]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit - crypto/evp/m_mdc2.c
Merge DTLS fixes from vendor-crypto/openssl/dist:
authorSimon L. B. Nielsen <simon@FreeBSD.org>
Sun, 23 Aug 2009 16:29:47 +0000 (16:29 +0000)
committerSimon L. B. Nielsen <simon@FreeBSD.org>
Sun, 23 Aug 2009 16:29:47 +0000 (16:29 +0000)
commit2f1ff7669c16de65bd70a0316ddc269a1cf54aea
tree6b01e0aff1a8c3015f093fc91c573990a8467bee
parent41fe1fab16c63db5ac1ead49036d2359314ac616
parentf0c2a617dfb432d01bc5a716eb18dae12e6b45e3
Merge DTLS fixes from vendor-crypto/openssl/dist:

- Fix memory consumption bug with "future epoch" DTLS records.
- Fix fragment handling memory leak.
- Do not access freed data structure.
- Fix DTLS fragment bug - out-of-sequence message handling which could
  result in NULL pointer dereference in
  dtls1_process_out_of_seq_message().

Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.

MFC after: 1 week
Security: CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 CVE-2009-1387
crypto/openssl/crypto/pqueue/pqueue.c
crypto/openssl/crypto/pqueue/pqueue.h
crypto/openssl/ssl/d1_both.c
crypto/openssl/ssl/d1_pkt.c