提交 · weekly_20230606 · OpenHarmony / Third Party Openssl

05 6月, 2023 2 次提交
- O
  !114 add liblegacy into libcrypto, fix CVE-2023-2650 · e8d792f2
  由 openharmony_ci 提交于 6月 05, 2023
```
Merge pull request !114 from code4lala/add_liblegacy
```
  e8d792f2
- C
  add mingw32_libs in crypto_config_public · fc6ced52
  由 code4lala 提交于 6月 05, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I2228977076ababfa610e8b9e4a480d687642d9ce
```
  fc6ced52
02 6月, 2023 2 次提交

C
add crypt32 link libs for mingw · 151de652
由 code4lala 提交于 6月 02, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
151de652

Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate · b436274c

由 Richard Levitte 提交于 5月 12, 2023

OBJ_obj2txt() would translate any size OBJECT IDENTIFIER to canonical
numeric text form.  For gigantic sub-identifiers, this would take a very
long time, the time complexity being O(n^2) where n is the size of that
sub-identifier.

To mitigate this, a restriction on the size that OBJ_obj2txt() will
translate to canonical numeric text form is added, based on RFC 2578
(STD 58), which says this:

> 3.5. OBJECT IDENTIFIER values
>
> An OBJECT IDENTIFIER value is an ordered list of non-negative numbers.
> For the SMIv2, each number in the list is referred to as a sub-identifier,
> there are at most 128 sub-identifiers in a value, and each sub-identifier
> has a maximum value of 2^32-1 (4294967295 decimal).

Fixes otc/security#96
Fixes CVE-2023-2650
Reviewed-by: NMatt Caswell <matt@openssl.org>
Reviewed-by: NTomas Mraz <tomas@openssl.org>
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>

b436274c

29 5月, 2023 2 次提交
- C
  add liblegacy into libcrypto · 7311fb64
  由 code4lala 提交于 5月 29, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
  7311fb64
- C
  rm compatible · 39466a62
  由 code4lala 提交于 5月 29, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
  39466a62
27 5月, 2023 5 次提交
- O
  !113 部件化整改 · 07b24416
  由 openharmony_ci 提交于 5月 27, 2023
```
Merge pull request !113 from CheungVane/master
```
  07b24416
- C
  部件化整改 · afb6b70e
  由 CheungVane 提交于 5月 27, 2023
```
Signed-off-by: Nzhangwenzhi <zhangwenzhi3@huawei.com>
```
  afb6b70e
- O
  !112 回退 'Pull Request !109 : 修改openssl bundle.json' · efd9eb8d
  由 openharmony_ci 提交于 5月 27, 2023
```
Merge pull request !112 from openharmony_ci/revert-merge-109-master
```
  efd9eb8d
- O
  
  回退 'Pull Request !109 : 修改openssl bundle.json' · db104c17
  由 openharmony_ci 提交于 5月 27, 2023
  
  db104c17
- O
  !109 修改openssl bundle.json · 2564b05a
  由 openharmony_ci 提交于 5月 27, 2023
```
Merge pull request !109 from CheungVane/master
```
  2564b05a
26 5月, 2023 9 次提交
- O
  !110 compatible library · ce10581d
  由 openharmony_ci 提交于 5月 26, 2023
```
Merge pull request !110 from code4lala/master
```
  ce10581d
- C
  move compatible/OAT.xml contents to OAT.xml · ef666039
  由 code4lala 提交于 5月 26, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
  ef666039
- C
  rm compatible/bundle.json · 922726eb
  由 code4lala 提交于 5月 26, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
  922726eb
- C
  modify bundle · 9b6c02bc
  由 CheungVane 提交于 5月 26, 2023
```
Signed-off-by: Nzhangwenzhi <zhangwenzhi3@huawei.com>
```
  9b6c02bc
- C
  remove compatible shared library · e6fb8d44
  由 code4lala 提交于 5月 26, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I17f9c6be01e95129a522f2383fbfd10e84f564c4
```
  e6fb8d44
- C
  rename library compatible · f75b9493
  由 code4lala 提交于 5月 26, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I877ef2192fa46fffcfc4326cd85d716c191139f9
```
  f75b9493
- C
  add compatible · f54714b7
  由 code4lala 提交于 5月 26, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I5269be7d8e6c8ac399d86d9b48bfbd5cfabe0d19
```
  f54714b7
- C
  modify bundle · d6afa961
  由 CheungVane 提交于 5月 26, 2023
```
Signed-off-by: Nzhangwenzhi <zhangwenzhi3@huawei.com>
```
  d6afa961
- C
  整改bundle.json · 4255efd9
  由 CheungVane 提交于 5月 26, 2023
```
Signed-off-by: Nzhangwenzhi <zhangwenzhi3@huawei.com>
```
  4255efd9
25 5月, 2023 1 次提交
- O
  !108 适配x86的mac上编译arkui-cross和target-os ios · 3a2d1186
  由 openharmony_ci 提交于 5月 25, 2023
```
Merge pull request !108 from code4lala/master
```
  3a2d1186
23 5月, 2023 1 次提交
- C
  build openssl for cpu->arm,os->android cpu->arm64,os->android · 04868d2a
  由 code4lala 提交于 5月 23, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
  04868d2a
18 5月, 2023 2 次提交
- O
  !106 设置diff输出语言为英文 · 0e0a6516
  由 openharmony_ci 提交于 5月 18, 2023
```
Merge pull request !106 from code4lala/master
```
  0e0a6516
- C
  add LC_ALL=C before diff · 2dabef68
  由 code4lala 提交于 5月 18, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I96e829f4af516c340556f51c3c531710267e3551
```
  2dabef68
17 5月, 2023 2 次提交
- O
  !105 构建时再生成build_all_generated · 1a015704
  由 openharmony_ci 提交于 5月 17, 2023
```
Merge pull request !105 from code4lala/make_build_all_generated
```
  1a015704
- C
  add ios select platform · 5a8dd69b
  由 code4lala 提交于 5月 17, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: Ib34b9b5d1bfa9edf4a312988ff9a5c9e1732cde8
```
  5a8dd69b
16 5月, 2023 1 次提交

make build_all_generated before compilation · 74b2809c

由 code4lala 提交于 5月 11, 2023

Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: If0feac1105ed773eb9c56463c4a4281a3437040e

74b2809c

05 5月, 2023 3 次提交
- O
  !104 build darwin64-arm64-cc for M1 chip · dd628f4d
  由 openharmony_ci 提交于 5月 05, 2023
```
Merge pull request !104 from code4lala/M1
```
  dd628f4d
- C
  add darwin64-arm64-cc in BUILD.gn · f14d2068
  由 code4lala 提交于 5月 05, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
  f14d2068
- C
  add build_all_generated/darwin64-arm64-cc · 1d799e54
  由 code4lala 提交于 5月 05, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I19ba093109979031f24a6beb82f70e1f8cc00142
```
  1d799e54
04 5月, 2023 3 次提交
- O
  !103 darwin64-x86_64-cc · 3a654b75
  由 openharmony_ci 提交于 5月 04, 2023
```
Merge pull request !103 from code4lala/darwin
```
  3a654b75
- C
  compile darwin64-x86_64-cc in BUILD.gn · 2f08ce2e
  由 code4lala 提交于 5月 04, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: Ice9cf979dcd8026815a65158de64c899ab884e12
```
  2f08ce2e
- C
  add build_all_generated/darwin64-x86_64-cc · 6bfb0d11
  由 code4lala 提交于 5月 04, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: Idb402192f30605ab52dea1a56f1574971ab2f2a8
```
  6bfb0d11
28 4月, 2023 2 次提交
- O
  !77 openssl 3.x third_party_openssl · 117572fd
  由 openharmony_ci 提交于 4月 28, 2023
```
Merge pull request !77 from code4lala/master
```
  117572fd
- C
  update OAT.xml to fix ci B_CodeCheck · 30a45d29
  由 code4lala 提交于 4月 28, 2023
```
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
```
  30a45d29
27 4月, 2023 1 次提交

ohos_lite · aa744b5c

由 code4lala 提交于 4月 27, 2023

Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I1be72a32ac34ab145541069582d3e7299a54000b

aa744b5c

26 4月, 2023 4 次提交

add crypto/bn/rsa_sup_mul.c in crypto_source · 0351023c

由 code4lala 提交于 4月 26, 2023

Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I488711240cdb6fcac66e5660a5695513ac47a816

0351023c

Fix documentation of X509_VERIFY_PARAM_add0_policy() · 826e5cbc

由 Tomas Mraz 提交于 3月 21, 2023

The function was incorrectly documented as enabling policy checking.

Fixes: CVE-2023-0466
Reviewed-by: NMatt Caswell <matt@openssl.org>
Reviewed-by: NPaul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20563)
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I515b0c03074af5cf5a6f5e72bcec4a2d6642707a

826e5cbc

x509: fix double locking problem · 5170a5b1

由 Pauli 提交于 11月 11, 2022

This reverts commit 9aa4be691f5c73eb3c68606d824c104550c053f7 and removed the
redundant flag setting.

Fixes #19643

Fixes LOW CVE-2022-3996
Reviewed-by: NDmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: NTomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19652)

(cherry picked from commit 4d0340a6d2f327700a059f0b8f954d6160f8eef5)
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: I1013e00e8fe7c7975cf8e6dd4db380f37179660d

5170a5b1

x509: excessive resource use verifying policy constraints · 0dcdff28

由 Pauli 提交于 3月 08, 2023

A security vulnerability has been identified in all supported versions
of OpenSSL related to the verification of X.509 certificate chains
that include policy constraints.  Attackers may be able to exploit this
vulnerability by creating a malicious certificate chain that triggers
exponential use of computational resources, leading to a denial-of-service
(DoS) attack on affected systems.

Fixes CVE-2023-0464
Reviewed-by: NTomas Mraz <tomas@openssl.org>
Reviewed-by: NShane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/20568)
Signed-off-by: Ncode4lala <fengziteng2@huawei.com>
Change-Id: Ia84b5d25d543af1e61661fced02acd92b22afe5a

0dcdff28

OpenHarmony / Third Party Openssl 9 个月 前同步成功

OpenHarmony / Third Party Openssl
9 个月前同步成功