openbsd/src/lib, branch OPENBSD_5_5_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_5_5_BASE 2014-02-27T21:04:58+00:00 This commit was manufactured by cvs2git to create tag 'OPENBSD_5_5_BASE'. 2014-02-27T21:04:58+00:00 cvs2svn admin@example.com 2014-02-27T21:04:58+00:00 urn:sha1:7461eefab242fc2979d88c1426d199ec5e56d34d SECURITY fixes backported from openssl-1.0.1f. ok mikeb@ 2014-02-27T21:04:57+00:00 jca 2014-02-27T21:04:57+00:00 urn:sha1:2f599a95f29ebaa4869bf0dfe86551f934af1b7f CVE-2013-4353 NULL pointer dereference with crafted Next Protocol Negotiation record in TLS handshake. Upstream: 197e0ea CVE-2013-6449 Fix crash with crafted traffic from a TLS 1.2 client. Upstream: ca98926, 0294b2b CVE-2013-6450 Fix DTLS retransmission from previous session. Upstream: 3462896 solar's testsuite revealed insufficient validation of invalid input hashes. 2014-02-24T19:45:43+00:00 tedu 2014-02-24T19:45:43+00:00 urn:sha1:0a7c04879701c319753fb7b6664bf98b6b4e27b2 add a more complete check for the rounds parameter. ok deraadt in HISTORY, say where this actually came from; 2014-02-23T23:09:34+00:00 schwarze 2014-02-23T23:09:34+00:00 urn:sha1:2d56df9fd2f6fec6042cae8f61e95154cfdbcd3a ok deraadt@ bentley@ replace spaces with tabs for indentation 2014-02-17T21:05:39+00:00 stsp 2014-02-17T21:05:39+00:00 urn:sha1:da3120dd388a79fbfd0feeb6419947b29fcee754 remove redundant test 2014-02-17T09:00:20+00:00 tedu 2014-02-17T09:00:20+00:00 urn:sha1:cfb57f8dea58aa0fd855cf28daa6516a6085ae99 sticking strlen into a char leads to wraparound at 256. fix this and 2014-02-17T08:58:50+00:00 tedu 2014-02-17T08:58:50+00:00 urn:sha1:da514e89b9dcce7f1975dca5dd2e4e379b47ef09 introduce a new 'b' hash minor. still generate 'a' minors for now. reported by solar designer. diff by some combination of solar and jca. ok deraadt Fix inet6_opt_init() to only check extlen when extbuff is not NULL 2014-02-07T09:50:04+00:00 mpi 2014-02-07T09:50:04+00:00 urn:sha1:10484202fb7550c7f0f57721abcdb8532cbd7b01 as per RFC 3542, from DragonFlyBSD via Eitan Adler. ok bluhm@ Remove unnecessary stdio.h include. 2014-02-05T20:42:32+00:00 stsp 2014-02-05T20:42:32+00:00 urn:sha1:c18b32867c8db4e14f4fe8c68ee6a0a6cefd1743 Patch by Jean-Philippe Ouellet ; ok krw@ Always set errno when returning NULL. OK kettenis@ henning@ 2014-02-05T14:20:43+00:00 millert 2014-02-05T14:20:43+00:00 urn:sha1:d427851751739ae9a9724713ede5c7c3b3efc865