Fix two invalid memory reads in RSA OAEP mode.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 2f26937ebddace2ef1beebd69ea1d4b1373ec9bd..b2b82024ad41a307b088f6b448dd26729d6df077 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -685,6 +685,14 @@
      [NTT]
 
  Changes between 0.9.8g and 0.9.8h  [xx XXX xxxx]
+
+  *) RSA OAEP patches to fix two separate invalid memory reads.
+     The first one involves inputs when 'lzero' is greater than
+     'SHA_DIGEST_LENGTH' (it would read about SHA_DIGEST_LENGTH bytes
+     before the beginning of from). The second one involves inputs where
+     the 'db' section contains nothing but zeroes (there is a one-byte
+     invalid read after the end of 'db').
+     [Ivan Nesterlode <inestlerode@us.ibm.com>]
   
   *) Add TLS session ticket callback. This allows an application to set
      TLS ticket cipher and HMAC keys rather than relying on hardcoded fixed