summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/reallocarray.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2015-10-25Hide __atexit and __atexit_register_cleanup()guenther3-4/+12
Wrap __cxa_{atexit,finalize}() so the call from exit() goes direct Switch regress/lib/libc/atexit/ to be built with -static so that it can still access __atexit* ok millert@ jca@
2015-10-25Sort the obsolete flags.doug2-12/+12
2015-10-25Mark SSL_OP_NO_{COMPRESSION,SSLv2,SSLv3} as obsolete.doug2-10/+8
For backward compatibility, the flags are redefined as 0. ok jsing@
2015-10-25Remove last vestige of SSL_OP_NO_SSLv3 support.doug2-8/+2
No part of LibreSSL checks for this flag any longer. ok jsing@
2015-10-25Simplify ssl23_get_client_hello error handling.doug2-52/+52
ssl23_get_client_hello sets type=1 on error and continues processing. It should return an error immediately to simplify things. This also allows us to start removing the last of SSL_OP_NO_SSL*. Added extra paranoia for s->version to make sure it is set properly. ok jsing@
2015-10-25Missing initializer; spotted by coverity.miod1-2/+2
2015-10-25The only thing that was translated into multiple languages in OpenBSDbluhm1-23/+1
are the errno messages and signal names. Everything else is in English. We are not planning to translate more text. Running a mixed system with less than 1% of the text in native language makes no sense. So remove the NLS support from libc messages. The catopen(3) functions stay as they are. OK stsp@ mpi@
2015-10-25Use sigaction() instead of signal() to avoid pulling in unnecessaryguenther1-3/+5
wrappers. To keep uses from crawling back in, mark signal() as deprecated inside libc. ok deraadt@
2015-10-25Use dprintf() instead of fprintf() in the signal handlerguenther1-3/+4
2015-10-23Cast ctype functions' arguments to unsigned char.mmcc1-5/+5
2015-10-23Switch if_nameindex(3) to use the new NET_RT_IFNAMES sysctl to get theclaudio3-88/+73
list of interface names. At the same time switch if_nametoindex(3) and if_indextoname(3) to use if_nameindex(3) instead of getifaddrs(3). if_nameindex(3) exposes much less then getifaddrs(3) and is allowed by pledge(2). With and OK deraadt@
2015-10-23Add ifnameindex to te libc regress testsclaudio1-3/+3
2015-10-23Initial pledge of netcat - unfortunately flawed because fiddling the rtableidbeck1-1/+27
in a socket option can be pretty scary and there is no better interface for this. so if the -V option is used you get no pledge at all.. Otherwise, do what works for the various options. Still needs refinement for tls to drop rpath, and a better solution for the routing table stuff
2015-10-23Use waitpid() instead of wait() to avoid returning early from another childguenther1-2/+3
exiting, and loop the waitpid() on EINTR ok deraadt@ millert@
2015-10-23Loop the waitpid() on EINTR, and save and restore the disposition ofguenther1-9/+12
SIGINT and SIGQUIT with sigaction() instead of signal() so that all bits are preserved. ok deraadt@ millert@
2015-10-23Merge the sigaction() and sigprocmask() overloads/wrappers from libpthreadguenther2-9/+9
into libc, and move pthread_sigmask() as well (just a trivial wrapper). This provides consistent handling of SIGTHR between single- and multi-threaded programs and is a step in the merge of all the libpthread overloads, providing some ASM and Makefile bits that the other wrappers will need. ok deraadt@ millert@
2015-10-22Cast ctype function arguments to unsigned char.mmcc1-2/+2
ok guenther@
2015-10-22Add a regress test for if_indextoname() and if_nametoindex()claudio2-0/+42
2015-10-22Another change that is needed to restore the previous behaviour ofjsing2-10/+6
ASN1_{GENERALIZED,UTC}TIME_set_string(), which allows it to be called with a NULL pointer. ok beck@
2015-10-22Restore previous behaviour and allowjsing2-4/+14
ASN1_{GENERALIZED,UTC,}TIME_set_string() to be called with a NULL pointer. Found the hard way by @kinichiro on github. ok beck@
2015-10-22Extend tests to call ASN1_{GENERALIZED,UTC,}TIME_set_string() with a NULLjsing1-1/+19
pointer - because, you know, you might want to set a string on a NULL object. The previous implementation apparently allowed this as a way of testing if the string was valid... probably because the *_check() functions are only useable after the string has already been set.
2015-10-22Fix case where we wanted to test ASN1_TIME_set_string() but were testingjsing2-6/+6
ASN1_UTCTIME_set_string() twice instead.
2015-10-22Add a regress for libc handling of SIGTHRguenther2-0/+71
2015-10-21Reject too small bits value in BN_generate_prime_ex(), so that it does not riskmiod6-8/+44
becoming negative in probable_prime_dh_safe(). Reported by Franck Denis who noticed `openssl gendh 0' would segfault. Fix adapted from OpenSSL RT#2701. ok beck@ jsing@
2015-10-21In the case where len is not a multiple of sizeof(RC4_CHUNK) the RC4 codejsing2-126/+2
will end up doing a read and write of up to 7 bytes beyond the specified length. This is effectively a non-issue since we read and write back the same data and due to alignment it is within a page boundary. Regardless, avoid this by removing the "special" handling for the remaining length and allow the standard (non-chunk) code to process the remaining bytes, which does not result in overrun. Reported by Pascal Cuoq <cuoq at trust-in-soft.com> - thanks! ok beck@ miod@
2015-10-20Lob a style(9) grenade in here.jsing6-344/+370
2015-10-19free rbio before wbiobeck2-14/+14
ok jsing@
2015-10-19Stop supporing "legcay" time formats that OpenSSL supports. Rewrite thebeck15-1220/+698
utctime and gentime wrappers accordingly. Along with some other cleanup. this also removes the need for timegm. ok bcook@ sthen@ jsing@
2015-10-19Change regress to not believe legacy times are validbeck1-65/+4
2015-10-18Need <string.h> for memset()guenther1-1/+2
2015-10-17Exit if a pledge call fails in non-interactive mode.doug45-89/+179
ok semarie@
2015-10-17add "tty" for several subcommands of opensslsemarie24-48/+48
it is needed in order to let libssl UI_* function plays with echo on/off when asking for password on terminal. passwd subcommand needs additionnal "wpath cpath" in order to let it calls fopen("/dev/tty", "w") (O_WRONLY with O_CREAT | O_TRUNC). problem reported by several with and ok doug@
2015-10-16Remove pointless externs - the structs are declared in the same files ajsing6-16/+6
few lines above.
2015-10-16Expand DECLARE_ASN1_ALLOC_FUNCTIONS and DECLARE_ASN1_FUNCTIONS_constjsing6-22/+68
macros. The only change in the generated assembly is due to line numbering.
2015-10-16Remove pointless uses of DECLARE_ASN1_ENCODE_FUNCTIONS_const.jsing6-16/+10
DECLARE_ASN1_FUNCTIONS_const already includes this macro so using both means we end up with duplicate function prototypes and externs.
2015-10-16Fix use of pointer value after BIO_free, and remove senseless NULL checks.beck2-14/+16
ok bcook@
2015-10-16Put tls_config_verify_client_optional() in the right place.jsing1-6/+6
2015-10-16Fix tpyo.jsing1-3/+3
2015-10-16Implement real "flock" request and add it to userland programs thatmillert1-2/+2
use pledge and file locking. OK deraadt@
2015-10-16actually include the prerequisite dependency for BIO instead of doing nastynessbeck2-10/+4
2015-10-14better fix for overrun reported by Qualys Security.tedu2-8/+2
buf is at all times kept nul terminated, so there is no need to enforce this again upon exit. (no need to move buf around after we exahust space.) ok beck miod
2015-10-14Bail out early if we have no buf_lenbeck2-2/+10
ok miod@
2015-10-14fix a memory leak reported by Qualys Security.tedu2-6/+8
move the bndec variable in tighter since it's not used elsewhere in the loop, then always free it after use. ok bcook miod
2015-10-14Ensure we don't write a 0 byte past end of the buffer in the error case.beck2-6/+6
ok bcook@ deraadt@
2015-10-14tweak previous (two details i apparently missed)schwarze1-4/+6
2015-10-14Add EVP_AEAD_CTX_init(3) manpage to document the new(ish) AEAD API.reyk4-1/+285
The "authenticated encryption with additional data" API is used for ciphers like AES-GCM or ChaCha20-Poly1305. The manpage is a beginning and certainly needs more work, especially improvements in the EXAMPLES section. Based on agl's source code comments. Converted from pod to mandoc by schwarze@ OK schwarze@ jsing@
2015-10-13In rev 1.15 the sizeof argument was fixed in a strlcat() call butmillert1-2/+2
the truncation check immediately following it was not updated to match. Not an issue in practice since the buffers are the same size. OK deraadt@
2015-10-13Put ASN1_dup() under #ifndef LIBRESSL_INTERNAL.jsing2-10/+10
2015-10-13Convert ECParameters_dup() from a macro that uses ASN1_dup_of() into anjsing6-10/+40
actual function. This removes the last ASN1_dup_of usage from the tree. Feedback from doug@ and miod@
2015-10-13Convert a number of the old ASN1_{d2i,i2d}_{bio,fp}_of() macros tojsing2-38/+38
ASN1_item_{d2i,i2d}_{bio,fp}() function calls. ok beck@ doug@