summaryrefslogtreecommitdiff
path: root/src/lib/libc/string/wcscpy.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2022-08-15Initialize readbytes in BIO_gets()tb1-2/+2
If the bgets() callback returns <= 0, we currently rely on the user provided callback to set readbytes, which isn't ideal. This also matches what's done in BIO_read() and BIO_write(). ok jsing
2022-08-15Avoid shadowing the cbs function parameter in tlsext_alpn_server_parse()tb1-6/+4
ok jsing
2022-08-15Remove redeclaration of rettb1-2/+1
When ret was introduced in an outer scope in r1.113, this declaration wasn't garbage collected. ok jsing
2022-08-12Fix upper bound in a for loop (no functional change).tb1-2/+2
2022-08-12Tweak a comment to be more accurate.tb1-3/+3
2022-08-11Remove unused variabletb1-6/+3
X509_NAME_print() is documented to print things at a given indentation level. Unfortunately, this never worked since someone got some logic wrong. Part of the wrong logic was removed in a dead code removal in OpenSSL commit 92ada7cc, but the variable l was left behind, which leads to compiler warnings on some platforms. End its sad life pointlessly and incorrectly measuring column width and remove it. ok jsing
2022-08-10Avoid signed integer overflow due to unary negationtb1-12/+8
The current X509_print_ex() tries too hard pretty printing negative serialNumbers (which shouldn't occur in the first place). In particular, negating LONG_MAX leads to signed overflow. Ditch the code dealing with negative serialNumbers representable as long and fall back to the long form printing. This simplifies the code and fixes oss-fuzz #49944 with/ok jsing
2022-08-10Cast int64_t to uint64_t for negatingtb1-3/+7
Avoid signed integer overflow by casting an int64_t to uint64_t before negating. Same fix was applied in a_int.c -r1.44, but was forgotten to be applied to a_enum.c. ok jsing
2022-08-10Only print versions we know abouttb1-4/+10
The version field of an X.509 Certificate is an enum Version ::= INTEGER { v1(0), v2(1), v3(2) } Printing the version as l + 1 only really makes sense with 0 <= l <= 2. Otherwise print a naked l while also indicating that it is an unknown version. ok jsing
2022-08-08For putenv(3), return an error if string starts with a '=' character.millert2-5/+10
Both FreeBSD and NetBSD have this behavior. OK deraadt@
2022-08-05fix error messagetb1-2/+2
2022-08-05Use the FAIL macro instead of fprintf(stderr, "FAIL: ...\n");tb1-10/+10
2022-08-05Make the bogokey[] global static const.tb1-7/+8
2022-08-05Move CBB_init() to a consistent place.tb1-10/+10
2022-08-05Consistently initialize failure to 1 at the top of the function andtb1-76/+62
clear it right before the done label.
2022-08-05Consistently check for CBB_init() failure.tb1-45/+89
2022-08-05Remove overly aggressive trust check in legacy verifier that breaksbeck1-15/+4
p5-IO-Socket-SSL regress and regress/sbin/iked/live Still passes the mutt regress that this was intended to fix. ok tb@
2022-08-05Remove most of the indirection introduced in previous and instead fetchtb1-400/+339
the appropriate tls_extension_funcs pointers for client and server from libssl and reach into them directly. ok jsing
2022-08-04Add some glue to fetch the tlsext functions from the tls_extensions[]tb1-190/+440
table rather than calling the functions directly.
2022-08-04Make tlsext_*_{build,needs,parse}() functions statictb2-217/+94
None of these functions are used outside of ssl_tlsext.c. The only reason they are prototyped in the header is for the use of tlsexttest.c. Rather than having a big pile of useless copy-paste in the header, we can adapt the test to avoid using these functions directly. ok jsing
2022-08-04Mop up key_len assignments.jsing1-91/+59
Remove unnecessary conditions for XTS mode, since we know which are XTS. Also use bytes rather than bits / 8. ok tb@
2022-08-04Mop up EVP_CIPH_FLAG_FIPS usage.jsing1-59/+59
LibreSSL does not do FIPS and nothing else sets or checks these. ok tb@
2022-08-04Remove various aesni_* defines to aes_* functions.jsing1-56/+24
A number of the AES-NI functions are #defines to an aes_* function - remove these and just use the AES variant directly. ok tb@
2022-08-04change some 4.4BSD references to earlier releasesjsg2-6/+6
ok schwarze@
2022-08-03Add workarounds for some symbols that are hidden under !LIBRESSL_INTERNALtb1-1/+7
until the next bump exposes new symbols that we can use.
2022-08-03Prepare to provide PKCS12 accessorstb9-22/+349
In order to be able to make pkcs12/ opaque, we need an entire family of accessors. These are in a particularly nasty tangle since this was done in about a dozen steps while sprinkling const, renaming functions, etc. The public API also adds backward compat macros for functions that were in the tree for half a day and then renamed. Of course some of them got picked up by some ports. Some of the gruesome hacks in here will go away with the next bump, but that doesn't mean that the pkcs12 directory will be prettier afterward. ok jsing
2022-08-02Expand BLOCK_CIPHER_* macros.jsing1-133/+1056
As a first step towards untangling and cleaning up the EVP AES code, expand the BLOCK_CIPHER_* macros. In particular, rather than having two sets of macros - one that is used if AESNI is being compiled in and one if it is not, condition on #ifdef AESNI_CAPABLE in the expanded code. ok tb@
2022-08-01libc string functions were not ported from pwb to v7jsg3-15/+9
https://minnie.tuhs.org/pipermail/tuhs/2017-August/011807.html ok schwarze@
2022-07-31strlen was in v6 libc (s5/perror.c) but not documented till v7jsg1-5/+4
ok schwarze@
2022-07-31Tidy up some of BN_nist_mod_*jsing1-22/+30
Shuffle variables around for consistency, also ensuring appropriate and consistent initialisation. ok tb@
2022-07-31fix indenttb1-2/+2
2022-07-31Allow a NULL header in PEM_write{,_bio}()tb1-3/+2
When PEM_write{,_bio}() were documented by Rich Salz and Richard Levitte, it was incorrectly stated that the header argument is allowed to be NULL. This was never true. Instead of fixing the documentation, it was decided that the API needs a fix, so pull in a variant of OpenSSL 3b9082c8. ok jsing
2022-07-31Randomise the rekey interval a little. Previously, the chacha20djm1-2/+8
instance would be rekeyed every 1.6MB. This makes it happen at a random point somewhere in the 1-2MB range. Feedback deraadt@ visa@, ok tb@ visa@
2022-07-30Use named initialisers for BIGNUMs.jsing1-61/+65
Also move the _bignum_nist_p_.*_sqr static BIGNUMs out of individual functions. ok tb@
2022-07-30Untangle two logic chains in x509_asid.c into something more readable.tb1-9/+22
ok jsing
2022-07-30update copyright yearstb1-2/+2
2022-07-30Reorder functions and remove unnecessary function prototypes.jsing1-29/+24
2022-07-30Update copyright for additional/new code.jsing1-1/+2
2022-07-30Provide additional AEAD test cases.jsing6-1/+1991
Bring in additional AEAD test cases from BoringSSL. This provides additional coverage for AES-{128,192,256}-GCM, as well as Chacha20-Poly1305 and XChaCha20-Poly1305. Discussed with tb@
2022-07-30Add EVP_aes_192_gcm() as a known AEAD.jsing1-1/+3
2022-07-30Allow the AEAD to be specified for a test file.jsing2-8/+12
Currently, this must be specified per test - allow it to be given as a command line argument that applies to the entire test file.
2022-07-30Run AEAD tests against EVP_CIPHER implementations.jsing1-15/+220
In addition to running AEAD tests against the EVP_AEAD implementation, also run them against the EVP_CIPHER implementation where applicable. This is a perfect example of why EVP_AEAD exists and why EVP_CIPHER is completely unsuited for use with AEADs...
2022-07-30Allow quoted ASCII strings as input for AEAD regress.jsing1-21/+42
Currently, each line in the text file is expected to be string of hexadecimal digits. In addition to this, allow a line to be given as an quoted ASCII string.
2022-07-30Sort includes.jsing1-4/+4
2022-07-30Less #ifndef OPENSSL_NO_*jsing1-17/+1
We're not going to be compiling without AES or CHACHA/POLY1305 anytime soon.
2022-07-30Fix comment formatting.jsing1-4/+7
2022-07-30Switch to ISC license.jsing1-46/+13
Use Google's ISC license for this code - this was originally being upstreamed to OpenSSL by Adam Langley, however it was never actually accepted and eventually ended up in BoringSSL (via commit dfe3053086). The same change was made a long time ago for evp/evp_aead.c and others.
2022-07-30Add stack frames to AES-NI x86_64 assembly.jsing1-39/+58
The current AES-NI x86_64 assembly does some strange, although valid things, such as making internal function calls without creating stack frames. In this case, the return address lands in the red zone (which it allows for when making use of the stack) and everything works as expected. However, this trips a false positive in valgrind, which seems to think that any data saved on the stack prior to the internal function call is now "undefined" once the function returns. Avoid this by actually using stack frames - this brings in most of 6a40ebe86b4 from OpenSSL, omitting the unnecessary explicit stack alignment (which was apparently added so this code could be used in the Linux kernel with an incorrectly aligned stack). Valgrind issue reported by Steffen Jaeckel (@sjaeckel), found via libstrophe unit tests. ok tb@
2022-07-30Use ASN1_INTEGER to encode/decode BIGNUM_it.jsing1-34/+48
The current code simply shoves the unvalidated ASN.1 bytes into a BIGNUM on the hope that other things will detect issues (such as negative values being flipped to positive). Instead of doing this, decode and validate the ASN.1 data using ASN1_INTEGER, then convert it to a BIGNUM. Similarly, for encoding convert from BIGNUM to ASN1_INTEGER and use ASN1_INTEGER encoding. ok tb@
2022-07-30Provide and use a primitive clear function for BIGNUM_it.jsing1-8/+15
Also tidy up bn_new() while here. ok tb@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-21 13:33:59 +0000