Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | | More shrinkage, a bit for ramdisks but mostly for static binaries: | guenther | 2009-11-18 | 5 | -392/+445 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - wrap with #ifndef NO_LOG_BAD_DNS_RESPONSES libc code that uses p_class() and p_type() for diagnostics, then add that define to libstub to avoid pulling in res_debug_syms.o - split rcmd() and ruserok() into separate files, as nothing uses both - split readdir_r() to its own file - split syslog_r() from syslog(), as the latter needs localtime(); many binaries no longer need to pull in all the time code after this; switch from usleep() to nanosleep() while we're at it (The profit of analysis of -Wl,-M,--cref output) Chops 888kB from /bin and /sbin on i386 ok deraadt@, miod@ | |||||
* | | | | pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from | markus | 2009-11-10 | 10 | -12/+40 | |
| | | | | | | | | | | | | | | | | openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@ | |||||
* | | | | permit -DMALLOC_STATS to compile again | todd | 2009-11-02 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | | | | | noticed by Jonathan Armani & Fabien Romano ugh+ok otto@ | |||||
* | | | | s/Mhz/MHz/, MHz is a multiple of the SI unit hertz (whose symbol is Hz). | sobrado | 2009-10-31 | 4 | -8/+8 | |
| | | | | ||||||
* | | | | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | deraadt | 2009-10-27 | 1 | -5/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms | |||||
* | | | | Check mmap return value against MAP_FAILED not NULL. | pirofti | 2009-10-20 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | Okay deraadt@, otto@. | |||||
* | | | | teach gdtoa & its subroutines that malloc can fail; in which case | martynas | 2009-10-16 | 2 | -2/+6 | |
| | | | | | | | | | | | | | | | | | | | | | | | | ecvt, fcvt, gcvt, *printf, strtof, strtod, strtold act per ieee 1003.1. after these massive changes, remove unused files which would not work now. reported by Maksymilian Arciemowicz; ok theo | |||||
* | | | | another cert that makes godaddy.com and launchpad.net (among others) happy. | fgsch | 2009-10-12 | 1 | -0/+51 | |
| | | | | | | | | | | | | | | | | | | | | found by Guillaume Protet (guillaume dot protet at mortheres dot info) while testing bzr update. deraadt@ ok | |||||
* | | | | rewrite the history section, prompted by Paul Stoeber; ok deraadt@ jmc@ | otto | 2009-10-10 | 1 | -25/+28 | |
| | | | | ||||||
* | | | | make getaddrinfo(3) accept numeric servname when ai_socktype is not | fgsch | 2009-09-02 | 1 | -4/+2 | |
| | | | | | | | | | | | | | | | | | | | | specified in hint or hints is NULL. claudio@ ok | |||||
* | | | | various MLINK fixes from Alan R. S. Bueno; | jmc | 2009-08-13 | 1 | -3/+3 | |
| | | | | ||||||
* | | | | remove expired certificates and add startcom ltd. | fgsch | 2009-08-08 | 1 | -839/+148 | |
| | | | | | | | | | | | | | | | | beck@ ok | |||||
* | | | | pull string for memcpy; ok hshoexer@ | martynas | 2009-08-07 | 2 | -2/+4 | |
| | | | | ||||||
* | | | | promote correct style for error checking | eric | 2009-07-09 | 1 | -7/+7 | |
| | | | | | | | | | | | | | | | | ok tedu@ deraadt@ krw@ | |||||
* | | | | abs conforms c99 -> imaxabs conforms c99. ok millert@ | martynas | 2009-06-21 | 1 | -3/+3 | |
| | | | | ||||||
* | | | | quieten compiler by converting pointers to uintptr_t before truncating them | deraadt | 2009-06-08 | 1 | -5/+5 | |
| | | | | | | | | | | | | | | | | | | | | to u_int32_t to do integer math with (in a situation where that is legit) ok otto millert | |||||
* | | | | compare and shift buffer against a fixed length not strlen derived values. | pyr | 2009-06-05 | 1 | -6/+6 | |
| | | | | | | | | | | | | | | | | ok otto@ | |||||
* | | | | simplify the 'family' option parser and make it more evident what we're | pyr | 2009-06-04 | 2 | -25/+18 | |
| | | | | | | | | | | | | | | | | | | | | | | | | now doing. ok deraadt@ | |||||
* | | | | Don't assume that we can overwrite strings in the environment. | millert | 2009-06-04 | 1 | -1/+3 | |
| | | | | | | | | | | | | | | | | | | | | Someone may have passed a read-only string to putenv() (I'm looking at you cron!). | |||||
* | | | | Add a resolv.conf option to specify the order in which getaddrinfo | pyr | 2009-06-04 | 2 | -8/+63 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PF_UNSPEC queries are made. While there change the default from inet6 first then inet4 to inet4 first then inet6, this prevents the many people with IPv4 only connectivity from constantly trying to contact IPv6 addresses, and also unbreaks many ports who don't use getaddrinfo right. ok deraadt@, plenty of cheering in the room wrt the idea, not loud enough complaining from the v6 crowd. | |||||
* | | | | Make putenv(), setenv() and unsetenv() standards compliant. The | millert | 2009-06-03 | 5 | -86/+117 | |
| | | | | | | | | | | | | | | | | | | | | | | | | standard explicitly disallows passing setenv a name with a '=' in it but historic BSD behavior is to allow this but to ignore the '=' and anything after it. | |||||
* | | | | - define EAI_OVERFLOW, as per IEEE Std 1003.1-2001(Interpretation #13) | jasper | 2009-06-02 | 2 | -3/+7 | |
| | | | | | | | | | | | | | | | | hint from claudio@, ok millert@ | |||||
* | | | | add ipsCA as a valid authority. | dlg | 2009-05-25 | 1 | -0/+51 | |
| | | | | | | | | | | | | | | | | ok beck@ | |||||
* | | | | Document AI_NUMERICSERV; feedback and ok millert@ | jacekm | 2009-05-06 | 1 | -2/+9 | |
| | | | | ||||||
* | | | | document that no leading whitespace is permitted between the option and | okan | 2009-04-12 | 1 | -3/+5 | |
| | | | | | | | | | | | | | | | | | | | | | | | | argument if the argument is deemed to be optional ('::'). feedback and ok jmc@ and millert@ | |||||
* | | | | resync libssl/libcrypto pod documentation - quite a few more pages and | djm | 2009-04-10 | 1 | -27/+242 | |
| | | | | | | | | | | | | | | | | MLINKS; feedback and ok jmc@ | |||||
* | | | | crankus majoris | djm | 2009-04-06 | 3 | -3/+3 | |
| | | | | ||||||
* | | | | resolve conflicts | djm | 2009-04-06 | 79 | -245/+430 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-04-06 | 28 | -117/+14959 | |
|\ \ \ \ | | |_|/ | |/| | | branch. | |||||
| * | | | import of OpenSSL 0.9.8k | djm | 2009-04-06 | 51 | -156/+15047 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-04-06 | 9 | -14/+21 | |
|\ \ \ \ | | |_|/ | |/| | | branch. | |||||
| * | | | import of OpenSSL 0.9.8k | djm | 2009-04-06 | 75 | -194/+356 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-04-06 | 35 | -117/+18446 | |
|\ \ \ \ | | |_|/ | |/| | | branch. | |||||
| * | | | import of OpenSSL 0.9.8k | djm | 2009-04-06 | 39 | -149/+18486 | |
| | | | | ||||||
* | | | | correct argument type for swap64(); from Thomas Pfaff | jmc | 2009-03-17 | 1 | -3/+3 | |
| | | | | ||||||
* | | | | kill whitespace at eol; | jmc | 2009-02-13 | 1 | -2/+2 | |
| | | | | ||||||
* | | | | decribe 'F' better and mention flags are debugging aids; ok tedu@ jmc@ | otto | 2009-02-13 | 1 | -8/+10 | |
| | | | | ||||||
* | | | | correct function definitions; from Markus Bergkvist | jmc | 2009-02-10 | 1 | -4/+4 | |
| | | | | ||||||
* | | | | missing ssl_sock_init() call in init_client() (used by | djm | 2009-01-30 | 1 | -3/+10 | |
| | | | | | | | | | | | | | | | | "openssl s_client"), fix an unlikely memory leak | |||||
* | | | | remove some gratuitous changes that do nothing other than inrease | djm | 2009-01-30 | 1 | -2/+1 | |
| | | | | | | | | | | | | | | | | the size of the diff against openssl mainline | |||||
* | | | | convert a strdup (into a purpose-allocated buffer) in libcrypto to a | djm | 2009-01-12 | 2 | -4/+6 | |
| | | | | | | | | | | | | | | | | memcpy to avoid linker deprecation warnings; pointed out by dkrause@ | |||||
* | | | | openssl-0.9.8j enables RFC3546 TLS extensions by default (e.g. the very | djm | 2009-01-09 | 13 | -39/+0 | |
| | | | | | | | | | | | | | | | | | | | | useful "server name indication" that allows multihomed TLS server), so remove the #define to disable it here | |||||
* | | | | adjust Makefile and crank major for openssl-0.9.8j | djm | 2009-01-09 | 17 | -16/+56 | |
| | | | | ||||||
* | | | | resolve conflicts | djm | 2009-01-09 | 538 | -7811/+10571 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-01-09 | 28 | -68/+297 | |
|\ \ \ \ | | |_|/ | |/| | | branch. | |||||
| * | | | import openssl-0.9.8j | djm | 2009-01-09 | 263 | -2494/+3222 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-01-09 | 180 | -4318/+21828 | |
|\ \ \ \ | | |_|/ | |/| | | branch. | |||||
| * | | | import openssl-0.9.8j | djm | 2009-01-09 | 532 | -8743/+31783 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2009-01-09 | 55 | -108/+2573 | |
|\ \ \ \ | | |_|/ | |/| | | branch. | |||||
| * | | | import openssl-0.9.8j | djm | 2009-01-09 | 79 | -606/+3434 | |
| | | | |