boringssl

Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl

David Benjamin 89d18c7a88 Import upstream tests for CVE-2024-0727 BoringSSL is not affected by CVE-2024-0727, but these are good cases to have in our unit tests. PKCS#12 is built on top of PKCS#7, a misdesigned, overgeneralized combinator format. One of the features of PKCS#7 is that the content of every ContentInfo may be omitted, to indicate that the value is "supplied by other means". This is commonly used for "detached signatures", where the signature is supplied separately. This does not make sense in the context of PKCS#12. But because PKCS#7 combined many unrelated use cases into the same format, so PKCS#12 (and any other use of PKCS#7) must account for and reject inputs. Change-Id: I22f19b6c14894003f7515206cd34f968e5503d4a Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/65747 Auto-Submit: David Benjamin <davidben@google.com> Commit-Queue: Bob Beck <bbe@google.com> Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Bob Beck <bbe@google.com>		10 months ago
..
test	Import upstream tests for CVE-2024-0727	10 months ago
internal.h	Fix truncation warnings with the iteration count	1 year ago
p5_pbev2.c	Fix truncation warnings with the iteration count	1 year ago
pkcs8.c	Export CBS/CBB unicode functions	1 year ago
pkcs8_test.cc	Fix PKCS8Test to not rely on RSA-512	2 years ago
pkcs8_x509.c	Unexport some ASN1_ITEMs that aren't used externally	12 months ago
pkcs12_test.cc	Import upstream tests for CVE-2024-0727	10 months ago