| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
|
| |
The tests will fail all the same.
Fixes Coverity 78811 21659 21658 21657. Discussed with beck@
|
|
|
|
| |
ok doug@, miod@, guenther@
|
| |
|
|
|
|
| |
The current libssl code does not pass these tests yet.
|
| |
|
|
|
|
|
|
| |
functions (MB_CUR_MAX, isalpha() for ctype.
some tips from stsp@
|
|
|
|
| |
noted by kinichiro from github
|
|
|
|
|
|
|
| |
Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.
input + ok miod@ jsing@
|
|
|
|
|
|
| |
cipher_list.c is based on code from jsing@.
Discussed with jsing@
|
|
|
|
|
|
|
| |
Previously, CBS_dup() had its own offset. However, it is more consistent
to copy everything.
ok miod@ jsing@
|
|
|
|
|
|
|
|
|
| |
The statements were chained together with OR which makes it more annoying
to debug. Also, it was short circuiting all tests as soon as one function
failed. Since the functions are independent, they should each run until
error.
Discussed with miod@ and jsing@
|
| |
|
|
|
|
| |
ok deraadt@ jsing@ miod@
|
|
|
|
| |
"no problem" miod@, tweak + ok jsing@
|
|
|
|
|
|
|
|
| |
bs_ber.c does not convert BER to DER. It's a hack to convert a DER-like
encoding with one violation (indefinite form) to strict DER. Rename
the functions to reflect this.
ok miod@ jsing@
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
ASN.1 integers cannot have all zeros or all ones for the first 9 bits.
This rule ensures the numbers are encoded with the smallest number of
content octets (see ITU-T Rec X.690 section 8.3.2).
Based on BoringSSL commit 5933723b7b592e9914f703d630b596e140c93e16
ok deraadt@ jsing@
|
| |
|
|
|
|
|
|
|
|
| |
fail), on 64-bit systems.
tested on 64-bit (amd64) and 32-bit (sparc).
OK claudio@ deraadt@
|
|
|
|
|
| |
by a similar BoringSSL change, but raising the limit to 1024 bits.
ok jsing@ markus@ guenther@ deraadt@
|
|
|
|
|
|
|
|
|
|
|
| |
See https://www.openssl.org/news/secadv_20150108.txt for a more detailed
discussion.
Original OpenSSL patch here:
https://github.com/openssl/openssl/commit/a7a44ba55cb4f884c6bc9ceac90072dea38e66d0
The regression test is modified a little for KNF.
ok miod@
|
|
|
|
| |
Remove unneeded dangling else, compound statements on a single line.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
have this property.
Instead, skip the malloc and memcmp if their size is zero.
Per bcook@ request in order to run on AIX
|
| |
|
|
|
|
| |
obsolete SIZE_T_MAX. OK miod@ beck@
|
|
|
|
|
|
|
|
| |
I checked that this doesn't change anything. Compiled with clang using
-Wno-pointer-sign -g0 to reduce the differences. Only difference in the
asm is due to assert(0) line number changes in bs_cbs.c and bs_cbb.c.
miod is ok with the general process.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.
BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.
Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.
input + ok jsing@, miod@
|
|
|
|
| |
get_cipher_by_char/put_cipher_by_char.
|
|
|
|
| |
ok deraadt@
|
|
|
|
| |
platforms with small MAXTSIZ or MAXSSIZ.
|
| |
|
|
|
|
| |
use RSA authentication, rather than only those that use RSA key exchange.
|
|
|
|
| |
Based on OpenSSL.
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
Remove direct calls to printf from the tls_check_hostname() path. This allows
NUL byte error messages to bubble up to the caller, to be logged in a
program-appropriate way. It also removes non-portable calls to getprogname().
ok jsing@
|
|
|
|
| |
using it.
|
|
|
|
|
|
|
| |
This is needed by the portable tree to point directly to the newly-built
binaries when running unit tests.
discussed with jsing@ and others
|
|
|
|
|
|
|
| |
string we are testing.
Add tests to verify that we get SIGSEGV when passed a NULL src or dst.
It is better to crash than for an implementation to check for NULL
and try to recover.
|