f86acc9434
EVP_DecodeUpdate() should not produce zeros for input padding `=` signs to avoid writing to non-allocated memory regions. To achieve this: - Add `eof` parameter to `evp_decodeblock_int` function in `openssl/crypto/evp`. The parameter should either contain the number of the input padding characters to ignore or `-1` if the function has to count them. - Use precalculated `eof` in `EVP_DecodeUpdate` to fix its behaviour. - Use `eof = -1` in `EVP_DecodeFinal` to count it in `evp_decodeblock_int`. - Do not ignore padding in `EVP_DecodeBlock` (`eof = 0`) because it should write padding zeros according to the documentation. - Add the HISTORY section to EVP_EncodeInit documentation to describe the fix. Other changes: - Update AUTHORS.md - Update the copyright date in the documentation. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26678)
1,022 B
1,022 B
Authors
This is the list of OpenSSL authors for copyright purposes. It does not necessarily list everyone who has contributed code, since in some cases, their employer may be the copyright holder. To see the full list of contributors, see the revision history in source control.
Groups
- OpenSSL Software Services, Inc.
- OpenSSL Software Foundation, Inc.
- Google LLC
Individuals
- Andy Polyakov
- Ben Laurie
- Ben Kaduk
- Bernd Edlinger
- Bodo Möller
- David Benjamin
- David von Oheimb
- Dmitry Belyavskiy (Дмитрий Белявский)
- Emilia Käsper
- Eric Young
- Geoff Thorpe
- Holger Reif
- Kurt Roeckx
- Lutz Jänicke
- Mark J. Cox
- Matt Caswell
- Matthias St. Pierre
- Nicola Tuveri
- Nils Larsch
- Patrick Steuer
- Paul Dale
- Paul C. Sutton
- Paul Yang
- Ralf S. Engelschall
- Rich Salz
- Richard Levitte
- Shane Lontis
- Stephen Henson
- Steve Marquess
- Tim Hudson
- Tomáš Mráz
- Ulf Möller
- Valerii Krygin
- Viktor Dukhovni