openbsd/src/lib/libcrypto/cms, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92026-04-06T08:18:19+00:00cms_local.h: remove #ifdef X509V3_HEADER_H2026-04-06T08:18:19+00:00tb2026-04-06T08:18:19+00:00urn:sha1:cbb1e8b1b47d23d60d1672f412e831bd3bca7ce4
All thirteen files including cms_local.h do that after including cms.h,
which already includes x509v3.h, so this is always defined. While here
make the cms_local.h a bit more selfstanding by including asn1.h and
x509v3.h
ok bcook jsing (who had the same diff) kenjiro
Clean up confusing logic in CMS_EncryptedData_encrypt()2025-11-28T06:07:09+00:00tb2025-11-28T06:07:09+00:00urn:sha1:25e047ad935a9d585bc84fe9aae3de40dbad3e72
This makes it easier to read and more in line with other code in
libcrypto. Also add a missing error check for the CMS_set_detached()
call.
ok jsing kenjiro
Plug memeory leak in CMS_EncryptedData_encrypt()2025-11-03T14:29:50+00:00tb2025-11-03T14:29:50+00:00urn:sha1:d787c292196f9476b2c3d608a900d8b1f334c13a
If CMS_EncryptedData_set1_key() fails, cms is leaked.
From Niels Dossche
cms: fix incorrect length check in kek_unwrap_key()2025-09-30T12:51:16+00:00tb2025-09-30T12:51:16+00:00urn:sha1:0da76a9548849eb542ab090dc5eace7a2be789cb
An incorrect length check can result in a 4-byte overwrite and an
8-byte overread.
From Stanislav Fort and Viktor Dukhovni via OpenSSL.
CVE-2025-9230.
ok jsing
cms_RecipientInfo_pwri_crypt: fix incorrect return check2025-09-30T12:49:34+00:00tb2025-09-30T12:49:34+00:00urn:sha1:4867be3b7736b15337f62460c0a92c9f3f6f5005
ok jsing
cms_RecipientInfo_pwri_crypt: plug leak of kekalg2025-09-30T12:46:55+00:00tb2025-09-30T12:46:55+00:00urn:sha1:9c492217dca486db9aacff39780c63445db043a4
ok jsing
Rework PKCS7_simple_smimecap()2025-07-31T02:24:21+00:00tb2025-07-31T02:24:21+00:00urn:sha1:939b14b31a0ec57a91982f54dd055e000bf5f6ac
This is nearly identical to CMS_add_simple_smimecap(). We can reuse
its doc comment mutatis mutandis and use the same construction.
Maybe this wants deduplicating. Maybe not.
ok kenjiro
Inline cms_add1_signingTime() in its only consumer2025-07-27T07:16:20+00:00tb2025-07-27T07:16:20+00:00urn:sha1:c8c2f886f887bd8387f9dee0bdf4c876658d2833
Why have seven lines if you can have 30...
tweak/ok kenjiro
Use err_local.h rather than err.h in most places2025-05-10T05:54:39+00:00tb2025-05-10T05:54:39+00:00urn:sha1:41e8f99dd1625a9f0c80ce9d4383e95b18e85709
ok jsing
More include sweeping in cms.2024-11-01T18:53:35+00:00tb2024-11-01T18:53:35+00:00urn:sha1:6cc2a625d91ccf898e11d5e3066af3d90b084d4b