Code

Fix CVE-2024-4741#630

Code

Merged

InfoHunter merged 11 commits intoTongsuo-Project:masterTongsuo-Project/Tongsuo:masterfrom dongbeiouba:fix/CVE-2024-4741dongbeiouba/Tongsuo:fix/CVE-2024-4741Copy head branch name to clipboardJul 1, 2024

+456-27

Commits

Commits on Jun 25, 2024

• Only free the read buffers if we're not using them

  Show description for 03d02fd
  dongbeiouba

  committed
  03d02fd

  Copy full SHA for 03d02fd

• Set rlayer.packet to NULL after we've finished using it

  Show description for 4b16389
  dongbeiouba

  committed
  4b16389

  Copy full SHA for 4b16389

• Extend the SSL_free_buffers testing

  Show description for f689c6a
  dongbeiouba

  committed
  f689c6a

  Copy full SHA for f689c6a

• Move the ability to load the dasync engine into ssltestlib.c

  Show description for 8411797
  dongbeiouba

  committed
  8411797

  Copy full SHA for 8411797

• Further extend the SSL_free_buffers testing

  Show description for 1979546
  dongbeiouba

  committed
  1979546

  Copy full SHA for 1979546

• Add a CHANGES entry for CVE-2024-4741

  dongbeiouba

  committed
  894a738

  Copy full SHA for 894a738

• Add a test for TLS pipelining

  Show description for ff9f60d
  dongbeiouba

  committed
  ff9f60d

  Copy full SHA for ff9f60d

• Pipeline output/input buf arrays must live until the EVP_Cipher is called

  Show description for 8dffa02
  dongbeiouba

  committed
  8dffa02

  Copy full SHA for 8dffa02

• Fix read pipelining

  Show description for e85d892
  dongbeiouba

  committed
  e85d892

  Copy full SHA for e85d892

• Do not have more data in a pipeline than the split_send_fragment

  Show description for 450c859
  dongbeiouba

  committed
  450c859

  Copy full SHA for 450c859

• Don't attempt to set provider params on an ENGINE based cipher

  Show description for 7964dca
  dongbeiouba

  committed
  7964dca

  Copy full SHA for 7964dca