openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Files	Lines
2014-04-20	KNF.	jsing	8	-528/+718

2014-04-20	More KNF.	jsing	26	-160/+176

2014-04-20	More KNF.	jsing	2	-100/+124

2014-04-20	gettimeofday() is portable enough and does not need a wrapper	deraadt	2	-18/+4

2014-04-20	calloc() rather than malloc+memset	deraadt	2	-4/+4

2014-04-20	Fix indentation, adding braces and combining a nested if to reduce depth	guenther	2	-24/+28

2014-04-20	KNF.	jsing	4	-362/+438

2014-04-20	KNF.	jsing	8	-796/+786

2014-04-20	Chop off more SSLv2 tentacles and start fixing and noting y2038 issues.	guenther	17	-118/+44
	APIs that pass times as longs will have to change at some point... Bump major on both libcrypto and libssl. ok tedu@
2014-04-20	return after error instead of plowing ahead. noticed by mancha1 at zoho	tedu	2	-0/+2

2014-04-20	Use calloc(a,b) instead of malloc(ab) + memset(ab). I don't know if	deraadt	2	-4/+2
	this instance is integer-overflowable, but we cannot keep hand-auditing every instance (or apathetically ignoring these issues) when the simple calloc idiom is better in the presence of a good calloc(). It is simply unfeasible to always enter correct range checks before the aggregate size calculation, just go find some 4000 lines of code, REPAIR THEM ALL, then come back and tell me I am wrong. This only works on systems where calloc() does the integer overflow check, but if your system doesn't do this, you need to ask your vendor WHY THEY ARE 10 YEARS BEHIND IN BEST PRACTICE? This is the kind of problem that needs to be solved at the right layer. malloc integer-overflow was implicated in the 2002 OpenSSH hole. OpenSSH and much other code is now written to use calloc(), for instance OpenSSH has 103 calls to it. We feel safer with our use of calloc(). It is a natural approach for us to use calloc(). How safe do you feel on systems which lack that range check in their calloc()? Good writeup from 2006: http://undeadly.org/cgi?action=article&sid=20060330071917
2014-04-20	Undo a calloc() replacement. It lacks the integer overflow check that	deraadt	1	-14/+1
	the system one has.
2014-04-20	KNF.	jsing	24	-2308/+2268

2014-04-20	reset imprint to NULL to avoid double free. from mancha1 at zoho	tedu	2	-0/+2

2014-04-19	release buffers fix was lost in merge. put it back.	tedu	2	-2/+4

2014-04-19	change some rsh references to ssh. poke by jmc	tedu	2	-9/+9

2014-04-19	More KNF.	jsing	4	-74/+84

2014-04-19	More KNF.	jsing	6	-90/+122

2014-04-19	another attempt at fixing stale x509 data. since we don't know where the	tedu	2	-20/+16
	initial storage came from, we can't free it. just memset in the sequence case. probably ok beck
2014-04-19	More KNF.	jsing	14	-157/+163

2014-04-19	More KNF.	jsing	2	-40/+40

2014-04-19	tweak previous;	jmc	1	-3/+2

2014-04-19	zap trailing whitespace;	jmc	1	-2/+2

2014-04-19	remove the openssl_fdset wrapper, and a variety of VMS'ism's like	deraadt	6	-48/+19
	crazy (void *) casts all over the place ok beck jsing
2014-04-19	KNF.	jsing	12	-1626/+1628

2014-04-19	Remove a gethostbyname() cache layer. The internet works better these	deraadt	1	-50/+1
	days. Initially fixed this, but Ted asked for it to die.
2014-04-19	ReadFile() and GetStdHandle() are not very POSIX.	deraadt	4	-45/+6
	ok beck jsing
2014-04-19	truncation check some snprintf calls (over-cautiously in case)	deraadt	4	-19/+78
	ok jsing beck
2014-04-19	can't actually do this. cause unknown.	tedu	2	-2/+2

2014-04-19	Fix some serious pointer-arithmatic-magic-number-unchecked-return eyebleed	beck	1	-53/+44
	that I stumbled into here and got stuck with. If modern society can get past selling daughters for cows, surely we can decide to write modern C code in an "application" that is probably 3 lines of shell/python/cgi away from talking to the internet in a lot of places.. (This file still needs a lot more love though) "oh god yuck" deraadt@ ok tedu@
2014-04-19	KNF.	jsing	12	-1128/+1060

2014-04-19	Repair some indent to be more KNF, and break instead of fallthrough to	deraadt	1	-12/+14
	default which does break
2014-04-19	one small tweak to avoid ever going off the end of a string.	tedu	1	-4/+6

2014-04-19	improved checking for invalid hashes. from solar designer	tedu	1	-6/+10

2014-04-19	More KNF.	jsing	6	-66/+68

2014-04-19	kill a stray \	deraadt	1	-2/+2

2014-04-19	Lacking a proof that--for this implementation--exposure of Montgomery	guenther	4	-14/+14
	multiplication or RSA blinding parameters doesn't permit retroactive timing analysis of the secrets, we'll do the stupidly cheap thing and cleanse them before freeing them. ok deraadt@
2014-04-19	More KNF.	jsing	10	-476/+592

2014-04-19	Remove hacky workaround for Cray T3E.	deraadt	1	-11/+0
	ok guenther
2014-04-19	More KNF.	jsing	8	-522/+758

2014-04-19	oops, typo got into change	deraadt	1	-1/+1

2014-04-19	More KNF.	jsing	6	-20/+28

2014-04-19	malloc + strlcpy -> strdup	deraadt	1	-3/+2

2014-04-19	unifdef ENOTDIR, everyone has it	deraadt	1	-15/+3

2014-04-19	We'll interpret a (void) cast on snprintf() to mean it's been verified that	guenther	55	-147/+147
	truncation is either desirable, not an issue, or is detected and handled later ok deraadt@
2014-04-19	Use somewhat harsher language and better examples; demonstrate that	deraadt	4	-109/+88
	non-dangerous use functions is difficult. ok guenther
2014-04-19	Split inet(3) into three pages by decade: 1980s -> inet_lnaof(3),	guenther	4	-183/+320
	1990s -> inet_addr(3), 2000s and beyond -> inet_ntop(3). ok tedu@ (who also noted the timeline) deraadt@ jmc@
2014-04-19	egd is gone	deraadt	4	-38/+3

2014-04-19	The internal ssl2_* functions and variables are gone	guenther	2	-60/+0

2014-04-19	More KNF.	jsing	8	-1370/+1522