openbsd/src/regress/lib, branch libressl-v2.2.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.2.0 2015-05-29T04:17:11+00:00 Need to operate of CXXFLAGS now. 2015-05-29T04:17:11+00:00 miod 2015-05-29T04:17:11+00:00 urn:sha1:334c0a46dde9a8e832ac6d3d81d28c7b3c10aec4 Make this run on strict alignment architectures. 2015-05-08T21:30:37+00:00 miod 2015-05-08T21:30:37+00:00 urn:sha1:8db0b019d8a8eba0b284550a1b273359a1f7124a Check for invalid leading zeros in CBS_get_asn1_uint64. 2015-04-25T15:28:47+00:00 doug 2015-04-25T15:28:47+00:00 urn:sha1:14b4339c31e6165fb11bbb889e4b24b201ac5e29 ASN.1 integers cannot have all zeros or all ones for the first 9 bits. This rule ensures the numbers are encoded with the smallest number of content octets (see ITU-T Rec X.690 section 8.3.2). Based on BoringSSL commit 5933723b7b592e9914f703d630b596e140c93e16 ok deraadt@ jsing@ Now that tls_close() is more robust, consider a failure to be fatal. 2015-04-15T16:09:29+00:00 jsing 2015-04-15T16:09:29+00:00 urn:sha1:ca0f4a12e39df9ce0b16a4185f61eb312d893636 fix for regression test for strtol(). it failed (the wrong kind of 2015-03-15T07:26:27+00:00 phessler 2015-03-15T07:26:27+00:00 urn:sha1:3548b78188a9f7244d3eae3cbafe1645fa6746d8 fail), on 64-bit systems. tested on 64-bit (amd64) and 32-bit (sparc). OK claudio@ deraadt@ Reject DH keys sent by a server if they are considered too small; inspired 2015-03-08T16:48:47+00:00 miod 2015-03-08T16:48:47+00:00 urn:sha1:973703db67a8e73d70e63afa8f2cde19da09144d by a similar BoringSSL change, but raising the limit to 1024 bits. ok jsing@ markus@ guenther@ deraadt@ Fix CVE-2014-3570: properly calculate the square of a BIGNUM value. 2015-02-25T15:39:49+00:00 bcook 2015-02-25T15:39:49+00:00 urn:sha1:f3031aa7bff24911a8cae9bdd7cdcd88d8554f42 See https://www.openssl.org/news/secadv_20150108.txt for a more detailed discussion. Original OpenSSL patch here: https://github.com/openssl/openssl/commit/a7a44ba55cb4f884c6bc9ceac90072dea38e66d0 The regression test is modified a little for KNF. ok miod@ Trivial fix for test progress output. 2015-02-25T15:31:25+00:00 bcook 2015-02-25T15:31:25+00:00 urn:sha1:2725a02f7a7b4932578ec02826b4501c29e21ddf Remove unneeded dangling else, compound statements on a single line. Update for recent verify related naming changes. 2015-02-22T15:14:32+00:00 jsing 2015-02-22T15:14:32+00:00 urn:sha1:aed39b600032f0395f7a180c678ab9317b32c5da BN_free() has its own NULL check. 2015-02-19T05:12:01+00:00 jsing 2015-02-19T05:12:01+00:00 urn:sha1:9105945305e8064b1b4c31e0c1810233f215dce5