Code

Fix CVE-2024-4741 for branch 8.4#631

Code

Merged

InfoHunter merged 11 commits intoTongsuo-Project:8.4-stableTongsuo-Project/Tongsuo:8.4-stablefrom dongbeiouba:fix84/CVE-2024-4741dongbeiouba/Tongsuo:fix84/CVE-2024-4741Copy head branch name to clipboardJul 1, 2024

+456-27

Commits

Commits on Jun 26, 2024

• Only free the read buffers if we're not using them

  Show description for 24da907
  dongbeiouba

  committed
  24da907

  Copy full SHA for 24da907

• Set rlayer.packet to NULL after we've finished using it

  Show description for 5f63394
  dongbeiouba

  committed
  5f63394

  Copy full SHA for 5f63394

• Extend the SSL_free_buffers testing

  Show description for 8b7953c
  dongbeiouba

  committed
  8b7953c

  Copy full SHA for 8b7953c

• Move the ability to load the dasync engine into ssltestlib.c

  Show description for 4a717ca
  dongbeiouba

  committed
  4a717ca

  Copy full SHA for 4a717ca

• Further extend the SSL_free_buffers testing

  Show description for 25080cf
  dongbeiouba

  committed
  25080cf

  Copy full SHA for 25080cf

• Add a CHANGES entry for CVE-2024-4741

  dongbeiouba

  committed
  c1acf08

  Copy full SHA for c1acf08

• Add a test for TLS pipelining

  Show description for 36b1c64
  dongbeiouba

  committed
  36b1c64

  Copy full SHA for 36b1c64

• Pipeline output/input buf arrays must live until the EVP_Cipher is called

  Show description for 62432de
  dongbeiouba

  committed
  62432de

  Copy full SHA for 62432de

• Fix read pipelining

  Show description for 2c91a4a
  dongbeiouba

  committed
  2c91a4a

  Copy full SHA for 2c91a4a

• Do not have more data in a pipeline than the split_send_fragment

  Show description for ea0da07
  dongbeiouba

  committed
  ea0da07

  Copy full SHA for ea0da07

• Don't attempt to set provider params on an ENGINE based cipher

  Show description for 0a02ab8
  dongbeiouba

  committed
  0a02ab8

  Copy full SHA for 0a02ab8