summaryrefslogtreecommitdiff
path: root/src/lib/libssl/d1_pkt.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* decompress libssl. ok beck jsingtedu2014-07-101-25/+3
|
* Remove leading underscore from _BYTE_ORDER and _{LITTLE,BIG}_ENDIAN, to bemiod2014-07-091-2/+2
| | | | | more friendly to systems where the underscore flavours may be defined as empty. Found the hard way be bcook@; joint brainstrom with bcook beck and guenther
* convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringtedu2014-06-191-2/+2
| | | | | | libc interfaces over libcrypto interfaces. for now we also prefer timingsafe_memcmp over timingsafe_bcmp, even when the latter is acceptable. ok beck deraadt matthew miod
* Rename ssl3_record_sequence_update() to ssl3_record_sequence_increment(),jsing2014-06-151-2/+2
| | | | | | | so that it reflects what it is actually doing. Use this function in a number of places that still have the hand rolled version. ok beck@ miod@
* tags as requested by miod and teduderaadt2014-06-121-1/+1
|
* Disable TLS support...jsing2014-06-111-2/+0
| | | | | | | | Just kidding! unifdef OPENSSL_NO_TLS since we will never want to actually do that. ok deraadt@
* remove some #if 0 code. we don't need any more reminders that we're usingtedu2014-05-301-146/+0
| | | | a not quite appropriate data structure. ok jsing
* While working on another diff I ended up looking to see why on earth thejsing2014-05-301-39/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | DTLS code had a chunk that checked to see if the SSL version was *not* DTLS. Turns out that this is inside a big #if 0 block with a comment explaining why DTLS will never need this code... The DTLS code was clearly written by wholesale copying the SSLv3 code. Any code not applicable to DTLS was seemingly #if 0'd or commented out and left for others to find. d1_pkt.c is copied from s3_pkt.c and it has a do_dtls1_write() function that has the same function signature as do_ssl3_write(), except that the create_empty_fragement (yes, that is the spelling in ssl_locl.h) argument is unused for DTLS (although there is code that pretends to use it) since it uses explicit IV (as the comment notes). Instead of leaving this turd lying around, nuke the #if 0'd code (along with the check for *not* DTLS) and remove the pointless create_empty_fragment argument given the only two do_dtls1_write() calls specify zero. This kind of thing also makes you wonder how much actual peer review occurred before the code was initially committed... ok beck@
* There is no point in checking if a pointer is non-NULL before calling free,jsing2014-05-281-4/+2
| | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@
* Remove redundant test introduced in s3_pkt.c on 20001225, which got cargo-cultedmiod2014-05-271-3/+2
| | | | (with an XXX comment, though) in d1_pkt.c in 2005.
* Make sure all error paths in dtls1_buffer_record() invoke SSLErr bymiod2014-05-261-20/+12
| | | | | | factoring error handling. ok jsing@
* Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much ofjsing2014-05-251-5/+0
| | | | | | | this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@
* Stop pulling pqueue.h into ssl_locl.h since only a small part of libssljsing2014-05-221-0/+2
| | | | | | | | | | actually needs it. Instead, just include it in the files where it is actually necessary. Also remove standard includes from pqueue.h so that they are not available as a side effect. Just add the two includes that are needed to pqueue.c. ok miod@
* Make sure ssl3_setup_buffers() does not return upon error with a freedmiod2014-05-181-7/+7
| | | | | | | pqueue still chained, by inserting it into the list only after all possible failure conditions have been avoided. Reported and fix proposed by David Ramos; ok beck@
* No longer make pqueue.h a public (and installed) header file. Replace itsmiod2014-05-151-1/+0
| | | | | | | | | inclusion in <ssl/dtls1.h> by the benign `struct _pqueue; typedef struct _pqueue *pqueue;'. Note that said dtls1.h should probably be considered a private header as well... ok beck@
* Replace all use of ERR_add_error_data with ERR_asprintf_error_data.beck2014-04-261-4/+2
| | | | | | | | This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@
* Figure out endianness at compile-time, using _BYTE_ORDER frommiod2014-04-231-5/+2
| | | | | | | <machine/endian.h>, rather than writing 1 to a 32-bit variable and checking whether the first byte is nonzero. tweaks and ok matthew@; ok beck@ tedu@
* whack a bunch of disabled code. ok beck lteotedu2014-04-171-7/+0
|
* Change library to use intrinsic memory allocation functions instead ofbeck2014-04-171-9/+9
| | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
* Flense all use of BIO_snprintf from ssl source - use the real one instead,beck2014-04-141-1/+1
| | | | | | and allow for the normal posix mandated return values instead of the nonstandard one from BIO_snprintf. ok miod@
* make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miodtedu2014-04-141-12/+0
|
* First pass at applying KNF to the OpenSSL code, which almost makes itjsing2014-04-141-774/+687
| | | | | readable. This pass is whitespace only and can readily be verified using tr and md5.
* Do not include "e_os.h" anymore. Simply pull in the necessary headers.mpi2014-04-131-1/+0
| | | | ok miod@, deraadt@
* Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery.miod2014-04-131-2/+9
|
* cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txtmarkus2013-02-141-37/+54
| | | | | from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@
* resolve conflictsdjm2012-10-131-34/+133
|
* OpenSSL 1.0.0f: mergedjm2012-01-051-10/+16
|
* openssl-1.0.0e: resolve conflictsdjm2011-11-031-12/+10
|
* resolve conflicts, fix local changesdjm2010-10-011-281/+262
|
* resolve conflictsdjm2009-01-091-0/+1
|
* update to openssl-0.9.8i; tested by several, especially krw@djm2009-01-051-4/+17
|
* import of OpenSSL 0.9.8hdjm2008-09-061-0/+1778
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-28 03:24:24 +0000