d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
23f6784297
freebsd-dev/lib
History
Colin Percival 23f6784297 Use unsigned comparisons. Prior to this commit, SHA1_Update and 
RIPEMD160_Update were broken when all of the following conditions
applied:
(1) The platform is i386.
(2) The program calling *_Update is statically linked to libmd.
(3) The buffer provided to *_Update is aligned modulo 4 bytes.
(4) The buffer extends beyond 2GB.

Due to the design of this code, SHA1_Update and RIPEMD160_Update will
still be broken if conditions (1)-(3) apply AND the buffer extends
beyond 4GB (i.e., there is an integer overflow in computing "data + len").
Since this remaining bug simply replaces SIGSEGV with a bogus hash (and
non-broken programs should never provide such operands) I don't consider
it to be a serious problem.

MFC After:      1 week
PR:             kern/102795
2007-05-14 05:00:37 +00:00
..
bind Update generated files for BIND 9.3.4 2007-01-29 18:33:18 +00:00
csu Fix TLS on sparc64 for statically and dynamically linked binaries 2006-10-08 02:50:34 +00:00
libalias Fix a regression: let natd load libalias modules before /usr is mounted 2006-10-08 14:02:00 +00:00
libarchive s/@VERSION@/@ARCHIVE_VERSION@/ 2007-05-02 05:29:55 +00:00
libatm First argument of MD5Final is an array of unsigned characters. 2007-04-04 03:24:01 +00:00
libautofs
libbegemot
libbluetooth
libbsm Add au_to_zonename.3 alias for au_token.3. 2007-04-23 14:46:59 +00:00
libbsnmp
libbz2
libc Add ether_aton_r and ether_ntoa_r to public symbol map for libc. 2007-05-13 15:01:25 +00:00
libc_r Enable symbol versioning by default. Use WITHOUT_SYMVER to disable it. 2007-05-13 14:12:40 +00:00
libcalendar
libcam 2nd and final commit that moves us to CAM_NEW_TRAN_CODE 2006-11-02 00:54:38 +00:00
libcom_err
libcompat Remove California Regent's clause 3, per letter 2007-01-09 01:02:06 +00:00
libcrypt cipher(3) is gone. 2007-04-04 14:04:55 +00:00
libdevinfo Markup fixes. 2006-09-17 21:27:35 +00:00
libdevstat
libdisk unbreak build for sparc64 etc. 2006-10-09 05:12:54 +00:00
libedit Merge the following changes from NetBSD: 2007-03-11 21:47:40 +00:00
libelf Use C comments since we now preprocess these files with CPP. 2007-04-29 14:05:22 +00:00
libexpat Get endianess right. 2007-04-24 06:29:27 +00:00
libfetch Handle temporary redirects (HTTP status code 307) 2007-05-08 19:28:03 +00:00
libftpio Respect MK_INET6_SUPPORT. 2006-07-27 04:54:03 +00:00
libgeom Remove parameter names from prototypes to avoid namespace issues. 2007-05-06 10:00:27 +00:00
libgpib Apply style.Makefile(5) here. 2006-04-13 08:12:31 +00:00
libgssapi Add include directives for string.h and stdlib.h to get proper function 2007-04-04 02:40:59 +00:00
libipsec Integrate the Camellia Block Cipher. For more information see RFC 4132 2007-05-09 19:37:02 +00:00
libipx Remove California Regent's clause 3, per letter 2007-01-09 01:02:06 +00:00
libkiconv
libkse Enable symbol versioning by default. Use WITHOUT_SYMVER to disable it. 2007-05-13 14:12:40 +00:00
libkvm - Move 'struct swdevt' back into swap_pager.h and expose it to userland. 2007-02-07 17:43:11 +00:00
libmagic Update for the 'file' 4.17 import. 2006-06-19 08:10:23 +00:00
libmd Use unsigned comparisons. Prior to this commit, SHA1_Update and 2007-05-14 05:00:37 +00:00
libmemstat Fix a comment in memstat.h: errors are associated with memory type lists, 2007-03-15 10:44:18 +00:00
libmilter New files in sendmail 8.14.1 2007-04-09 01:45:30 +00:00
libmp Pass BN_CTX to internal functions instead of allocating it internally. 2006-07-30 19:29:26 +00:00
libncp Mark data structures used on the wire with IPX SAP as __packed so that 2007-02-26 12:07:08 +00:00
libnetgraph Include sys/socket.h to know about sa_family_t. 2006-10-17 16:56:29 +00:00
libngatm
libopie
libpam In account management, verify whether the account has been locked 2007-03-27 09:59:15 +00:00
libpcap Place shared libpcap library under /lib, currently needed by 2006-04-13 07:25:02 +00:00
libpmc Fix a bug in the description of the "p6-div" event. [1] 2007-04-12 09:16:54 +00:00
libpthread Enable symbol versioning by default. Use WITHOUT_SYMVER to disable it. 2007-05-13 14:12:40 +00:00
libradius Use correct u_int and socklen_t types for parameters if function is 2007-04-04 02:59:54 +00:00
librpcsvc Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00
librt Enable symbol versioning by default. Use WITHOUT_SYMVER to disable it. 2007-05-13 14:12:40 +00:00
libsbuf
libsdp - Add new service class definitions and a new attribute identifier definition 2006-08-26 23:16:35 +00:00
libsm New files in sendmail 8.14.1 2007-04-09 01:45:30 +00:00
libsmb NO_MAN is not needed here. 2006-03-16 15:18:17 +00:00
libsmdb
libsmutil
libstand Cast away const qualifier to squash GCC warning. 2007-04-04 03:29:02 +00:00
libtacplus o Fix function name. 2006-10-28 10:53:39 +00:00
libtelnet Stop enforcing dependencies between MK_* options at Makefile level. 2006-07-31 13:29:36 +00:00
libthr Enable symbol versioning by default. Use WITHOUT_SYMVER to disable it. 2007-05-13 14:12:40 +00:00
libthread_db Enable symbol versioning by default. Use WITHOUT_SYMVER to disable it. 2007-05-13 14:12:40 +00:00
libufs The ufs_disk_fillout(3) can take special device name (with or without /dev/ 2007-03-16 03:13:28 +00:00
libugidfw Add some new options to mac_bsdestended. We can now match on: 2006-04-23 17:06:18 +00:00
libusbhid
libutil strlcpy() may be faster than snprintf(), but it is less portable, and this 2007-05-11 11:10:05 +00:00
libvgl o Fix typo. 2006-10-21 15:12:36 +00:00
libwrap Remove a (harmless) stray backslash. 2007-02-27 16:13:19 +00:00
liby Remove California Regent's clause 3, per letter 2007-01-09 01:02:06 +00:00
libypclnt Back out my previous commit to this area, there are differences between 2007-03-30 06:12:45 +00:00
libz Resolve conflicts. 2006-03-23 14:09:21 +00:00
msun Enable symbol versioning by default. Use WITHOUT_SYMVER to disable it. 2007-05-13 14:12:40 +00:00
ncurses Add a missing backslash and unbreak the build. 2007-04-16 09:54:59 +00:00
Makefile Switch to new ncurses build glue 2007-01-20 07:48:10 +00:00
Makefile.inc