summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/malloc.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2016-09-03add constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF.bcook1-16/+55
Patch based on OpenSSL commit d7a854c055ff22fb7da80c3b0e7cb08d248591d0 "Performance penalty varies from platform to platform, and even key length. For rsa2048 sign it was observed to reach almost 10%." CVE-2016-0702 ok beck@
2016-09-03BN_mod_exp_mont_consttime: check for zero modulus.bcook1-9/+33
Don't dereference d when top is zero. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03 ok jsing@
2016-09-03remove unneeded reach-around includebcook1-2/+2
2016-09-03add iOS support for getentropybcook1-1/+12
from Jacob Berkman, ok beck@
2016-09-03deprecate EVP_EncryptFinal(), EVP_DecryptFinal() and EVP_CipherFinal()bcook2-7/+23
This switches EVP_CipherFinal() to work as EVP_EncryptFinal() and EVP_DecryptFinal() do, always clearing the cipher context on completion. Indicate that, since it is not possible to tell whether this function will clear the context (the API has changed over time in OpenSSL), it is better to use the _ex() variants and explicitly clear instead. ok beck@
2016-09-03BN_mod_exp_mont_consttime: check for zero modulus.bcook1-4/+5
Don't dereference |d| when |top| is zero. Also test that various BIGNUM methods behave correctly on zero/even inputs. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03
2016-09-03Avoid undefined-behavior right-shifting by a word-size # of bits.bcook1-3/+2
Found with STACK, originally from OpenSSL, ok @beck
2016-09-03shorten s_time; help/ok bcookjmc1-91/+22
2016-09-03Make tree build againbeck6-12/+482
2016-09-03remove unused variablebeck1-2/+1
2016-09-03Fix some very unnecessary convoultion.beck1-16/+6
ok krw@
2016-09-03crank minor for API addiiton of x509_email, etc. functionsbeck2-2/+2
2016-09-03Bring in functions used by stunnel and exim from BoringSSL - this bringsbeck2-2/+452
in X509_check_host, X509_check_email, X509_check_ip, and X509_check_ip_asc, with some cleanup on the way in by myself and jsing@ ok bcook@
2016-09-03Remove the libcrypto/crypto directorybeck41-6330/+0
2016-09-03Remove the libssl/ssl directorybeck2-54/+0
2016-09-03Remove the libssl/src directorybeck1190-386114/+0
2016-09-02Print SKIPPED if a regress test cannot be executed for some reason.bluhm1-2/+3
This allows to identify such tests by looking at their output.
2016-09-02shorten s_server;jmc1-134/+72
2016-09-02Fix build of regress after source movesbeck1-2/+2
2016-09-02Make this regress build againbeck2-4/+4
2016-09-01Less lock contention by using more pools for mult-threaded programs.otto2-94/+190
tested by many (thanks!) ok tedu, guenther@
2016-09-01black magic for sparc page size can gotedu1-4/+2
2016-09-01shorten s_client;jmc1-142/+50
2016-08-31Crank minor due to API additionbeck1-1/+1
2016-08-31We don't need any VMS access tricks.deraadt1-27/+4
ok beck tedu
2016-08-30Add OPTION_ARG_TIME for parsing a (64 bit if needed) time_tderaadt3-4/+15
prodding & ok jsing
2016-08-30buf[][] with strange use all over the place is ridiculous, especiallyderaadt1-15/+14
if buf[1] is never used. ok guenther beck
2016-08-30Fix 32-bit time handling, using time_t and make it work on systemsderaadt2-24/+25
where that is long long. ok beck guenther
2016-08-30shorten rsautl;jmc1-152/+13
2016-08-28shorten the rsa text; of note, i've also reduced the descriptionjmc1-278/+44
for -inform/-outform/-text and removed the oft-repeated header/footer blurb;
2016-08-28Don't call lstat() before readlink() just to see if it's a symlink,guenther1-14/+17
as readlink() will tell you that more cheaply. ok millert@
2016-08-27shorten the req text;jmc1-452/+189
2016-08-27Enable ALPN regress now that it passes.jsing1-4/+2
2016-08-27Be more strict when parsing TLS extensions.jsing2-34/+74
Based on a diff from Kinichiro Inoguchi. ok beck@
2016-08-27Pull in <stdio.h> for NULLguenther1-1/+2
ok deraadt@
2016-08-26Repeated occurances of the idiom buf[5][BUFSIZ] -- ridiculous. Give eachderaadt1-86/+87
buf a special name, recognize that most are PATH_MAX, and remove a few that are not needed at all. ok jsing beck
2016-08-26Pull in <time.h> for clock_gettime()guenther1-1/+2
ok deraadt@
2016-08-25shorten the pkeyutl text;jmc1-83/+40
help/ok guenther
2016-08-24shorten the pkeyparam text;jmc1-23/+8
2016-08-24shorten the pkey text;jmc1-73/+25
2016-08-23shorten pkcs12;jmc1-187/+42
2016-08-22Various clean up and reorganisation of the connection info handling code.jsing3-69/+97
In particular, rename tls_free_conninfo() to tls_conninfo_free() and make it a real free function. Rename tls_get_conninfo() to tls_conninfo_populate() and have it allocate the struct tls_conninfo (after freeing any existing one). ok beck@
2016-08-22Stick with the usual 'if NULL return NULL' idiom.jsing1-10/+10
ok beck@
2016-08-22Bump TLS_API due to the addition of server side SNI functions.jsing1-2/+2
2016-08-22Bump libtls minor due to the addition of symbols.jsing1-1/+1
2016-08-22Provide an API that enables server side SNI support - add the ability tojsing5-6/+107
provide additional keypairs (via tls_config_add_keypair_{file,mem}()) and allow the server to determine what servername the client requested (via tls_conn_servername()). ok beck@
2016-08-22Create contexts for server side SNI - these include the additional SSL_CTXjsing3-3/+174
that is required for certificate switching with libssl and the certificate itself so that we can match against the subject and SANs. Hook up the servername callback and switch to the appropriate SSL_CTX if we find a matching certificate. ok beck@
2016-08-22shorten the pkcs8 text;jmc1-179/+63
2016-08-22Sorry Andrew and Luke, I'm pretty sure we deleted your IRIX and VMS code.deraadt1-4/+1
2016-08-20shorten pkcs7 text;jmc1-58/+37
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-05-05 14:07:06 +0000