openbsd/src/lib/libcrypto/evp/evp_enc.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2019-04-14T17:16:57+00:00 Use calloc() when allocating cipher_data. 2019-04-14T17:16:57+00:00 jsing 2019-04-14T17:16:57+00:00 urn:sha1:403db7992a954f38a3857fc8ea4a1b25580f1c98 Avoids use of uninitialised memory. ok tb@ Annotate a future improvement. 2019-04-14T16:46:26+00:00 jsing 2019-04-14T16:46:26+00:00 urn:sha1:356de7eea6f4b2f2e40fae3eafec04d9107366f3 Avoid potential double-frees following EVP_CIPHER_CTX_copy(). 2019-04-14T16:43:49+00:00 jsing 2019-04-14T16:43:49+00:00 urn:sha1:0c03cee8ccea41a8cce424fed179f273e8ea6626 In the case of a cipher with a custom copy control, if that control fails we may still have pointers that we do not own in the previously copied cipher data. Avoid potential double-frees by zeroing and freeing the copied cipher data in this case. Issue reported by Guido Vranken. ok tb@ Provide EVP_aes_{128,192,256}_wrap(). This is a compatible 2019-03-17T18:07:41+00:00 tb 2019-03-17T18:07:41+00:00 urn:sha1:9651ec05f00bf3384031fb7428d88d3daf1e1139 implementation based on the one in OpenSSL 1.0.2r which is still freely licensed. The functions are undocumented in OpenSSL. To use them, one needs to set the undocumented EVP_CIPHER_CTX_FLAG_WRAP_ALLOW flag on the EVP_CIPHER_CTX. resolves #505 ok jsing make ENGINE_finish() succeed on NULL and simplify callers as in 2018-04-14T07:09:21+00:00 tb 2018-04-14T07:09:21+00:00 urn:sha1:0c5418014797b1fadca3f270eb2f140fd6f5bdf8 OpenSSL commit 7c96dbcdab9 by Rich Salz. This cleans up the caller side quite a bit and reduces the number of lines enclosed in #ifndef OPENSSL_NO_ENGINE. codesearch.debian.net shows that almost nothing checks the return value of ENGINE_finish(). While there, replace a few nearby 'if (!ptr)' with 'if (ptr == NULL)'. ok jsing, tested by & ok inoguchi Provide EVP_CIPHER_CTX_reset(). 2018-02-17T16:54:08+00:00 jsing 2018-02-17T16:54:08+00:00 urn:sha1:16c3e9453b652e381aab620b77fb4ebcbd7505ce Rides previous minor bump. GNU ld has prefixed the contents of .gnu.warning.SYMBOL sections 2017-11-28T06:55:49+00:00 tb 2017-11-28T06:55:49+00:00 urn:sha1:8498b91851192781ec9ed2dd8420226001473ef7 with "warning: " since 2003, so the messages themselves need not contain the prefix anymore. From Scott Cheloha ok jca, deraadt Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Cipher/Encrypt/DecryptFinal 2016-09-09T00:03:22+00:00 bcook 2016-09-09T00:03:22+00:00 urn:sha1:e7a99fe0041a88ac1778aaf8d7013809d62350a8 Software that refers to ctx after calling Final breaks with these changes. revert parts of 1.31 and 1.32 include <sys/types.h> to get <sys/cdefs.h> instead (for __warn_references) 2016-09-04T12:35:23+00:00 bcook 2016-09-04T12:35:23+00:00 urn:sha1:5ada7b1d97b8f747507b099fa6c8324f2b410489 corrected by deraadt@ / guenther@