openbsd/src/lib/libcrypto/evp/evp_err.c, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92024-06-24T06:43:23+00:00libcrypto: constify most error string tables2024-06-24T06:43:23+00:00tb2024-06-24T06:43:23+00:00urn:sha1:c9802a5afe29675d69b605ce906d34fd89c024ac
These constitute the bulk of the remaining global mutable state in
libcrypto. This commit moves most of them into data.rel.ro, leaving
out ERR_str_{functs,libraries,reasons} (which require a slightly
different approach) and SYS_str_reasons which is populated on startup.
The main observation is that if ERR_load_strings() is called with a 0 lib
argument, the ERR_STRING_DATA argument is not actually modified. We could
use this fact to cast away const on the caller side and be done with it.
We can make this cleaner by adding a helper ERR_load_const_strings() which
explicitly avoids the assignment to str->error overriding the error code
already set in the table.
In order for this to work, we need to sprinkle some const in err/err.c.
CMS called ERR_load_strings() with non-0 lib argument, but this didn't
actually modify the error data since it ored in the value already stored
in the table.
Annoyingly, we need to cast const away once, namely in the call to
lh_insert() in int_err_set_item(). Fixing this would require changing
the public API and is going to be tricky since it requires that the
LHASH_DOALL_FN_* types adjust.
ok jsing
Hide public symbols in evp.h2024-04-09T13:52:42+00:00beck2024-04-09T13:52:42+00:00urn:sha1:9835bb3c82adc630df1f3aaa7dfbf7f0506b0bc4
largely mechanically done by the guentherizer 9000
ok tb@
Unbreak the namespace build after a broken mk.conf and tool misfire had2023-07-07T19:37:54+00:00beck2023-07-07T19:37:54+00:00urn:sha1:1ca8095297adf80b48019b5a2d18010ff9e3427f
me aliasing symbols not in the headers I was procesing.
This unbreaks the namespace build so it will pass again
ok tb@
Hide symbols in hkdf, evp, err, ecdsa, and ec2023-07-07T13:54:46+00:00beck2023-07-07T13:54:46+00:00urn:sha1:f9fcde20a6214da85e802190ccd3a2bf5f891559
(part 2 of commit)
ok jsing@
Provide digestsign/digestverify hooks for EVP_PKEY_METHOD.2022-11-10T15:17:30+00:00jsing2022-11-10T15:17:30+00:00urn:sha1:a466b88161c1f1a8fd35d577e88a5fcc51e57623
These are needed for EVP implementations of Ed25519 and X25519.
ok beck@ tb@
Port EVP raw key API from OpenSSL.2022-11-10T14:46:44+00:00jsing2022-11-10T14:46:44+00:00urn:sha1:548ffc79d647d3545a6f616923b00fc4d5a3fed8
This will be needed to deal with Curve25519 based keys.
ok beck@ tb@
Remove mkerr.pl remnants from LibreSSL2022-07-12T14:42:50+00:00kn2022-07-12T14:42:50+00:00urn:sha1:89e42d5857196a8071fbafb5565388d0e20ec32b
This script is not used at all and files are edited by hand instead.
Thus remove misleading comments incl. the obsolete script/config.
Feedback OK jsing tb
Prepare to provide EVP_PKEY_new_CMAC_key()2021-03-29T15:57:23+00:00tb2021-03-29T15:57:23+00:00urn:sha1:e5044a16b50be503267937298648ce4abb8bbcbc
sebastia ran into this when attempting to update security/hcxtools.
This will be tested via wycheproof.go once the symbol is public.
ok jsing, tested by sebastia
Disallow the use of zero length IVs in AES-GCM via2020-04-27T19:31:02+00:00tb2020-04-27T19:31:02+00:00urn:sha1:59b4077b60cc24004bc23295bd2ff465be743f11
EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key.
Issue reported and fix tested by Guido Vranken.
ok beck, jsing
This commit adds a constant to a public header despite library lock,
as discussed with deraadt and sthen.
Expand the ERR_PACK() macro to ERR_REASON() for consistency.2019-03-18T05:34:29+00:00tb2019-03-18T05:34:29+00:00urn:sha1:60690466852971b4a7bd7a7a7ef0d04fe15c0ced
No binary change.