summaryrefslogtreecommitdiff
path: root/src/lib/libc/stdlib/reallocarray.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2016-11-04Kill a bunch of OLD_ASN1 usage by replacing ASN1_{d2i,i2d}_* withjsing7-53/+107
ASN1_item_{d2i,i2d}_* equivalents. ok guenther@ miod@
2016-11-04Mark a couple local functions as staticguenther2-4/+4
ok jsing@ beck@
2016-11-04The *_method_data structures can be staticguenther6-21/+21
ok jsing@
2016-11-04Add an explict list of exported symbols with just the functionsguenther5-11/+289
declared in the public headers, and use __{BEGIN,END}_HIDDEN_DECLS in the internal headers to optimize internal functions ok jsing@
2016-11-04Add an explict list of exported symbols with just the functions declaredguenther3-2/+85
in <tls.h>, and use __{BEGIN,END}_HIDDEN_DECLS in tls_internal.h to optimize internal functions ok jsing@
2016-11-04Nuke the KRB5 ASN.1 code from orbit.jsing3-984/+1
ok beck@
2016-11-04Ride the current major bump and enable assembler code for nist 256p curve,miod4-3/+19
on amd64 only for now. Stanzas to enable it on arm, i386 and sparc64 are provided but commented out for lack of testing due to the machine room being currently in storage. ok jsing@
2016-11-04make public ASN1_time_parse and ASN1_time_tm_cmp to replace former hiddenbeck14-43/+133
functions.. document with a man page. bump majors on libtls, libssl, libcrypto ok jsing@ guenther@
2016-11-04Make do_dtls1_write() static to d1_pkt.c and delete declarations forguenther2-8/+6
three functions that were removed a while ago ok jsing@
2016-11-04Fix some linewrapping glitchesguenther1-7/+5
ok jsing@
2016-11-04Some tests require internal symbols; have them link with the staticguenther4-8/+10
libssl or libtls so they can continue to see them after the shared library namespace is cleaned up ok jsing@
2016-11-04Add assembler code for the nist 256-bit GFp curve, written initially bymiod9-6/+19107
Intel. Obtained from BoringSSL, with some integration work borrowed from OpenSSL 1.0.2; assembler code for arm and sparc64 borrowed from OpenSSL 1.1.0. None of this code is enabled in libcrypto yet. ok beck@ jsing@
2016-11-04Replace all uses of magic numbers when operating on OPENSSL_ia32_P[] bymiod26-146/+245
meaningful constants in a private header file, so that reviewers can actually get a chance to figure out what the code is attempting to do without knowing all cpuid bits. While there, turn it from an array of two 32-bit ints into a properly aligned 64-bit int. Use of OPENSSL_ia32_P is now restricted to the assembler parts. C code will now always use OPENSSL_cpu_caps() and check for the proper bits in the whole 64-bit word it returns. i386 tests and ok jsing@
2016-11-04Address some signed vs unsigned warnings and check that an integer valuejsing1-4/+14
is positive before passing it to several functions as a size_t. Additionally, in tls_load_file() there is not much point using calloc(), when we're immediately reading into the buffer (having an extra byte for NUL termination seems pointless given the API). ok beck@ miod@
2016-11-04Assign and test, as is consistent with the rest of the libtls code.jsing1-7/+4
2016-11-04Use a consistent name for struct bio_cb * variables.jsing1-6/+6
2016-11-04Rename struct bio_cb_st to struct bio_cb.jsing1-8/+8
2016-11-04Do not cast a pointer to a struct, to a char * when assigning to a void *.jsing1-2/+2
2016-11-04Use a consistent name for a BIO *, rather than having four different namesjsing1-49/+51
in the same file.
2016-11-04Avoid signed vs unsigned comparisons.jsing1-3/+4
ok miod@
2016-11-04convert X509 manuals from pod to mdocschwarze39-1825/+2566
2016-11-04Completely rewrite the session handling ASN.1 code using CBB and CBS. Thisjsing1-616/+329
addresses two 2038 related issues and also adds support for allocation in the i2d function, which will allow for simplification in the callers. ok beck@ miod@
2016-11-04Convert ssl3_get_server_kex_dhe() to CBS.jsing1-42/+19
ok beck@
2016-11-04No need to reach libssl private headers and to define TERMIOS anymore.miod1-4/+1
ok bcook@
2016-11-04Remove I386_ONLY define. It was only used to prefer amiod18-60/+15
faster-on-genuine-80386-but-slower-on-80486-onwards innstruction sequence in the SHA512 code, and had not been enabled in years, if at all. ok tom@ bcook@
2016-11-04In OPENSSL_wipe_cpu() on i386, which noone uses anyway, check the propermiod1-1/+1
flag for the presence of a FPU before deciding to wipe the fpu registers. ok jsing@
2016-11-04There's not much point having three static functions that do a cast andjsing1-33/+6
assign a pointer, when we can just inline the three and do one cast followed by three pointer assignments.
2016-11-04Do not mix declarations and code.jsing1-3/+7
2016-11-04Rename the internal bio related functions so that they have a commonjsing1-22/+22
prefix. Makes the code more readable and removes shadowing.
2016-11-04Add X509_up_ref, from boringbeck2-2/+11
ok jsing@
2016-11-04convert RSA manuals from pod to mdocschwarze31-1223/+1919
2016-11-04MALLOC_STATS tweaks, by default not compiled inotto1-13/+29
2016-11-04There's not much point in casting a void * to a specific type just beforejsing1-4/+2
calling free(). ok beck@ ingo@
2016-11-04new sentence, new line, and zap trailing whitespace;jmc1-3/+4
2016-11-04bump minor for ocsp_require_stapling additionbeck1-1/+1
2016-11-04Add ocsp_require_stapling config option for tls - allows a connectionbeck7-12/+37
to indicate that it requires the peer to provide a stapled OCSP response with the handshake. Provide a "-T muststaple" for nc that uses it. ok jsing@, guenther@
2016-11-03small tweak to also check canaries if F is in effectotto1-3/+5
2016-11-03In ssl3_read_bytes(), do not process more than three consecutive TLSjsing1-4/+24
records, otherwise a peer can potentially cause us to loop indefinately. Return with an SSL_ERROR_WANT_READ instead, so that the caller can choose when they want to handle further processing for this connection. ok beck@ miod@
2016-11-03make OCSP_URL only show up when an OCSP url is actually present in the certbeck1-2/+3
2016-11-03Make OCSP Stapling: only appear if there is stapling info present.beck1-5/+3
2016-11-03convert RAND manuals from pod to mdocschwarze11-196/+204
2016-11-03zap the overview manual page of the RAND subsystemschwarze2-36/+1
that contained nothing but duplicate and misleading information; OK jsing@
2016-11-03convert PEM and PKCS manuals from pod to mdocschwarze27-1380/+2231
2016-11-03Split ssl3_get_key_exchange() into separate functions for DHE/ECDHE.jsing1-205/+256
ok beck@ (who was struggling to keep lunch down while reviewing the diff)
2016-11-03Don't do OCSP validation when we have disabled certificate verificationbeck2-5/+8
or certificate validation. ok jsing@
2016-11-03convert configuration manuals from pod to mdocschwarze9-305/+340
2016-11-03convert remaining ASN1 object manuals from pod to mdocschwarze5-175/+299
2016-11-03Only set an error from libssl related code, if an error has not alreadyjsing2-7/+47
been set by libtls code. This avoids the situation where a libtls callback has set an error, only to have it replaced by a less useful libssl based error. ok beck@
2016-11-03convert HMAC and MD5 manuals from pod to mdocschwarze5-210/+393
2016-11-03convert EVP manuals from pod to mdocschwarze49-2724/+4229