summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | make __dtoa & strtod() thread-safe useing the same method as newer gdtoaderaadt2006-10-293-36/+89
| | | | | | | | | | | | | | | | | | | | codebase. tested mostly by ckuethe and myself. __dtoa() use now requires a call to __freedtoa()
* | | | respond to ben hawkes's ruxcon presentation.tedu2006-10-241-61/+125
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | create special allocators for pginfo and pgfree structs instead of imalloc. this keeps them separated from application memory. for chunks, to prevent deterministic reuse, keep a small array and swizzle the to be freed chunk with a random previously freed chunk. this last bit only for chunks because keeping arbitrarily large regions of pages around may cause out of memory issues (and pages are, to some extent, returned in random order). all changes enabled by default. thanks to ben for pointing out these issues. ok tech@
* | | | remove calls to abort(3) that can't happen anyway; fromotto2006-10-211-11/+1
| | | | | | | | | | | | | | | | <bret dot lambert at gmail.com>; ok millert@ deraadt@
* | | | architecture sh (landisk) is little endian.drahn2006-10-141-2/+2
| | | |
* | | | __mips64__ handling too.. sighderaadt2006-10-131-4/+5
| | | |
* | | | sparc64 should be in the #ifdefderaadt2006-10-121-2/+2
| | | |
* | | | use __amd64__ instead, until lint is fixedderaadt2006-10-121-2/+2
| | | |
* | | | reorder #if tests because apparently on amd64 cpp proceeds to blow it'sderaadt2006-10-121-3/+4
| | | | | | | | | | | | | | | | own brains out, and then takes lint down with it. To be investigated...
* | | | Initial config for sh, copied from arm.jsg2006-10-111-0/+180
| | | | | | | | | | | | | | | | ok miod@ drahn@
* | | | Teach'em about cpus in spandexmiod2006-10-101-4/+4
| | | |
* | | | from wiz@netbsd:jmc2006-10-041-8/+1
| | | | | | | | | | | | | | | | | | | | | | | | Log Message: Switch from 4-clause to 2-clause BSD license. Ok dillo@, board@.
* | | | openssl security fixes, diff from markus@, ok & "commit it" djm@pvalchev2006-10-0423-3/+166
| | | | | | | | | | | | | | | | http://www.openssl.org/news/secadv_20060928.txt for more
* | | | Make a var volatile, which forces a mem write at the right spot, andotto2006-10-011-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | detctecion of underflow where it would otherwise not happen for FPUs that have a larger register size than sizeof double (i386, m68k). ok deraadt@ weingart@ kettenis@
* | | | Part 2 of file descriptor race and deadlock corrections.kurt2006-09-261-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adjust design of file descriptor table to eliminate races with both opening and closing of file descriptor entries and eliminates one class of deadlocks. One nice side effect of this change in design should be better performance for applications that open and close many file descriptors due to reduced fd_table_lock contention and fd entry reuse. - Add entry states to manage use of entry and eliminate some closing races. fd entries are not deallocated upon close() now. - Call _thread_fd_table_init with one of five discreet modes to properly initialize an entry and manage the state transition to open. - When closing an entry hold the entry spinlock locked across the state transition and the _thread_sys_close call to close another race. - Introduce a new lock type FD_RDWR_CLOSE that transitions either a closed entry or an open entry into closing state and then waits for a RDWR lock so that the lock queue can unwind normally. All subsequent fd lock attempts for that entry are rejected with EBADF until the fd is fully closed, or reopened by dup2(). Once a thread holds the FD_RDWR_LOCK it is safe to close() it or dup2() on it. - When a thread creates a new fd there is a window of time when another thread could attempt to use the fd before the creating thread has initialized the entry for it. This can result in improper status_flags for the entry, so record the entries init mode, detect when this has happened and correct the status_flags when needed. reviewed by marc@ & brad@, tested by several, okay brad@
* | | | Remove unnecessary /* NOTREACHED */ comments because our lint isray2006-09-252-20/+8
| | | | | | | | | | | | | | | | | | | | | | | | cool and recognizes __dead, and because shorter examples are clearer. OK otto@.
* | | | Use S_IS* macros insted of masking with S_IF* flags. The latter mayotto2006-09-251-2/+2
| | | | | | | | | | | | | | | | | | | | have multiple bits set, which lead to surprising results. Spotted by Paul Stoeber. ok djm@
* | | | If fgetln() != NULL, len == 0 is impossible, so remove check.ray2006-09-231-3/+3
| | | | | | | | | | | | | | | | OK otto@ and jaredy@.
* | | | Back out change in rev 1.15 of to allow whitespace to separate amillert2006-09-221-10/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | flag from its optional argument if permutation is disabled. The idea was that since "r:" would match "-r foo" then "r::" should match "-r foo" too as long as we know that things have not been reshuffled. Unfortunately, this causes incompatibilities with GNU getopt_long when the POSIXLY_CORRECT environment variable is set. OK deraadt@
* | | | fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339;djm2006-09-092-0/+34
| | | | | | | | | | | | | | | | ok beck@ miod@
* | | | no point mentioning functions if we have nothing useful to sayjmc2006-08-051-13/+1
| | | | | | | | | | | | | | | | | | | | | | | | about them; ok djm
* | | | wording/grammar tweaks;jmc2006-07-261-3/+4
| | | |
* | | | better macros;jmc2006-07-261-6/+6
| | | |
* | | | document `iv';jmc2006-07-261-1/+4
| | | | | | | | | | | | | | | | | | | | from eren elci; tweaked by djm ok djm
* | | | updates from nicholas marriott;jmc2006-07-251-5/+9
| | | | | | | | | | | | | | | | re-worded and ok djm
* | | | allocate gsalt large enough; from Matthew R. Dempsky <mrd at alkemiootto2006-07-041-2/+2
| | | | | | | | | | | | | | | | dot org>; ok djm@ deraadt@
* | | | crank shlib_versiondjm2006-06-274-6/+7
| | | |
* | | | resolve conflictsdjm2006-06-27317-4778/+8553
| | | |
* | | | This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-277-15/+882
|\ \ \ \ | | |_|/ | |/| | branch.
| * | | import of openssl-0.9.7jdjm2006-06-27116-2104/+4130
| | | |
| * | | This commit was manufactured by cvs2git to create branch 'unlabeled-1.1.1'.cvs2svn2005-05-101-0/+1541
| | | |
* | | | This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-27164-379/+27277
|\ \ \ \ | | |_|/ | |/| | branch.
| * | | import of openssl-0.9.7jdjm2006-06-27380-3153/+32917
| | | |
* | | | This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-274-0/+870
|\ \ \ \ | | |_|/ | |/| | branch.
| * | | import of openssl-0.9.7jdjm2006-06-274-0/+870
| | | |
| * | | This commit was manufactured by cvs2git to create branch 'OPENSSL'.cvs2svn2005-05-101-0/+1541
| | | |
* | | | add class 1 and class 3 root certificates from CAcert.org. ok beck@jakob2006-06-121-0/+268
| | | |
* | | | potential fd leak (we will fix this before we move to cloning)deraadt2006-06-082-2/+6
| | | |
* | | | remove expired certificates. ok beck@jakob2006-06-071-541/+0
| | | |
* | | | update a couple of existing CAs that has been changed. ok beck@jakob2006-06-071-105/+87
| | | |
* | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort byjakob2006-06-071-2551/+2356
| | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@
* | | | back out last patch due to updated committed prematurelyjakob2006-06-071-2356/+2551
| | | |
* | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort byjakob2006-06-071-2551/+2356
| | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@
* | | | Fix 'double by a factor of two' and make cache options a bit morepedro2006-06-061-4/+4
| | | | | | | | | | | | | | | | descriptive while at it, input and okay jmc@
* | | | fix a !foo & bar.thib2006-05-191-2/+2
| | | | | | | | | | | | | | | | ok miod@, tedu@, pedro@
* | | | Fix the second malloc_ulimit regression: maintaining the free listotto2006-05-141-3/+12
| | | | | | | | | | | | | | | | | | | | | | | | requires memory; try to make sure we have it. If all fails, leak instead of crash. Test case originally found by cloder@, fix tested by many.
* | | | Add a -hex option to 'rand' to output hexadecimal output.matthieu2006-05-141-1/+20
| | | | | | | | | | | | | | | | ok djm@ miod@, man page help from jmc@.
* | | | remove an 'is' from the comment to make the sentence correct.fkr2006-05-121-2/+2
| | | | | | | | | | | | | | | | ok jmc@, mbalmer@
* | | | Convert do {} while loop -> while {} for clarity. No binary changemillert2006-05-052-10/+10
| | | | | | | | | | | | | | | | on most architectures. From Oliver Smith. OK deraadt@ and henning@
* | | | backport checks for degenerate Diffie-Hellman public exponents fromdjm2006-05-049-1/+73
| | | | | | | | | | | | | | | | | | | | OpenSSL-0.9.8a, where they were added without a corresponding patch to 0.9.7 or an advisory! ok theo@ markus@
* | | | strtonum does not require limits.htedu2006-04-251-2/+1
| | | | | | | | | | | | | | | | spotted by ray some time ago