openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Files	Lines
2014-04-22	So it turns out that libcrypto on i386 platforms, unconditionaly compiles this	miod	2	-78/+0
	little gem called OPENSSL_indirect_call(), supposedly to be ``handy under Win32''. In my view, this is a free-win ROP entry point. Why try and return to libc when you can return to libcrypto with an easy to use interface? Better not give that much attack surface, and remove this undocumented entry point. ok beck@ tedu@
2014-04-22	When compiling with AES_WRAP_TEST, make main() return a meaningful value	miod	4	-3/+44
	instead of garbage, and add this to the libcrypto regress. Note these tests are incomplete, as they always use the default IV.
2014-04-22	Remove the certs directory that contains ancient files not used	lteo	6	-171/+0
	by anything. "yes, blow it away" beck@
2014-04-22	null a pointer to prevent double free. from Dirk Engling	tedu	2	-0/+2

2014-04-22	Remove files which look like actual code compiled in libcrypto, but isn't.	miod	4	-340/+0
	One even says (in comments): HAS BUGS! DON'T USE
2014-04-22	fix memory leaks. from Dirk Engling	tedu	6	-42/+24

2014-04-22	Remove meat which either duplicates code found in apps/, or is only of value	miod	40	-8459/+0
	for 20th century historians, and can be put in the Attic.
2014-04-22	- one more mallocarray -> reallocarray	jmc	1	-3/+3
	- use <>
2014-04-22	Nuke the last of the windows related defines from the openssl apps.	jsing	9	-66/+0
	ok deraadt@
2014-04-22	switch to reallocarray	tedu	2	-4/+4

2014-04-22	change mallocarray to reallocarray. useful in a few more situations.	tedu	3	-17/+14
	malloc can, as always, be emulated via realloc(NULL). ok deraadt
2014-04-22	KNF.	jsing	5	-803/+815

2014-04-22	More KNF.	jsing	4	-95/+92

2014-04-22	More KNF.	jsing	1	-31/+37

2014-04-22	More KNF.	jsing	6	-56/+74

2014-04-22	More KNF.	jsing	1	-150/+225

2014-04-22	More KNF.	jsing	2	-79/+127

2014-04-22	gets() is gone	lteo	1	-2/+1

2014-04-21	you must have S_ISDIR to play	deraadt	1	-16/+4

2014-04-21	KNF.	jsing	4	-478/+498

2014-04-21	KNF.	jsing	14	-686/+818

2014-04-21	KNF.	jsing	8	-204/+238

2014-04-21	use mallocarray(a,b) instead of malloc(a*b)	deraadt	2	-4/+4

2014-04-21	more malloc/realloc/calloc cleanups; ok beck kettenis	deraadt	27	-96/+66

2014-04-21	KNF.	jsing	24	-2934/+3236

2014-04-21	no need for malloc casts	deraadt	4	-4/+4

2014-04-21	KNF.	jsing	6	-166/+154

2014-04-21	More KNF.	jsing	8	-16/+16

2014-04-21	KNF.	jsing	28	-3140/+3224

2014-04-21	KNF.	jsing	8	-1116/+1182

2014-04-21	KNF.	jsing	10	-1318/+1444

2014-04-21	correct man page section	deraadt	1	-2/+2

2014-04-21	Introducing: void *mallocarray(size_t nmemb, size_t size);	deraadt	3	-10/+36
	Like calloc(), except without the cleared-memory gaurantee ok beck guenther, discussed for more than a year...
2014-04-21	wrong calloc, see people do care	deraadt	2	-2/+4

2014-04-21	KNF.	jsing	10	-3942/+4184

2014-04-21	improve realloc/calloc/malloc patterns; ok guenther	deraadt	32	-96/+46

2014-04-21	Delete #if 0'd time related functions which are totally expired.	deraadt	4	-148/+0
	No point even seeing these when we do the 2038 audit later on...
2014-04-21	modernize malloc call	deraadt	2	-2/+2

2014-04-21	Replace entire printf-like guts with calls to libc snprintf.	deraadt	2	-1538/+92
	funopen(3) is used to interface to BIO descriptors. ok guenther
2014-04-21	Bring malloc/calloc/realloc sequences to modern standard	deraadt	16	-54/+38
	ok guenther
2014-04-21	remove macros wrapping malloc/calloc/free/realloc	deraadt	1	-26/+16

2014-04-21	Correctly document the return value of getenv(3)	guenther	1	-6/+8
	From Ben Cornett (ben (at) lantern.is)
2014-04-21	KNF.	jsing	16	-1096/+912

2014-04-21	clean up files we don't need	tedu	38	-2704/+0

2014-04-21	fix accidentally deleted deref.	beck	2	-2/+2

2014-04-20	ASN1_STRING cleanup - realloc has handled NULL since I had a mullet	beck	2	-34/+20
	and parachute pants - and since it's obvious there is no guarantee the caller doesn't pass in the data area in the argument, use memmove instead of memcpy so overlapping areas are handled correctly. Also, pointers can be usefully printed in hex with %p, in error messaeges rather than the bizzaro stuff that was there using mystical buffer lengths and abuse of strlcpy-converted-blindly-from-strcpy
2014-04-20	replace a bunch of pointer-arithmatic-strcpy-converted-blindly-to-strlcpy	beck	2	-14/+14
	cruft with an snprintf. "better than what was there" ok guenther@
2014-04-20	Eliminate duplicated logic by switching from malloc+snprintf to asprintf	guenther	2	-40/+28
	ok beck@
2014-04-20	Chop off more SSLv2 tentacles and start fixing and noting y2038 issues.	guenther	2	-22/+36
	APIs that pass times as longs will have to change at some point... Bump major on both libcrypto and libssl. ok tedu@
2014-04-20	Restore beck's (void)snprintf(): they were reviewed.	guenther	6	-10/+10