Jakub Jelen f5211239f9 CVE-2021-3634: Create a separate length for session_id ...

Normally, the length of session_id and secret_hash is the same,
but if we will get into rekeying with a peer that changes preference
of key exchange algorithm, the new secret hash can be larger or
smaller than the previous session_id causing invalid reads or writes.

Resolves https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35485

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2021-08-18 14:13:56 +02:00

..

CMakeLists.txt

unittests: Adds unitests for ecdsa and rsa with PKCS11 URIs.

2019-12-20 16:18:31 +01:00

torture_bind_config.c

tests/torture_bind_config: Use allowed algorithms in FIPS mode

2019-06-13 16:28:25 +02:00

torture_buffer.c

buffer: Fix regression introduced by 6c7eaa and c306a6

2019-02-21 10:51:17 +01:00

torture_bytearray.c

tests: Avoid warnings about unused arguments

2018-11-23 17:30:16 +01:00

torture_callbacks.c

Always check return value of ssh_list_new()

2020-12-11 13:35:20 +01:00

torture_channel.c

tests: Use ZERO_STRUCT for readfds

2018-08-20 18:42:03 +02:00

torture_config.c

tests: Verify the configuration can set more identity files from one configuration file

2021-01-28 19:11:58 +01:00

torture_crypto.c

tests: Skip chacha20-poly1305 tests in FIPS mode

2020-01-23 09:48:11 +01:00

torture_hashes.c

torture_hashes: Skip the MD5 tests in FIPS mode

2019-06-12 10:41:24 +02:00

torture_init.c

init: Introduce internal is_ssh_initialized()

2020-04-09 11:25:49 +02:00

torture_isipaddr.c

torture: Remove unused variable

2018-06-28 09:05:58 +02:00

torture_keyfiles.c

tests: Fix null termination in torture_read_one_line()

2019-05-28 09:18:53 +02:00

torture_knownhosts_parsing.c

Disable RSA and DSA keys with sha1 by default

2020-04-20 14:14:33 +02:00

torture_list.c

tests: Added NULL checks in torture_list.c

2019-01-26 13:56:22 +01:00

torture_misc.c

tests: Fix running timeout tests on gitlab windows runners

2021-05-26 17:36:51 +02:00

torture_moduli.c

tests: Added moduli file parsing tests

2019-01-24 12:56:09 +01:00

torture_options.c

tests: Cover ssh_options_getopt with unit tests

2020-05-05 14:23:06 +02:00

torture_packet_filter.c

Ignore request success and failure message if they are not expected

2020-12-11 13:29:46 +01:00

torture_packet.c

tests: Verify functionality of none cipher and mac

2020-05-05 14:23:06 +02:00

torture_pki_dsa.c

pki: Remove unused function pki_signature_verify()

2019-09-24 16:49:35 +02:00

torture_pki_ecdsa_uri.c

unittests: updates torture_pki_ecdsa_uri test by adding negative test cases to ensure there is no crash when

2020-05-20 12:49:29 +02:00

torture_pki_ecdsa.c

pki: Remove unused function pki_signature_verify()

2019-09-24 16:49:35 +02:00

torture_pki_ed25519.c

Add safety checks for all ssh_string_fill calls

2020-12-11 13:32:02 +01:00

torture_pki_rsa_uri.c

tests/torture.c: update the definition of torture_setup_tokens() to take load_public as an option that

2020-05-20 12:49:29 +02:00

torture_pki_rsa.c

pki: Remove unused function pki_signature_verify()

2019-09-24 16:49:35 +02:00

torture_pki.c

pki: Remove unused function pki_signature_verify()

2019-09-24 16:49:35 +02:00

torture_push_pop_dir.c

tests: Introduce functions to change directories

2018-11-28 15:51:06 +01:00

torture_rand.c

crytpo: Make sure we check return of ssh_get_random() correctly

2018-07-05 12:12:14 +02:00

torture_server_x11.c

libssh: deprecate SSH_KEYTYPE_ECDSA

2019-04-17 10:21:42 +02:00

torture_session_keys.c

CVE-2021-3634: Create a separate length for session_id

2021-08-18 14:13:56 +02:00

torture_temp_dir.c

tests: Introduce torture_make_temp_dir()

2018-11-28 15:51:06 +01:00

torture_temp_file.c

tests: use torture_create_temp_file() in torture_knownhosts_parsing

2018-11-28 15:51:06 +01:00

torture_threads_buffer.c

buffer: Fix regression introduced by 6c7eaa and c306a6

2019-02-21 10:51:17 +01:00

torture_threads_crypto.c

tests: Init cipher structure in thread_crypto_aes256_cbc()

2018-10-24 09:48:35 +02:00

torture_threads_init.c

tests: Use UNUSED macros in torture_threads_init

2018-11-30 18:25:12 +01:00

torture_threads_pki_rsa.c

pki: Remove unused function pki_signature_verify()

2019-09-24 16:49:35 +02:00

torture_tokens.c

token: Added function to remove duplicates

2019-07-04 10:29:20 +02:00