openbsd/src, branch libressl-v2.3.2

deprecate SSL_OP_SINGLE_DH_USE

2016-01-27T02:06:16+00:00

ok jsing@

Don't crash dumping malloc stats if malloc_init hasn't been called, noted by

2016-01-26T15:44:28+00:00

David CARLIER

Call BIO_sock_init() from tls_init() to ensure sockets are enabled on Windows.

2016-01-18T16:15:14+00:00

This is of course a no-op on other platforms. Noted by equalsraf from github.

Long ago, malloc internally had two kinds of failures, warnings and errors.

2016-01-06T17:57:22+00:00

The 'A' option elevated warnings to errors, and has been the default for some time. Then warnings were effectively eliminated in favor of everything being an error, but then the 'a' flag turned real errors into warnings! Remove the 'a' option entirely. You shouldn't have used it anyway. ok tb tdeval

Follow style(9) and drop lint /* NOTREACHED */ annotations from

2016-01-04T19:43:13+00:00

the examples. Diff from Juuso Lapinlampi < wub () partyvan ! eu >, thanks! ok schwarze@

Use the correct values for TLS certificate / private key flags.

2016-01-04T02:18:31+00:00

fix from Andreas Bartelt

Calling clone(2) with CLONE_NEWPID yields multiple processes with pid=1.

2016-01-04T02:04:56+00:00

Work around this particular case by reseeding whenever pid=1, but as guenther@ notes, directly calling clone(2), and then forking to match another pid, provides other ways to bypass new process detection on Linux. Hopefully at some point Linux implements something like MAP_INHERIT_ZERO, and does not invent a corresponding mechanism to subvert it. Noted by Sebastian Krahmer and the opmsg team. See http://stealth.openwall.net/crypto/randup.c for a test program. ok beck@

Document that the ssl free() functions are NULL safe. OK mmcc@

2015-12-30T18:45:02+00:00

another case where bad things would happen after wrterror

2015-12-30T06:04:39+00:00

if somebody makes the mistake of disabling abort, don't deref null in

2015-12-30T06:01:18+00:00

validate_junk. from Michal Mazurek