summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | remove duplicates; remove des_random_key; remove unused; sort MLINKS; ok jmc@markus2008-05-071-113/+8
| | | |
* | | | - put the description of -O in the right placejmc2008-05-061-6/+6
| | | | | | | | | | | | | | | | - shorten the argument names to -IO
* | | | allow setting of TCP send/receive buffer sizes; ok markus@djm2008-05-062-5/+38
| | | |
* | | | convert select() => poll(), saves a runtime malloc+free per retrydjm2008-04-181-23/+16
| | | | | | | | | | | | | | | | feedback deraadt@ drahn@; ok deraadt@
* | | | permit _ in the middle of a DNS name componentderaadt2008-04-161-2/+3
| | | |
* | | | Improve the libc DNS resolver ID generation algorithm to be moredjm2008-04-131-43/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | | resistant to prediction atacks by wrapping the existing LCG in a random permutation generator based on a Luby-Rackoff block cipher. lots of discussion and final ok deraadt@
* | | | Use arc4random_buf() when requesting more than a single word of outputdjm2008-04-132-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Use arc4random_uniform() when the desired random number upper bound is not a power of two ok deraadt@ millert@
* | | | - do not call pthread_atfork(3) handlers when a multithreaded programkurt2008-04-041-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | calls vfork(2). "untested, but looks OK" marc@ - document vfork(2), popen(3) and system(3) don't call atfork handlers in multithreaded programs. okay jmc@
* | | | Zero state buffers on return. OK deraadt@millert2008-04-021-1/+5
| | | |
* | | | bcmp(3) tries to return length, which is a size_t, as an int.ray2008-03-191-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead, just return 1 if there is a difference. Found by lint. OK millert.
* | | | - add NAME entries for arc4random_buf and arc4random_uniformjmc2008-03-161-2/+4
| | | | | | | | | | | | | | | | - simplify a macro call (Do/Dc -> Dq)
* | | | Add missing MLINKSderaadt2008-03-161-1/+2
| | | |
* | | | diff from djm@ committed at his request:otto2008-03-162-3/+84
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | introduce two new APIs for requesting strong random numbers: arc4random_buf() - fill an arbitrary memory range with random numbers arc4random_uniform() - return a uniformly distributed random number below a specified upper bound, avoiding the bias that comes from a naive "arc4random() % upper_bound" construction. these mirror similarly-named functions in the kernel; lots of discussion deraadt@ mcbride@
* | | | - len is size_t, but n uses len and is an int. Matching those typesray2008-03-151-6/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | should be good, plus it prevents weird things from happening if len > INT_MAX. - Since n is now size_t, compare it against 0 instead of >= 0. - temp is used to store individual bytes, so use char instead (matches fp and tp). - millert noted that the comma operator may not guarantee order of execution, so replace with semicolons. Found by lint, OK millert.
* | | | Convert c to unsigned char, like it says in the manual. Also addray2008-03-151-4/+3
| | | | | | | | | | | | | | | | | | | | | | | | cast to make it explicit. Found by lint, OK millert.
* | | | fix memory leak (in one case of unaligned buffers); from Markus Kvetterderaadt2008-02-262-4/+6
| | | | | | | | | | | | | | | | ok markus
* | | | use pgfree pool like other code does to reserve free list slots.otto2008-02-201-6/+6
| | | | | | | | | | | | | | | | | | | | prevents a few "cannot free mem because i need mem to free mem" scenarios (one found by weingart@). ok weingart@ millert@ miod@
* | | | - make arc4random*() functions thread safe. Use a custom spinlock functionkurt2008-01-012-42/+69
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | instead of the generic pthread macros since free(3) uses __arc4_getbyte() when freeing small sized allocations and the generic pthread macros call malloc(3). - eliminate passing pointers to a static variable with global scope (rs) for additional code clarity and reduction. - shlib minor bumps for libc and libpthread due to new functions. From andreas@ with some bits from me. okay tedu@ marc@ w/some spot checking from millert@
* | | | relevant updates/fixes up to openssl-0.9.8g;jmc2007-12-011-31/+45
| | | |
* | | | typos; ok jmc@martynas2007-11-271-2/+2
| | | | | | | | | | | | | | | | sys/dev/pci/pciide.c from naddy@
* | | | fix misleading comment; the _MUTEX_LOCK/_MUTEX_UNLOCK macros work withkurt2007-11-191-2/+2
| | | | | | | | | | | | | | | | both static and non-static mutexs.
* | | | Put limits.h in front of stdlib.h as style(9) recommends.tobias2007-11-132-8/+8
| | | | | | | | | | | | | | | | OK millert@
* | | | strtod may return HUGE_VAL on overflow, which is defined in math.h.tobias2007-11-111-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | Therefore added math.h to SYNPOSIS. OK millert@
* | | | Add parentheses to avoid warning:chl2007-10-311-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | "suggest parentheses around && within ||" ok millert@
* | | | Make sure to use unique target names so that make -j does not break;miod2007-10-251-25/+25
| | | | | | | | | | | | | | | | feedback and ok espie@
* | | | Only test one condition per invocation flavour, instead of testing allmiod2007-10-221-27/+29
| | | | | | | | | | | | | | | | | | | | | | | | of them with exceptions disabled and then only one with exceptions enabled. ok kettenis@
* | | | Give more details on failure.miod2007-10-201-8/+8
| | | |
* | | | Make this work on 64 bit platforms by using strlen() instead of sizeof()...miod2007-10-201-1/+1
| | | | | | | | | | | | | | | | worked by accident.
* | | | use RRSIG instead of SIG for DNSSEC. ok djm@jakob2007-10-113-6/+7
| | | |
* | | | Replace use of strcpy(3) and other pointer goo inmoritz2007-10-102-30/+24
| | | | | | | | | | | | | | | | | | | | | | | | SSL_get_shared_ciphers() with strlcat(3). ok deraadt@ markus@
* | | | add a RETURN VALUES section.pyr2007-10-081-9/+9
| | | | | | | | | | | | | | | | ok jmc@
* | | | Fix off-by-one buffer overflow in SSL_get_shared_ciphers().moritz2007-09-272-22/+22
| | | | | | | | | | | | | | | | | | | | | | | | From OpenSSL_0_9_8-stable branch. ok djm@
* | | | add HISTORY; shortened version of diff from Ilya A. Kovalenkojmc2007-09-191-2/+7
| | | | | | | | | | | | | | | | ok millert
* | | | Check snprintf(3) return value for error or truncation.moritz2007-09-171-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | Mostly path construction, where truncation could be bad. ok and input from deraadt@ millert@ ray@
* | | | fix format strings, sizeof() does not return an intotto2007-09-121-5/+5
| | | |
* | | | Proper use of fseek/fseeko macros.tobias2007-09-102-2/+2
| | | | | | | | | | | | | | | | OK joris@, otto@
* | | | use strcspn to properly overwrite '\n' in fgets returned bufferchl2007-09-092-4/+4
| | | | | | | | | | | | | | | | ok moritz@ gilles@
* | | | Synced atomicio implementation in nc and sendbug with ssh.tobias2007-09-072-13/+24
| | | | | | | | | | | | | | | | OK djm@, joris@, ray@
* | | | Add missing header to avoid warningchl2007-09-051-1/+2
| | | | | | | | | | | | | | | | ok millert@ ray@
* | | | no need to talk about bits; ok millert jmcderaadt2007-09-051-3/+3
| | | |
* | | | Update free(3) section--we use mmap()/munmap(), not brk().millert2007-09-031-4/+6
| | | | | | | | | | | | | | | | Based on a diff from Mike Belopuhov. OK jmc@
* | | | remove trailing whitespace;jmc2007-09-031-2/+2
| | | |
* | | | Adapt atexit() regress to recent changes and add __cxa_atexit() regress.millert2007-09-0311-5/+196
| | | | | | | | | | | | | | | | __cxa_atexit() regress from kurt@
* | | | Add __cxa_atexit() support for gcc3. This provides support for shared ↵millert2007-09-034-30/+108
| | | | | | | | | | | | | | | | object destructors called at dlclose() time. Inspired by similar changes in FreeBSD and NetBSD.
* | | | add recaloc(3)millert2007-09-033-20/+62
| | | |
* | | | add memrchr(3)millert2007-09-033-5/+63
| | | |
* | | | use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsgderaadt2007-09-026-12/+12
| | | |
* | | | http://openssl.org/news/patch-CVE-2007-3108.txt; ok pval, deraadtmarkus2007-08-212-26/+130
| | | |
* | | | Clarify the example about avoiding overflow. OK ray@ deraadt@millert2007-08-081-3/+3
| | | |
* | | | Show how to use strcspn(3) to trim newlines.ray2007-08-081-2/+14
| | | | | | | | | | | | | | | | OK jmc and millert.