summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* MFC, fix by moritz:OPENBSD_4_0henning2007-10-111-15/+12
| | | | The SSL_get_shared_ciphers() function contains an off-by-one overflow.
* MFC:brad2006-11-0212-2/+84
| | | | | | | Fix by pvalchev@ openssl security fixes, diff from markus@, ok & "commit it" djm@ http://www.openssl.org/news/secadv_20060928.txt for more
* This commit was manufactured by cvs2git to create branch 'OPENBSD_4_0'.cvs2svn2006-09-09692-180171/+0
|
* fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339;djm2006-09-092-0/+34
| | | | ok beck@ miod@
* no point mentioning functions if we have nothing useful to sayjmc2006-08-051-13/+1
| | | | | | about them; ok djm
* wording/grammar tweaks;jmc2006-07-261-3/+4
|
* better macros;jmc2006-07-261-6/+6
|
* document `iv';jmc2006-07-261-1/+4
| | | | | from eren elci; tweaked by djm ok djm
* updates from nicholas marriott;jmc2006-07-251-5/+9
| | | | re-worded and ok djm
* allocate gsalt large enough; from Matthew R. Dempsky <mrd at alkemiootto2006-07-041-2/+2
| | | | dot org>; ok djm@ deraadt@
* sync with openssl-0.9.7j docs;jmc2006-06-271-9/+9
|
* crank shlib_versiondjm2006-06-274-6/+7
|
* resolve conflictsdjm2006-06-27317-4778/+8553
|
* This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-277-15/+882
|\ | | | | branch.
| * import of openssl-0.9.7jdjm2006-06-27116-2104/+4130
| |
| * This commit was manufactured by cvs2git to create branch 'unlabeled-1.1.1'.cvs2svn2005-05-101-0/+1541
| |
* | This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-27164-379/+27277
|\ \ | | | | | | branch.
| * | import of openssl-0.9.7jdjm2006-06-27380-3153/+32917
| | |
* | | This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-274-0/+870
|\ \ \ | | | | | | | | branch.
| * | | import of openssl-0.9.7jdjm2006-06-274-0/+870
| | | |
| * | | This commit was manufactured by cvs2git to create branch 'OPENSSL'.cvs2svn2005-05-101-0/+1541
| | | |
* | | | add class 1 and class 3 root certificates from CAcert.org. ok beck@jakob2006-06-121-0/+268
| | | |
* | | | potential fd leak (we will fix this before we move to cloning)deraadt2006-06-082-2/+6
| | | |
* | | | remove expired certificates. ok beck@jakob2006-06-071-541/+0
| | | |
* | | | update a couple of existing CAs that has been changed. ok beck@jakob2006-06-071-105/+87
| | | |
* | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort byjakob2006-06-071-2551/+2356
| | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@
* | | | back out last patch due to updated committed prematurelyjakob2006-06-071-2356/+2551
| | | |
* | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort byjakob2006-06-071-2551/+2356
| | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@
* | | | Fix 'double by a factor of two' and make cache options a bit morepedro2006-06-061-4/+4
| | | | | | | | | | | | | | | | descriptive while at it, input and okay jmc@
* | | | strtoul() -> strtonum(). Also change iflag to unsigned int, sinceray2006-06-021-23/+21
| | | | | | | | | | | | | | | | | | | | | | | | sleep takes an unsigned integer. OK moritz@, jaredy@, and dhill@
* | | | start sentence with a capital letter;jmc2006-06-011-2/+2
| | | |
* | | | fix a !foo & bar.thib2006-05-191-2/+2
| | | | | | | | | | | | | | | | ok miod@, tedu@, pedro@
* | | | move an option to the right place;jmc2006-05-171-2/+2
| | | |
* | | | Don't forget to return 0 on success, doh.otto2006-05-162-2/+4
| | | |
* | | | Try harder to trigger an exception. On architectures where floating-pointkettenis2006-05-151-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | exceptions are deferred, we might not see the exception before another floating-point instruction is executed. This is especially true on the i387 where we don't see underflow/overflow until the result is stored into memory.
* | | | Fix the second malloc_ulimit regression: maintaining the free listotto2006-05-141-3/+12
| | | | | | | | | | | | | | | | | | | | | | | | requires memory; try to make sure we have it. If all fails, leak instead of crash. Test case originally found by cloder@, fix tested by many.
* | | | Add a -hex option to 'rand' to output hexadecimal output.matthieu2006-05-142-2/+24
| | | | | | | | | | | | | | | | ok djm@ miod@, man page help from jmc@.
* | | | remove an 'is' from the comment to make the sentence correct.fkr2006-05-121-2/+2
| | | | | | | | | | | | | | | | ok jmc@, mbalmer@
* | | | Convert do {} while loop -> while {} for clarity. No binary changemillert2006-05-052-10/+10
| | | | | | | | | | | | | | | | on most architectures. From Oliver Smith. OK deraadt@ and henning@
* | | | backport checks for degenerate Diffie-Hellman public exponents fromdjm2006-05-049-1/+73
| | | | | | | | | | | | | | | | | | | | OpenSSL-0.9.8a, where they were added without a corresponding patch to 0.9.7 or an advisory! ok theo@ markus@
* | | | strtonum does not require limits.htedu2006-04-251-2/+1
| | | | | | | | | | | | | | | | spotted by ray some time ago
* | | | Do not leave an hole in the directory list if allocation of theotto2006-04-241-11/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | region succeeds, but allocation a required page dir failed. This can happen if we're really close to ulimit after allocation the region of the size requested. See malloc_ulimit1 regress test. Tested by many; thanks.
* | | | Hook new ulimit test casesotto2006-04-181-2/+2
| | | |
* | | | near ulimit test case 2otto2006-04-182-0/+46
| | | |
* | | | Near ulimit test case 1otto2006-04-182-0/+48
| | | |
* | | | delint; original from deraadt@ with fixes from tdeval@ and me;otto2006-04-181-43/+60
| | | | | | | | | | | | | | | | tested by quite a few developers. ok deraadt@
* | | | Clarify strlcpy code by explicitly naming variable `len' andray2006-04-181-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | separating out each step. Inspired during miscommunication with tedu@. OK deraadt@
* | | | fix badly broken code. okay millert@, deraadt@espie2006-04-171-7/+7
| | | |
* | | | Remove str2number(), use strtonum(3) instead.ray2006-04-141-44/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix some type mismatches. Replace magic numbers. Remove superfluous strlen(3) calls. Earlier diff OK kjell@, OK deraadt@
* | | | POSIX says tdelete() returns the parent of the deleted node. Sadly theotto2006-04-041-1/+9
| | | | | | | | | | | | | | | | | | | | | | | | root node doesn't have a parent, and POSIX does not say what should be done in that case. Warn developers that different implementations may do different things.