openbsd/src/lib/libcrypto/pkcs7, branch OPENBSD_7_7A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_72025-03-18T12:53:25+00:00PKCS7_dataVerify(): zap offensive whitespace2025-03-18T12:53:25+00:00tb2025-03-18T12:53:25+00:00urn:sha1:7a2f3b0df9729aea7da66299467a50ff794bbd4fPKCS7_signatureVerify(): add missing free after EVP_VerifyUpdate()2025-03-18T12:48:11+00:00tb2025-03-18T12:48:11+00:00urn:sha1:898c514626e021f630e229405805d54cfbc54b48
From Nils Dossche
Fix previous and thus regress failures reported by anton2024-12-06T07:10:20+00:00tb2024-12-06T07:10:20+00:00urn:sha1:efb6ab0b6b8c30bb5a2c3ae24da1430f038ca990
Looks like I applied the diff to a dirty tree and didn't notice.
Apply a little bit of lipstick to PKCS72024-12-05T07:35:46+00:00tb2024-12-05T07:35:46+00:00urn:sha1:19fcae1de631980ee7501ea7557a9997f12ea640
Makes the setting and getting of detached signatures more symmetric
and avoids a NULL access.
ok jsing
Don't leak the abuf on error in PKCS7_dataFinal()2024-11-30T10:01:31+00:00tb2024-11-30T10:01:31+00:00urn:sha1:58eee3ef9e1798b88851a31e2ce725c411ced02b
ok beck miod
remove duplicate defines; ok tb@2024-10-23T01:57:19+00:00jsg2024-10-23T01:57:19+00:00urn:sha1:ab34d71bcab207147c9318dde7698c75df4c5d4bHide global _it symbols in pkcs7.h2024-07-08T16:23:27+00:00beck2024-07-08T16:23:27+00:00urn:sha1:4c8d22f29be015c6c02c809813e9a931e88c2575
ok tb@
libcrypto: constify most error string tables2024-06-24T06:43:23+00:00tb2024-06-24T06:43:23+00:00urn:sha1:c9802a5afe29675d69b605ce906d34fd89c024ac
These constitute the bulk of the remaining global mutable state in
libcrypto. This commit moves most of them into data.rel.ro, leaving
out ERR_str_{functs,libraries,reasons} (which require a slightly
different approach) and SYS_str_reasons which is populated on startup.
The main observation is that if ERR_load_strings() is called with a 0 lib
argument, the ERR_STRING_DATA argument is not actually modified. We could
use this fact to cast away const on the caller side and be done with it.
We can make this cleaner by adding a helper ERR_load_const_strings() which
explicitly avoids the assignment to str->error overriding the error code
already set in the table.
In order for this to work, we need to sprinkle some const in err/err.c.
CMS called ERR_load_strings() with non-0 lib argument, but this didn't
actually modify the error data since it ored in the value already stored
in the table.
Annoyingly, we need to cast const away once, namely in the call to
lh_insert() in int_err_set_item(). Fixing this would require changing
the public API and is going to be tricky since it requires that the
LHASH_DOALL_FN_* types adjust.
ok jsing
Remove more unnecessary GOST code2024-04-20T10:11:55+00:00tb2024-04-20T10:11:55+00:00urn:sha1:dbc91b02b46414edaa98f5ae533bc4c44c5b6ef7
ok jsing
pk7_attr.c: tidy includes2024-02-19T15:37:44+00:00tb2024-02-19T15:37:44+00:00urn:sha1:ba75d785d11bc2d4cd808be68b8aa03ff79cab79