summaryrefslogtreecommitdiff
path: root/src/lib/libc/string/wcscpy.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2015-07-16After reading a password with terminal echo off, restore the terminal toguenther2-12/+10
its original state instead of blindly turning echo on. problem reported on the openssl-dev list by William Freeman ok miod@ beck@
2015-07-16Explicitely cast a char into unsigned long before shifting it left by 24, formiod2-4/+4
this would promote it to int for the shift, and then cast to unsigned long, sign-extending it if sizeof(long) > sizeof(int). This was not a problem because the computed value was explicitely range checked afterwards, with an upper bound way smaller than 1U<<31, but it's better practice to cast correctly. ok beck@
2015-07-16Check return value of all used functions in OCSP_REQUEST_print(); coversmiod2-10/+18
Coverity CID 78796; ok beck@
2015-07-16Make sure the `reject negative sizes' logic introduced in 1.34 is actuallymiod2-6/+8
applied to all code paths. ok beck@ bcook@ doug@ guenther@
2015-07-15check n before cbs_init, coverity - ID 125063beck2-6/+18
ok bcook@ miod@
2015-07-15test for n<0 before use in CBS_init - mostly to shut up coverity.beck6-22/+66
reluctant ok miod@
2015-07-15Flense out dead code, we don't do ecdhe_clnt_cert.beck4-374/+150
coverity ID's 21691 21698 ok miod@, "Fry it" jsing@
2015-07-15Fix inverted test in previous. Commit message told what we intended, butmiod2-4/+4
we did not notice my fingers slipping. Noticed by bcook@
2015-07-15Remove dead code. Coverity CID 21688miod2-8/+2
ok beck@
2015-07-15Fix two theoretical NULL pointer dereferences which can only happen if youmiod2-8/+18
have seriously corrupted your memory; Coverity CID 21708 and 21721. While there, plug a memory leak upon error in x509_name_canon(). ok bcook@ beck@
2015-07-15Fix possible 32 byte buffer overrun, found by coverity, CID 78869beck2-4/+4
ok miod@
2015-07-15Memory leak; Coverity CID 78836miod2-12/+16
ok beck@
2015-07-15Unchecked allocations, and make sure we do not leak upon error. Fixesmiod2-42/+72
Coverity CID 21739 and more. ok bcook@
2015-07-15Avoid leaking objects upon error; tweaks & ok doug@miod2-36/+36
2015-07-15Do not allow TS_check_signer_name() with signer == NULL frommiod2-2/+8
int_TS_RESP_verify_token(). Coverity CID 21710. Looking further, int_TS_RESP_verify_token() will only initialize signer to something non-NULL if TS_VFY_SIGNATURE is set in ctx->flags. But guess what? TS_REQ_to_TS_VERIFY_CTX() in ts/ts_verify_ctx.c, which is the TS_VERIFY_CTX constructor, explicitely clears this bit, with: ret->flags = TS_VFY_ALL_IMPRINT & ~(TS_VFY_TSA_NAME | TS_VFY_SIGNATURE); followed by more conditional flag clears. Of course, nothing prevents the user to fiddle with ctx->flags afterwards. This is exactly what ts.c in usr.bin/openssl does. This is gross, mistakes will happen. ok beck@
2015-07-15Previous fix for Coverity CID 21785 did not cope correctly with seed_len != 0,miod2-2/+6
seed_in == NULL case. Since this situation is an error anyway, bail out early. with and ok beck@
2015-07-15Add OPTION_ARG_LONG for handling of options with a long type.jsing2-3/+16
ok doug@
2015-07-15Make 'openssl pkeyutl -verify' return exit code 0 on success.bcook1-4/+5
Previously, it returned '1' regardless of whether is succeeded or failed. This is now fixed in the OpenSSL master branch as well. Thanks to Kinichiro Inoguchi for pointing it out. ok @deraadt
2015-07-14Partially convert ssl3_get_message to CBS.doug2-12/+30
Unlike the other conversions, this only partially converts the function for now. This is the second to last function which still uses the n2l3 macro. That macro is deprecated since we're using CBS. ok miod@ jsing@
2015-07-14Convert dtls1_get_hello_verify to CBS.doug2-34/+46
ok miod@ jsing@
2015-07-14Convert ssl3_get_cipher_by_char to CBS.doug2-4/+16
ok miod@ jsing@
2015-07-14Convert ssl3_get_client_certificate to CBS.doug2-30/+38
ok miod@ jsing@
2015-07-14Convert ssl3_get_finished to CBS.doug2-12/+18
ok miod@ jsing@
2015-07-14Convert ssl_parse_clienthello_use_srtp_ext to CBS.doug4-84/+50
ok miod@ jsing@
2015-07-14Convert ssl3_get_cert_status to CBS.doug2-34/+52
ok miod@ jsing@
2015-07-14Convert ssl3_get_server_certificate to CBS.doug2-34/+36
ok miod@
2015-07-13Unhook tls_ext_alpn test until the code passes it.doug1-2/+5
2015-07-12Convert openssl(1) dh to the new option handling.doug1-98/+111
ok jsing@
2015-07-12Convert openssl(1) dsa to the new option handling.doug1-154/+208
ok jsing@
2015-07-12Convert openssl(1) ec to the new option handling.doug1-170/+247
ok jsing@
2015-07-12Convert gendh.c to the new option handling.doug1-54/+79
ok jsing@
2015-07-12Convert openssl(1) dsaparam to the new option handling.doug1-154/+123
This also removes support for -timebomb related code which was only enabled for GENCB_TEST. ok jsing@
2015-07-12Convert openssl(1) crl2pkcs7 to the new option handling.doug1-95/+110
input + ok jsing@
2015-07-11Convert openssl(1) dhparam to new option handling.jsing1-121/+160
ok doug@
2015-07-09Add tests for parsing TLS extension ALPN (RFC 7301).doug2-2/+446
The current libssl code does not pass these tests yet.
2015-07-08switch "openssl dhparam" default from 512 to 2048 bits, ok jsing@sthen2-6/+6
2015-07-07add setlocale testsemarie1-1/+3
2015-07-07add regress test for setlocale(3) and some relatedsemarie2-0/+140
functions (MB_CUR_MAX, isalpha() for ctype. some tips from stsp@
2015-07-03Repair algorithm name array after 1.6.miod1-4/+4
2015-07-01specify the array initializer valuelibressl-v2.2.1bcook1-2/+2
noted by kinichiro from github
2015-06-29fix the build on arm after the recent addition of -Wundefjsg2-4/+4
ok doug@ deraadt@
2015-06-28Convert ssl_bytes_to_cipher_list to CBS.doug6-23/+59
Link in the new 'unit' regress and expand the invalid tests to include some that would fail before the CBS conversion. input + ok miod@ jsing@
2015-06-27Add unit tests for LibreSSL.doug3-0/+256
cipher_list.c is based on code from jsing@. Discussed with jsing@
2015-06-27Fix pointer to unsigned long conversion.doug4-10/+14
bcook@ notes that this check really only impacted 64-bit Windows. Also, changed the check to be unsigned for consistency. ok bcook@
2015-06-24Put BUF_memdup() and BUF_reverse() under #ifndef LIBRESSL_INTERNAL.jsing2-6/+4
2015-06-24Stop using BUF_memdup() within the LibreSSL code base - it is correctlyjsing4-12/+14
spelt malloc+memcpy, which is what is used in all except two places. ok deraadt@ doug@
2015-06-23Change CBS_dup() to also sync the offset.doug3-3/+41
Previously, CBS_dup() had its own offset. However, it is more consistent to copy everything. ok miod@ jsing@
2015-06-23Convert bytestringtest to individual checks and don't short circuit.doug1-321/+337
The statements were chained together with OR which makes it more annoying to debug. Also, it was short circuiting all tests as soon as one function failed. Since the functions are independent, they should each run until error. Discussed with miod@ and jsing@
2015-06-23Remove unnecessary regress target.doug1-7/+2
2015-06-21Check for failure with CBB_init() in bs_ber.c.doug2-4/+6
From BoringSSL commit 3fa65f0f05f67615d9daf48940e07f84d094ac6e.