Build Update for openssl/openssl
-------------------------------------

Build: #8791
Status: Passed

Duration: 3 minutes and 14 seconds
Commit: 1acdbb3 (OpenSSL_1_0_2-stable)
Author: Rich Salz
Message: Prevent OOB in SRP base64 code.

Change size comparison from > (GT) to >= (GTE) to ensure an additional
byte of output buffer, to prevent OOB reads/writes later in the function
Reject input strings larger than 2GB
Detect invalid output buffer size and return early

Reviewed-by: Richard Levitte <[email protected]>
Reviewed-by: Rich Salz <[email protected]>
(Merged from https://github.com/openssl/openssl/pull/2672)

(cherry picked from commit ecca16632a73bb80ee27cdec8a97f6def0a4714d)

View the changeset: 
https://github.com/openssl/openssl/compare/d0f38a1b8dbc...1acdbb3eef4c

View the full build log and details: 
https://travis-ci.org/openssl/openssl/builds/203910098

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

Reply via email to