correctly burn the string buffer.

2014-09-15 20:45:47 +02:00

threads.c

threads: support libgcrypt 1.6 hack

2014-01-08 18:57:31 +01:00

wrapper.c

ed25519: ADd OpenSSH encrypted container import

2015-02-02 14:45:52 +01:00