Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | another attempt at fixing stale x509 data. since we don't know where the | tedu | 2014-04-19 | 1 | -10/+8 |
| | | | | | initial storage came from, we can't free it. just memset in the sequence case. probably ok beck | ||||
* | can't actually do this. cause unknown. | tedu | 2014-04-19 | 1 | -1/+1 |
| | |||||
* | More KNF. | jsing | 2014-04-19 | 5 | -238/+296 |
| | |||||
* | More KNF. | jsing | 2014-04-19 | 4 | -261/+379 |
| | |||||
* | More KNF. | jsing | 2014-04-19 | 3 | -10/+14 |
| | |||||
* | We'll interpret a (void) cast on snprintf() to mean it's been verified that | guenther | 2014-04-19 | 6 | -13/+13 |
| | | | | | | truncation is either desirable, not an issue, or is detected and handled later ok deraadt@ | ||||
* | More KNF. | jsing | 2014-04-19 | 4 | -685/+761 |
| | |||||
* | More KNF. | jsing | 2014-04-19 | 6 | -380/+471 |
| | |||||
* | More KNF. | jsing | 2014-04-19 | 6 | -363/+434 |
| | |||||
* | More KNF. | jsing | 2014-04-19 | 7 | -203/+207 |
| | |||||
* | use intrinsic strlcpy and strlcat everywhere so we only have one set of | beck | 2014-04-19 | 1 | -3/+3 |
| | | | | | | funcitons to check for incorrect use. keep BUF_strlcpy and BUF_strlcat for API comptibility only. ok tedu@ | ||||
* | OPENSSL_gmtime() is really just gmtime_r(); ok guenther | deraadt | 2014-04-18 | 3 | -4/+4 |
| | |||||
* | tone down some XXXXX to not appear in grep | tedu | 2014-04-18 | 1 | -1/+1 |
| | |||||
* | Put back i2d_ASN1_SET() and d2i_ASN1_SET() from the NO_ASN1_OLD prune, as there | miod | 2014-04-18 | 2 | -0/+245 |
| | | | | | | | are still some 3rd-party code using it, and fixing them is not trivial. As an excuse gift, the memory leaks on failure in resurrected a_set.c have been fixed. | ||||
* | guenther would prefer more separation | tedu | 2014-04-18 | 1 | -0/+2 |
| | |||||
* | Some dude named Tavis Ormandy reported a bug which has gone unfixed. | tedu | 2014-04-18 | 1 | -0/+5 |
| | | | | | | | | | | | http://marc.info/?l=openssl-users&m=138014120223264&w=2 Arguably a doc bug, but we argue not. If you parse a new cert into memory occupied by a previously verified cert, the new cert will inherit that state, bypassing future verification checks. To avoid this, we will always start fresh with a new object. grudging ok from guenther, after i threatened to make him read the code yet again. "that ok was way more painful and tiring then it should have been" | ||||
* | blank lines between decls and code | tedu | 2014-04-18 | 1 | -0/+5 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 1 | -76/+80 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 7 | -425/+535 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 7 | -464/+514 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 17 | -515/+662 |
| | |||||
* | add braces missed when fixing leaks | jsg | 2014-04-18 | 1 | -1/+2 |
| | |||||
* | More KNF. | jsing | 2014-04-18 | 11 | -664/+813 |
| | |||||
* | lob a few more knf grenades in here to soften things up. | tedu | 2014-04-18 | 54 | -1796/+999 |
| | |||||
* | putting most of the braces in the right column is the very least we can do. | tedu | 2014-04-18 | 54 | -2030/+2034 |
| | |||||
* | kill REF_PRINT/REF_CHECK debugging framework noone would use | deraadt | 2014-04-17 | 3 | -27/+0 |
| | | | | ok miod | ||||
* | sprintf: bad. | miod | 2014-04-17 | 1 | -1/+1 |
| | | | | | | snprintf: good. snprintf with a correct size: better! (harmless in this case) | ||||
* | fix some more leaks, mostly suggestions from miod | jsg | 2014-04-17 | 3 | -2/+8 |
| | | | | ok miod@ | ||||
* | fix some of the leaks | jsg | 2014-04-17 | 1 | -2/+6 |
| | | | | ok miod@ looks good deraadt@ | ||||
* | Initial KNF. | jsing | 2014-04-17 | 4 | -508/+505 |
| | |||||
* | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 43 | -146/+146 |
| | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | ||||
* | fix a few bugs observed on http://www.viva64.com/en/b/0250/ | tedu | 2014-04-16 | 2 | -2/+2 |
| | | | | ok krw miod | ||||
* | we don't use these files for building | tedu | 2014-04-15 | 1 | -108/+0 |
| | |||||
* | The NO_ASN1_OLD define was introduced in 0.9.7, 8 years ago, to allow for | miod | 2014-04-15 | 7 | -664/+0 |
| | | | | | | | | | | obsolete (and mostly internal) routines to be compiled out. We don't expect any reasonable software to stick to these interfaces, so better clean up the view and unifdef -DNO_ASN1_OLD. The astute reader will notice the existence of NO_OLD_ASN1 which serves a similar purpose, but is more entangled. Its time will come, soon. | ||||
* | Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternity | beck | 2014-04-15 | 8 | -94/+0 |
| | | | | | with the bearded ones... some API's that nobody should be using will dissapear with this commit. | ||||
* | Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversions | beck | 2014-04-15 | 6 | -13/+13 |
| | | | | | where the return value is ignored changing to (void) snprintf. ok deraadt@ | ||||
* | remove auto-generated dependencies from the old unused build system, so | deraadt | 2014-04-14 | 1 | -822/+0 |
| | | | | | that it is easier to find code pieces. They are getting in the way. ok miod | ||||
* | Cope with the removal of openssl/symhacks.h | deraadt | 2014-04-13 | 1 | -2/+0 |
| | |||||
* | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 4 | -3/+7 |
| | |||||
* | cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt | markus | 2013-02-14 | 1 | -0/+6 |
| | | | | | from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@ | ||||
* | resolve conflicts | djm | 2012-10-13 | 15 | -160/+353 |
| | |||||
* | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2012-10-13 | 1 | -1/+1 |
|\ | | | | | branch. | ||||
| * | import OpenSSL-1.0.1c | djm | 2012-10-13 | 1 | -1/+1 |
| | | |||||
* | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2012-10-13 | 2 | -1/+22 |
|\ \ | | | | | | | branch. | ||||
| * | | import OpenSSL-1.0.1c | djm | 2012-10-13 | 18 | -175/+415 |
| | | | |||||
* | | | cherrypick fix for CVE-2012-2110: libcrypto ASN.1 parsing heap overflow | djm | 2012-04-19 | 1 | -14/+40 |
| | | | | | | | | | | | | ok miod@ deraadt@ | ||||
* | | | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 10 | -21/+27 |
| | | | |||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2011-11-03 | 2 | -4/+1 |
|\| | | | | | | | | branch. | ||||
| * | | import OpenSSL 1.0.0e | djm | 2011-11-03 | 12 | -25/+28 |
| | | | |||||
* | | | resolve conflicts, fix local changes | djm | 2010-10-01 | 52 | -3369/+2246 |
| | | |