Keyur Hariya / Mbed OS MAX_IOT_KIT

Maxim Integrated's IoT development kit

Dependencies:   MAX30101 MAX30003 MAX113XX_Pixi MAX30205 max32630fthr USBDevice

tools/Rats-2.4/rats-openssl.xml@1:efe9cad8942f, 2018-03-13 (annotated)

Committer:
Mahir Ozturk
Date:
Tue Mar 13 14:52:59 2018 +0300
Revision:
1:efe9cad8942f
Commit project files



Change-Id: I2188228f2a27e9a13e2407846e48b38c2596caa0

Who changed what in which revision?

UserRevisionLine numberNew contents of line
Mahir Ozturk 1:efe9cad8942f 1 <?xml version="1.0"?>
Mahir Ozturk 1:efe9cad8942f 2 <!--
Mahir Ozturk 1:efe9cad8942f 3 OpenSSL RATS database V0.0 20/8/2002
Mahir Ozturk 1:efe9cad8942f 4
Mahir Ozturk 1:efe9cad8942f 5 (C) A.L. Digital Ltd.
Mahir Ozturk 1:efe9cad8942f 6
Mahir Ozturk 1:efe9cad8942f 7 Prepared by Ben Laurie <ben@algroup.co.uk>
Mahir Ozturk 1:efe9cad8942f 8
Mahir Ozturk 1:efe9cad8942f 9 Effort sponsored by the Defense Advanced Research Projects Agency (DARPA)
Mahir Ozturk 1:efe9cad8942f 10 and Air Force Research Laboratory, Air Force Materiel Command, USAF, under
Mahir Ozturk 1:efe9cad8942f 11 agreement number F30602-01-2-0537.
Mahir Ozturk 1:efe9cad8942f 12 -->
Mahir Ozturk 1:efe9cad8942f 13 <!DOCTYPE RATS [
Mahir Ozturk 1:efe9cad8942f 14 <!ENTITY bufbig "Double check that your buffer is as big as you specify">
Mahir Ozturk 1:efe9cad8942f 15 <!ENTITY avoidbuf "Allow the function to dynamically allocate the buffer.
Mahir Ozturk 1:efe9cad8942f 16 If you insist on a fixed buffer, then double check that your buffer is as big
Mahir Ozturk 1:efe9cad8942f 17 as you specify.">
Mahir Ozturk 1:efe9cad8942f 18 <!ENTITY cleanrealloc "Does the memory need to be cleaned if moved? Use
Mahir Ozturk 1:efe9cad8942f 19 re[m]alloc_clean instead.">
Mahir Ozturk 1:efe9cad8942f 20 <!ENTITY cleanfree "Does the memory need to be cleaned before freeing?">
Mahir Ozturk 1:efe9cad8942f 21 <!ENTITY stringn "Use ERR_error_string_n() instead">
Mahir Ozturk 1:efe9cad8942f 22 <!ENTITY mdlen "make sure the buffer is EVP_MAX_MD_SIZE">
Mahir Ozturk 1:efe9cad8942f 23 <!ENTITY enclen "make sure the output buffer is either at least one block less one byte bigger
Mahir Ozturk 1:efe9cad8942f 24 than the input, or that you are sure inputs are always multiples of the block
Mahir Ozturk 1:efe9cad8942f 25 size, and the output buffer is as big as the input.">
Mahir Ozturk 1:efe9cad8942f 26 <!ENTITY encodelen "make sure the output buffer is four thirds the size of the input buffer
Mahir Ozturk 1:efe9cad8942f 27 (precisely out=((in+2)/3)*4 where the division is truncated.">
Mahir Ozturk 1:efe9cad8942f 28 <!ENTITY usel "Use strlcpy/strlcat instead of strncpy/strncat">
Mahir Ozturk 1:efe9cad8942f 29 ]>
Mahir Ozturk 1:efe9cad8942f 30 <VulnDB lang="c">
Mahir Ozturk 1:efe9cad8942f 31
Mahir Ozturk 1:efe9cad8942f 32 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 33 <Name>RAND_file_name</Name>
Mahir Ozturk 1:efe9cad8942f 34 <Info>
Mahir Ozturk 1:efe9cad8942f 35 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 36 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 37 </Info>
Mahir Ozturk 1:efe9cad8942f 38 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 39
Mahir Ozturk 1:efe9cad8942f 40 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 41 <Name>BIO_snprintf</Name>
Mahir Ozturk 1:efe9cad8942f 42 <Info>
Mahir Ozturk 1:efe9cad8942f 43 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 44 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 45 </Info>
Mahir Ozturk 1:efe9cad8942f 46 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 47
Mahir Ozturk 1:efe9cad8942f 48 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 49 <Name>X509_NAME_oneline</Name>
Mahir Ozturk 1:efe9cad8942f 50 <Info>
Mahir Ozturk 1:efe9cad8942f 51 <Description>&avoidbuf;</Description>
Mahir Ozturk 1:efe9cad8942f 52 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 53 </Info>
Mahir Ozturk 1:efe9cad8942f 54 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 55
Mahir Ozturk 1:efe9cad8942f 56 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 57 <Name>OBJ_obj2txt</Name>
Mahir Ozturk 1:efe9cad8942f 58 <Info>
Mahir Ozturk 1:efe9cad8942f 59 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 60 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 61 </Info>
Mahir Ozturk 1:efe9cad8942f 62 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 63
Mahir Ozturk 1:efe9cad8942f 64 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 65 <Name>i2t_ASN1_OBJECT</Name>
Mahir Ozturk 1:efe9cad8942f 66 <Info>
Mahir Ozturk 1:efe9cad8942f 67 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 68 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 69 </Info>
Mahir Ozturk 1:efe9cad8942f 70 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 71
Mahir Ozturk 1:efe9cad8942f 72 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 73 <Name>BIO_gets</Name>
Mahir Ozturk 1:efe9cad8942f 74 <Info>
Mahir Ozturk 1:efe9cad8942f 75 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 76 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 77 </Info>
Mahir Ozturk 1:efe9cad8942f 78 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 79
Mahir Ozturk 1:efe9cad8942f 80 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 81 <Name>a2i_ASN1_INTEGER</Name>
Mahir Ozturk 1:efe9cad8942f 82 <Info>
Mahir Ozturk 1:efe9cad8942f 83 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 84 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 85 </Info>
Mahir Ozturk 1:efe9cad8942f 86 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 87
Mahir Ozturk 1:efe9cad8942f 88 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 89 <Name>OPENSSL_realloc</Name>
Mahir Ozturk 1:efe9cad8942f 90 <Info>
Mahir Ozturk 1:efe9cad8942f 91 <Description>&cleanrealloc;</Description>
Mahir Ozturk 1:efe9cad8942f 92 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 93 </Info>
Mahir Ozturk 1:efe9cad8942f 94 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 95
Mahir Ozturk 1:efe9cad8942f 96 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 97 <Name>CRYPTO_realloc</Name>
Mahir Ozturk 1:efe9cad8942f 98 <Info>
Mahir Ozturk 1:efe9cad8942f 99 <Description>&cleanrealloc;</Description>
Mahir Ozturk 1:efe9cad8942f 100 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 101 </Info>
Mahir Ozturk 1:efe9cad8942f 102 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 103
Mahir Ozturk 1:efe9cad8942f 104 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 105 <Name>CRYPTO_remalloc</Name>
Mahir Ozturk 1:efe9cad8942f 106 <Info>
Mahir Ozturk 1:efe9cad8942f 107 <Description>&cleanrealloc;</Description>
Mahir Ozturk 1:efe9cad8942f 108 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 109 </Info>
Mahir Ozturk 1:efe9cad8942f 110 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 111
Mahir Ozturk 1:efe9cad8942f 112 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 113 <Name>BUF_MEM_grow</Name>
Mahir Ozturk 1:efe9cad8942f 114 <Info>
Mahir Ozturk 1:efe9cad8942f 115 <Description>&cleanrealloc;</Description>
Mahir Ozturk 1:efe9cad8942f 116 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 117 </Info>
Mahir Ozturk 1:efe9cad8942f 118 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 119
Mahir Ozturk 1:efe9cad8942f 120 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 121 <Name>OPENSSL_free</Name>
Mahir Ozturk 1:efe9cad8942f 122 <Info>
Mahir Ozturk 1:efe9cad8942f 123 <Description>&cleanfree;</Description>
Mahir Ozturk 1:efe9cad8942f 124 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 125 </Info>
Mahir Ozturk 1:efe9cad8942f 126 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 127
Mahir Ozturk 1:efe9cad8942f 128 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 129 <Name>CRYPTO_free</Name>
Mahir Ozturk 1:efe9cad8942f 130 <Info>
Mahir Ozturk 1:efe9cad8942f 131 <Description>&cleanfree;</Description>
Mahir Ozturk 1:efe9cad8942f 132 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 133 </Info>
Mahir Ozturk 1:efe9cad8942f 134 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 135
Mahir Ozturk 1:efe9cad8942f 136 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 137 <Name>UI_UTIL_read_pw_string</Name>
Mahir Ozturk 1:efe9cad8942f 138 <Info>
Mahir Ozturk 1:efe9cad8942f 139 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 140 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 141 </Info>
Mahir Ozturk 1:efe9cad8942f 142 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 143
Mahir Ozturk 1:efe9cad8942f 144 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 145 <Name>UI_UTIL_read_pw</Name>
Mahir Ozturk 1:efe9cad8942f 146 <Info>
Mahir Ozturk 1:efe9cad8942f 147 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 148 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 149 </Info>
Mahir Ozturk 1:efe9cad8942f 150 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 151
Mahir Ozturk 1:efe9cad8942f 152 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 153 <Name>ERR_error_string</Name>
Mahir Ozturk 1:efe9cad8942f 154 <Info>
Mahir Ozturk 1:efe9cad8942f 155 <Description>&stringn;</Description>
Mahir Ozturk 1:efe9cad8942f 156 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 157 </Info>
Mahir Ozturk 1:efe9cad8942f 158 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 159
Mahir Ozturk 1:efe9cad8942f 160 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 161 <Name>X509_digest</Name>
Mahir Ozturk 1:efe9cad8942f 162 <Info>
Mahir Ozturk 1:efe9cad8942f 163 <Description>&mdlen;</Description>
Mahir Ozturk 1:efe9cad8942f 164 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 165 </Info>
Mahir Ozturk 1:efe9cad8942f 166 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 167
Mahir Ozturk 1:efe9cad8942f 168 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 169 <Name>EVP_EncryptUpdate</Name>
Mahir Ozturk 1:efe9cad8942f 170 <Info>
Mahir Ozturk 1:efe9cad8942f 171 <Description>&enclen;</Description>
Mahir Ozturk 1:efe9cad8942f 172 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 173 </Info>
Mahir Ozturk 1:efe9cad8942f 174 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 175
Mahir Ozturk 1:efe9cad8942f 176 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 177 <Name>EVP_DecryptUpdate</Name>
Mahir Ozturk 1:efe9cad8942f 178 <Info>
Mahir Ozturk 1:efe9cad8942f 179 <Description>&enclen;</Description>
Mahir Ozturk 1:efe9cad8942f 180 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 181 </Info>
Mahir Ozturk 1:efe9cad8942f 182 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 183
Mahir Ozturk 1:efe9cad8942f 184 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 185 <Name>EVP_CipherUpdate</Name>
Mahir Ozturk 1:efe9cad8942f 186 <Info>
Mahir Ozturk 1:efe9cad8942f 187 <Description>&enclen;</Description>
Mahir Ozturk 1:efe9cad8942f 188 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 189 </Info>
Mahir Ozturk 1:efe9cad8942f 190 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 191
Mahir Ozturk 1:efe9cad8942f 192 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 193 <Name>EVP_EncodeBlock</Name>
Mahir Ozturk 1:efe9cad8942f 194 <Info>
Mahir Ozturk 1:efe9cad8942f 195 <Description>&encodelen;</Description>
Mahir Ozturk 1:efe9cad8942f 196 <Severity>Medium</Severity>
Mahir Ozturk 1:efe9cad8942f 197 </Info>
Mahir Ozturk 1:efe9cad8942f 198 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 199
Mahir Ozturk 1:efe9cad8942f 200
Mahir Ozturk 1:efe9cad8942f 201 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 202 <Name>strlcat</Name>
Mahir Ozturk 1:efe9cad8942f 203 <Info>
Mahir Ozturk 1:efe9cad8942f 204 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 205 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 206 </Info>
Mahir Ozturk 1:efe9cad8942f 207 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 208
Mahir Ozturk 1:efe9cad8942f 209 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 210 <Name>strlcpy</Name>
Mahir Ozturk 1:efe9cad8942f 211 <Info>
Mahir Ozturk 1:efe9cad8942f 212 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 213 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 214 </Info>
Mahir Ozturk 1:efe9cad8942f 215 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 216
Mahir Ozturk 1:efe9cad8942f 217 <Vulnerability>
Mahir Ozturk 1:efe9cad8942f 218 <Name>program_name</Name>
Mahir Ozturk 1:efe9cad8942f 219 <Info>
Mahir Ozturk 1:efe9cad8942f 220 <Description>&bufbig;</Description>
Mahir Ozturk 1:efe9cad8942f 221 <Severity>Low</Severity>
Mahir Ozturk 1:efe9cad8942f 222 </Info>
Mahir Ozturk 1:efe9cad8942f 223 </Vulnerability>
Mahir Ozturk 1:efe9cad8942f 224
Mahir Ozturk 1:efe9cad8942f 225 </VulnDB>