Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE
gnutls.8787
0003-cbc_mac_verify-require-minimum-padding-und...
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch of Package gnutls.8787
From cc91db2fb8efeb1e5e3c56a5ff86ea8cb3ef8915 Mon Sep 17 00:00:00 2001 From: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> Date: Wed, 20 Jun 2018 11:07:47 +0200 Subject: [PATCH 3/4] cbc_mac_verify: require minimum padding under SSL3.0 --- lib/gnutls_cipher.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/lib/gnutls_cipher.c b/lib/gnutls_cipher.c index 65dde6899..8b34472b7 100644 --- a/lib/gnutls_cipher.c +++ b/lib/gnutls_cipher.c @@ -659,7 +659,11 @@ ciphertext_to_compressed(gnutls_session_t session, * Note that we access all 256 bytes of ciphertext for padding check * because there is a timing channel in that memory access (in certain CPUs). */ - if (ver->id != GNUTLS_SSL3) + if (ver->id == GNUTLS_SSL3) { + if (pad >= blocksize) + pad_failed = 1; + } else + { for (i = 2; i <= MIN(256, ciphertext->size); i++) { tmp_pad_failed |= (compressed-> @@ -667,6 +671,7 @@ ciphertext_to_compressed(gnutls_session_t session, pad_failed |= ((i <= (1 + pad)) & (tmp_pad_failed)); } + } if (unlikely (pad_failed != 0 -- 2.18.0
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor