Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | In ASN1_get_object(), reject primitive encodings using the indefinite length | miod | 2014-07-11 | 1 | -1/+4 |
| | | | | constructed form. OpenSSL PR #2438 via OpenSSL trunk | ||||
* | In asn1_get_length(), tolerate leading zeroes in BER encoding. | miod | 2014-07-11 | 1 | -5/+8 |
| | | | | OpenSSL PR #2746 via OpenSSL trunk | ||||
* | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 1 | -2/+2 |
| | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | ||||
* | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 1 | -2/+4 |
| | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | ||||
* | remove unused, private version strings except SSL_version_str | bcook | 2014-07-09 | 1 | -2/+1 |
| | | | | | | Also remove unused des_ver.h, which exports some of these strings, but is not installed. ok miod@ tedu@ | ||||
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 |
| | |||||
* | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -2/+1 |
| | |||||
* | Replace all use of ERR_add_error_data with ERR_asprintf_error_data. | beck | 2014-04-26 | 1 | -4/+1 |
| | | | | | | | | This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@ | ||||
* | improve realloc/calloc/malloc patterns; ok guenther | deraadt | 2014-04-21 | 1 | -1/+1 |
| | |||||
* | ASN1_STRING cleanup - realloc has handled NULL since I had a mullet | beck | 2014-04-20 | 1 | -17/+10 |
| | | | | | | | | | and parachute pants - and since it's obvious there is no guarantee the caller doesn't pass in the data area in the argument, use memmove instead of memcpy so overlapping areas are handled correctly. Also, pointers can be usefully printed in hex with %p, in error messaeges rather than the bizzaro stuff that was there using mystical buffer lengths and abuse of strlcpy-converted-blindly-from-strcpy | ||||
* | We'll interpret a (void) cast on snprintf() to mean it's been verified that | guenther | 2014-04-19 | 1 | -2/+2 |
| | | | | | | truncation is either desirable, not an issue, or is detected and handled later ok deraadt@ | ||||
* | More KNF. | jsing | 2014-04-19 | 1 | -178/+226 |
| | |||||
* | lob a few more knf grenades in here to soften things up. | tedu | 2014-04-18 | 1 | -62/+30 |
| | |||||
* | putting most of the braces in the right column is the very least we can do. | tedu | 2014-04-18 | 1 | -99/+99 |
| | |||||
* | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -6/+6 |
| | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | ||||
* | Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversions | beck | 2014-04-15 | 1 | -2/+2 |
| | | | | | where the return value is ignored changing to (void) snprintf. ok deraadt@ | ||||
* | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -12/+24 |
| | |||||
* | resolve conflicts | djm | 2008-09-06 | 1 | -18/+55 |
| | |||||
* | resolve conflicts | djm | 2005-04-29 | 1 | -0/+1 |
| | |||||
* | merge 0.9.7d | markus | 2004-04-08 | 1 | -2/+2 |
| | |||||
* | security fix from http://www.openssl.org/news/secadv_20030930.txt | markus | 2003-09-30 | 1 | -0/+2 |
| | | | | see also http://cvs.openssl.org/chngview?cn=11471 | ||||
* | Trivial sprintf() -> snprintf() changes. ok deraadt@ | ho | 2003-04-05 | 1 | -2/+2 |
| | |||||
* | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 1 | -0/+1 |
| | |||||
* | Better fixes from openssl cvs; from markus@ | miod | 2002-08-05 | 1 | -3/+4 |
| | |||||
* | typo; from openssl cvs | markus | 2002-08-02 | 1 | -1/+1 |
| | |||||
* | apply patches from OpenSSL Security Advisory [30 July 2002], | markus | 2002-07-30 | 1 | -4/+6 |
| | | | | http://marc.theaimsgroup.com/?l=openssl-dev&m=102802395104110&w=2 | ||||
* | OpenSSL 0.9.7 stable 2002 05 08 merge | beck | 2002-05-15 | 1 | -2/+1 |
| | |||||
* | openssl-engine-0.9.6a merge | beck | 2001-06-22 | 1 | -1/+1 |
| | |||||
* | openssl-engine-0.9.6 merge | beck | 2000-12-15 | 1 | -10/+13 |
| | |||||
* | OpenSSL 0.9.5 merge | beck | 2000-03-19 | 1 | -4/+15 |
| | | | | | | *warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs | ||||
* | OpenSSL 0.9.4 merge | beck | 1999-09-29 | 1 | -76/+45 |
| | |||||
* | Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build | ryker | 1998-10-05 | 1 | -0/+444 |
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible. |