openbsd/src/lib/libcrypto/evp, branch libressl-v2.5.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.5.1 2017-01-31T13:17:21+00:00 LibreSSL : Truncated packet could crash via OOB read 2017-01-31T13:17:21+00:00 inoguchi 2017-01-31T13:17:21+00:00 urn:sha1:06ad158da685c16adafadfcff434641236cac37c This patch is originally from master branch of OpenSSL. - 2198b3a crypto/evp: harden AEAD ciphers. - 8e20499 crypto/evp: harden RC4_MD5 cipher. ok tom@ Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros. 2017-01-21T04:44:43+00:00 jsing 2017-01-21T04:44:43+00:00 urn:sha1:42873dc5e4c10aa805dade89546299827d341356 No change to generated assembly excluding line numbers. Explicitly export a list of symbols from libcrypto. 2016-12-21T15:49:29+00:00 jsing 2016-12-21T15:49:29+00:00 urn:sha1:18adabd97858ed28289c9dc31e8042c515840be4 Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@ Stricter checks of ASN1_INTEGER to reject ASN1_NEG_INTEGER in places when 2016-11-08T20:01:06+00:00 miod 2016-11-08T20:01:06+00:00 urn:sha1:94666de1d9ae6600c0c05f0dfa0ba956c415534b they don't make sense. ok beck@ No need to duplicate definitions from evp.h locally. 2016-11-05T10:47:57+00:00 miod 2016-11-05T10:47:57+00:00 urn:sha1:5aa2e085e19005aca2c0e2c6db7a36a00bda9f11 ok bock@ jsing@ Replace all uses of magic numbers when operating on OPENSSL_ia32_P[] by 2016-11-04T17:30:30+00:00 miod 2016-11-04T17:30:30+00:00 urn:sha1:1a12fc8399638223feca8f853e2ac2cc22eeb471 meaningful constants in a private header file, so that reviewers can actually get a chance to figure out what the code is attempting to do without knowing all cpuid bits. While there, turn it from an array of two 32-bit ints into a properly aligned 64-bit int. Use of OPENSSL_ia32_P is now restricted to the assembler parts. C code will now always use OPENSSL_cpu_caps() and check for the proper bits in the whole 64-bit word it returns. i386 tests and ok jsing@ Remove I386_ONLY define. It was only used to prefer a 2016-11-04T13:56:05+00:00 miod 2016-11-04T13:56:05+00:00 urn:sha1:098856ba6c9340c7f8061be62dd042763fe233a3 faster-on-genuine-80386-but-slower-on-80486-onwards innstruction sequence in the SHA512 code, and had not been enabled in years, if at all. ok tom@ bcook@ back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Cipher/Encrypt/DecryptFinal 2016-09-09T00:03:22+00:00 bcook 2016-09-09T00:03:22+00:00 urn:sha1:e7a99fe0041a88ac1778aaf8d7013809d62350a8 Software that refers to ctx after calling Final breaks with these changes. revert parts of 1.31 and 1.32 include <sys/types.h> to get <sys/cdefs.h> instead (for __warn_references) 2016-09-04T12:35:23+00:00 bcook 2016-09-04T12:35:23+00:00 urn:sha1:5ada7b1d97b8f747507b099fa6c8324f2b410489 corrected by deraadt@ / guenther@