From owner-cvs-src-old@FreeBSD.ORG Sun Aug 23 16:30:10 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 15CEF106568D for ; Sun, 23 Aug 2009 16:30:10 +0000 (UTC) (envelope-from simon@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 3D0F48FC14 for ; Sun, 23 Aug 2009 16:30:07 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n7NGU7Xf093059 for ; Sun, 23 Aug 2009 16:30:07 GMT (envelope-from simon@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n7NGU7Qm093058 for cvs-src-old@freebsd.org; Sun, 23 Aug 2009 16:30:07 GMT (envelope-from simon@repoman.freebsd.org) Message-Id: <200908231630.n7NGU7Qm093058@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to simon@repoman.freebsd.org using -f From: "Simon L. Nielsen" Date: Sun, 23 Aug 2009 16:29:47 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/crypto/openssl/crypto/pqueue pqueue.c pqueue.h src/crypto/openssl/ssl d1_both.c d1_pkt.c X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 23 Aug 2009 16:30:10 -0000 simon 2009-08-23 16:29:47 UTC FreeBSD src repository Modified files: crypto/openssl/crypto/pqueue pqueue.c pqueue.h crypto/openssl/ssl d1_both.c d1_pkt.c Log: SVN rev 196474 on 2009-08-23 16:29:47Z by simon Merge DTLS fixes from vendor-crypto/openssl/dist: - Fix memory consumption bug with "future epoch" DTLS records. - Fix fragment handling memory leak. - Do not access freed data structure. - Fix DTLS fragment bug - out-of-sequence message handling which could result in NULL pointer dereference in dtls1_process_out_of_seq_message(). Note that this will not get FreeBSD Security Advisory as DTLS is experimental in OpenSSL. MFC after: 1 week Security: CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 CVE-2009-1387 Revision Changes Path 1.2 +14 -0 src/crypto/openssl/crypto/pqueue/pqueue.c 1.2 +1 -0 src/crypto/openssl/crypto/pqueue/pqueue.h 1.3 +28 -17 src/crypto/openssl/ssl/d1_both.c 1.3 +4 -0 src/crypto/openssl/ssl/d1_pkt.c