openbsd/src/lib/libcrypto/ec, branch libressl-v2.2.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.2.1 2015-06-20T14:19:39+00:00 Handle NIST curve names. 2015-06-20T14:19:39+00:00 jsing 2015-06-20T14:19:39+00:00 urn:sha1:7952de62f93f53addb3723fb2fc924567c1a800d From OpenSSL. ok miod@ (a while ago) Have ECPKParameters_print() include the NIST curve name, if known. 2015-06-20T14:17:07+00:00 jsing 2015-06-20T14:17:07+00:00 urn:sha1:ded448f71012b0548efd5420fe57e9ee3906bc0e From OpenSSL. ok miod@ (a while ago). Provide EC_curve_nid2nist() and EC_curve_nist2nid(). 2015-06-20T13:26:08+00:00 jsing 2015-06-20T13:26:08+00:00 urn:sha1:f0a26ed4eda985998a75328b19008d031dc9b65f From OpenSSL. Rides libcrypto bump. ok miod@ (a while ago) No need to check the return value of memcpy() if you actually checked this 2015-05-20T04:33:35+00:00 miod 2015-05-20T04:33:35+00:00 urn:sha1:b4161a0eddcbbd3eef0ef0cd3f21b617d32177c3 pointer for NULL the line above; ok doug@ Add missing BN_CTX_end() calls. 2015-04-29T00:11:12+00:00 doug 2015-04-29T00:11:12+00:00 urn:sha1:7ddad7b77b00aa2097c75fdeb29c69c61e6b4c5b After calling BN_CTX_start(), there must be a BN_CTX_end() before returning. There were missing BN_CTX_end() calls in error paths. One diff chunk was simply removing redundant code related to this. ok deraadt@ Fix a memory leak in an error path. 2015-03-20T03:02:51+00:00 doug 2015-03-20T03:02:51+00:00 urn:sha1:ab347d38e6b377abe52b35915b4a6966cd77cf84 From OpenSSL commit 5e5d53d341fd9a9b9cc0a58eb3690832ca7a511f. ok guenther@, logan@ Fix several crash causing defects from OpenSSL. 2015-03-19T14:00:22+00:00 tedu 2015-03-19T14:00:22+00:00 urn:sha1:985dda77b7930c0837c4acb74b7bd23252f849c1 These include: CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp CVE-2015-0287 - ASN.1 structure reuse memory corruption CVE-2015-0289 - PKCS7 NULL pointer dereferences Several other issues did not apply or were already fixed. Refer to https://www.openssl.org/news/secadv_20150319.txt joint work with beck, doug, guenther, jsing, miod In ec_wNAF_mul(), move the declaration of tmp_wNAF higher in scope, so that 2015-02-15T08:44:35+00:00 miod 2015-02-15T08:44:35+00:00 urn:sha1:c6eb3f8c9d385d5eea6e7ce1ea2b6dae6e492e69 all the function's exit paths can make sure it gets freed. Coverity CID 78861 tweaks & ok doug@ jsing@ fix leaking of bn, coverity issue 105351 2015-02-13T00:46:03+00:00 beck 2015-02-13T00:46:03+00:00 urn:sha1:17f71011dbdc7843cd4ccd2adcf653f7affcbda4 ok doug@ Guenther has plans for OPENSSL_NO_CMS, so revert this for the moment. 2015-02-11T04:05:14+00:00 beck 2015-02-11T04:05:14+00:00 urn:sha1:3fb89787679dd239a55ca0a4e366ad4e2051fe84