Commit Graph

28 Commits (3db34abf2f9ec9c25b1140955fced60c8d40394c)

Author SHA1 Message Date
Jeffrey Walton 64a15cf51b
Order of initialization for ASN.1 decoders 2018-04-06 02:29:08 -04:00
Jeffrey Walton d2ad6751d5
Clear uninitialized variable warnings under xlC 2017-09-01 20:37:23 -04:00
Jeffrey Walton 50d1ea8314
Cleared fall through warnings under GCC 7 (Issue 441) 2017-07-17 04:48:28 -04:00
Jeffrey Walton 0c6510b0a5
Guard string assignment
Visual Studio 2005 fired an assert on the negative self tests because the SecByteBlock was 0-sized and returned a null pointer.
2017-03-19 22:13:12 -04:00
Jeffrey Walton 73836e58a5
Add Test namespace within CryptoPP namespace (Issue 379) 2017-02-21 02:03:29 -05:00
Jeffrey Walton 81b1a18063
Change file preamble to include "originally written by Wei Dai"
We have made a fair number of changes, and we don't want WD to receive credit for issues he was not part of
2017-01-27 07:05:45 -05:00
klemens 5a5c633073 spelling fixes 2016-12-27 18:34:57 +01:00
Jeffrey Walton b19332a69f
Add additional validations based on X.690 rules
The library was a tad bit fast and loose with respect to parsing some of the ASN.1 presented to it. It was kind of like we used Alternate Encoding Rules (AER), which was more relaxed than BER, CER or DER. This commit closes most of the gaps.

The changes are distantly related to Issue 346. Issue 346 caught a CVE bcause of the transient DoS. These fixes did not surface with negative effcts. Rather, the library was a bit too accomodating to the point it was not conforming
2016-12-24 04:55:21 -05:00
Gergely Nagy 3d9181d7bd Fix possible DoS in ASN.1 decoders (CVE-2016-9939) 2016-12-14 13:19:01 +01:00
Jeffrey Walton 399a1546de Add CRYPTOPP_ASSERT (Issue 277, CVE-2016-7420)
trap.h and CRYPTOPP_ASSERT has existed for over a year in Master. We deferred on the cut-over waiting for a minor version bump (5.7). We have to use it now due to CVE-2016-7420
2016-09-16 11:27:15 -04:00
Jeffrey Walton 894874fe75 Whitespace checkin 2016-09-10 04:57:48 -04:00
Thomas Guyard bb3276389e remove unwanted assert 2016-03-03 15:40:16 +01:00
Jeffrey Walton 48809d4e85 CRYPTOPP 5.6.3 RC6 checkin 2015-11-05 01:59:46 -05:00
Jeffrey Walton 22c3e41133 Removed USING_NAMESPACE(std). Changed cout → std::cout, cerr → std::cerr, ... 2015-07-30 17:35:58 -04:00
Jeffrey Walton b7de164d62 Cut-in CRYPTOPP_ASSERT in all remaining header and source files 2015-07-26 16:03:14 -04:00
Jeffrey Walton 7b64ca489a Added "trap.h" include for header and source files that assert 2015-07-26 15:51:16 -04:00
Jeffrey Walton 3f328922ac Cleared "Base class ‘class ByteQueue’ should be explicitly initialized in the copy constructor" warning under GCC 5.1 with -Wextra 2015-07-25 01:13:04 -04:00
Jeffrey Walton 20e652abbb Cleared "unused parameter" warning with GCC 5.1 and -Wextra 2015-07-23 20:14:15 -04:00
Jeffrey Walton d04b813e8b Cleared -Wmaybe-uninitialized under GCC 5.1 2015-07-19 11:05:48 -04:00
Jeffrey Walton 8f59d9af35 Cleared unused variable and function warnings 2015-07-19 10:22:16 -04:00
Wei Dai e0959c5293 small optimization
no need to use resize here, which copies old content
2015-06-03 16:57:30 -07:00
weidai 0980f65266 check for integer overflow in OID::DecodeValue() 2010-06-18 00:57:26 +00:00
weidai 3802d23c07 fix bug decoding optional parameters 2007-04-16 00:38:29 +00:00
weidai 43b41c1042 update version number, port to Sun C++ 5.8 2006-12-18 02:34:33 +00:00
weidai 1db8ea5084 port to MSVC .NET 2005 beta 2 2005-07-12 04:23:32 +00:00
weidai 40a5b80a45 fix encoding/decoding of optional attributes 2004-06-19 08:26:29 +00:00
weidai f278895908 create DLL version, fix GetNextIV() bug in CTR and OFB modes 2003-07-04 00:17:37 +00:00
weidai a3b6ece7ab Initial revision 2002-10-04 17:31:41 +00:00