| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | app_tminterval moved to apps_posix.c, we don't need sys/times.h | bcook | 2015-07-20 | 1 | -2/+1 |
| | | |||||
| * | prefer string.h to strings.h ok guenther@ doug@ | bcook | 2015-07-20 | 2 | -4/+4 |
| | | |||||
| * | No need to recheck for NULL in openssl(1) ecparam. | doug | 2015-07-20 | 1 | -5/+1 |
| | | | | | | | Fixes Coverity issue 78802. ok bcook@ | ||||
| * | Don't try to run ECDH if ecdh_checks fails in openssl(1) speed. | doug | 2015-07-20 | 1 | -17/+23 |
| | | | | | | | | Coverity 72744 noticed that rsa_count was overwitten. The underlying issue is that this code is supposed to be in an else block. ok bcook@ | ||||
| * | Avoid NULL deref in openssl(1) s_cb. | doug | 2015-07-20 | 1 | -5/+14 |
| | | | | | | | Fixes Coverity issue 24956. ok bcook@ | ||||
| * | Avoid possible NULL deref in openssl(1) s_server. | doug | 2015-07-20 | 1 | -2/+5 |
| | | | | | | | Fixes Coverity issue 78873. ok miod@ | ||||
| * | check the sigbuf value before using it. | rpointel | 2015-07-20 | 1 | -2/+7 |
| | | | | | ok miod@ (thanks). | ||||
| * | Avoid dereferencing a NULL. | doug | 2015-07-20 | 1 | -5/+7 |
| | | | | | | | Move NULL check before use. Fixes Coverity issue 21746. ok miod@ jsing@ | ||||
| * | Remove condition that never happens and fix error handling. | doug | 2015-07-20 | 1 | -6/+5 |
| | | | | | | | | | | | | There were two issues here: 1) in == NULL is never true because it's checked above here. (Fixes Coverity 21705) 2) All error handling is in the if (in == NULL) guard, so effectively there's no error handling and it continues on. ok miod@ jsing@ | ||||
| * | Various memory leaks upon error or unchecked allocations. | miod | 2015-07-20 | 2 | -8/+26 |
| | | | | | ok doug@ | ||||
| * | Use V_ASN1_UNDEF instead of -1. | miod | 2015-07-20 | 2 | -14/+14 |
| | | | | | | | | Make sure ASN1_primitive_new() will return NULL in *pval in all error situations. ok bcook@ doug@ | ||||
| * | Check the return value of asn1_enc_save(). ok bcook@ doug@ | miod | 2015-07-20 | 2 | -4/+8 |
| | | |||||
| * | When freeing an X509_CRL, if freeing the user-maintained meth_data fails, | miod | 2015-07-20 | 2 | -6/+8 |
| | | | | | | do not forgot to nevertheless keep freeing the other fields. ok doug@ guenther@ | ||||
| * | In X509_PKEY_new(), make sure all allocation failures push an error to the | miod | 2015-07-20 | 2 | -14/+30 |
| | | | | | | error stack, not only the first one. ok guenther@ doug@ | ||||
| * | add NetLock Kft. CA root certificate, already present in web browsers and | steven | 2015-07-20 | 1 | -0/+80 |
| | | | | | | needed for fetching ports distfiles. ok sthen@ | ||||
| * | Check return value for ENGINE_ctrl and ENGINE_ctrl_cmd. | doug | 2015-07-20 | 1 | -4/+15 |
| | | | | | | | Fixes Coverity issue 21645. ok bcook@ | ||||
| * | Check return value in openssl(1) s_socket. | doug | 2015-07-20 | 1 | -3/+6 |
| | | | | | | | Fixes Coverity issue 21655. ok bcook@ | ||||
| * | Remove check that is never true. | doug | 2015-07-20 | 1 | -3/+1 |
| | | | | | | | | Fixes coverity issue 78799 as group == NULL was already an error condition above here. ok beck@ | ||||
| * | Warn when rename() fails in openssl(1) apps. | doug | 2015-07-20 | 1 | -8/+36 |
| | | | | | | | Fixes Coverity issues 78795 and 78803. ok bcook@ | ||||
| * | Add VIS_DQ to escape double quotes. OK deraadt@ semarie@ reyk@ | millert | 2015-07-20 | 1 | -1/+3 |
| | | |||||
| * | Remove OpenSSL engine RSAX. | doug | 2015-07-19 | 14 | -1409/+12 |
| | | | | | | | | | | OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@ | ||||
| * | Allow *_free() functions in libssl to handle NULL input. | doug | 2015-07-19 | 9 | -9/+34 |
| | | | | | | | This mimics free()'s behavior which makes error handling simpler. ok bcook@ miod@ | ||||
| * | Drop stupid (int) casts for the arguments of malloc() and friends. This is | miod | 2015-07-19 | 18 | -48/+48 |
| | | | | | | not 16-bit MS-DOS anymore. ok bcook@ tedu@ | ||||
| * | unifdef -UCBC_HANDLES_TRUNCATED_IO | miod | 2015-07-19 | 2 | -38/+2 |
| | | | | | ok bcook@ doug@ | ||||
| * | Verify ASN1 objects types before attempting to access them as a particular | miod | 2015-07-19 | 4 | -4/+12 |
| | | | | | | type. ok guenther@ doug@ | ||||
| * | tweak previous; ok doug | jmc | 2015-07-19 | 1 | -4/+4 |
| | | |||||
| * | Convert ssl3_get_certificate_request to CBS. | doug | 2015-07-19 | 2 | -62/+66 |
| | | | | | ok miod@ | ||||
| * | Fix symbol collision with libtls. | doug | 2015-07-19 | 7 | -36/+36 |
| | | | | | | | Pointed out by guenther. ok guenther@ | ||||
| * | Add TLS_method, TLS_client_method and TLS_server_method. | doug | 2015-07-19 | 9 | -9/+321 |
| | | | | | | | | | | | | | | | | | Use these instead of SSLv23_*method when you want to make sure TLS is used. By default, we disable SSLv3 but it's still possible for the user to re-enable it. TLS_*method does not allow SSLv3. Both BoringSSL and (next version of) OpenSSL have these methods. However, they have changed the implementation significantly. We will as well, but not right now. Riding the libssl major bump. ok miod@ bcook@ | ||||
| * | Crank major and remove legacy variables. | doug | 2015-07-19 | 6 | -30/+6 |
| | | | | | | | Libtls is riding this crank. ok miod@ bcook@ | ||||
| * | Crank the major of libtls: the behaviour of tls_write() has been | reyk | 2015-07-19 | 1 | -1/+1 |
| | | | | | | | changed in an incompatible way regarding partial writes. OK miod@ deraadt@ | ||||
| * | Free memory when finished. | doug | 2015-07-19 | 1 | -2/+6 |
| | | | | | | | Fixes coverity 78835. ok bcook@ | ||||
| * | Add documentation on how to use TLS_{READ,WRITE}_AGAIN. | doug | 2015-07-19 | 1 | -2/+29 |
| | | | | | ok beck@ | ||||
| * | Now that it is safe to invoke X509_STORE_CTX_cleanup() if X509_STORE_CTX_init() | miod | 2015-07-19 | 4 | -16/+32 |
| | | | | | | fails, check its return value and correctly mop up after ourselves. ok beck@ doug@ | ||||
| * | Only close descriptor if not already closed. | doug | 2015-07-19 | 1 | -3/+5 |
| | | | | | | | Fixes coverity 78916. ok miod@ bcook@ | ||||
| * | Free variable before potentially reusing. | doug | 2015-07-19 | 1 | -1/+2 |
| | | | | | | | Fixes coverity 78824. ok bcook@ miod@ | ||||
| * | Free passin on error. | doug | 2015-07-19 | 1 | -4/+4 |
| | | | | | | | Fixes coverity 78826. ok miod@ bcook@ | ||||
| * | Fix coverity 105339, by correctly checking return from strtoll | beck | 2015-07-19 | 1 | -1/+1 |
| | | | | | ok miod@ bcook@ | ||||
| * | Put explicit braces around assignment used in a conditional. | miod | 2015-07-19 | 2 | -4/+4 |
| | | | | | ok bcook@ doug@ | ||||
| * | Remove the logic responsible for outputting most AES-NI instructions as | miod | 2015-07-19 | 6 | -214/+0 |
| | | | | | | | | | | raw byte sequences. The toolchains have had some time to update and assemble the instructions correctly (except for p{ins,ext}rd which are not supported yet by as(1) under OpenBSD, but will be fixed shortly). Inspired by a discussion between tedu@ and John-Mark Gurney. Verified to still work on Mac OS X and average Linux distros by bcook@ | ||||
| * | Replace `.byte 0x48,0x83,0xEC,0x08' with `sub \$8,%rsp' which is exactly the | miod | 2015-07-19 | 2 | -4/+4 |
| | | | | | same four bytes, unobfuscated. | ||||
| * | Simplify X509_STORE_CTX_init and make it safe with stack variables. | doug | 2015-07-19 | 2 | -116/+110 |
| | | | | | | | | The current version is not safe with stack variables because it may return prematurely with a partially constructed object on error. ok miod@ a while back | ||||
| * | Remove case that can never happen. | doug | 2015-07-19 | 2 | -10/+2 |
| | | | | | | | | It's a little convoluted due to gotos, but at that point, pci is always NULL. Spotted by Coverity 21702. ok miod@ beck@ bcook@ | ||||
| * | Fix Coverity 72742 - ret is overwritten immediately after this. | beck | 2015-07-19 | 2 | -4/+2 |
| | | | | | ok doug@ | ||||
| * | Remove effectively unused variable. | doug | 2015-07-19 | 1 | -4/+1 |
| | | | | | | | Fixes Coverity issue 21693. ok beck@ bcook@ | ||||
| * | Assign p to CBS_data since it is used later. | doug | 2015-07-19 | 2 | -4/+6 |
| | | | | | | | The p initialization was hiding this bug but Coverity 126279 saw it. ok miod@ bcook@ beck@ | ||||
| * | abort when ENGINE_remove fails, fix Coverity 21656 | bcook | 2015-07-19 | 2 | -10/+4 |
| | | | | | ok doug@, beck@ | ||||
| * | Convert dtls1_get_message_header to CBS and change to int. | doug | 2015-07-18 | 6 | -32/+74 |
| | | | | | | | | Changed return value from void to int. It should never return an error given that the input length is not checked yet. ok miod@ | ||||
| * | rand_err doesn't exist anymore, coverity 78808 | beck | 2015-07-18 | 2 | -6/+6 |
| | | | | | ok doug@ | ||||
| * | Coverity 21651 | beck | 2015-07-18 | 2 | -6/+14 |
| | | | | | ok doug@ | ||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |