linux-kernel - [GIT PULL] ASN.1 fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <9148.1438781169@warthog.procyon.org.uk>
Date:	Wed, 05 Aug 2015 14:26:09 +0100
From:	David Howells <dhowells@...hat.com>
To:	jmorris@...ei.org
Cc:	marcel@...tmann.org, linux-kernel@...r.kernel.org,
	stable@...r.kernel.org, dhowells@...hat.com,
	linux-security-module@...r.kernel.org,
	linux-crypto@...r.kernel.org, dwmw2@...radead.org,
	keyrings@...ux-nfs.org
Subject: [GIT PULL] ASN.1 fixes

Hi James,

Can you pull these fixes for the ASN.1 compiler and decoder into the
security/next tree and also pass them onto Linus for immediate inclusion?

I've checked that the bugs fixed can't be used to compromise a system, so I
think they're survivable, but all the same, it's best if they're fixed
immediately (if I'm wrong, there's the possibility of handing memcpy() a
NULL pointer).

Here can be found a pair of programs to take BER/DER-encoded X.509 and
PKCS#7 and turn it into text which can be edited and turn the edited text
back into BER.  This allows the ASN.1 to be butchered in interesting ways.

	http://people.redhat.com/dhowells/asn1encode.c
	http://people.redhat.com/dhowells/asn1decode.c

David
---

The following changes since commit 52721d9d3334c1cb1f76219a161084094ec634dc:

  Linux 4.2-rc3 (2015-07-19 14:45:02 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git tags/asn1-fixes-20150805

for you to fetch changes up to 233ce79db4b23a174bcf30bde5d6ad913d5f46d3:

  ASN.1: Handle 'ANY OPTIONAL' in grammar (2015-08-05 13:38:07 +0100)

----------------------------------------------------------------
ASN.1 fixes

----------------------------------------------------------------
David Howells (4):
      ASN.1: Fix handling of CHOICE in ASN.1 compiler
      ASN.1: Fix actions on CHOICE elements with IMPLICIT tags
      ASN.1: Fix non-match detection failure on data overrun
      ASN.1: Handle 'ANY OPTIONAL' in grammar

 include/linux/asn1_ber_bytecode.h | 16 +++++++++++-----
 lib/asn1_decoder.c                | 27 +++++++++++++++++++++++----
 scripts/asn1_compiler.c           | 23 ++++++++++++++---------
 3 files changed, 48 insertions(+), 18 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/