36 Commits

Author SHA1 Message Date
olszomal bf209e0fc8 Refactor SpcIndirectDataContent parsing helpers 2026-05-26 17:27:46 +02:00
olszomal 68a6826cd1 Use ASN1_STRING and ASN1_INTEGER APIs instead of direct struct access 2026-05-26 17:27:46 +02:00
olszomal d0ef178a9a Remove redundant NULL assignments, CID 1669015 2026-02-25 14:07:58 +01:00
olszomal 2a5409b7c4 Fix header bounds validation in PE page hash calculation 2026-02-09 16:15:21 +01:00
olszomal 87bce8e372 Fix memory leaks on error paths in PE signing 2026-02-09 16:15:21 +01:00
olszomal f7ace57c81 Validate PE attribute certificate table bounds 2026-02-09 16:15:21 +01:00
olszomal 92f8761b47 Fix heap corruption in PE page hash calculation 2026-02-06 15:41:01 +01:00
Antoni Klajn 09d3312fd9 Fixed integer overflow, integer underflow and Out-of-Bounds Read 2026-02-06 11:39:49 +01:00
Michał Trojnara cbee1e723c Fixed buffer overflow while extracting msg digest
Reported and fixed by Antoni Klajn, Opera
2026-02-02 17:37:45 +01:00
olszomal 10ca3a06ea Suppress compiler warnings 2025-05-06 10:42:53 +02:00
olszomal 2b3228d549 Changed error output to stderr instead of stdout 2024-06-05 16:54:21 +02:00
olszomal 41b662a8fe Checked cFolders value 2024-05-31 16:47:31 +02:00
olszomal 3998bcabb2 Simplify BIO chain free up and FILE_FORMAT_CTX cleanup 2024-02-28 15:55:25 +01:00
olszomal fa40c57f80 Simplify checking whether a signature exists 2024-02-28 11:55:21 +01:00
Michał Trojnara 4576895718 Initial script (text) format support
See #37 for details.
2024-02-12 10:54:18 +01:00
olszomal f22c83514c Simplify obtaining an existing signature and creating a new one 2024-01-23 19:00:22 +01:00
olszomal 44ca1f38e6 PKCS9_SEQUENCE_NUMBER authenticated attribute support 2024-01-23 19:00:22 +01:00
Michał Trojnara 98b004edda Ignore garbage in PE sigpos/siglen 2023-12-20 11:26:50 +01:00
olszomal 64e1bba96b Add a new command extract-data to extract a PKCS#7 data content to be signed 2023-12-19 13:07:19 +01:00
olszomal 8a9b275494 Fixed unmap_file() segmentation fault 2023-11-21 10:54:44 +01:00
olszomal 6d6270094e Simplify unlinking outfile 2023-11-13 13:50:41 +01:00
olszomal 900ffed596 Enable verification that a catalog file was signed by a valid certificate.
Simplify setting and signing a content blob.
Clean up a support library.
2023-11-07 14:56:48 +01:00
Michał Trojnara 1700455533 APPX support (#303)
Co-authored-by: Maciej Panek <Maciej.panek@punxworks.com>
Co-authored-by: olszomal <Malgorzata.Olszowka@stunnel.org>
2023-09-19 21:23:32 +02:00
Michał Trojnara a6f767f5a3 Mark the result as not tainted 2023-09-08 14:09:53 +02:00
olszomal 2d21a2121c squash gcc debugger warnings
remove nsections>UINT16_MAX check
2023-09-08 11:51:20 +02:00
olszomal c6990878c2 Check the length of the attribute certificate entry 2023-05-25 15:45:52 +02:00
yjh-styx 56e7a72e8a Fix timestamping nested signatures (#266) 2023-05-14 22:32:56 +02:00
yjh-styx e0eb331baf Postpone stripping old signature after it is extracted (#260) 2023-04-28 11:59:07 +02:00
olszomal 7bfe3b5db9 Fix update_data_size() 2023-03-30 20:57:38 +02:00
olszomal dd365d68c4 Calculate padding length 2023-03-30 20:57:38 +02:00
olszomal 09555e8c05 Inspect PE attribute certificate table 2023-03-30 20:57:38 +02:00
olszomal e4aa06f0c0 Check PE checksum 2023-03-30 20:57:38 +02:00
olszomal 46e9ee447f Fix pagehash resource leak, CID 1536895 2023-03-29 08:51:01 +02:00
olszomal 3e7247d9dc Fix pe_page_hash_get(), CID 1536895, 1536897 2023-03-28 21:02:12 +02:00
Michał Trojnara 0204d04a25 Stop using tabs for indentation 2023-03-25 23:39:52 +01:00
Małgorzata Olszówka 0f51a06b8f Separate common and format-dependent functions (#241) 2023-03-25 20:32:58 +01:00