openbsd/src/lib/libcrypto/ec, branch libressl-v2.2.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.2.0 2015-05-20T04:33:35+00:00 No need to check the return value of memcpy() if you actually checked this 2015-05-20T04:33:35+00:00 miod 2015-05-20T04:33:35+00:00 urn:sha1:b4161a0eddcbbd3eef0ef0cd3f21b617d32177c3 pointer for NULL the line above; ok doug@ Add missing BN_CTX_end() calls. 2015-04-29T00:11:12+00:00 doug 2015-04-29T00:11:12+00:00 urn:sha1:7ddad7b77b00aa2097c75fdeb29c69c61e6b4c5b After calling BN_CTX_start(), there must be a BN_CTX_end() before returning. There were missing BN_CTX_end() calls in error paths. One diff chunk was simply removing redundant code related to this. ok deraadt@ Fix a memory leak in an error path. 2015-03-20T03:02:51+00:00 doug 2015-03-20T03:02:51+00:00 urn:sha1:ab347d38e6b377abe52b35915b4a6966cd77cf84 From OpenSSL commit 5e5d53d341fd9a9b9cc0a58eb3690832ca7a511f. ok guenther@, logan@ Fix several crash causing defects from OpenSSL. 2015-03-19T14:00:22+00:00 tedu 2015-03-19T14:00:22+00:00 urn:sha1:985dda77b7930c0837c4acb74b7bd23252f849c1 These include: CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp CVE-2015-0287 - ASN.1 structure reuse memory corruption CVE-2015-0289 - PKCS7 NULL pointer dereferences Several other issues did not apply or were already fixed. Refer to https://www.openssl.org/news/secadv_20150319.txt joint work with beck, doug, guenther, jsing, miod In ec_wNAF_mul(), move the declaration of tmp_wNAF higher in scope, so that 2015-02-15T08:44:35+00:00 miod 2015-02-15T08:44:35+00:00 urn:sha1:c6eb3f8c9d385d5eea6e7ce1ea2b6dae6e492e69 all the function's exit paths can make sure it gets freed. Coverity CID 78861 tweaks & ok doug@ jsing@ fix leaking of bn, coverity issue 105351 2015-02-13T00:46:03+00:00 beck 2015-02-13T00:46:03+00:00 urn:sha1:17f71011dbdc7843cd4ccd2adcf653f7affcbda4 ok doug@ Guenther has plans for OPENSSL_NO_CMS, so revert this for the moment. 2015-02-11T04:05:14+00:00 beck 2015-02-11T04:05:14+00:00 urn:sha1:3fb89787679dd239a55ca0a4e366ad4e2051fe84 get rid of OPENSSL_NO_CMS code we do not use. 2015-02-11T03:55:42+00:00 beck 2015-02-11T03:55:42+00:00 urn:sha1:1d3b395bb02124e944ce4abc2f2eab59e2cde925 ok miod@ Expand the IMPLEMENT_ASN1_ALLOC_FUNCTIONS macro so that the code is visible 2015-02-10T05:43:09+00:00 jsing 2015-02-10T05:43:09+00:00 urn:sha1:b1be002aeeeff92b2512bac9a5dca751f2dfbd81 and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@ Expand the IMPLEMENT_ASN1_FUNCTIONS_{const,fname,name} macros so that the 2015-02-10T04:01:26+00:00 jsing 2015-02-10T04:01:26+00:00 urn:sha1:64e9476b7bc2ceaca55b2f0f7a5107d5a8838e5d code is visible and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@