summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/malloc.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-08-07Correct test reversed during merge of fix for CVE-2014-3509guenther2-4/+4
pointed out by Watson Ladd (watson (at) matasano.com) ok deraadt@
2014-08-07Fix CVE-2014-3506, DTLS handshake message size checks. Fromguenther2-32/+44
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1250f12613b61758675848f6600ebd914ccd7636 with comment/whitespace style tweaks ok bcook@ miod@
2014-08-07Oops, revert changes commited by mistake. The previous commit was supposedmiod13-53/+59
to only apply to s23_srvr.c.
2014-08-07When you expect a function to return a particular value, don't put a commentmiod15-71/+59
saying that you expect it to return that value and compare it against zero because it is supposedly faster, for this leads to bugs (especially given the high rate of sloppy cut'n'paste within ssl3 and dtls1 routines in this library). Instead, compare for the exact value it ought to return upon success. ok deraadt@
2014-08-07Fix CVE-2014-3511; TLS downgrade, verbatim diffderaadt2-10/+54
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=280b1f1ad12131defcd986676a8fc9717aaa601b ok guenther miod
2014-08-07merge CVE-2014-3510; Fix DTLS anonymous EC(DH) denial of servicederaadt2-2/+18
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=17160033765480453be0a41335fa6b833691c049 ok bcook
2014-08-06merge fix for CVE-2014-3509 -- basically a missing s->hit check; ok guentherderaadt2-18/+26
2014-08-06Prevent a possible use after free by mimicing the s3_srvr.c fixes contributed bymiod2-8/+2
Adam Langley close to three years ago, which were commited in https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e7928282d0148af5f28fa3437a625a2006af0214 ok jsing@
2014-08-06Allow B64_EOF to follow a base64 padding character. This restores previousjsing2-4/+6
behaviour that allows a PEM block to be fed through the base64 decoder. Reported by Dmitry Eremin-Solenikov on tech@ ok deraadt@ tedu@
2014-08-06Correct error checks in EVP_read_pw_string_min(): UI_add_input_string()guenther2-6/+6
and UI_add_verify_string() return -1 (and maybe -2?) on failure and >=0 on success, instead of always zero on success problem reported by Mark Patruck (mark (at) wrapped.cx) ok miod@
2014-08-06Add support for loading the public/private key from memory, rather thanjsing4-13/+97
directly from file.
2014-08-05Add $OpenBSD$ tags.jsing8-0/+8
2014-08-04Implement ressl_accept_socket, which allocates a new server connectionjsing2-4/+45
context (if necessary) and handles the TLS/SSL handshake over the given socket.
2014-08-04Return -1 on error (not 1).jsing1-3/+3
2014-08-04A ressl server needs different configuration from a ressl client - providejsing3-0/+41
a specific server configuration function and call this from ressl_configure.
2014-08-04Provide a function that returns a server connection context.jsing2-0/+15
2014-08-04Provide a utility function for loading a private/public keypair.jsing2-0/+21
2014-08-04Improve ressl_{read,write} handling of non-blocking reads/writes.jsing2-16/+31
2014-08-04Free the SSL context first and let the reference counting do its thing.jsing1-5/+2
2014-08-04In chacha_init(), allow for a NULL iv. Reported by znz on github.miod2-4/+6
ok guenther@ jsing@
2014-08-03X509_NAME_get_text_by_NID() returns -1 on error so the typejsg1-1/+1
the return value is stored in must be signed. Fixes a test for error. ok jsing@ guenther@
2014-07-29Fix a usage string; the proper spelling of 'alot' is 'a lot'.blambert1-2/+2
ok bcook@
2014-07-28Remove SRP code. It contains a bug (this should not surprise anyone), buttedu12-3635/+2
the details are under embargo. The original plan was to wait for the embargo to lift, but we've been waiting for quite some time, and there's no indication of when or even if it will end. No sense in dragging this out any longer. The SRP code has never been enabled in OpenBSD, though I understand it is in use by some other people. However, in light of this and other issues, we're officially saying SRP is outside the scope of libressl. (For now.)
2014-07-28The RSA, DH, and ECDH temporary key callbacks expect the number of keybitsguenther6-18/+42
for the key (expressed in RSA key bits, which makes *no sense* for ECDH) as their second argument, not zero. (jsing@ notes that the RSA callback is only invoked for 'export' ciphers, which have been removed from LibreSSL, and for the SSL_OP_EPHEMERAL_RSA option, which is makes the application non-compliant. More fuel for the tedu fire...) jasper@ noted the breakage and bisected it down to the diff that broke this ok jsing@ miod@
2014-07-28remove non-portable __progname extern from arc4random unit test.bcook1-2/+1
ok @deraadt
2014-07-27Link dependencies on libssl and libcrypto were missing.guenther1-2/+3
OPENSSL_NO_RC5 is #defined in the #includes, so it's not needed here. ok deraadt@
2014-07-25Add missing year to copyright.jsing4-8/+8
2014-07-25BIO_free() returns immediately when the sole input is NULL.doug26-96/+61
Remove unnecessary NULL check. ok miod@
2014-07-23level_add_node(): if a memory allocation failure causes us to attempt to cleanmiod2-8/+14
up and return failure, be sure the cleanup work does NOT free objects which are still being referenced by other objects. ok guenther@
2014-07-23Make sure PEM_def_callback() correctly handles negative buffer sizes; all usesmiod2-20/+34
within libcrypto are safe, but until we can change this function prototype to use size_t instead of int, better be safe than sorry. tweaks and ok guenther@
2014-07-23Check the return value of the UI functions (including UI_new() which returnmiod2-12/+22
value is happily dereferenced without checking it for being non-NULL). ok beck@
2014-07-22Now that DES_random_key() can be trusted, use it to generate DES keys in themiod4-24/+20
EVP_CTRL_RAND_KEY method handlers, rather than generating a random odd key and not even checking it against the weak keys list. ok beck@
2014-07-22In DES_random_key(), force the generated key to the odd parity before checkingmiod2-16/+16
it is not one of the weak and semi-weak keys. Even though the probability of generating a weak key with incorrect parity is abysmally small, there is no reason to be correct (although, if you're in a need for fresh DES keys nowadays, you should seriously consider switching to a stronger symmetric cipher algorithm). ok beck@
2014-07-22Handle failure of NETSCAPE_SPKI_b64_encode() and don't leak memoryguenther1-6/+10
when BIO_new_{file,fp}() fails. inspired by a diff from logan@ ok miod@
2014-07-22Use Cm instead of Li for 'MASK:'guenther1-2/+2
(Overlooked among jmc@'s other suggestions)
2014-07-22Rewrite the description of the string_mask config file option to matchguenther1-34/+30
reality, and reformatting to be readable. formatting and wording suggestions miod@ jmc@
2014-07-22Kill a bunch more BUF_strdup's - these are converted to have a check forbeck12-30/+40
NULL before an intrinsic strdup. ok miod@
2014-07-22better match proposed syscall apibcook2-16/+4
2014-07-21protect sysctl path with SYS__sysctl instead; from enh@google, ok bcookderaadt2-12/+12
2014-07-21Use explicit_bzero() instead of memset() on buffers going out of scope.guenther6-12/+18
Also, zero the SHA256 context. suggested by "eric" in a comment on an opensslrampage.org post ok miod@ deraadt@
2014-07-21cast from void * before math; enh@googlederaadt2-4/+4
2014-07-21missing newlinederaadt1-1/+2
2014-07-21Switch from <sys/endian.h> or <machine/endian.h> to the new,guenther5-10/+10
being-standardized <endian.h> ok deraadt@ millert@ beck@
2014-07-20Move more OS-specific functionality to arc4random.h headers.bcook10-14/+88
Move <sys/mman.h> and raise(SIGKILL) calls to OS-specific headers. On OpenBSD, move thread_private.h as well to arc4random.h. On Windows, use TerminateProcess on getentropy failure. ok deraadt@
2014-07-20initial win32 ARC4_LOCK/UNLOCK implementation.bcook2-2/+42
It may make sense to later replace this with a Critical Section later. ok guenther@
2014-07-20From ISO/IEC 9899:1999 and 9899:201x,guenther2-5/+5
6.11.5 - Storage-class specifiers: The placement of a storage-class specifier other than at the beginning of the declaration specifiers in a declaration is an obsolescent feature. Diff from Jean-Philippe Ouellet (jean-philippe (at) ouellet.biz)
2014-07-20Demonstrate how new linux getrandom() will be called, at least untilderaadt2-2/+74
it shows up in libraries. Even the system call is probably not finalized. Bit dissapointed it has turned out to be a descriptor-less read() with EINVAL and EINTR error conditions, but we can work with it.
2014-07-20Mark the format string argument to BIO_*printf as not being allowed to be NULLguenther2-10/+14
ok bcook@
2014-07-20Fix ordering breakage, moving the fclose() test last again.guenther1-6/+22
Also correct some format strings. From Doug Hogan (doug (at) acyclic.org)
2014-07-20Make sure the correct errno is reported by warn* or err* and notguenther7-7/+14
the errno of an intervening cleanup operation like close/unlink/etc. Diff from Doug Hogan (doug (at) acyclic.org)
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-27 13:45:13 +0000