openntpd-openbsd

872 MiB

Author	SHA1	Message	Date
martijn	89ee3aeaf4	Make sure that ber in ber_scanf_elements is not NULL before parsing format where ber is utilized. This also allows us to remove the ber->be_next check, which can cause weird behaviour, because a NULL be_next would result in parsing the last element twice. OK claudio@ on previous version OK rob@	5 years ago
martijn	738a1a7927	Don't use a 0 element to determine the end of an OID when comparing two OIDS. This can result in false equality matches. OK claudio@	5 years ago
martijn	0802062d3c	There's no reason why the first digit of an OID can't be 0. OK claudio@ "Good find" deraadt@	5 years ago
rob	9d258bd6e0	Limit maximum number of length octets to platform independent sizeof(int32_t). Problem noticed by bluhm@. Discussed on hackers. ok claudio@	5 years ago
rob	5ea11244b8	whitespace	5 years ago
rob	509ea037e6	Add XXX to a comment.	5 years ago
rob	b02b4b32b0	Enable support for the writting of BITSTRING by treating it as an OCTETSTRING. ok claudio@	5 years ago
rob	b6f67bd097	Enforce smallest number of contents octets for int (and enum). ok claudio@	5 years ago
rob	cbfc875695	Fail early if a (universal) primitive type identifies as constructed, or if a boolean has a contents length other than 1. ok claudio@	5 years ago
rob	d7ff82d34b	Enforce minimal number of octets for tag > 30. "sure" claudio@	5 years ago
rob	b3f85186e0	In long form encoding, explicitly prohibit an initial length octet of 0xff which is reserved for future use. ok claudio@	5 years ago
rob	ad393dcd5f	The BER API is currently used by ldap, ldapd, ldapctl, ypldap, snmpd, and snmpctl. Separate copies of ber.[ch] have existed and been maintained in sync in ldap, ldapd, ypldap and snmpd. This commit moves the BER API into /usr/lib/libutil. All current consumers already link libutil. ldapd and snmpd regress passes, and release builds. With help from tb@ and guenther@. ok deraadt@, tb@	5 years ago

12 Commits (89ee3aeaf40f46c3851ff1f71b8b71813380ceb1)