Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Pretty much everything has SO_REUSEADDR - nuke the #ifdefs. | jsing | 2014-07-08 | 2 | -10/+2 |
| | | | | ok beck@ | ||||
* | We have EAI_FAMILY - remove the #ifdefs. | jsing | 2014-07-08 | 2 | -10/+2 |
| | | | | ok beck@ | ||||
* | getentropy for osx and solaris. will be needed for a portable release | beck | 2014-07-08 | 4 | -0/+1676 |
| | |||||
* | More KNF. | jsing | 2014-07-08 | 2 | -22/+42 |
| | |||||
* | Avoid locking in BIO_get_port() by using getservbyname_r() instead of | jsing | 2014-07-08 | 2 | -62/+62 |
| | | | | | | getservbyname(). While here, provide a common/single return path. ok deraadt@ | ||||
* | fix oops, accidental delete.. darn copying of files between machines | beck | 2014-07-08 | 2 | -4/+4 |
| | |||||
* | j should be an int, like repeat | beck | 2014-07-08 | 2 | -6/+8 |
| | |||||
* | KNF. | jsing | 2014-07-08 | 32 | -1312/+1514 |
| | |||||
* | unbreak last commit - but same intent, make re-seed less expensive | beck | 2014-07-08 | 2 | -24/+32 |
| | |||||
* | More KNF. | jsing | 2014-07-08 | 2 | -32/+36 |
| | |||||
* | Simplify various BIO_sock_* fuctions - less code, better variable names, | jsing | 2014-07-08 | 2 | -54/+24 |
| | | | | | | correct types and fewer casts. ok deraadt@ miod@ | ||||
* | repeat calls to getentrypy() with the same pid likely indicate reseeds. | deraadt | 2014-07-08 | 2 | -6/+20 |
| | | | | | | Since we assume the PRNG above is doing "something old, something new" folding, shortcut and do fewer repeats through the timing loop. ok beck | ||||
* | Memory-leak-in-error-path of the day in X509_ATTRIBUTE_set1_data(). | miod | 2014-07-03 | 2 | -4/+6 |
| | | | | ok logan@ beck@ | ||||
* | Enter the REGRESS_FULL target subdirs for clean, cleandir and obj targets. | miod | 2014-07-03 | 2 | -4/+4 |
| | |||||
* | Memory leak in error path of the day, from clang via dhill@bitrig; | miod | 2014-07-02 | 2 | -4/+6 |
| | | | | ok dhill@bitrig | ||||
* | Warnings. I haz them. | miod | 2014-07-02 | 1 | -2/+11 |
| | |||||
* | pk7_doit.c r1.20 introduced a NULL check that ensures that the signature | jsing | 2014-07-02 | 2 | -4/+4 |
| | | | | | | | | | | contents are not NULL, however this breaks detached signature processing. Fix this by allowing the signature contents to be NULL when operating with a detached signature. Found the hard way by sthen@. ok sthen@ | ||||
* | Add an initial regress test for pkcs7. | jsing | 2014-07-02 | 3 | -1/+300 |
| | | | | This currently fails when signing/verifying with a detached signature. | ||||
* | Remove more unused cruft. | jsing | 2014-07-02 | 58 | -3266/+0 |
| | | | | No objection from the usual suspects. | ||||
* | KNF. | jsing | 2014-07-02 | 2 | -122/+102 |
| | |||||
* | Avoid a NULL deref in i2d_ECPrivateKey() when an EC_KEY lacks the public key | miod | 2014-07-01 | 2 | -4/+4 |
| | | | | | | member (which is perfectly acceptable). From BoringSSL (Adam Langley), commit f71a27920a903c9c36bcb31e68781b17674d3fd2 | ||||
* | simplify and unobfuscate a variable to fix a mem leak. | tedu | 2014-06-30 | 2 | -12/+18 |
| | | | | original diff by logan | ||||
* | fix the identical leak in three different files. | tedu | 2014-06-30 | 6 | -12/+18 |
| | | | | reported by Brent Cook, original diff by logan | ||||
* | Free "data" when it's no longer in use. | logan | 2014-06-29 | 1 | -1/+2 |
| | | | | | | (Thanks to Brent Cook) OK from jsing@ | ||||
* | Fix file descriptor leak | logan | 2014-06-29 | 1 | -1/+2 |
| | | | | | | (Thanks to Brent Cook) OK from jsing@ | ||||
* | Remove yet another unused file... a backup copy (minus copyright and | jsing | 2014-06-29 | 2 | -132/+0 |
| | | | | includes) follows this commit message: | ||||
* | KNF. | jsing | 2014-06-29 | 22 | -3212/+3126 |
| | | | | | | | | I just spent too long chasing a bug in here and really should have done this first. Gem of the day... is it an if test or a for loop? No, it is a super ifloop! if (!(flags & PKCS7_NOVERIFY)) for (k = 0; k < sk_X509_num(signers); k++) { | ||||
* | Remove another unused source file - I got suspicious when I found a | jsing | 2014-06-29 | 2 | -920/+0 |
| | | | | | | | | function that ended with: if (ret & 0x01) if (ret & V_ASN1_CONSTRUCTED) } | ||||
* | More KNF. | jsing | 2014-06-29 | 2 | -64/+98 |
| | |||||
* | correct issetugid sense as spotted by Stijn van Drongelen. | deraadt | 2014-06-29 | 2 | -6/+14 |
| | | | | Substantially expand the conditional to reduce potential for error. | ||||
* | Add a missing word. | jca | 2014-06-28 | 2 | -2/+2 |
| | |||||
* | Fix a memory leak and another one that occurs in the error paths. | logan | 2014-06-28 | 2 | -4/+12 |
| | | | | | | | (Thanks to Brent Cook) OK from tedu@ | ||||
* | Fix 9 memory leaks. | logan | 2014-06-28 | 2 | -2/+20 |
| | | | | | | | | (Thanks to Brent Cook) With help from tedu@ OK from tedu@ | ||||
* | Fix 2 memory leaks. | logan | 2014-06-28 | 2 | -2/+6 |
| | | | | | | (Thanks to Brent Cook) OK from tedu@ | ||||
* | Use strtonum() instead of atoi(), and then impose what are we think | deraadt | 2014-06-28 | 13 | -102/+211 |
| | | | | | | are the current range checks. Help from millert and lteo. Please test now that it is deployed and let us know if any numbers are off.. ok lteo | ||||
* | When building a BN on the stack in BN_div(), make sure to initialize all its | miod | 2014-06-27 | 2 | -2/+4 |
| | | | | | | fields (i.e. the flags field) before using it. This is currently harmless, but might not be if we end up invoking other BN functions checking for constant-time processing requirement in the future. | ||||
* | re-init and init code paths are now more shared, so the getpid()-based | deraadt | 2014-06-27 | 1 | -2/+3 |
| | | | | portable code path must handle that; with brent cook | ||||
* | extra evil spaces snuck in over the last while | deraadt | 2014-06-27 | 1 | -20/+20 |
| | |||||
* | Move to a smaller rbytes buffer and skip a random part. Not to | otto | 2014-06-27 | 1 | -3/+4 |
| | | | | | | improve the random stream itself (it doesn't), but to introduce noise in the arc4random calling pattern. Thanks to matthew@ who pointed out bias in a previous diff, ok deraadt@ matthew@ | ||||
* | save_errno botch; spotted by miod | deraadt | 2014-06-27 | 2 | -4/+4 |
| | |||||
* | hand-KNF macro the do { } while loops | deraadt | 2014-06-27 | 8 | -80/+98 |
| | |||||
* | hand-KNF the remaining bits | deraadt | 2014-06-27 | 2 | -196/+212 |
| | |||||
* | Remove M_ASN1_New* macros which are only used in X509_PKEY_new() are obfuscate | miod | 2014-06-27 | 4 | -44/+32 |
| | | | | | | it to hide memory leaks in the error paths, and fix aforementioned memory leaks. ok jsing@ logan@ deraadt@ | ||||
* | Add back an #ifndef MAP_INHERIT_ZERO chunk to support the old getpid() | deraadt | 2014-06-26 | 1 | -1/+13 |
| | | | | | mechanism, to aid in portability to other systems as requested. ok matthew | ||||
* | save errno in ERR_put_error(), so that SYSerr doesn't have any accidental | deraadt | 2014-06-26 | 2 | -2/+6 |
| | | | | | cases where errno can be trashed. ok jsing | ||||
* | fix HD() misuse; from brent cook | deraadt | 2014-06-26 | 2 | -4/+4 |
| | |||||
* | AT_BASE returns us the *address* of the start of ld.so, so | beck | 2014-06-25 | 2 | -4/+4 |
| | | | | | use the address, not what it points to (which is always the same) ok deraadt@ | ||||
* | get the page of data at AT_SYSINFO_EHDR | beck | 2014-06-25 | 2 | -4/+4 |
| | | | | ok deraadt@ | ||||
* | comment fixes from theo | beck | 2014-06-25 | 2 | -10/+12 |
| | |||||
* | Possibly obtain a little bit of entropy from addresses returned | beck | 2014-06-25 | 2 | -4/+46 |
| | | | | | by getauxval if we have it. ok deraadt@ |