openssl/ssl
Michael Baentsch f4ed6eed2c SSL_set1_groups_list(): Fix memory corruption with 40 groups and more
Fixes #23624

The calculation of the size for gid_arr reallocation was wrong.
A multiplication by gid_arr array item size was missing.

Testcase is added.

Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23625)
2024-02-22 12:48:21 +01:00
..
quic Minor updates 2024-02-19 10:15:46 +01:00
record Future proof RLAYER_USE_EXPLICIT_IV by checking dtls versions directly. 2024-02-20 11:07:01 +01:00
rio QUIC POLLING: Support no-quic builds 2024-02-10 11:37:14 +00:00
statem
bio_ssl.c
build.info QUIC RIO: Add frontend SSL_poll implementation 2024-02-10 11:37:14 +00:00
d1_lib.c
d1_msg.c
d1_srtp.c libssl: Make some global mutable structures constant 2024-02-02 09:10:12 +00:00
event_queue.c
methods.c
pqueue.c
priority_queue.c
s3_enc.c libssl: Make some global mutable structures constant 2024-02-02 09:10:12 +00:00
s3_lib.c
s3_msg.c
ssl_asn1.c
ssl_cert.c
ssl_cert_comp.c
ssl_cert_table.h
ssl_ciph.c libssl: Make some global mutable structures constant 2024-02-02 09:10:12 +00:00
ssl_conf.c
ssl_err.c QUIC: Add polling API 2024-02-10 11:37:14 +00:00
ssl_err_legacy.c
ssl_init.c
ssl_lib.c Removes record_queue struct which is no longer useful. 2024-02-16 16:33:14 +01:00
ssl_local.h QLOG: Editorial fixes (QLOG is spelled 'qlog') 2024-02-02 11:50:29 +00:00
ssl_mcnf.c
ssl_rsa.c
ssl_rsa_legacy.c
ssl_sess.c Extended SSL_SESSION functions using time_t 2024-02-21 10:28:17 +01:00
ssl_stat.c
ssl_txt.c
ssl_utst.c
sslerr.h
t1_enc.c
t1_lib.c SSL_set1_groups_list(): Fix memory corruption with 40 groups and more 2024-02-22 12:48:21 +01:00
t1_trce.c
tls13_enc.c
tls_depr.c
tls_srp.c