Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• f399d17e68 PKCSCCA: Cleanse sensitive data of stack/heap Ingo Franzki 2026-08-10 09:38:23 +02:00
• bf8cf2fbaa COMMON/PKCSCCA/PKCSTOK_MIGRATE: Prevent overflow when reading old token objects Ingo Franzki 2026-08-10 09:36:02 +02:00
• 9cbe772cf0 PKCSCCA: Prevent integer overflow when reading token objects from disk Ingo Franzki 2026-08-10 09:27:10 +02:00
• d544af81af PKCSSTATS: Escape strings printed into JSON output Ingo Franzki 2026-08-07 09:08:34 +02:00
• 95b15b1491 PKCSSTATS: Check for NULL after memory allocation Ingo Franzki 2026-08-07 08:59:38 +02:00
• d51d728862 STATISTICS/PKCSSTATS: Prevent buffer overrun when building SHM name Ingo Franzki 2026-08-07 08:56:21 +02:00
• 97ec424766 STATISTICS/PKCSSTATS: Do not overflow statistics counters, saturate at max Ingo Franzki 2026-08-06 17:35:10 +02:00
• 50005e090d STATISTICS/PKCSSTATS: Ensure that the full range of uids is accepted Ingo Franzki 2026-08-06 17:23:15 +02:00
• d32d8ac28b STATISTICS/PKCSSTATS: Prevent integer overflow on statistics SHM size Ingo Franzki 2026-08-06 17:10:14 +02:00
• 4488680428 PKCSCONF: Report failure of C_InitPIN and C_SetPIN with exit code Ingo Franzki 2026-08-06 15:55:04 +02:00
• f13d53517e PKCSCONF: Don't accept negative slot values Ingo Franzki 2026-08-06 15:46:25 +02:00
• ed91c6f47e PKCSCONF: Fix integer overflows and NULL pointer checks Ingo Franzki 2026-08-06 15:41:35 +02:00
• 06502c9fb8 PKCSCONF: Fix unbound string copy for label Ingo Franzki 2026-08-06 15:35:40 +02:00
• 3b287144b2 COMMON: Restrict token name and config name to allowed characters Ingo Franzki 2026-08-17 09:50:59 +02:00
• 02a5eed4da PKCSSLOTD: Restrict token name and config name to allowed characters Ingo Franzki 2026-08-17 09:52:42 +02:00
• 27caf003cd PKCSSLOTD: Change variable 'uid' to type uid_t, not int Ingo Franzki 2026-08-06 13:10:41 +02:00
• ba5e49edd0 PKCSSLOTD: Avoid NULL pointer dereference in slotdGenericSignalHandler Ingo Franzki 2026-08-06 13:06:37 +02:00
• 4c70031063 PKCSSLOTD: Add error checking in XProcLock() Ingo Franzki 2026-08-06 11:28:53 +02:00
• cad461fb62 PKCSSLOTD: Avoid underflow of pGlobalRWSessions in CheckForGarbage Ingo Franzki 2026-08-06 11:11:17 +02:00
• fdda5c8539 PKCSSLOTD: Fix error handling of shmat() Ingo Franzki 2026-08-06 11:03:50 +02:00
• 899173b27f PKCSSLOTD: Simplify copying slot info in PopulateSlotInfo() Ingo Franzki 2026-08-06 10:55:10 +02:00
• 4bd6a736f1 PKCSSLOTD: Fix NULL pointer dereference Ingo Franzki 2026-08-06 08:32:33 +02:00
• 2cfcc67cfa PKCSSLOTD: Fix memory leak in error paths of compute_sha256() Ingo Franzki 2026-08-06 08:25:14 +02:00
• be484acefa API: Fix trace message about pid, uid, and gid vs the real ones Ingo Franzki 2026-08-05 16:33:46 +02:00
• 1a39b5487a API: Fix a race condition when opening sessions Ingo Franzki 2026-08-05 16:24:42 +02:00
• 58eb9cd409 API: Prevent global session counters from overflowing Ingo Franzki 2026-08-05 15:58:11 +02:00
• 7fe542b48e POLICY: Prevent unchecked bit-shift when parsing PRFs, MGFs, and KDFs Ingo Franzki 2026-08-05 15:47:56 +02:00
• 8d2c71c651 API: Limit the event payload size to EVENT_MAX_PAYLOAD_LENGTH Ingo Franzki 2026-08-05 15:38:44 +02:00
• 596b1209fe CONFIG: Prevent number overflow in confignode_dumpnnn Ingo Franzki 2026-08-05 15:16:44 +02:00
• 1572f64f72 CONFIG: Change line number field in ConfigBaseNode to 32 bit Ingo Franzki 2026-08-05 14:55:35 +02:00
• b9b37e814d CONFIG: White-space fix only, for better readability Ingo Franzki 2026-08-05 14:45:49 +02:00
• c013b81664 CONFIG: Clarify CT_HAS_KEY_MASK usage Ingo Franzki 2026-08-05 14:33:16 +02:00
• 248e0e8d03 POLICY: Fix NULL pointer dereference on empty config file Ingo Franzki 2026-08-05 14:08:50 +02:00
• 20816cdfcc CONFIG: Add error detection for parsing values Ingo Franzki 2026-08-05 13:57:51 +02:00
• 2a60521768 PKCSHSM_MK_CHANGE: Fix memory leak on error path Ingo Franzki 2026-08-07 11:38:59 +02:00
• 862ee9bdbc PKCSHSM_MK_CHANGE: Remove dead check Ingo Franzki 2026-08-07 11:35:33 +02:00
• 8c9156aa1d HSM_MK_CHANGE: Fix file name match on hsm_mk_change_op_remove() Ingo Franzki 2026-08-07 11:31:06 +02:00
• e6c48e6095 HSM_MK_CHANGE: Prevent reuse of already closed file descriptor Ingo Franzki 2026-08-07 11:24:27 +02:00
• baeffbd872 HSM_MK_CHANGE: Fix memory leak on error in hsm_mk_change_token_mkvps_load() Ingo Franzki 2026-08-05 13:10:09 +02:00
• c73bd7778c HSM_MK_CHANGE: Prevent symlink-following in hsm_mk_change_op_remove/iterate Ingo Franzki 2026-08-05 12:59:21 +02:00
• 2362270216 HSM_MK_CHANGE: Fix byte ordering conversion when loading operations Ingo Franzki 2026-08-05 11:51:01 +02:00
• 52496c2ec8 HSM_MK_CHANGE: Prevent integer overflows in flatten/unflatten code Ingo Franzki 2026-08-05 11:38:36 +02:00
• 767ad03ad6 HSM_MK_CHANGE: Check length of read data before using it Ingo Franzki 2026-08-05 11:34:36 +02:00
• 4e90185817 PKCSICSF: Let lookup_name()/list_tokens() receive full pages on each iteration Ingo Franzki 2026-08-10 09:07:40 +02:00
• 24dbc97561 PKCSICSF/ICSF: Restrict token name to allowed characters Ingo Franzki 2026-08-10 09:02:29 +02:00
• 6c7800836f PKCSICSF: Don't create an inconsistent config if adding a token fails Ingo Franzki 2026-08-10 08:57:13 +02:00
• 1fc0246062 PKCSICSF: Unify mech checking Ingo Franzki 2026-08-10 08:53:54 +02:00
• 2d660fe73d PKCSICSF: Check RACF password length and issue user friendly error Ingo Franzki 2026-08-10 08:50:39 +02:00
• ec22ea8c9c PKCSICSF: Fix dead assignment Ingo Franzki 2026-08-10 08:46:21 +02:00
• 1b54b5d24a PKCSICSF: Fix parameter type mismatch in secure_racf_passwd() Ingo Franzki 2026-08-10 08:41:43 +02:00
• dd379229ec PKCSICSF: Cleanse sensitive data on stack Ingo Franzki 2026-08-10 08:28:44 +02:00
• d68d793b6c PKCSICSF: Fix NULL pointer dereference in error path Ingo Franzki 2026-08-10 08:26:23 +02:00
• 1ab23cf59f ICSF: Reject C_DigestKey with CKR_KEY_INDIGESTIBLE Ingo Franzki 2026-08-12 11:28:57 +02:00
• 7121762461 ICSF: Fix handling of C_VerifySignature[Init] calls Ingo Franzki 2026-08-12 08:52:10 +02:00
• 5eceaf0183 ICSF: Avoid using static variables for parse_config_file() Ingo Franzki 2026-08-07 15:25:26 +02:00
• 3f0543910b ICSF: Fix locking issue with close_session() Ingo Franzki 2026-08-07 15:05:14 +02:00
• cb1a85e2a4 ICSF: Add error handling on writing out the MK and RACF file Ingo Franzki 2026-08-07 14:47:09 +02:00
• 91ebfc0e06 ICSF: Detect invalid LDAP handle hex string Ingo Franzki 2026-08-07 14:25:16 +02:00
• 9a1b17b83a ICSF: Don't leak LDAP handle in error cases with or after login Ingo Franzki 2026-08-07 14:05:47 +02:00
• 3a58456ba4 ICSF: Cleanse sensitive information on error case Ingo Franzki 2026-08-07 13:51:39 +02:00
• 162d3f51a3 ICSF: Validate returned token or object list before using it Ingo Franzki 2026-08-07 13:41:12 +02:00
• 753c6a4549 ICSF: Fix size query and buffer-too-small handling Ingo Franzki 2026-08-07 13:09:07 +02:00
• 9acd8dd31c ICSF: Make usage of encrypt_aes()/decrypt_aes() output buffer size aware Ingo Franzki 2026-08-05 11:24:14 +02:00
• 42b8a9d386 ICSF: NUL-terminate decrypted string after return code checking Ingo Franzki 2026-08-05 10:51:30 +02:00
• e6971efb05 ICSF: Fix memory leak in encrypt_aes() and decrypt_aes() Ingo Franzki 2026-08-05 10:09:57 +02:00
• 71d124b0b8 ICSF: Fix strunpad usage Ingo Franzki 2026-08-05 10:05:35 +02:00
• aa36cbd7d2 ICSF: Cleanse sensitive data on stack or heap when no longer used Ingo Franzki 2026-08-05 09:57:06 +02:00
• 9a4c9f67af ICSF: Fix strunpad() to handle the length correctly Ingo Franzki 2026-08-05 09:48:28 +02:00
• 518ca69671 ICSF: Prevent integer overflow on input message size calculations Ingo Franzki 2026-08-05 09:45:51 +02:00
• 0c10e53b0c ICSF: Fix incorrect variable usage in icsftok_copy_object() Ingo Franzki 2026-08-05 09:40:13 +02:00
• 90119981b7 ICSF: Fix possible NULL pointer dereference Ingo Franzki 2026-08-05 09:37:24 +02:00
• 047f976141 ICSF: Validate length read from the MK or RACF file before using it Ingo Franzki 2026-08-05 09:33:31 +02:00
• 4b9f43fd6e ICSF: Validate received chain data length before using it Ingo Franzki 2026-08-05 09:28:25 +02:00
• 557d1491e7 EP11: Fix C_DigestKey to terminate the operation on error Ingo Franzki 2026-08-12 13:11:07 +02:00
• 6791a316db EP11: Prevent integer overflow in import_DH_key() Ingo Franzki 2026-08-05 09:12:16 +02:00
• 999b32d324 EP11: Prevent integer overflow in dh/dsa_generate_keypair() Ingo Franzki 2026-08-05 09:07:49 +02:00
• 49ef87ceeb EP11: Cleanse padded pin on heap in create_padded_pin() Ingo Franzki 2026-08-05 09:03:42 +02:00
• 004c28f5d2 CCA: Unlock cca_adapter_rwlock in error case only for DOM-ANY Ingo Franzki 2026-08-05 08:21:27 +02:00
• ba326099eb CCA: Cleanse sensitive data on stack for clear EC key import Ingo Franzki 2026-08-04 16:43:27 +02:00
• 8fa18b64d2 CCA: Add length check to build_private_EC_key_value_structure() Ingo Franzki 2026-08-04 16:29:44 +02:00
• 178a25b1b8 CCA: Fix off-by-one in cca_get_acp() Ingo Franzki 2026-08-04 16:24:00 +02:00
• 0881e69fd9 CCA: Protect length calculation from malformed key tokens Ingo Franzki 2026-08-04 16:19:55 +02:00
• c360b33947 CCA: Use snprintf instead of sprintf for the DOMNnnnn rule array keyword Ingo Franzki 2026-08-04 15:50:08 +02:00
• d334b9a037 CCA: Change strcpy/strncpy to memcpy for serial number copying Ingo Franzki 2026-08-04 15:44:30 +02:00
• 782771bb8f COMMON: Cleanse sensitive BIGNUMs in mech_openssl.c Ingo Franzki 2026-08-04 15:31:01 +02:00
• 80e9c587ec SOFT: Avoid buffer overrun in token_specific_generic_secret_key_gen() Ingo Franzki 2026-08-04 15:18:00 +02:00
• 6e4f8cebcb COMMON: Fix signed/unsigned mismatch in encode_eme_oaep() Ingo Franzki 2026-08-04 15:11:34 +02:00
• 4c927b006b SOFT: Cleanse sensitive key material on stack or heap Ingo Franzki 2026-08-04 15:06:29 +02:00
• 7aabe77828 SOFT: Fix possible NULL pointer dereference in token_specific_dh_pkcs_key_pair_gen() Ingo Franzki 2026-08-04 14:57:57 +02:00
• 051bfeb6bc ICA: Add NULL check after allocation in token_specific_init() Ingo Franzki 2026-08-04 14:45:57 +02:00
• 4bada8bc75 ICA: Fix integer overflow in token_specific_sha_update() Ingo Franzki 2026-08-04 14:36:19 +02:00
• 9262df9d9d ICA: token_specific_rng() might produce too few random bytes Ingo Franzki 2026-08-04 14:34:21 +02:00
• a6abaa96ba ICA: Cleanse buffer at end of rsa_calc_private_exponent() Ingo Franzki 2026-08-04 14:28:20 +02:00
• 6475055f4c ICA: Copy the right justified RSA modulus in the right length Ingo Franzki 2026-08-04 14:19:26 +02:00
• 33de4050ce EP11: Prevent integer overflow in ep11tok_get_mechanism_list() Ingo Franzki 2026-08-04 13:49:23 +02:00
• b57f1db4f2 EP11: Prevent integer overflow in ML-DSA sign and verify Ingo Franzki 2026-08-04 13:47:25 +02:00
• 6dfd793e22 CCA: Prevent integer overflow in ML-DSA sign and verify Ingo Franzki 2026-08-04 13:44:10 +02:00
• a8847a0aae ICSF: Prevent integer overflow in icsftok_find_objects_init() Ingo Franzki 2026-08-04 13:50:56 +02:00
• 50a910dea0 COMMON: Check for overflows in BER encoding functions Ingo Franzki 2026-08-04 11:38:35 +02:00
• d26e582c9c COMMON: Fix AES-CTR mechanism parameter checking Ingo Franzki 2026-08-04 10:59:43 +02:00