Aris Adamantiadis e9d16bd343 buffers: Fix a possible null pointer dereference ...

This is an addition to CVE-2015-3146 to fix the null pointer
dereference. The patch is not required to fix the CVE but prevents
issues in future.

Signed-off-by: Aris Adamantiadis <aris@0xbadc0de.be>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit 3091025472)

2015-04-23 10:34:13 +02:00

..

threads

threads: Fix building with POSIX threads in MinGW.

2015-01-20 19:03:08 +01:00

agent.c

update copyright information

2014-01-07 15:18:44 +01:00

auth1.c

src: Remove enter_function() and leave_function().

2013-07-14 13:31:24 +02:00

auth.c

include: We should use __func__ which is C99

2015-04-02 10:57:18 +02:00

base64.c

base64: Added casts to GET macros to fix build warnings.

2011-01-02 19:35:54 +01:00

bind.c

bind: only set bindfd after successful listen

2014-03-12 14:16:28 +01:00

buffer.c

buffers: Fix a possible null pointer dereference

2015-04-23 10:34:13 +02:00

callbacks.c

src: Update my mail address.

2014-01-07 16:09:04 +01:00

channels1.c

channels1: Fix pty request state

2015-01-20 18:59:01 +01:00

channels.c

doc: Improve docs for ssh_channel_get_exit_status().

2014-04-22 09:09:57 +02:00

client.c

options: Fix setting the port.

2014-12-25 12:35:21 +01:00

CMakeLists.txt

build: Use Threads_FOUND to decide whether to build ssh_threads.

2014-02-06 11:13:23 +01:00

config.c

options: Fix setting the port.

2014-12-25 12:35:21 +01:00

connect.c

connect: Fix mingw build.

2015-01-26 17:10:19 +01:00

crc32.c

priv: Create crc32.h.

2011-09-18 21:37:17 +02:00

curve25519_ref.c

curve25519: include reference implementation

2013-11-03 14:58:47 +01:00

curve25519.c

curve25519: Fix memory leaks in ssh_server_curve25519_init().

2013-11-27 22:53:53 +01:00

dh.c

Fix the dh.c build with libgcrypt

2014-12-29 16:06:33 +01:00

ecdh.c

update copyright information

2014-01-07 15:18:44 +01:00

error.c

doc: Fix description of error parameter for ssh_get_error*

2014-01-22 09:46:00 +01:00

gcrypt_missing.c

priv: Move gcrypt functions to gcrypt header.

2011-09-18 21:37:17 +02:00

getpass.c

update copyright information

2014-01-07 15:18:44 +01:00

gssapi.c

gssapi: ssh_gssapi_set_creds() is a client side function

2014-10-12 15:47:13 +02:00

gzip.c

src: Update my mail address.

2014-01-07 16:09:04 +01:00

init.c

init: Some initialization fixes.

2011-05-01 19:42:50 +02:00

kex1.c

src: Remove enter_function() and leave_function().

2013-07-14 13:31:24 +02:00

kex.c

CVE-2014-8132: Fixup error path in ssh_packet_kexinit()

2014-12-17 19:45:23 +01:00

known_hosts.c

options: Fix setting the port.

2014-12-25 12:35:21 +01:00

legacy.c

src: Remove enter_function() and leave_function().

2013-07-14 13:31:24 +02:00

libcrypto.c

libcrypto: Fix Windows build with ssh_reseed().

2014-12-17 19:40:57 +01:00

libgcrypt.c

crypto: check malloc return in ssh_mac_ctx_init

2014-10-02 08:26:08 +02:00

log.c

update copyright information

2014-01-07 15:18:44 +01:00

match.c

match: Don't dereference 's' directly.

2012-10-09 11:09:34 +02:00

messages.c

messages: Fix a possible double free.

2014-12-05 10:59:41 +01:00

misc.c

src: Define MAX_BUF_SIZE globally and use it.

2014-02-02 22:21:07 +01:00

options.c

options: Fix setting the port.

2014-12-25 12:35:21 +01:00

packet1.c

packet: Do not decrypt zero length rest of buffer

2014-02-06 19:40:09 +01:00

packet_cb.c

CVE-2015-3146: Fix state validation in packet handlers

2015-04-23 10:34:12 +02:00

packet_crypt.c

packet_crypt: Make packet_{en,de}crypt fail consistently on len == 0

2014-02-06 19:40:29 +01:00

packet.c

packet: elide two buffer_prepend calls into one

2014-03-27 11:25:15 +01:00

pcap.c

pcap: Check return codes of buffer_add_* functions.

2012-10-09 11:09:34 +02:00

pki_crypto.c

pki_crypto.c: plug ecdsa_sig->[r,s] bignum leaks

2014-12-05 10:46:31 +01:00

pki_gcrypt.c

pki_gcrypt: Initialize 'type_c' in 'pki_do_sign_sessionid'

2014-10-02 08:30:30 +02:00

pki.c

pki: Make sure sig is not used unintialized.

2015-01-20 19:31:29 +01:00

poll.c

Locally restart ssh_poll() upon EINTR.

2015-02-23 22:06:34 +01:00

scp.c

Revert f2c2687ca6

2014-02-05 22:30:10 +01:00

server.c

CVE-2015-3146: Fix state validation in packet handlers

2015-04-23 10:34:12 +02:00

session.c

options: Fix setting the port.

2014-12-25 12:35:21 +01:00

sftp.c

Fix leak of sftp->ext when sftp_new() fails

2015-04-14 20:57:17 +02:00

sftpserver.c

sftp: more flexibility on channels

2013-07-13 15:01:17 +02:00

socket.c

Sending EOF on Socket that received a Broken Pipe makes call to poll to hang

2015-02-23 22:02:35 +01:00

string.c

string: Correctly burn the string buffer.

2014-09-15 20:46:06 +02:00

threads.c

threads: support libgcrypt 1.6 hack

2014-01-08 22:06:38 +01:00

wrapper.c

wrapper: fix z_stream leak

2014-10-02 08:25:27 +02:00