git: DragonFly_RELEASE_5_8 libcrypto: avoid NULL or zero cofactor in ECC parameters

Daniel Fojt deef at crater.dragonflybsd.org
Thu Sep 24 04:34:02 PDT 2020


commit 456d0b9d2652498fe2fe3b8236a6ce1df48ef0ef
Author: Daniel Fojt <df at neosystem.org>
Date:   Thu Sep 24 11:33:30 2020 +0200

    libcrypto: avoid NULL or zero cofactor in ECC parameters
    
    Fixes CVE-2019-1547.
    
    Upstream commit: https://github.com/libressl-portable/openbsd/commit/6d914bd944505552e193ca2d73aa035e50996738

Summary of changes:
 crypto/libressl/crypto/ec/ec_err.c   |   3 +-
 crypto/libressl/crypto/ec/ec_lib.c   | 118 ++++++++++++++++++++++++++++++++---
 crypto/libressl/include/openssl/ec.h |   3 +-
 3 files changed, 113 insertions(+), 11 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/456d0b9d2652498fe2fe3b8236a6ce1df48ef0ef


-- 
DragonFly BSD source repository


More information about the Commits mailing list