openbsd/src/lib/libcrypto/pkcs12, branch OPENBSD_6_3_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_3_BASE 2017-05-02T03:59:45+00:00 use freezero() instead of memset/explicit_bzero + free. Substantially 2017-05-02T03:59:45+00:00 deraadt 2017-05-02T03:59:45+00:00 urn:sha1:5904cc0e04409fde39a97e6580535da34eeb4291 reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Expand ASN1_ITEM_rptr macros - no change in generated assembly. 2016-12-30T15:38:13+00:00 jsing 2016-12-30T15:38:13+00:00 urn:sha1:d4b09bfd41d8d40b82b197b4ec8b0232cd6ee1fa Place M_PKCS12_* compatibility macros under #ifndef LIBRESSL_INTERNAL. 2016-12-30T15:08:58+00:00 jsing 2016-12-30T15:08:58+00:00 urn:sha1:be9e42ecdc9b0bfe90d5284fb0072104eee43852 Expand M_PKCS12_* "compatibility" macros. No change to generated assembly. 2016-12-30T15:08:22+00:00 jsing 2016-12-30T15:08:22+00:00 urn:sha1:a8fbab9829bcbecf9c99092b7c751eeea529f9b6 Remove all DECLARE_ASN1_SET_OF macro usage - since 2000 these have been 2016-12-27T16:05:57+00:00 jsing 2016-12-27T16:05:57+00:00 urn:sha1:0bde81f3db44da2391092cc43925c8351096c73c nothing but markers for utils/mkstack.pl... and we removed the code that generated more macros from these markers in 2014. Expand DECLARE_ASN1_ITEM macros - no change to preprocessor output. 2016-12-27T15:31:16+00:00 jsing 2016-12-27T15:31:16+00:00 urn:sha1:fdcb375812a6e63590fccfc7ee8e2b585302788e Stricter checks of ASN1_INTEGER to reject ASN1_NEG_INTEGER in places when 2016-11-08T20:01:06+00:00 miod 2016-11-08T20:01:06+00:00 urn:sha1:94666de1d9ae6600c0c05f0dfa0ba956c415534b they don't make sense. ok beck@ Stricter validation of inputs of OPENSSL_asc2uni() and OPENSSL_uni2asc(). 2016-11-05T14:24:29+00:00 miod 2016-11-05T14:24:29+00:00 urn:sha1:fcf42e15a9e5213c3bb9b2ab723d0ce99e614870 While there, try to make these slightly less obfuscated. ok beck@ jsing@ Do not leak the ressources possibly allocated by EVP_MD_CTX_init() in the 2016-11-05T13:02:34+00:00 miod 2016-11-05T13:02:34+00:00 urn:sha1:470d7eab67cc31c2d7a2cd10f48f93eb02ac3dcc trivial error path of PKCS12_key_gen_uni(). ok beck@ jsing@