<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openbsd/src/lib/libcrypto/bn, branch libressl-v2.3.0</title>
<subtitle>A mirror of https://github.com/libressl/openbsd.git
</subtitle>
<id>https://git.lua4.win/openbsd/atom?h=libressl-v2.3.0</id>
<link rel='self' href='https://git.lua4.win/openbsd/atom?h=libressl-v2.3.0'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/'/>
<updated>2015-09-18T09:00:04+00:00</updated>
<entry>
<title>Revert bn_print.c:r1.25 ("handle negative-zero in BN_bn2dec() too") for</title>
<updated>2015-09-18T09:00:04+00:00</updated>
<author>
<name>sthen</name>
<email></email>
</author>
<published>2015-09-18T09:00:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=8a2b62a8c45beb43a75c8994a301e68c2f3a2e18'/>
<id>urn:sha1:8a2b62a8c45beb43a75c8994a301e68c2f3a2e18</id>
<content type='text'>
now, it has a NULL deref. Segfault reported by Mikolaj Kucharski, ok bcook
</content>
</entry>
<entry>
<title>Handle negative-zero in BN_bn2dec() too, just like in BN_print().</title>
<updated>2015-09-13T16:02:11+00:00</updated>
<author>
<name>deraadt</name>
<email></email>
</author>
<published>2015-09-13T16:02:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=5313e1a6e8d465ce51e34471a7b90930aaadf2e9'/>
<id>urn:sha1:5313e1a6e8d465ce51e34471a7b90930aaadf2e9</id>
<content type='text'>
ok miod
</content>
</entry>
<entry>
<title>BN does support negative-zero -- BN_print() sets the standard here.</title>
<updated>2015-09-13T15:59:29+00:00</updated>
<author>
<name>deraadt</name>
<email></email>
</author>
<published>2015-09-13T15:59:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=cd6c582063a3fd8f331646e17db3d5bb97124e53'/>
<id>urn:sha1:cd6c582063a3fd8f331646e17db3d5bb97124e53</id>
<content type='text'>
BN_bn2hex() had a 1-byte overflow when creating "-0\0".  Reported to
me a while back by unknown person -- did not have enough experience
to push this through then.
advice from jsing, ok miod
</content>
</entry>
<entry>
<title>Remove workaround for old SIMICS toolchain.</title>
<updated>2015-09-12T09:04:12+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2015-09-12T09:04:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=a6fad4398c5c6f137d4e06054ff993a175e1149b'/>
<id>urn:sha1:a6fad4398c5c6f137d4e06054ff993a175e1149b</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Remove horribly old and outdated `documentation' for the assembly code.</title>
<updated>2015-09-12T09:01:45+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2015-09-12T09:01:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=4cd453d742c14bc663f284124b106f53992c76d7'/>
<id>urn:sha1:4cd453d742c14bc663f284124b106f53992c76d7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Fixup inter-bank movq/movd operations, emit bytes for pclmulqdq again.</title>
<updated>2015-09-11T12:17:57+00:00</updated>
<author>
<name>bcook</name>
<email></email>
</author>
<published>2015-09-11T12:17:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=eafebfdd3adba0417a72d6cc8a75f367fc2fbbdb'/>
<id>urn:sha1:eafebfdd3adba0417a72d6cc8a75f367fc2fbbdb</id>
<content type='text'>
Fixes builds gcc + Apple's assembler, working on reenabling builds with older
OpenBSD releases.

based on OpenSSL commit:
 https://git.openssl.org/?p=openssl.git;a=commitdiff;h=902b30df193afc3417a96ba72a81ed390bd50de3

ok miod@
</content>
</entry>
<entry>
<title>Correct spelling of OPENSSL_cleanse.</title>
<updated>2015-09-10T15:56:26+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2015-09-10T15:56:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=647569a51c1530d10e75e272f0982682f696caa7'/>
<id>urn:sha1:647569a51c1530d10e75e272f0982682f696caa7</id>
<content type='text'>
ok miod@
</content>
</entry>
<entry>
<title>typos</title>
<updated>2015-08-18T20:19:32+00:00</updated>
<author>
<name>miod</name>
<email></email>
</author>
<published>2015-08-18T20:19:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=2d67b447a2fe41a8268632aadfe110ab61201211'/>
<id>urn:sha1:2d67b447a2fe41a8268632aadfe110ab61201211</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Avoid an infinite loop that can be triggered by parsing an ASN.1</title>
<updated>2015-06-11T15:55:28+00:00</updated>
<author>
<name>jsing</name>
<email></email>
</author>
<published>2015-06-11T15:55:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=095e36cd429c313ee8361e8877bc677116a2a2ce'/>
<id>urn:sha1:095e36cd429c313ee8361e8877bc677116a2a2ce</id>
<content type='text'>
ECParameters structure that has a specially malformed binary polynomial
field.

Issue reported by Joseph Barr-Pixton and fix based on OpenSSL.

Fixes CVE-2015-1788.

ok doug@ miod@
</content>
</entry>
<entry>
<title>Add missing BN_CTX_end() calls.</title>
<updated>2015-04-29T00:11:12+00:00</updated>
<author>
<name>doug</name>
<email></email>
</author>
<published>2015-04-29T00:11:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/openbsd/commit/?id=7ddad7b77b00aa2097c75fdeb29c69c61e6b4c5b'/>
<id>urn:sha1:7ddad7b77b00aa2097c75fdeb29c69c61e6b4c5b</id>
<content type='text'>
After calling BN_CTX_start(), there must be a BN_CTX_end() before
returning.  There were missing BN_CTX_end() calls in error paths.  One diff
chunk was simply removing redundant code related to this.

ok deraadt@
</content>
</entry>
</feed>
