openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Avoid an overread caused by d2i_PrivateKey().	jsing	2019-04-10	1	-1/+3
\| \| \| \| \| \| \| \| \| \| \|	There are cases where the old_priv_decode() function can fail but consume bytes. This will result in the pp pointer being advanced, which causes d2i_PKCS8_PRIV_KEY_INFO() to be called with an advanced pointer and incorrect length. Fixes oss-fuzz #13803 and #14142. ok deraadt@ tb@
*	make ENGINE_finish() succeed on NULL and simplify callers as in	tb	2018-04-14	1	-5/+3
\| \| \| \| \| \| \| \| \| \| \|	OpenSSL commit 7c96dbcdab9 by Rich Salz. This cleans up the caller side quite a bit and reduces the number of lines enclosed in #ifndef OPENSSL_NO_ENGINE. codesearch.debian.net shows that almost nothing checks the return value of ENGINE_finish(). While there, replace a few nearby 'if (!ptr)' with 'if (ptr == NULL)'. ok jsing, tested by & ok inoguchi
*	Send the function codes from the error functions to the bit bucket,	beck	2017-01-29	1	-6/+5
\| \| \| \| \| \|	as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@
*	Fix several crash causing defects from OpenSSL.	tedu	2015-03-19	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \| \|	These include: CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp CVE-2015-0287 - ASN.1 structure reuse memory corruption CVE-2015-0289 - PKCS7 NULL pointer dereferences Several other issues did not apply or were already fixed. Refer to https://www.openssl.org/news/secadv_20150319.txt joint work with beck, doug, guenther, jsing, miod
*	Enable building with -DOPENSSL_NO_DEPRECATED.	doug	2015-02-11	1	-1/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	If you didn't enable deprecated code, there were missing err.h and bn.h includes. This commit allows building with or without deprecated code. This was not derived from an OpenSSL commit. However, they recently enabled OPENSSL_NO_DEPRECATED in git and fixed these header problems in a different way. Verified with clang that this only changes line numbers in the generated asm. ok miod@
*	Only import cryptlib.h in the four source files that actually need it.	jsing	2014-07-11	1	-4/+5
\| \| \| \| \| \| \| \|	Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@
*	Explicitly include <openssl/opensslconf.h> in every file that references	jsing	2014-07-10	1	-1/+4
\| \| \| \| \| \| \| \| \|	an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.
*	tags as requested by miod and tedu	deraadt	2014-06-12	1	-1/+1
\|
*	More KNF.	jsing	2014-04-19	1	-30/+36
\|
*	lob a few more knf grenades in here to soften things up.	tedu	2014-04-18	1	-35/+24
\|
*	putting most of the braces in the right column is the very least we can do.	tedu	2014-04-18	1	-22/+22
\|
*	resolve conflicts, fix local changes	djm	2010-10-01	1	-44/+53
\|
*	resolve conflicts	djm	2008-09-06	1	-4/+20
\|
*	OpenSSL 0.9.7 stable 2002 05 08 merge	beck	2002-05-15	1	-4/+12
\|
*	OpenSSL 0.9.5 merge	beck	2000-03-19	1	-0/+23
\| \| \| \| \| \|	warning this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs
*	OpenSSL 0.9.4 merge	beck	1999-09-29	1	-10/+7
\|
*	Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build	ryker	1998-10-05	1	-0/+117
	functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible.