You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
David Benjamin
d1b20a9580
Fix handling of EXFLAG_INVALID_POLICY on the leaf. ...
X509_policy_check returns -1 if some certificate had an unparseable
extension, in which case it sets EXFLAG_INVALID_POLICY on it. The
calling code then iterates over the certificates to find the offending
one, so the callback has a chance to undo it. But it skips i = 0, the
leaf, and instead just silentely returns success.
We really should cut down on the callback's ability to mess things up
here but, in the meantime, fix this. Also add a test covering this case.
While I'm here, I've updated make_invalid_extensions.go, which I pulled
some code from, to rename fooOrPanic to mustFoo. That seems to be the
convention in the Go standard library. (regexp.MustCompile, etc.)
Change-Id: Ib07c9f4175e66483bd7c0f7d49aea931bf36e53f
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/55748
Auto-Submit: David Benjamin <davidben@google.com>
Reviewed-by: Bob Beck <bbe@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
2 years ago
..
asn1
Restore ASN1_TIME_set_string's behavior on NULL.
2 years ago
base64
…
bio
Fix some more implicit size_t truncations.
2 years ago
blake2
…
bn_extra
…
buf
…
bytestring
Define CBS/CBB tags as uint32_t with a typedef.
2 years ago
chacha
…
cipher_extra
Test, re-document, and deprecate EVP_Cipher.
2 years ago
conf
Write a test for CONF_parse_list.
3 years ago
curve25519
Fully condition all assembly files.
2 years ago
des
Remove unnecessary L suffixes on DES constants.
2 years ago
dh_extra
Finish porting dh_test.cc and ripemd_test.cc to GTest.
2 years ago
digest_extra
…
dsa
Finish porting dsa_test.cc to GTest.
2 years ago
ec_extra
Rewrite i2o_ECPublicKey with CBB_finish_i2d.
2 years ago
ecdh_extra
…
ecdsa_extra
Some CBB_init_fixed simplifications.
2 years ago
engine
…
err
…
evp
Do not allow changing keys with parameters already set.
2 years ago
fipsmodule
Disable blinding for boringssl_self_test_rsa().
2 years ago
hkdf
…
hmac_extra
Miscellaneous -Wshorten-64-to-32 fixes.
2 years ago
hpke
Some CBB_init_fixed simplifications.
2 years ago
hrss
Fully condition all assembly files.
2 years ago
lhash
…
obj
Migrate io/ioutil uses to new APIs.
2 years ago
pem
…
perlasm
Fully condition all assembly files.
2 years ago
pkcs7
…
pkcs8
More -Wshorten-64-to-32 fixes.
2 years ago
poly1305
Fully condition all assembly files.
2 years ago
pool
…
rand_extra
…
rc4
…
rsa_extra
…
siphash
…
stack
Rework STACK_OF(T) documentation.
3 years ago
test
Various -Wshorten-64-to-32 fixes.
3 years ago
trust_token
Skip the field inversion when just measuring output size.
2 years ago
x509
Fix handling of EXFLAG_INVALID_POLICY on the leaf.
2 years ago
x509v3
Fix return value on malloc failure in tree_calculate_user_set.
2 years ago
CMakeLists.txt
Remove ASN1_PRINTABLE_type.
2 years ago
abi_self_test.cc
…
compiler_test.cc
…
constant_time_test.cc
…
cpu_aarch64_apple.c
Use the new macOS sysctl names when available
3 years ago
cpu_aarch64_freebsd.c
Also detect Armv8.2 SHA-512 extensions on FreeBSD.
2 years ago
cpu_aarch64_fuchsia.c
…
cpu_aarch64_linux.c
…
cpu_aarch64_win.c
…
cpu_arm.c
…
cpu_arm_freebsd.c
Add support for arm/aarch64 on FreeBSD
2 years ago
cpu_arm_linux.c
…
cpu_arm_linux.h
…
cpu_arm_linux_test.cc
…
cpu_intel.c
…
cpu_ppc64le.c
…
crypto.c
Introduce ossl_ssize_t and use it in ASN1_STRING_set.
2 years ago
crypto_test.cc
…
ex_data.c
Fix -Wshorten-64-to-32 errors in ex_data.c.
2 years ago
impl_dispatch_test.cc
…
internal.h
…
mem.c
Stub out the OpenSSL secure heap.
3 years ago
refcount_c11.c
…
refcount_lock.c
…
refcount_test.cc
…
self_test.cc
…
thread.c
…
thread_none.c
…
thread_pthread.c
…
thread_test.cc
…
thread_win.c
…
David Benjamin