openbsd/src/lib/libcrypto/pkcs7, branch libressl-v2.3.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.3.0 2015-09-10T15:56:26+00:00 Correct spelling of OPENSSL_cleanse. 2015-09-10T15:56:26+00:00 jsing 2015-09-10T15:56:26+00:00 urn:sha1:647569a51c1530d10e75e272f0982682f696caa7 ok miod@ Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generated 2015-07-29T14:58:34+00:00 jsing 2015-07-29T14:58:34+00:00 urn:sha1:2186614b2e5af6bbfcc1a9f8898ac11ea9c93faf assembly. ok bcook@ Expand ASN.1 template macros - no change in generated assembly. 2015-07-25T15:33:06+00:00 jsing 2015-07-25T15:33:06+00:00 urn:sha1:4fde71f079c9806ae7d47874364986230ff33232 Verify ASN1 objects types before attempting to access them as a particular 2015-07-19T18:25:59+00:00 miod 2015-07-19T18:25:59+00:00 urn:sha1:61761e41c7c80fb243bc192e66dd048e359b9347 type. ok guenther@ doug@ Check the return value of ASN1_STRING_set(), for it may fail to allocate 2015-07-18T14:40:59+00:00 miod 2015-07-18T14:40:59+00:00 urn:sha1:5f757bbcee25110b6c1d961e2c1f48a1c8a3c942 memory. Coverity CID 24810, 24846. ok bcook@ doug@ Remove dead code. Coverity CID 21688 2015-07-15T17:44:20+00:00 miod 2015-07-15T17:44:20+00:00 urn:sha1:6b81bf7a9dc359341bb29991ea5cacc14014f253 ok beck@ Fix several crash causing defects from OpenSSL. 2015-03-19T14:00:22+00:00 tedu 2015-03-19T14:00:22+00:00 urn:sha1:985dda77b7930c0837c4acb74b7bd23252f849c1 These include: CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp CVE-2015-0287 - ASN.1 structure reuse memory corruption CVE-2015-0289 - PKCS7 NULL pointer dereferences Several other issues did not apply or were already fixed. Refer to https://www.openssl.org/news/secadv_20150319.txt joint work with beck, doug, guenther, jsing, miod Expand IMPLEMENT_ASN1_NDEF_FUNCTION and IMPLEMENT_ASN1_PRINT_FUNCTION 2015-02-10T06:37:38+00:00 jsing 2015-02-10T06:37:38+00:00 urn:sha1:16e6301787bb59b34d5c470e6a0728c09d2b7d51 macros so that the code is visible and functions can be readily located. Change has been scripted and there is no change to the generated assembly. Discussed with beck@ miod@ tedu@ Manually expand ASN1_ITEM_rptr macros that should have been expanded with 2015-02-10T05:25:45+00:00 jsing 2015-02-10T05:25:45+00:00 urn:sha1:bef5b62e5cb2b7f34be8c33038e3dfe534e6cbed the IMPLEMENT_ASN1_DUP_FUNCTION macro. Expand the IMPLEMENT_ASN1_DUP_FUNCTION macro so that the code is visible 2015-02-10T04:21:50+00:00 jsing 2015-02-10T04:21:50+00:00 urn:sha1:803fe92d2ba2e99892a8bb84620d364da4518cb7 and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@