Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add size_t to int checks for SSL functions. | doug | 2014-12-17 | 1 | -1/+22 | |
| | | | | | | | | | | libtls accepts size_t for lengths but libssl accepts int. This verifies that the input does not exceed INT_MAX. It also avoids truncating size_t when comparing with int and adds printf-style attributes for tls_set_error(). with input from deraadt@ and tedu@ ok tedu@ | |||||
* | revert previous change for now, adjusting based on comments from jsing@ | bcook | 2014-12-07 | 1 | -10/+3 | |
| | ||||||
* | Allow specific libtls hostname validation errors to propagate. | bcook | 2014-12-07 | 1 | -3/+10 | |
| | | | | | | | | | | | | | Remove direct calls to printf from the tls_check_hostname() path. This allows NUL byte error messages to bubble up to the caller, to be logged in a program-appropriate way. It also removes non-portable calls to getprogname(). The semantics of tls_error() are changed slightly: the last error message is not necessarily preserved between subsequent calls into the library. When the previous call to libtls succeeds, client programs should treat the return value of tls_error() as undefined. ok tedu@ | |||||
* | Rename libressl to libtls to avoid confusion and to make it easier to | jsing | 2014-10-31 | 1 | -0/+300 | |
distinguish between LibreSSL (the project) and libressl (the library). Discussed with many. |