| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | decipher comment. ok bcook@ | mmcc | 2015-12-12 | 2 | -4/+4 |
| | | |||||
| * | move initialization of buf up to quell warnings and make it obvious the err ↵ | beck | 2015-12-12 | 2 | -8/+10 |
| | | | | | | | case is ok. ok bcook@ | ||||
| * | prevent possibly use of uninitialized variable | beck | 2015-12-12 | 2 | -4/+4 |
| | | | | | ok bcook@ | ||||
| * | make the counter a size_t as well, which quells a warning on visual studio 2015 | beck | 2015-12-12 | 2 | -4/+6 |
| | | | | | ok bcook@ | ||||
| * | Specify SOCKS version in error messages. ok deraadt@ | mmcc | 2015-12-10 | 1 | -3/+3 |
| | | |||||
| * | tiny sanity check on file size | tedu | 2015-12-10 | 1 | -1/+3 |
| | | |||||
| * | Map SOCKS error codes to error strings. With input from deraadt@ | mmcc | 2015-12-10 | 1 | -5/+61 |
| | | |||||
| * | bump the major for libcrypto/ssl/tls for a CRYPTO_chacha_20 ABI change | bcook | 2015-12-09 | 5 | -10/+10 |
| | | | | | ok jsing@, deraadt@, beck@ | ||||
| * | Change the counter argument for CRYPTO_chacha_20 to be 64-bits on all platforms. | bcook | 2015-12-09 | 4 | -10/+12 |
| | | | | | | | | | | | | The recently-added EVP_aead_chacha20_poly1305_ietf() function, which implements informational RFC 7539, "ChaCha20 and Poly1305 for IETF Protocols", needs a 64-bit counter to avoid truncation on 32-bit platforms. The existing TLS ChaCha20-Poly1305 ciphersuite is not impacted by this, but making this change requires an ABI bump. ok jsing@, "Looks sane" beck@ | ||||
| * | Integrate two patches originally from Daniel Micay. | tedu | 2015-12-09 | 1 | -8/+76 |
| | | | | | | | | | | | | | 1. Optionally add random "canaries" to the end of an allocation. This requires increasing the internal size of the allocation slightly, which probably results in a large effective increase with current power of two sizing. Therefore, this option is only enabled via 'C'. 2. When writing junk (0xdf) to freed chunks (current default behavior), check that the junk is still intact when finally freeing the delayed chunk to catch some potential use after free. This should be pretty cheap so there's no option to control it separately. ok deraadt tb | ||||
| * | pledge nc better - Load the certificate into memory and then do the pledge, | beck | 2015-12-08 | 1 | -5/+21 |
| | | | | | | this allows us to drop the rpath fromt the nc pledge. ok deraadt@, tedu@ | ||||
| * | Add root certificate for COMODO RSA Certification Authority, ok beck@ | sthen | 2015-12-07 | 1 | -0/+122 |
| | | | | | | | | In some cases sites signed by this are covered by the old "AddTrust External CA Root" that we already had, but that depends on the site sending a fairly large chain of intermediate certificates which most aren't doing (because there's no need because this newer one is in browser stores..). | ||||
| * | Remove SHA0 check, as we did in v1.21 of sha.h. | bcook | 2015-12-07 | 2 | -4/+4 |
| | | | | | | | This enables ENGINE_get_digest to work again with SHA1. noted by NARUSE, Yui, @nurse from github | ||||
| * | Get rid of modulo bias and replace the naive shuffle by the | tb | 2015-12-07 | 1 | -20/+16 |
| | | | | | | | | | Knuth-Fisher-Yates shuffle to make the random sequence of ports less biased. Based on the implementation in sys/netinet/ip_id.c. With helpful input from daniel@ and beck@ ok beck@ despite eye twitching | ||||
| * | Fix for OpenSSL CVE-2015-3195 | beck | 2015-12-04 | 2 | -6/+16 |
| | | | | | ok djm@ jsing@ | ||||
| * | Fix for OpenSSL CVE-2015-3194 | beck | 2015-12-03 | 2 | -4/+4 |
| | | | | | ok krw@ | ||||
| * | s_server also needs DNS; reported by tb@ | jca | 2015-12-01 | 1 | -2/+2 |
| | | |||||
| * | Undo previous, pledge("dns") was already present. The problem was in s_server. | jca | 2015-12-01 | 2 | -4/+4 |
| | | |||||
| * | Phrase allocation failure more clearly. ok deraadt@ | mmcc | 2015-12-01 | 1 | -3/+3 |
| | | |||||
| * | pledge dns so openssl can use dns.. noticed and fix by todd@ | beck | 2015-12-01 | 2 | -4/+4 |
| | | | | | ok jcs@ deraadt@ theo@ | ||||
| * | change Xrs from now-defunct db(3) to dbopen(3); this wasn;t a | jmc | 2015-11-30 | 2 | -6/+6 |
| | | | | | | | | straight replace: thanks both to schwarze and maja for feedback on how to rewrite parts; i've snuck in an rcs id->openbsd id change in dev_mkdb too; | ||||
| * | Wrap <icdb.h> so that calls go direct and the symbols are all weak | guenther | 2015-11-25 | 1 | -1/+12 |
| | | | | | ok tedu@ | ||||
| * | syslog() here is pointless; ok millert | deraadt | 2015-11-25 | 1 | -2/+0 |
| | | |||||
| * | Use reentrant versions of getpw{nam,uid} and getgr{nam,gid} within | millert | 2015-11-24 | 2 | -7/+10 |
| | | | | | | | | libc to avoid reusing the static buffers returned by the non-reentrant versions. Since this is inside libc we can use constants for the buffer sizes instead of having to call sysconf(). OK guenther@ deraadt@ | ||||
| * | Correct file name, no text change (no history yet, but sorry for the churn). | schwarze | 2015-11-24 | 2 | -26/+26 |
| | | | | | Issue noticed by jmc@, OK jmc@. | ||||
| * | Document that these functions are now in strings.h. | daniel | 2015-11-24 | 7 | -19/+22 |
| | | | | | ok millert@ | ||||
| * | Don't fake a bulleted list by prefixing items with 'o'. | bentley | 2015-11-24 | 1 | -8/+8 |
| | | | | | ok jmc@ | ||||
| * | rename variable 'sun' to allow building on Solaris | bcook | 2015-11-23 | 1 | -13/+13 |
| | | | | | ok deraadt@ | ||||
| * | In pledge(), put "dns" right after "inet". | jca | 2015-11-21 | 2 | -4/+4 |
| | | |||||
| * | Unbreak s_client, which should be allowed by pledge(2) to do DNS requests. | jca | 2015-11-21 | 2 | -4/+4 |
| | | | | | From todd@ | ||||
| * | Partial revert of revision 1.26: | schwarze | 2015-11-21 | 1 | -18/+18 |
| | | | | | | Do *not* install the CMS_* manuals for now given that the code is currently disabled. Cluestick applied by jsing@. | ||||
| * | point to netintro(4) rather than (now removed) networking(4); | jmc | 2015-11-21 | 2 | -6/+6 |
| | | |||||
| * | do not need sys/param.h | deraadt | 2015-11-20 | 1 | -1/+0 |
| | | |||||
| * | add a version field to prevent mayhem if different data gets stored | tedu | 2015-11-18 | 1 | -3/+7 |
| | | |||||
| * | update for new symbols and code | tedu | 2015-11-18 | 1 | -2/+2 |
| | | |||||
| * | Add icdb, the internal c database. A simpler replacement for the old | tedu | 2015-11-18 | 1 | -0/+367 |
| | | | | | Berzerkeley DB code. | ||||
| * | add QuoVadis root certificates, present in Mozilla/Chrome/Apple/Windows/etc | sthen | 2015-11-16 | 1 | -0/+722 |
| | | | | | req by and OK dlg, no objections in 5 days | ||||
| * | ui_new -> UI_new; | jmc | 2015-11-15 | 1 | -2/+2 |
| | | |||||
| * | fix references to lhash(3); | jmc | 2015-11-15 | 2 | -14/+16 |
| | | |||||
| * | mutli -> multi | miod | 2015-11-14 | 4 | -6/+6 |
| | | |||||
| * | Various *syncron* -> *synchron* typos. | miod | 2015-11-14 | 2 | -2/+2 |
| | | |||||
| * | Give clear directions on how to declare, PROTO_*() and DEF_*() new symbols | guenther | 2015-11-14 | 1 | -0/+97 |
| | | | | | prodded by deraadt@ | ||||
| * | Since rtable was hoisted to the top with setrtable, it should have no | deraadt | 2015-11-13 | 1 | -10/+7 |
| | | | | | | bearing on the following pledge setups anymore. ok benno | ||||
| * | with -V argument, dont set rtable on the socket, instead set if for the whole | benno | 2015-11-12 | 1 | -15/+4 |
| | | | | | | | | | | process, before pledge(). This way the rtable can be pledged too. the discussion about removing -V is postponed. diff from beck@, i wrote the same diff without seeing his, and various people at u2k15 agreed this is the right thing to do. ok phessler@ | ||||
| * | add mul and mul_add to NAME; | jmc | 2015-11-12 | 1 | -0/+4 |
| | | |||||
| * | update cross references after deleting the imaginary MLINKS | schwarze | 2015-11-12 | 5 | -6/+6 |
| | | | | | bn_internal(3) and lhash(3) | ||||
| * | Convert the handful of manuals that had imaginary names, | schwarze | 2015-11-12 | 13 | -1154/+2210 |
| | | | | | | give them names that really exist. This also helps jmc@'s ongoing work on improving NAME sections. | ||||
| * | add missing functions to NAME, or otherwise correct the mlink | jmc | 2015-11-11 | 30 | -56/+99 |
| | | | | | | | entry for them; feedback/ok schwarze | ||||
| * | Convert five more manuals from POD to mdoc. | schwarze | 2015-11-11 | 11 | -463/+638 |
| | | | | | | I found drafts of these in my tree, probably originally from Max Fillinger, that just needed minor polishing. | ||||
| * | Convert and enable CMS manuals. | schwarze | 2015-11-11 | 33 | -1253/+2040 |
| | | | | | Already some time ago, bcook@ said these can be installed. | ||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |