summaryrefslogtreecommitdiff
path: root/src/lib (unfollow)
Commit message (Collapse)AuthorFilesLines
2003-03-22This commit was manufactured by cvs2git to create tag 'OPENBSD_3_3_BASE'.OPENBSD_3_3_BASEcvs2svn650-167491/+0
2003-03-22missing space between macro argument and commadavid1-3/+3
ok jmc@
2003-03-19Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS, seemarkus2-26/+24
http://marc.theaimsgroup.com/?l=bugtraq&m=104811162730834&w=2
2003-03-18duplicate words: and and, the thedavid1-2/+2
ok miod@ jmc@
2003-03-17If hostname != NULL, hostname is not a numeric string, and AI_NUMERICHOSTjason1-3/+3
is set, return EAI_NONAME like RFC2553 specifies. millert/itojun ok.
2003-03-17update to official patch from openssl.org; ok deraadt@, millert@markus4-52/+56
2003-03-16Less strcpy/strcat/sprintf. tdeval@ ok.ho16-72/+86
2003-03-15Enforce blinding on RSA operations involving private keys.ho4-8/+54
From http://www.openssl.org/~geoff, modified to be enabled at all times.
2003-03-14ANSI function headersmillert2-12/+6
2003-03-13a few more strlcy; ok from beck & hoderaadt2-6/+6
2003-03-11$OpenBSD$david1-0/+1
ok henning@
2003-03-09.Dd Month day, yeardavid1-1/+1
ok jmc@
2003-03-07signed/unsigned mixup. KAME PR 469 by Olivier Courtay.itojun1-2/+3
2003-03-06.Xr typos;jmc1-2/+2
2003-03-06.Xr's;jmc2-4/+4
typos in man page section ok deraadt@
2003-03-06Fix a pasto. (There is no ULLONG_MIN, for hopefully obvious reasons)kjell1-4/+2
ok millert
2003-03-06date should be written formally: .Dd Month day, yeardavid2-4/+4
ok henning@ jmc@
2003-03-05jmc wrote a combination man page that covers all openssl(1) functionality,deraadt3-3/+7618
based on the pod files from openssl. This may need by-hand updating once in a while, but at least now people can read a real man page instead of the mess that the openssl team provides us with.
2003-03-04missing #include in SYNOPSIS, found by Daniel Lucqhenning1-1/+2
ok millert@
2003-03-04strlcpy, check retval from sprintfitojun3-11/+18
2003-03-04s/strncpy/strlcpy/itojun1-4/+4
2003-02-28Use int32_t, not long since this deals with 32bit quantities.millert1-20/+20
Inspired by a change in NetBSD and reported by Jan Johansson.
2003-02-28DSAparams_print_pf() -> DSAparams_print_fp()cedric2-2/+2
ok deraadt@
2003-02-24Fix bogus inet_net_pton() translation example.cedric1-2/+2
ok henning@
2003-02-24of ofderaadt1-2/+2
2003-02-21check for size < 0 when allocating memory, from openssl (-r1.34)markus2-0/+12
2003-02-20fix a variety of missing or wrong MLINKSderaadt1-1/+2
2003-02-19security fix from openssl 0.9.7a:markus2-32/+62
In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078)
2003-02-14re-stir if pid changes; markus & mederaadt1-3/+5
2003-02-12simple alloca test. done twice per deraadt@ suggestmickey3-1/+26
2003-02-12delete duplicate line; jason@ackley.net, 3090deraadt1-1/+0
2003-01-31we do not need that mess of -Ideraadt1-42/+1
2003-01-28thread safer libc (note: safer, not safe)marc12-265/+348
Access to the global _res structure replaced by pointers to a per thread instance. If unthreaded the pointer is to the global structure. Also replaced a 64k stack array with malloc-ed memory so threaded aps (with a default 64k stack) have a chance at working. ok deraadt@
2003-01-21typos;jmc1-3/+3
ok deraadt@
2003-01-18inet6 fixes from jmc@prioris.mini.pw.edu.plderaadt2-21/+13
2003-01-14Add sanity check to prevent int oflow for very large allocations.millert1-3/+11
Also fix a signed vs. unsigned issue while I am at it. Found by Jim Geovedi. OK deraadt@
2003-01-05Grammar fix - remove bogus comma; jmc@prioris.mini.pw.edu.plpvalchev1-2/+2
2003-01-04spellingderaadt2-2/+2
2003-01-03Nobody even compiles the #@!$&~ regression tests anyway.miod1-2/+2
2002-12-30use err vs. errx and display function; from Owl. ok fgsch@stevesk1-4/+4
2002-12-30include function in error; from Owl. ok fgsch@stevesk1-4/+4
2002-12-30correct return code check; from Owl. ok fgsch@stevesk1-2/+2
2002-12-28fix calloc's. also check for errors; fixes PR/3043.fgsch1-5/+10
2002-12-16typo; torh@bogus.netmarkus1-1/+1
2002-12-15more writeable -> writable by torhhenning1-2/+2
2002-12-13Recent modifications to netcat changed the behaviour to only exit when bothaaron1-2/+2
the read (network) and write (stdin) ends of the socket were both closed. This is not how nc traditionally works. Instead, revert back to finishing up when read() on the socket returns 0; deraadt@, vincent@ ok.
2002-12-10use proper __findenv() prototype; millert@ okmickey2-8/+8
2002-12-10Document BSD behavior of accepting '-' within optstring as long asmillert1-5/+25
it is not the fist character of optstring (since that would conflict with GNU semantics). Update the bit on "W;" within optstring when called as getopt (not getopt_long) to current reality.
2002-12-10When doing permutation, only treat "-" as an option if it was specifiedmillert1-4/+5
in optstring. Problem noticed by Theo.
2002-12-09From Andrushock, s/sucess/success/gmillert1-1/+1