openbsd/src/lib/libcrypto/bn, branch libressl-v2.4.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.0 2016-03-15T20:50:22+00:00 'accomodate' -> 'accommodate' in comments. 2016-03-15T20:50:22+00:00 krw 2016-03-15T20:50:22+00:00 urn:sha1:22eed2e943ba62fc8032bff2092946419e60bd52 Started by diff from Mical Mazurek. Add error handling to the remaining calls to bn_wexpand(). 2016-03-12T21:44:11+00:00 bcook 2016-03-12T21:44:11+00:00 urn:sha1:0ff254bfb6289f6163d5eb805b19dd60ad3499cc Noticed by pascal-cuoq from Github: https://github.com/libressl-portable/openbsd/issues/56 ok beck@ graduate bn_expand() to a real function. the openssl version of this 2016-03-04T16:23:30+00:00 deraadt 2016-03-04T16:23:30+00:00 urn:sha1:5a8200b9524c9bceedeb01dec021bdfe4b411500 uses a macro with multiple-evaluations of arguments (different amount than the previous version..), but doug/bcook's inline version makes BIGNUM not opaque [problem spotted by naddy] ok doug Revert bn_expand until there's consensus on a fix. 2016-03-04T16:06:38+00:00 doug 2016-03-04T16:06:38+00:00 urn:sha1:53e590cd0b88d318840cd7b01b428951c8a35458 Add bounds checking for BN_hex2bn/BN_dec2bn. 2016-03-02T06:16:11+00:00 doug 2016-03-02T06:16:11+00:00 urn:sha1:f4e95f97ea9c7fe75b429a3364b1449e83bb1b81 Need to make sure i * 4 won't overflow. Based on OpenSSL: commit 99ba9fd02fd481eb971023a3a0a251a37eb87e4c input + ok bcook@ ok beck@ More adress -> address 2015-12-24T05:50:16+00:00 mmcc 2015-12-24T05:50:16+00:00 urn:sha1:c9941e688a2d017068fd83419a3e3346b270db54 Fix gcc version preprocessor checks to cope with gcc 5.x and beyond; 2015-11-06T21:42:32+00:00 miod 2015-11-06T21:42:32+00:00 urn:sha1:c110b43d6c9d70ccdf48f4ce8b55e5385c0a8e82 reported by Ruslan Babayev. Reject too small bits value in BN_generate_prime_ex(), so that it does not risk 2015-10-21T19:02:22+00:00 miod 2015-10-21T19:02:22+00:00 urn:sha1:169b1d04ba02c0b6ed76ddbfa052ef2c50e38d9e becoming negative in probable_prime_dh_safe(). Reported by Franck Denis who noticed `openssl gendh 0' would segfault. Fix adapted from OpenSSL RT#2701. ok beck@ jsing@ actually include the prerequisite dependency for BIO instead of doing nastyness 2015-10-16T12:41:29+00:00 beck 2015-10-16T12:41:29+00:00 urn:sha1:5fecaacb6105a6c797b4faf4dd45b4e5b1d9303c remove excessive brackets on pointer math 2015-09-28T18:58:33+00:00 deraadt 2015-09-28T18:58:33+00:00 urn:sha1:9e65350789e73f16ebd0672704b928a0f3dcb8a7