summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | update to openssl-0.9.8i; tested by several, especially krw@djm2009-01-05190-3245/+5824
| | | |
* | | | reintroduce extra malloc protections, but avoiding the use ofdjm2009-01-031-164/+229
| | | | | | | | | | | | | | | | | | | | | | | | PAGE_(SIZE|SHIFT|MASK) defines that evaluate to variables on the sparc architecture; ok otto@ tested on my reanimated ss20
* | | | PAGE_SIZE is not a valid symbol to use in that way. In particular,deraadt2008-12-311-235/+164
| | | | | | | | | | | | | | | | | | | | | | | | | | | | on sparc, it expands to something that just plain does not work, because the page size can be variable. Sorry we didn't spot this before. Backing it all out to allow sparc to build; please find a different way to fix it.
* | | | Remove mprotecting of struct dir_info introduced in previous commitdjm2008-12-302-46/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | (MALLOC_OPTIONS=L). It was too slow to turn on by default, and we don't do optional security. requested by deraadt@ grumbling ok otto@
* | | | extra paranoia for malloc(3):djm2008-12-292-165/+278
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move all runtime options into a structure that is made read-only (via mprotect) after initialisation to protect against attacks that overwrite options to turn off malloc protections (e.g. use-after-free) Allocate the main bookkeeping data (struct dir_info) using mmap(), thereby giving it an unpredictable address. Place a PROT_NONE guard page on either side to further frustrate attacks on it. Add a new 'L' option that maps struct dir_info PROT_NONE except when in the allocator code itself. Makes attacks on it basically impossible. feedback tedu deraadt otto canacar ok otto
* | | | repair the ARC4 story; ok jmc djm millertderaadt2008-12-231-5/+7
| | | |
* | | | The example for detecting malicious PTR records could be easily misinterpreted.jacekm2008-12-221-5/+4
| | | | | | | | | | | | | | | | Make it less ambiguous; ok gilles@ claudio@
* | | | shave off more bytes than you expect by declaring a few const local arraysotto2008-12-151-4/+4
| | | | | | | | | | | | | | | | as static const
* | | | fix inet_ntop(3) prototype; ok millert@ libc to be bumbed very soonotto2008-12-092-7/+7
| | | |
* | | | Document that ethers_aton returns NULL for invalid addresses.weerd2008-12-071-2/+4
| | | | | | | | | | | | | | | | Suggested by and ok claudio@, ok jmc@
* | | | Fix typo, okay jmc@.pedro2008-11-261-3/+3
| | | |
* | | | Correctly jump over routing headers and calculate the size of the if_dataclaudio2008-11-241-7/+14
| | | | | | | | | | | | | | | | | | | | | | | | struct in the if_msghdr instead of using sizeof() blindly. This allows us to grow if_data without causing issues for the getifaddrs() users. OK deraadt@ (who needs this for some cool upcomming stuff)
* | | | move allocations between half a page and a page as close to the end ofotto2008-11-202-4/+5
| | | | | | | | | | | | | | | | | | | | the page as possible (i.e. make malloc option P a default). ok art@ millert@ krw@
* | | | Reduce the leeway malloc allows when moving allocations to the end ofotto2008-11-201-2/+2
| | | | | | | | | | | | | | | | | | | | a page to 0. P default will be changed in a separate commit. ok millert@ art@ krw@
* | | | To allow for easier playing with more strict settings introduceotto2008-11-131-5/+14
| | | | | | | | | | | | | | | | | | | | a separate symbolic constant for the leeway we allow when moving allocations towards the end of a page. No functional change.
* | | | avoid a few strlen calls for constant strings; prompted by tg; ok djm@otto2008-11-121-10/+10
| | | |
* | | | if the freeprot flag (F) is set, do not do delayed frees for chunksotto2008-11-061-6/+10
| | | | | | | | | | | | | | | | | | | | | | | | (might catch errors closer to the trouble spot) and junk fill pages just before reuse instead of immediate (we can't access the page anyway) since we set PROT_NONE in the F case. ok djm@
* | | | sync to openssl-0.9.8i;jmc2008-11-031-18/+22
| | | | | | | | | | | | | | | | | | | | i still haven't folded in x509v3_config.pod, since i'm not entirely sure what to do with it.
* | | | fix markup of example line and description of G flag; partly from andotto2008-11-021-5/+4
| | | | | | | | | | | | | | | | ok jmc@
* | | | remove distinction between warnings and errors, ok deraadt@ djm@otto2008-11-022-73/+38
| | | |
* | | | if MALLOC_STATS is defined, record how many "cheap reallocs" wereotto2008-10-291-1/+8
| | | | | | | | | | | | | | | | tried and how many actually succeeded.
* | | | oops, assign errno the right way. caught by david running regress testsotto2008-10-201-2/+2
| | | |
* | | | reduce rbyte cache to 512 bytes, no measurable slowdown (even in theotto2008-10-031-2/+2
| | | | | | | | | | | | | | | | threaded case) but much smaller working set; prompted by and ok deraadt@
* | | | save and restore errno on success. while it is not stricly needed forotto2008-10-031-4/+14
| | | | | | | | | | | | | | | | | | | | non-syscalls, there's just too much code not doing the right thing on error paths; prompted by and ok deraadt@
* | | | zap __arc4_getbyte(), it was only used by the old malloc; ok millert@otto2008-10-031-14/+1
| | | | | | | | | | | | | | | | kurt@
* | | | when increasing the size of a larger than a page allocation tryotto2008-10-031-3/+41
| | | | | | | | | | | | | | | | | | | | mapping the region next to the existing one first; there's a pretty high chance there's a hole there we can use; ok deraadt@ tedu@
* | | | avoid spitting up regions when purging stuff from the cache, it putsotto2008-10-031-17/+10
| | | | | | | | | | | | | | | | too much pressure on the amaps. ok tedu@ deraadt@
* | | | Hook up fnmatch and glob regress.millert2008-10-021-5/+5
| | | |
* | | | Regress driver for fnmatch(3). Needs more tests.millert2008-10-013-0/+58
| | | |
* | | | Regress driver for glob(3). Needs more tests.millert2008-10-014-0/+244
| | | |
* | | | documentation tweaks; synchronize synopsis and usage.sobrado2008-09-192-10/+11
| | | | | | | | | | | | | | | | | | | | | | | | written with help by jmc@ ok jmc@
* | | | fix some cause of bad TEXTREL on i386 and amd64otto2008-09-1910-28/+128
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - global function calls in .init sections (diff makes them via PLT) - calls to global functions in aes-586.S (made static or local) - global variable accesses in rc4-x86_64.S (now made via GOT) from djm@large; ok miod@
* | | | document strtold. ok millert@martynas2008-09-132-11/+25
| | | |
* | | | strtof has been introduced in c99martynas2008-09-131-4/+6
| | | | | | | | | | | | | | | | from Thomas Pfaff. ok millert@
* | | | use one call to arc4random_buf() instead of lots of arc4random()djm2008-09-102-16/+4
| | | |
* | | | turn off CAST assembler code (i.e. use C implementation) as it has baddjm2008-09-081-3/+3
| | | | | | | | | | | | | | | | | | | | relocations that lead to libcrypto.so being marked TEXTREL; linker-fu from drahn@ "go ahead" deraadt@
* | | | - replace dtoa w/ David's gdtoa, version 2008-03-15martynas2008-09-078-2504/+309
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - provide proper dtoa locks - use the real strtof implementation - add strtold, __hdtoa, __hldtoa - add %a/%A support - don't lose precision in printf, don't round to double anymore - implement extended-precision versions of libc functions: fpclassify, isnan, isinf, signbit, isnormal, isfinite, now that the ieee.h is fixed - separate vax versions of strtof, and __hdtoa - add complex math support. added functions: cacos, casin, catan, ccos, csin, ctan, cacosh, casinh, catanh, ccosh, csinh, ctanh, cexp, clog, cabs, cpow, csqrt, carg, cimag, conj, cproj, creal, cacosf, casinf, catanf, ccosf, csinf, ctanf, cacoshf, casinhf, catanhf, ccoshf, csinhf, ctanhf, cexpf, clogf, cabsf, cpowf, csqrtf, cargf, cimagf, conjf, cprojf, crealf - add fdim, fmax, fmin - add log2. (adapted implementation e_log.c. could be more acruate & faster, but it's good enough for now) - remove wrappers & cruft in libm, supposed to work-around mistakes in SVID, etc.; use ieee versions. fixes issues in python 2.6 for djm@ - make _digittoint static - proper definitions for i386, and amd64 in ieee.h - sh, powerpc don't really have extended-precision - add missing definitions for mips64 (quad), m{6,8}k (96-bit) float.h for LDBL_* - merge lead to frac for m{6,8}k, for gdtoa to work properly - add FRAC*BITS & EXT_TO_ARRAY32 definitions in ieee.h, for hdtoa&ldtoa to use - add EXT_IMPLICIT_NBIT definition, which indicates implicit normalization bit - add regression tests for libc: fpclassify and printf - arith.h & gd_qnan.h definitions - update ieee.h: hppa doesn't have quad-precision, hppa64 does - add missing prototypes to gdtoaimp - on 64-bit platforms make sure gdtoa doesn't use a long when it really wants an int - etc., what i may have forgotten... - bump libm major, due to removed&changed symbols - no libc bump, since this is riding on djm's libc major crank from a day ago discussed with / requested by / testing theo, sthen@, djm@, jsg@, merdely@, jsing@, tedu@, brad@, jakemsr@, and others. looks good to millert@ parts of the diff ok kettenis@ this commit does not include: - man page changes
* | | | sparc now requires this bloated library to be -fPICderaadt2008-09-071-1/+5
| | | |
* | | | Fix merge botch.kettenis2008-09-072-6/+0
| | | | | | | | | | | | | | | | ok miod@
* | | | remove duplicate definition of OPENSSL_DSA_MAX_MODULUS_BITS spotteddjm2008-09-062-4/+0
| | | | | | | | | | | | | | | | by dtucker@
* | | | update for openssl-0.9.8hdjm2008-09-062-49/+96
| | | |
* | | | remerge local tweaks, update per-arch configuration headers, updatedjm2008-09-0631-118/+900
| | | | | | | | | | | | | | | | Makefiles, crank shlib_version
* | | | resolve conflictsdjm2008-09-061188-25827/+68210
| | | |
* | | | This commit was generated by cvs2git to track changes on a CVS vendordjm2008-09-06126-494/+42285
|\ \ \ \ | | |_|/ | |/| | branch.
| * | | import of OpenSSL 0.9.8hdjm2008-09-06564-10621/+67300
| | | |
* | | | This commit was generated by cvs2git to track changes on a CVS vendordjm2008-09-06158-13851/+19566
|\ \ \ \ | | |_|/ | |/| | branch.
| * | | import of OpenSSL 0.9.8hdjm2008-09-06917-31309/+67049
| | | |
* | | | This commit was generated by cvs2git to track changes on a CVS vendordjm2008-09-06275-38/+81757
|\ \ \ \ | | |_|/ | |/| | branch.
| * | | import of OpenSSL 0.9.8hdjm2008-09-06276-871/+82581
| | | |
* | | | remove now obsolete calloc implementation; prompted by miodotto2008-09-031-50/+0
| | | |
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-17 06:48:37 +0000