Commit Graph

28 Commits

Author SHA1 Message Date
Jeffrey Walton
64a15cf51b
Order of initialization for ASN.1 decoders 2018-04-06 02:29:08 -04:00
Jeffrey Walton
d2ad6751d5
Clear uninitialized variable warnings under xlC 2017-09-01 20:37:23 -04:00
Jeffrey Walton
50d1ea8314
Cleared fall through warnings under GCC 7 (Issue 441) 2017-07-17 04:48:28 -04:00
Jeffrey Walton
0c6510b0a5
Guard string assignment
Visual Studio 2005 fired an assert on the negative self tests because the SecByteBlock was 0-sized and returned a null pointer.
2017-03-19 22:13:12 -04:00
Jeffrey Walton
73836e58a5
Add Test namespace within CryptoPP namespace (Issue 379) 2017-02-21 02:03:29 -05:00
Jeffrey Walton
81b1a18063
Change file preamble to include "originally written by Wei Dai"
We have made a fair number of changes, and we don't want WD to receive credit for issues he was not part of
2017-01-27 07:05:45 -05:00
klemens
5a5c633073 spelling fixes 2016-12-27 18:34:57 +01:00
Jeffrey Walton
b19332a69f
Add additional validations based on X.690 rules
The library was a tad bit fast and loose with respect to parsing some of the ASN.1 presented to it. It was kind of like we used Alternate Encoding Rules (AER), which was more relaxed than BER, CER or DER. This commit closes most of the gaps.

The changes are distantly related to Issue 346. Issue 346 caught a CVE bcause of the transient DoS. These fixes did not surface with negative effcts. Rather, the library was a bit too accomodating to the point it was not conforming
2016-12-24 04:55:21 -05:00
Gergely Nagy
3d9181d7bd Fix possible DoS in ASN.1 decoders (CVE-2016-9939) 2016-12-14 13:19:01 +01:00
Jeffrey Walton
399a1546de Add CRYPTOPP_ASSERT (Issue 277, CVE-2016-7420)
trap.h and CRYPTOPP_ASSERT has existed for over a year in Master. We deferred on the cut-over waiting for a minor version bump (5.7). We have to use it now due to CVE-2016-7420
2016-09-16 11:27:15 -04:00
Jeffrey Walton
894874fe75 Whitespace checkin 2016-09-10 04:57:48 -04:00
Thomas Guyard
bb3276389e remove unwanted assert 2016-03-03 15:40:16 +01:00
Jeffrey Walton
48809d4e85 CRYPTOPP 5.6.3 RC6 checkin 2015-11-05 01:59:46 -05:00
Jeffrey Walton
22c3e41133 Removed USING_NAMESPACE(std). Changed cout → std::cout, cerr → std::cerr, ... 2015-07-30 17:35:58 -04:00
Jeffrey Walton
b7de164d62 Cut-in CRYPTOPP_ASSERT in all remaining header and source files 2015-07-26 16:03:14 -04:00
Jeffrey Walton
7b64ca489a Added "trap.h" include for header and source files that assert 2015-07-26 15:51:16 -04:00
Jeffrey Walton
3f328922ac Cleared "Base class ‘class ByteQueue’ should be explicitly initialized in the copy constructor" warning under GCC 5.1 with -Wextra 2015-07-25 01:13:04 -04:00
Jeffrey Walton
20e652abbb Cleared "unused parameter" warning with GCC 5.1 and -Wextra 2015-07-23 20:14:15 -04:00
Jeffrey Walton
d04b813e8b Cleared -Wmaybe-uninitialized under GCC 5.1 2015-07-19 11:05:48 -04:00
Jeffrey Walton
8f59d9af35 Cleared unused variable and function warnings 2015-07-19 10:22:16 -04:00
Wei Dai
e0959c5293 small optimization
no need to use resize here, which copies old content
2015-06-03 16:57:30 -07:00
weidai
0980f65266 check for integer overflow in OID::DecodeValue() 2010-06-18 00:57:26 +00:00
weidai
3802d23c07 fix bug decoding optional parameters 2007-04-16 00:38:29 +00:00
weidai
43b41c1042 update version number, port to Sun C++ 5.8 2006-12-18 02:34:33 +00:00
weidai
1db8ea5084 port to MSVC .NET 2005 beta 2 2005-07-12 04:23:32 +00:00
weidai
40a5b80a45 fix encoding/decoding of optional attributes 2004-06-19 08:26:29 +00:00
weidai
f278895908 create DLL version, fix GetNextIV() bug in CTR and OFB modes 2003-07-04 00:17:37 +00:00
weidai
a3b6ece7ab Initial revision 2002-10-04 17:31:41 +00:00