strongswan/src/libcharon
Tobias Brunner 6d8a57342b ikev2: Initialize variable in case set_key() or allocate_bytes() fails
In case the PRF's set_key() or allocate_bytes() method failed, skeyseed
was not initialized and the chunk_clear() call later caused a crash.

This could have happened with OpenSSL in FIPS mode when MD5 was
negotiated (and test vectors were not checked, in which case the PRF
couldn't be instantiated as the test vectors would have failed).
MD5 is not included in the default proposal anymore since 5.6.1, so
with recent versions this could only happen with configs that are not
valid in FIPS mode anyway.

Fixes: CVE-2018-10811
2018-05-24 15:45:08 +02:00
..
attributes Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
bus Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
config Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
control Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
encoding Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
kernel Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
network Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
plugins kernel-netlink: Use strncpy to copy interface name when configuring HW offload 2018-05-23 20:25:49 +02:00
processing/jobs Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
sa ikev2: Initialize variable in case set_key() or allocate_bytes() fails 2018-05-24 15:45:08 +02:00
tests Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
Android.mk proposal: Move proposal_t from libcharon to libstrongswan 2017-11-17 18:09:54 +01:00
Makefile.am eap-aka-3gpp: Add test vectors from 3GPP TS 35.207 14.0.0 2018-05-18 17:37:39 +02:00
daemon.c proposal: Move proposal_t from libcharon to libstrongswan 2017-11-17 18:09:54 +01:00
daemon.h Unify format of HSR copyright statements 2018-05-23 16:32:53 +02:00
debug Moving charon to libcharon. 2010-03-19 13:34:52 +01:00