openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Fix a memory leak in x509_constraints_extract_names	tb	2020-09-20	1	-6/+6
\| \| \| \| \| \| \| \| \| \| \| \| \|	If the default path of the switch is taken, vname will not be added to the names list and will leak when it is set to NULL. Simplify the logic by eliminating the add Boolean. Instead, free and zero vname in the default case and continue the while loop directly. At the bottom of the switch, add vname to the names list unconditionally zero it out since it's now owned by names. Found by Guido Vranken's cryptofuzzer ok beck
*	Fix potential overflow in CN subject line parsing, thanks to	beck	2020-09-18	1	-4/+5
\| \| \| \| \| \| \| \|	ASN1_STRING - the gift that keeps on giving. Found by Guido Vranken's cryptofuzzer. ok tb@
*	remove unneeded variable "type".	beck	2020-09-14	1	-6/+5
\| \| \| \| \|	Yak for my shaving pleasure found by llvm static analyzer ok tb@
*	Don't leak names on success	beck	2020-09-14	1	-1/+2
\| \| \| \| \|	found by llvm static analyzer. ok tb@
*	Add x509_constraints.c - a new implementation of x509 name constraints, with	beck	2020-09-11	1	-0/+1180
	regression tests. The use of the new name constraints is not yet activated in x509_vfy.c and will be activated in a follow on commit ok jsing@