summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/reallocarray.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-09-27There is not much point checking ecdhp is not NULL... twice.jsing4-28/+10
ok miod@
2014-09-27Check that the specified curve is one of the client preferences.jsing10-16/+140
Based on OpenSSL. ok miod@
2014-09-27Fix mmap() calls that check for a result other than MAP_FAILED.doug1-1/+1
ok tedu@
2014-09-26X509_STORE_new(): do not leak memory upon error.miod2-28/+34
X509_STORE_get1_certs(), X509_STORE_get1_crls(): check the result of allocations. ok tedu@
2014-09-26X509_issuer_and_serial_hash(): do not leak memory if an error occurs duringmiod2-2/+6
the first EVP block. ok tedu@
2014-09-26X509at_add1_attr(): do not free stuff we did not allocate in the error path.miod2-6/+6
ok tedu@
2014-09-26Now that we have a static version of the default EC formats, also use itjsing2-94/+88
for the server hello. From OpenSSL. ok miod@
2014-09-23Fix regression introduced in revision 1.15 by using strndup() instead ofmiod2-12/+12
strdup() to allocated directory list components. ok jsing@
2014-09-22Refactor and simplify the ECC extension handling. The existing codejsing4-244/+196
effectively built two "static" data structures - instead of doing this, just use static data structures to start with. From OpenSSL (part of a larger commit). ok miod@
2014-09-22Also check the result from final_finish_mac() against finish_mac_length injsing2-38/+34
ssl3_send_finished(). While this previously checked against a zero return value (which could occur on failure), we may as well test against the expected length, since we already know what that is.
2014-09-22It is possible (although unlikely in practice) for peer_finish_md_len tojsing2-26/+22
end up with a value of zero, primarily since ssl3_take_mac() fails to check the return value from the final_finish_mac() call. This would then mean that an SSL finished message with a zero-byte payload would successfully match against the calculated finish MAC. Avoid this by checking the length of peer_finish_md_len and the SSL finished message payload, against the known length already stored in the SSL3_ENC_METHOD finish_mac_length field (making use of a previously unused field). ok miod@ (a little while back)
2014-09-21Document SSL_OP_TLSEXT_PADDING.jsing1-0/+6
From OpenSSL.
2014-09-21Move the TLS padding extension under an SSL_OP_TLSEXT_PADDING option, whichjsing4-20/+36
is off by default (instead of being enabled unconditionally). The TLS padding extension was added as a workaround for a bug in F5 SSL terminators, however appears to trigger bugs in IronPort SMTP appliances. Now the SSL client gets to choose which of these devices it wants to trigger bugs in... Ported from OpenSSL. Discussed with many. ok miod@
2014-09-21a_enum.c used to be a copy of a_int.c with s/INTEGER/ENUMERATED/g , butmiod2-8/+18
some changes an a_int.c did not get applied to a_enum.c; despite style changes, make sure BN_to_ASN1_ENUMERATED() correctly handles a zero value the same way BN_to_ASN1_INTEGER() does. ok bcook@ beck@ jsing@
2014-09-21Fix a memory leak in the error path in ASN1_mbstring_ncopy().miod2-38/+58
Replace an if() posse with a switch() statement in traverse_string(). Remove unnecessary casts in cpy_*(), with tweaks from guenther@; ok bcook@ jsing@ guenther@
2014-09-21Add support for word anchors \< and \> to regex regression tests.doug1-1/+13
These are copied from the existing [[:<:]] and [[:>:]] tests.
2014-09-19Add CHACHA20 as a cipher symmetric encryption alias.jsing2-2/+10
From Ming <gzchenym at 126.com>
2014-09-19remove obfuscating parens. man operator is your friend.tedu4-30/+30
2014-09-19Fix on 32bit platforms where 0xdeadbeef > LONG_MAX.schwarze1-4/+6
To avoid making tests machine dependent, only test values inside 32bit LONG_{MIN,MAX} and outside 64bit LONG_{MIN,MAX}, but none in between. While here, cover 32bit edge cases, negative values, and overflows. ok jsing@
2014-09-17Remove unused #define.lteo1-3/+1
ok jsing@
2014-09-16A few more MLINKs.miod1-1/+7
2014-09-16a little less sendmail specific;jmc1-4/+3
2014-09-15When fopen()ing internal to libc (the API doesn't support the useguenther5-14/+14
of the resulting FILE *), then pass fopen() the 'e' mode letter to mark it close-on-exec. ok miod@
2014-09-14Do not claim that empty numbers set EINVAL, our implementation doesn't.schwarze2-37/+61
Mention that invalid bases do set EINVAL (as required by POSIX); this part of the change uses part of an earlier patch by millert@. Minor mdoc(7) cleanup and sync between the two pages while here. Feedback and ok jmc@ and millert@.
2014-09-13Make sure that the following functions return 0 and EINVAL asschwarze6-20/+60
required by the C standard when called with an invalid base: strtoll(), strtoimax(), strtoul(), strtoull(), and strtoumax(). Same behaviour for strtoq() and strtouq() even though not standardized. No functional change in strtol(), it was the only one already correct. While here, simplify the conditional expression for checking the base and sync whitespace and comments among the six files. ok millert@
2014-09-10Disable -Wshadow again, since it breaks builds on vax with gcc3.jsing1-2/+2
2014-09-08obvious cases of missing .An;schwarze1-3/+3
found with the new mandoc(1) MANDOCERR_AN_MISSING warning; no text changes
2014-09-07Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,jsing16-182/+54
nor do we plan on supporting them. ok guenther@
2014-09-04POSIX specifies arpa/inet.h as the include file for these.millert1-3/+3
OK aja@ mikeb@
2014-09-01Enable -Wshadow in openssl(1) and fix a few shadow warnings.doug5-25/+21
ok jsing@
2014-09-01Convert ecparam to new option/usage handling.jsing1-197/+215
2014-09-01Improve option usage output.jsing1-7/+20
If the option/argument string exceeds the given width, add a hanging indent prior to displaying the description. Also, if the description includes newlines, wrap and indent for each newline so that the indentation is correctly maintained.
2014-08-31Make the in6addr constant declarations and definitions consistentbluhm1-3/+3
in kernel and user land. OK florian@ mpi@
2014-08-31Add sockatmark()guenther3-5/+170
ok millert@ manpage feedback jmc@
2014-08-30Convert openssl(1) version to new option/usage handling.jsing1-34/+90
2014-08-30Move the callback function pointer outside the opt union so that the optionjsing2-4/+10
values are useable by the function. Also provide an option type that calls a function without consuming/passing an argument.
2014-08-28OpenSSL_add_all_algorithms() is called from openssl_startup() - it does notjsing6-13/+6
need to also be called from some of the applications.
2014-08-28openssl_setup() calls SSL_load_error_strings(), which happens to calljsing27-60/+30
ERR_load_crypto_strings() - as such, we do not need to call the same function from most of the applications.
2014-08-28Add option handling with a callback function for argument processing.jsing2-2/+10
2014-08-28Convert openssl(1) crl to new option/usage handling.jsing1-186/+246
2014-08-28Given the usage option name/argument name width a few more characters.jsing1-2/+2
2014-08-28Ensure that a format option argument is a known specifier.jsing1-2/+10
2014-08-28Add option handling for ordered flags.jsing2-2/+8
2014-08-28Add option handling for input/output formats.jsing2-2/+8
2014-08-28preserve errno value on success.bcook2-8/+12
If getrandom returns a temporary failure, make sure errno is not polluted when it succeeds. Thanks to deraadt@ for pointing it out.
2014-08-27Convert openssl(1) prime to the new options/usage handling.jsing1-60/+81
2014-08-27Reset the config struct before calling options_parse(), otherwise configjsing1-1/+3
options from the previous run stick in interactive mode.
2014-08-27Add an option type that handles argument to integer conversion.jsing2-4/+22
2014-08-27Implement table-driven option parsing that allows an application tojsing3-76/+192
specify what its valid options are and where it wants them to be stored. This also allows for usage to be generated, almost for free, ensuring that the options and usage are automatically kept in sync. This will allow for a single option parsing implementation, rather than the current one-hand-rolled-option-parsing-and-random-usage-implementation per application. As a starting point, port the openssl(1) rand application to the new option parsing and usage (along with associated code clean up). With input from doug@. ok bcook@ doug@
2014-08-27Add the API function ressl_config_set_ecdhcurve(config, name) to set areyk4-9/+29
non-standard ECDH curve by name or to disable it by passing NULL. OK jsing@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-05-10 08:56:51 +0000