Jon Simons 7edbedf0dd pki: fail when pubkey buffer length is not ED25519_PK_LEN ...

Fail fast in 'pki_import_pubkey_buffer' for the ED25519 case if a buffer
sized ED25519_PK_LEN can not be retrieved.  Before, the 'memcpy' could
have read beyond the bounds of 'ssh_string_data(pubkey)'.

Signed-off-by: Jon Simons <jon@jonsimons.org>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2014-10-02 08:27:05 +02:00

..

threads

cmake: Fix the build on Windows.

2014-05-27 15:42:53 +02:00

agent.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

auth1.c

src: Remove enter_function() and leave_function().

2013-07-14 13:31:24 +02:00

auth.c

auth: Fix a memory leak in agent publickey auth.

2014-08-15 12:29:26 +02:00

base64.c

base64: Use a secure buffer.

2014-09-07 10:38:23 +02:00

bignum.c

bignum: Add missing include.

2014-08-15 12:29:00 +02:00

bind.c

style: be consistent when iterating over wanted_methods

2014-03-27 11:23:34 +01:00

buffer.c

buffer: Add a secure buffer mechanism to avoid memory spills

2014-09-07 10:36:32 +02:00

callbacks.c

src: Update my mail address.

2014-01-07 16:08:23 +01:00

channels1.c

Add session/channel byte/packet counters

2014-02-12 18:21:16 +01:00

channels.c

buffers: adapt channels.c to ssh_buffer_(un)pack()

2014-08-06 09:33:03 +02:00

client.c

buffers: adapt client.c to ssh_buffer_(un)pack()

2014-08-06 09:33:07 +02:00

CMakeLists.txt

ed25519: Generate, sign and verify keys.

2014-09-07 22:07:34 +02:00

config.c

log: Fix log levels.

2014-04-22 09:35:33 +02:00

connect.c

doc: Document the unit for ssh_select() timeout.

2014-01-23 11:29:39 +01:00

crc32.c

priv: Create crc32.h.

2011-09-18 21:37:17 +02:00

curve25519_ref.c

curve25519: include reference implementation

2013-11-03 14:58:10 +01:00

curve25519.c

ec: Fix build on CentOS.

2014-08-18 10:08:00 +02:00

dh.c

dh: Fix packing a pointer into the buffer.

2014-08-25 12:23:17 +02:00

ecdh.c

ec: Fix build on CentOS.

2014-08-18 10:08:00 +02:00

ed25519.c

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

error.c

doc: Fix description of error parameter for ssh_get_error*

2014-01-22 09:45:45 +01:00

fe25519.c

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

gcrypt_missing.c

priv: Move gcrypt functions to gcrypt header.

2011-09-18 21:37:17 +02:00

ge25519_base.data

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

ge25519.c

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

getpass.c

update copyright information

2014-01-07 15:18:15 +01:00

gssapi.c

buffers: adapt gssapi.c to ssh_buffer_(un)pack()

2014-08-06 09:46:14 +02:00

gzip.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

init.c

init: Some initialization fixes.

2011-05-01 19:42:50 +02:00

kex1.c

src: Rename buffer_add_data() to ssh_buffer_add_data().

2014-01-19 20:55:55 +01:00

kex.c

buffer: adapt kex.c to new ssh_buffer_(un)pack()

2014-08-06 09:20:49 +02:00

known_hosts.c

knownhosts: resolve leaks found by coverity

2014-02-05 08:07:45 +01:00

legacy.c

src: Do not use deprecated functions.

2014-01-16 15:27:46 +01:00

libcrypto.c

crypto: check malloc return in ssh_mac_ctx_init

2014-10-02 08:25:53 +02:00

libgcrypt.c

crypto: check malloc return in ssh_mac_ctx_init

2014-10-02 08:25:53 +02:00

log.c

log: Add check for return value.

2014-06-10 13:52:38 +02:00

match.c

match: Don't dereference 's' directly.

2012-10-09 11:09:34 +02:00

messages.c

messages: Check return value of ssh_buffer_unpack().

2014-08-15 12:29:16 +02:00

misc.c

src: Define MAX_BUF_SIZE globally and use it.

2014-02-02 22:19:46 +01:00

options.c

Add options support for setting and getting HMAC algorithms

2014-04-22 10:57:18 +02:00

packet1.c

log: Fix log levels.

2014-04-22 09:35:33 +02:00

packet_cb.c

packet: log disconnect code in host byte order

2014-03-12 14:11:09 +01:00

packet_crypt.c

crypto: fix secure burning, structure members naming

2014-08-06 10:05:19 +02:00

packet.c

packet: Check return value of ssh_buffer_unpack().

2014-08-15 12:29:20 +02:00

pcap.c

buffers: adapt pcap.c to ssh_buffer_(un)pack()

2014-08-06 09:46:14 +02:00

pki_crypto.c

ed25519: Generate, sign and verify keys.

2014-09-07 22:07:34 +02:00

pki_ed25519.c

ed25519: Generate, sign and verify keys.

2014-09-07 22:07:34 +02:00

pki_gcrypt.c

pki: Use ssh_buffer_add_data() in pki_gcrypt..

2014-01-22 16:12:31 +01:00

pki.c

pki: fail when pubkey buffer length is not ED25519_PK_LEN

2014-10-02 08:27:05 +02:00

poll.c

src: Update my mail address.

2014-01-07 16:08:23 +01:00

sc25519.c

crypto: Add ed25519 implementation from OpenSSH.

2014-09-07 21:35:20 +02:00

scp.c

Revert f2c2687ca6

2014-02-05 22:29:22 +01:00

server.c

buffers: adapt server.c to ssh_buffer_(un)pack()

2014-08-06 09:46:14 +02:00

session.c

buffers: adapt session.c to ssh_buffer_(un)pack()

2014-08-06 09:47:35 +02:00

sftp.c

Fix sftp endianess bugs

2014-08-06 10:08:25 +02:00

sftpserver.c

buffers: adapt sftpserver.c to ssh_buffer_(un)pack()

2014-08-06 09:52:29 +02:00

socket.c

socket: Fix style of ssh_socket_pollcallback

2014-03-27 10:54:55 +01:00

string.c

string: Correctly burn the string buffer.

2014-09-15 20:45:47 +02:00

threads.c

threads: support libgcrypt 1.6 hack

2014-01-08 18:57:31 +01:00

wrapper.c

wrapper: fix z_stream leak

2014-10-02 08:25:10 +02:00