openbsd/src/lib/libcrypto/asn1, branch libressl-v2.1.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.1.2 2014-11-09T19:17:13+00:00 GOST crypto algorithms (well, most of them), ported from the removed GOST 2014-11-09T19:17:13+00:00 miod 2014-11-09T19:17:13+00:00 urn:sha1:35d7dd4666beda50f5094b8804802132fbe722ef engine to regular EVP citizens, contributed by Dmitry Eremin-Solenikov; libcrypto bits only for now. This is a verbatim import of Dmitry's work, and does not compile in this state; the forthcoming commits will address these issues. None of the GOST code is enabled in libcrypto yet, for it still gets compiled with OPENSSL_NO_GOST defined. However, the public header gost.h will be installed. Check the result of sk_*_push() operations for failure. 2014-10-28T05:46:56+00:00 miod 2014-10-28T05:46:56+00:00 urn:sha1:794dcf073b734d649d7b5d30916d7a3ae919b66e ok doug@ jsing@ Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). 2014-10-22T13:02:04+00:00 jsing 2014-10-22T13:02:04+00:00 urn:sha1:fa457604779ff38b511fdfdae3c6a78664281c22 arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@ Paranoia: in ASN1_mbstring_ncopy(), check for len < 0 instead of len == -1, 2014-10-12T20:47:12+00:00 miod 2014-10-12T20:47:12+00:00 urn:sha1:dff42a49d6915f3ecaa9bacc7657970e73aa7443 in order to catch all negative sizes. Use string literals in printf style calls so gcc's -Wformat works. 2014-10-03T06:02:38+00:00 doug 2014-10-03T06:02:38+00:00 urn:sha1:3e3e62d53cc575a61b99b211f05e78229c836866 ok tedu@, miod@ a_enum.c used to be a copy of a_int.c with s/INTEGER/ENUMERATED/g , but 2014-09-21T12:17:42+00:00 miod 2014-09-21T12:17:42+00:00 urn:sha1:55df820956be2fe92a2c7bd7ecc968cf2205a7fe some changes an a_int.c did not get applied to a_enum.c; despite style changes, make sure BN_to_ASN1_ENUMERATED() correctly handles a zero value the same way BN_to_ASN1_INTEGER() does. ok bcook@ beck@ jsing@ Fix a memory leak in the error path in ASN1_mbstring_ncopy(). 2014-09-21T12:14:34+00:00 miod 2014-09-21T12:14:34+00:00 urn:sha1:95c010212639853ea6d96623523f569373384577 Replace an if() posse with a switch() statement in traverse_string(). Remove unnecessary casts in cpy_*(), with tweaks from guenther@; ok bcook@ jsing@ guenther@ Fix CVE-2014-3508, pretty printing and OID validation: 2014-08-08T04:53:43+00:00 guenther 2014-08-08T04:53:43+00:00 urn:sha1:39cb4488ec5412e0f592f7fabdb5ab22cded5edc - make sure the output buffer is always NUL terminated if buf_len was initially greater than zero. - reject OIDs that are too long, too short, or not in proper base-127 Based on https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87 ok bcook@ BIO_free() returns immediately when the sole input is NULL. 2014-07-25T06:05:32+00:00 doug 2014-07-25T06:05:32+00:00 urn:sha1:d9473bfc95b9bc3edd71f25c11f0b47b27500df9 Remove unnecessary NULL check. ok miod@ The bell tolls for BUF_strdup - Start the migration to using 2014-07-13T16:03:10+00:00 beck 2014-07-13T16:03:10+00:00 urn:sha1:c7e9c2c6576cd5406680f9b69aff2038ba63b0dc intrinsics. This is the easy ones, a few left to check one at a time. ok miod@ deraadt@