Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Bring back ASN1_seq_pack(), ASN1_seq_unpack(), ASN1_pack_string() and | miod | 2014-05-12 | 6 | -0/+430 |
| | | | | | | | | ASN1_unpack_string() from the NO_ASN1_OLD purge; turns out that some Ruby extensions still use them, unfortunately, so we need to give them some more time to catch up on ``recent'' interfaces. Riding on the libcrypto major bump. | ||||
* | Move the `pqueue' part of libcrypto, which is a glorified sorted linked list | miod | 2014-05-12 | 12 | -62/+40 |
| | | | | | | | | | | | | | of 64-bit data, and only used by DTLS, to libssl where it belongs. Remove pqueue_print() which is a debugging interface and serves no useful purpose, except for the regress test, which grows its own pqueue_print() routine. Bump libcrypto major and libssl minor. WARNING: do not update your tree right now, more changes are coming, which will ride the libcrypto major bump. | ||||
* | remove md5crypt. | tedu | 2014-05-12 | 5 | -195/+65 |
| | | | | | | while changing things, add a crypt_checkpass wrapper that handles most of the edge cases. (not quite ready for production, though.) ok deraadt | ||||
* | change to having four freelists per size, to reduce another source of | tedu | 2014-05-12 | 1 | -16/+20 |
| | | | | | deterministic behavior. four selected because it's more than three, less than five. i.e., no particular reason. | ||||
* | More KNF. | jsing | 2014-05-11 | 10 | -32/+54 |
| | |||||
* | KNF. | jsing | 2014-05-11 | 4 | -644/+574 |
| | |||||
* | fix MALLOC_STATS code that was broken in rev 1.159, not compiled in by default | otto | 2014-05-10 | 1 | -2/+2 |
| | |||||
* | __bounded => __attribute__((__bounded__ | djm | 2014-05-10 | 2 | -10/+10 |
| | |||||
* | Typo in C99 field initializer introduced in r1.3; | miod | 2014-05-09 | 2 | -2/+2 |
| | | | | reported by Steven Chamberlain | ||||
* | Replace Apache v2 license with ISC license. | matthew | 2014-05-09 | 8 | -100/+100 |
| | | | | | Thanks to Google for agreeing to offer the code under more agreeable licensing terms! | ||||
* | Add a bit more detail about dot notation from the old inet(3) manpage. | guenther | 2014-05-09 | 1 | -3/+11 |
| | | | | ok jmc@ | ||||
* | move reallocarray() to a seperate file so that -portable applications | deraadt | 2014-05-08 | 3 | -18/+46 |
| | | | | | can avoid reinventing the wheel ok guenther schwarze | ||||
* | Replace hand-crafted STRICT_ALIGNMENT with system provided __STRICT_ALIGNMENT. | miod | 2014-05-08 | 2 | -34/+14 |
| | | | | Forgotten during yesterday's STRICT_ALIGNMENT cleanup commit. | ||||
* | More KNF. | jsing | 2014-05-08 | 22 | -90/+188 |
| | |||||
* | KNF. | jsing | 2014-05-08 | 24 | -616/+766 |
| | |||||
* | Remove KSSL debug code. | jsing | 2014-05-08 | 2 | -42/+0 |
| | | | | "fire bomb" tedu@ | ||||
* | KNF. | jsing | 2014-05-08 | 14 | -1824/+1834 |
| | |||||
* | Nuke OPENSSL_FIPS - having #ifdefs inside a #ifndef for the same thing | jsing | 2014-05-08 | 4 | -36/+0 |
| | | | | | | is amusing. ok deraadt@ | ||||
* | KNF. | jsing | 2014-05-08 | 32 | -2998/+3088 |
| | |||||
* | knfectomie. | jsing | 2014-05-08 | 2 | -1306/+1636 |
| | |||||
* | Emergency knfectomie requested by tedu@. | jsing | 2014-05-08 | 60 | -12266/+13236 |
| | |||||
* | kill some more VMS ifdefs | giovanni | 2014-05-08 | 8 | -32/+0 |
| | | | | ok miod@ | ||||
* | Get __STRICT_ALIGNMENT from <machine/endian.h> and decide upon it, rather | miod | 2014-05-07 | 18 | -70/+52 |
| | | | | | | | | | | | | | | than defining it for not (i386 and amd64 (and sometimes s390)) only. Compile-time tests remain compile-time tests, and runtime-test remain runtime-test instead of being converted to compile-time tests, per matthew@'s explicit demand (rationale: this makes sure the compiler checks your code even if you won't run it). No functional change except on s390 (which we don't run on) and vax (which we run on, but noone cares about) ok matthew@ | ||||
* | less than jpake | tedu | 2014-05-07 | 4 | -317/+4 |
| | |||||
* | don't free memory unless we allocated it. | tedu | 2014-05-07 | 2 | -4/+8 |
| | | | | | reported to openssl by David Ramos (rt 3338) stealing commit from logan, who's run away. ok miod. | ||||
* | with the first bug it uncovered fixed, clear all bignums again. | tedu | 2014-05-07 | 2 | -34/+18 |
| | | | | i've never worked on codebase so resistant to efforts to improve it. | ||||
* | in BN_clear_free, don't cleanse the data if the static data flag is set. | tedu | 2014-05-07 | 2 | -6/+4 |
| | | | | | | | | much debugging work done by otto. ok miod otto. side note: BN_FLG_STATIC_DATA doesn't actually mean the data is static. it's also used to indicate the data may be secretly shared behind your back as a sort of poor man's refcounting, but without the refcounting. | ||||
* | comment style fix | halex | 2014-05-07 | 1 | -2/+3 |
| | | | | ok crickets@ | ||||
* | KNF. | jsing | 2014-05-07 | 28 | -1888/+1968 |
| | |||||
* | revert, thanks sthen | tedu | 2014-05-07 | 2 | -18/+34 |
| | |||||
* | add additional includes from eng_cryptodev.c | jsg | 2014-05-07 | 2 | -0/+10 |
| | | | | | makes this compile with OPENSSL_NO_DEPRECATED defined. ok deraadt@ | ||||
* | miod forgot about fcrypt_b.c being needed, before he went off to get his | deraadt | 2014-05-07 | 2 | -2/+4 |
| | | | | | beauty sleep. He's probably having a nightmare about this right now.... ok tedu | ||||
* | small fix from mancha1. currently unused file, but no harm fixing it. | tedu | 2014-05-06 | 1 | -1/+2 |
| | |||||
* | Make sure the stdout output is check, to confirm proper sorting. | miod | 2014-05-06 | 3 | -1/+10 |
| | |||||
* | Assorted cleanups: | miod | 2014-05-06 | 2 | -28/+8 |
| | | | | | | | | | | | - replace hardcoded sizes with sizeof() - pqueue_find() apparently used to need to keep track of the previous node when iterating, which causes its logic to be complicated. However, nowadays it only needs to iterate, so replace with a straightforward, much readable logic. - remove #if 0'ed code From ``sin'' from 2f30 dot org on tech@, thanks! | ||||
* | Add a fixed (read: non-SIGSEGV'ing) pq_test. | miod | 2014-05-06 | 3 | -1/+111 |
| | |||||
* | Remove broken-by-design test | miod | 2014-05-06 | 2 | -190/+0 |
| | |||||
* | Make sure PKCS7_get_octet_string() return values are checked for NULL. | miod | 2014-05-06 | 2 | -4/+20 |
| | | | | | | Reported by David Ramos (and simultaneously to OpenSSL as PR#3339). ok beck@ logan@ | ||||
* | Sort CFLAGS, SRC and SSLASM stanzas by the directories they apply to, to make | miod | 2014-05-06 | 4 | -136/+166 |
| | | | | | these files similar in layout to the other md Makefile.inc; no functional change. | ||||
* | missing NULL checks to see if init is needed. found hard way by deraadt. | tedu | 2014-05-06 | 1 | -3/+3 |
| | |||||
* | fix stupid commit | tedu | 2014-05-06 | 1 | -5/+5 |
| | |||||
* | use explicit_bzero | tedu | 2014-05-06 | 1 | -5/+5 |
| | |||||
* | clear a stack buffer with explicit_bzero | tedu | 2014-05-06 | 1 | -2/+2 |
| | |||||
* | knf approximation | tedu | 2014-05-06 | 48 | -17238/+18272 |
| | |||||
* | move chacha context and buffer out of bss and allow mmap to place them | tedu | 2014-05-06 | 1 | -6/+16 |
| | | | | wherever it decides it would like them. first step. ok deraadt dlg djm | ||||
* | "stay backwards-compatible with 0.9.5; this should go away soon" | tedu | 2014-05-06 | 1 | -8/+0 |
| | | | | it's your lucky day! | ||||
* | remove Kerberos | tedu | 2014-05-06 | 2 | -41/+0 |
| | |||||
* | move a comment to make unifdef happier | tedu | 2014-05-06 | 1 | -2/+3 |
| | |||||
* | bye bye SRP | tedu | 2014-05-06 | 4 | -975/+0 |
| | |||||
* | inspired by a cloudflare diff, cleanse old memory when expanding a bignum. | tedu | 2014-05-05 | 2 | -34/+18 |
| | | | | | | however, instead of trying to audit all the places where a secret bignum is used, apply the big hammer and clear all bignums when freed. ok deraadt miod |