openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Fix some line wrapping and other whitespace issues.	tb	2020-09-21	1	-45/+34
\| \| \| \|	No change in the generated assembly on amd64.
*	Move freeing and zeroing up to right after the while loop.	tb	2020-09-21	1	-5/+5
\| \| \| \|	Requested by jsing
*	Avoid memleak caused by shadowing	tb	2020-09-20	1	-2/+5
\| \| \| \| \| \| \| \| \| \| \|	The outer scope in x509_constraints_extract_names() contains a vname variable which will be freed on error, but an inner scope contains another vname that won't be freed, e.g., if x509_constraints_names_add fails. Found by llvm scan-build. ok beck
*	KNF/whitespace nits	tb	2020-09-20	1	-2/+2
\|
*	Correct a 1 byte read overflow in x509_contraints_uri and add	beck	2020-09-20	1	-4/+9
\| \| \| \| \| \| \| \|	regress to catch it in the future. found by Guido Vranken's cryptofuzzer ok tb@
*	Fix a memory leak in x509_constraints_extract_names	tb	2020-09-20	1	-6/+6
\| \| \| \| \| \| \| \| \| \| \| \| \|	If the default path of the switch is taken, vname will not be added to the names list and will leak when it is set to NULL. Simplify the logic by eliminating the add Boolean. Instead, free and zero vname in the default case and continue the while loop directly. At the bottom of the switch, add vname to the names list unconditionally zero it out since it's now owned by names. Found by Guido Vranken's cryptofuzzer ok beck
*	Fix potential overflow in CN subject line parsing, thanks to	beck	2020-09-18	1	-4/+5
\| \| \| \| \| \| \| \|	ASN1_STRING - the gift that keeps on giving. Found by Guido Vranken's cryptofuzzer. ok tb@
*	remove unneeded variable "type".	beck	2020-09-14	1	-6/+5
\| \| \| \| \|	Yak for my shaving pleasure found by llvm static analyzer ok tb@
*	Don't leak names on success	beck	2020-09-14	1	-1/+2
\| \| \| \| \|	found by llvm static analyzer. ok tb@
*	Add x509_constraints.c - a new implementation of x509 name constraints, with	beck	2020-09-11	1	-0/+1180
	regression tests. The use of the new name constraints is not yet activated in x509_vfy.c and will be activated in a follow on commit ok jsing@