| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls. | jsg | 2015-05-15 | 7 | -17/+20 |
* | use strdup() to init string | deraadt | 2015-04-30 | 1 | -3/+2 |
* | Add whitespace and replace OPENSSL_free with free in documentation. | doug | 2015-04-29 | 6 | -22/+22 |
* | Call CBB_add_space() rather than reimplementing it. | doug | 2015-04-29 | 2 | -4/+4 |
* | Rename cbb_buffer_add_u to cbb_add_u and remove redundant code. | doug | 2015-04-29 | 2 | -30/+12 |
* | Added len_len error checking for internal cbb_buffer_add_u(). | doug | 2015-04-29 | 2 | -2/+8 |
* | Call CBS_mem_equal() rather than reimplementing it. | doug | 2015-04-29 | 2 | -6/+4 |
* | Avoid NULL deref in CBS_get_any_asn1_element(). | doug | 2015-04-29 | 2 | -4/+6 |
* | Added error checking for len argument in cbs_get_u(). | doug | 2015-04-29 | 2 | -2/+8 |
* | free() can handle NULL. | doug | 2015-04-29 | 2 | -16/+8 |
* | Add missing BN_CTX_end() calls. | doug | 2015-04-29 | 4 | -18/+18 |
* | Don't ignore the reference count in X509_STORE_free. | doug | 2015-04-25 | 1 | -1/+5 |
* | Check for invalid leading zeros in CBS_get_asn1_uint64. | doug | 2015-04-25 | 2 | -6/+16 |
* | Do not need to buf[0] = 0 before strlcpy(buf, ... | deraadt | 2015-04-23 | 1 | -2/+1 |
* | Clean up the ssl_bytes_to_cipher_list() API - rather than having the | jsing | 2015-04-15 | 6 | -42/+30 |
* | Remove d2i_X509_PKEY and i2d_X509_PKEY from the SSLeay days. | doug | 2015-04-12 | 2 | -44/+2 |
* | Send OPENSSL_issetugid() straight to hell, no final cigarette. | deraadt | 2015-04-11 | 2 | -15/+1 |
* | Remove all getenv() calls, especially those wrapped by issetugid(). | deraadt | 2015-04-11 | 7 | -60/+16 |
* | readdir() is thread-safe when DIR handles aren't shared, so delete the lock. | guenther | 2015-04-06 | 2 | -6/+2 |
* | Nuke the OPENSSL_MAX_TLS1_2_CIPHER_LENGTH hack - this has to be enabled at | jsing | 2015-03-31 | 4 | -44/+4 |
* | Factor out the init_buf initialisation code, rather than duplicating it | jsing | 2015-03-27 | 16 | -206/+112 |
* | BUF_MEM_free() has its own explicit NULL check. | jsing | 2015-03-27 | 2 | -18/+12 |
* | Fix indentation that incorrectly implies a different control flow. | doug | 2015-03-21 | 3 | -8/+11 |
* | Fix a memory leak in an error path. | doug | 2015-03-20 | 1 | -1/+3 |
* | Fix several crash causing defects from OpenSSL. | tedu | 2015-03-19 | 13 | -64/+166 |
* | Avoid a NULL pointer deref when X509_get_pubkey() returns NULL. | doug | 2015-03-15 | 1 | -2/+4 |
* | delay EVP_MD_CTX_init so we don't forget to clean it up. | tedu | 2015-03-11 | 2 | -6/+8 |
* | Reject DH keys sent by a server if they are considered too small; inspired | miod | 2015-03-08 | 2 | -2/+24 |
* | Fix a minor information leak that was introduced in t1_lib.c r1.71, whereby | jsing | 2015-03-02 | 2 | -4/+4 |
* | Fix CVE-2014-3570: properly calculate the square of a BIGNUM value. | bcook | 2015-02-25 | 3 | -654/+303 |
* | Fix CVE-2015-0205: Do not accept client authentication with Diffie-Hellman | bcook | 2015-02-25 | 2 | -4/+4 |
* | fourth batch of perlpod(1) to mdoc(7) conversion | schwarze | 2015-02-23 | 18 | -1273/+0 |
* | Bump libcrypto and libssl majors, due to various recent churn. | jsing | 2015-02-22 | 2 | -2/+2 |
* | Reluctantly add server-side support for TLS_FALLBACK_SCSV. | jsing | 2015-02-22 | 15 | -25/+159 |
* | There is not much point constructing an SSL_CIPHER, then calling | jsing | 2015-02-22 | 2 | -14/+6 |
* | Remove IMPLEMENT_STACK_OF noops. | jsing | 2015-02-22 | 3 | -6/+3 |
* | If BN_rand() or BN_pseudo_rand() are called with a NULL rnd argument, | jsing | 2015-02-19 | 1 | -3/+8 |
* | Memory leak in error path. Coverity CID 78822. | miod | 2015-02-17 | 1 | -8/+9 |
* | third batch of perlpod(1) to mdoc(7) conversion | schwarze | 2015-02-16 | 12 | -1364/+0 |
* | Avoid calling BN_CTX_end() on a context that wasn't started. | doug | 2015-02-15 | 1 | -4/+4 |
* | Regen | miod | 2015-02-15 | 3 | -264/+282 |
* | If we decide to discard the provided seed buffer because its size is not | miod | 2015-02-15 | 1 | -8/+6 |
* | Check ASN1_OCTET_STRING_new() for failure. Coverity CID 78904 | miod | 2015-02-15 | 1 | -6/+8 |
* | In ec_wNAF_mul(), move the declaration of tmp_wNAF higher in scope, so that | miod | 2015-02-15 | 1 | -6/+5 |
* | Remove asn1_ex_i2c() prototype, now that this function has been made static; | miod | 2015-02-14 | 1 | -2/+1 |
* | Words read better when they are separated by spaces. | miod | 2015-02-14 | 1 | -1/+1 |
* | 1.18 would introduce a possible out-of-bounds access in the error path; | miod | 2015-02-14 | 1 | -7/+5 |
* | Remove DEBUG_PKCS5V2 code. | miod | 2015-02-14 | 1 | -25/+1 |
* | Unchecked allocations in x509_name_canon(). | miod | 2015-02-14 | 1 | -1/+5 |
* | Memory leak upon error in X509_add1_{trust,reject}_object. | miod | 2015-02-14 | 1 | -7/+23 |