openbsd/src/lib/libcrypto/pkcs7, branch libressl-v2.4.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.1 2015-09-30T18:41:06+00:00 Replace M_ASN1_OCTET_STRING_(free|new) with ASN1_OCTET_STRING_(free|new). 2015-09-30T18:41:06+00:00 jsing 2015-09-30T18:41:06+00:00 urn:sha1:80275458dc3673baf5dc56ab2300719f4828295b Replace M_ASN1_INTEGER_(new|free) with ASN1_INTEGER_(new|free) - this is 2015-09-30T17:30:16+00:00 jsing 2015-09-30T17:30:16+00:00 urn:sha1:56c28c591a2d58b6dda7237a4962fc6f6b0eca75 different from the macro expansion, but the result is the same. Also replace some ASN1_STRING_dup() with ASN1_INTEGER_dup(). ok beck@ doug@ Correct spelling of OPENSSL_cleanse. 2015-09-10T15:56:26+00:00 jsing 2015-09-10T15:56:26+00:00 urn:sha1:647569a51c1530d10e75e272f0982682f696caa7 ok miod@ Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generated 2015-07-29T14:58:34+00:00 jsing 2015-07-29T14:58:34+00:00 urn:sha1:2186614b2e5af6bbfcc1a9f8898ac11ea9c93faf assembly. ok bcook@ Expand ASN.1 template macros - no change in generated assembly. 2015-07-25T15:33:06+00:00 jsing 2015-07-25T15:33:06+00:00 urn:sha1:4fde71f079c9806ae7d47874364986230ff33232 Verify ASN1 objects types before attempting to access them as a particular 2015-07-19T18:25:59+00:00 miod 2015-07-19T18:25:59+00:00 urn:sha1:61761e41c7c80fb243bc192e66dd048e359b9347 type. ok guenther@ doug@ Check the return value of ASN1_STRING_set(), for it may fail to allocate 2015-07-18T14:40:59+00:00 miod 2015-07-18T14:40:59+00:00 urn:sha1:5f757bbcee25110b6c1d961e2c1f48a1c8a3c942 memory. Coverity CID 24810, 24846. ok bcook@ doug@ Remove dead code. Coverity CID 21688 2015-07-15T17:44:20+00:00 miod 2015-07-15T17:44:20+00:00 urn:sha1:6b81bf7a9dc359341bb29991ea5cacc14014f253 ok beck@ Fix several crash causing defects from OpenSSL. 2015-03-19T14:00:22+00:00 tedu 2015-03-19T14:00:22+00:00 urn:sha1:985dda77b7930c0837c4acb74b7bd23252f849c1 These include: CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp CVE-2015-0287 - ASN.1 structure reuse memory corruption CVE-2015-0289 - PKCS7 NULL pointer dereferences Several other issues did not apply or were already fixed. Refer to https://www.openssl.org/news/secadv_20150319.txt joint work with beck, doug, guenther, jsing, miod Expand IMPLEMENT_ASN1_NDEF_FUNCTION and IMPLEMENT_ASN1_PRINT_FUNCTION 2015-02-10T06:37:38+00:00 jsing 2015-02-10T06:37:38+00:00 urn:sha1:16e6301787bb59b34d5c470e6a0728c09d2b7d51 macros so that the code is visible and functions can be readily located. Change has been scripted and there is no change to the generated assembly. Discussed with beck@ miod@ tedu@