| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Enable the use of the kernel __realpath() system call in the libc wrapper. | beck | 2019-05-28 | 1 | -3/+136 |
| | | | | | | | | | For now, this also still uses the existing realpath implmentation and emits a syslog if we see differening results. Once we have run with that for a little while we will remove the old code ok deraadt@ | ||||
| * | Throw malloc_conceal and freezero into the mix. | otto | 2019-05-23 | 1 | -3/+8 |
| | | |||||
| * | Only override size of chunk if we're not given the actual length. | otto | 2019-05-23 | 1 | -2/+3 |
| | | | | | Fixes malloc_conceal...freezero with malloc options C and/or G. | ||||
| * | bump to LibreSSL 3.0.0 | bcook | 2019-05-23 | 1 | -3/+3 |
| | | | | | ok tb@ | ||||
| * | add stdlib.h for reallocarray | bcook | 2019-05-23 | 1 | -1/+2 |
| | | |||||
| * | *an* RSA; | jmc | 2019-05-20 | 3 | -9/+9 |
| | | |||||
| * | clarify that later flags modify earlier flags; | schwarze | 2019-05-19 | 1 | -2/+4 |
| | | | | | | triggered by a question from Jan Stary <hans at stare dot cz> on misc@; OK otto@ | ||||
| * | More consistently put remarks about the less useful LC_* categoties, | schwarze | 2019-05-16 | 2 | -14/+26 |
| | | | | | | | i.e. those other than LC_CTYPE, into the CAVEATS section, and standardize wording somewhat. OK jmc@ | ||||
| * | delete two stray blank lines | schwarze | 2019-05-15 | 1 | -4/+2 |
| | | |||||
| * | check result of ftruncate() as we do write() below | bcook | 2019-05-15 | 1 | -2/+4 |
| | | | | | ok beck@ | ||||
| * | s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there is | bcook | 2019-05-15 | 3 | -29/+20 |
| | | | | | | | | no need to check for it. Fixes COV-165788, identified with help from Alex Bumstead. ok jsing@ | ||||
| * | Correct missing test to determine if length is in bytes or in bits. | beck | 2019-05-14 | 1 | -1/+3 |
| | | | | | | Issue found by Guido Vranken <guidovranken@gmail.com> ok tedu@ tb@ | ||||
| * | Use propper regress target to integrate better into test framework. | bluhm | 2019-05-14 | 1 | -2/+4 |
| | | |||||
| * | Remove unused pad check, which is handled by tls1_cbc_remove_padding() now. | bcook | 2019-05-13 | 1 | -4/+2 |
| | | | | | | | Fixes COV-174858 ok tb@ | ||||
| * | Acquire mutex before incrementing the refcount. Fixes COV-186144 | bcook | 2019-05-13 | 1 | -1/+3 |
| | | | | | ok tb@ | ||||
| * | Move 'how this works' details from namespace.h to DETAILS | guenther | 2019-05-13 | 2 | -112/+136 |
| | | |||||
| * | explicitly mention that RES_NOALIASES has no effect; | schwarze | 2019-05-13 | 1 | -3/+4 |
| | | | | | | jmc@ noticed that the text wasn't completely clear; OK jmc@ | ||||
| * | Mention introduction of *_conceal. | otto | 2019-05-13 | 1 | -2/+8 |
| | | |||||
| * | The call to fseek(fp, -1, SEEK_END) also sets the reported size to | bluhm | 2019-05-13 | 1 | -10/+10 |
| | | | | | | | this value. To match the expectation of the test again, move this line before the the code that sets the final position. OK yasuoka@ | ||||
| * | Fix signed overflow in X509_CRL_print(). | tb | 2019-05-12 | 1 | -1/+4 |
| | | | | | | | fixes oss-fuzz #14558 ok beck jsing | ||||
| * | Revert the other hunk of r1.36 as well: in the case of CCM, ccm.key is | tb | 2019-05-12 | 1 | -1/+11 |
| | | | | | | | | | | assigned from aesni_ccm_init_key() via CRYPTO_ccm128_init(), so it needs to be copied over... Pointed out by Guido Vranken. ok jsing | ||||
| * | Stop the eyebleed in here and just use calloc | beck | 2019-05-12 | 1 | -31/+8 |
| | | |||||
| * | $OpenBSD$ | tb | 2019-05-11 | 4 | -0/+4 |
| | | |||||
| * | Remove commented out rc5 bits | tb | 2019-05-11 | 7 | -20/+6 |
| | | |||||
| * | Initialize EC_KEY_METHOD before use. | bcook | 2019-05-10 | 1 | -2/+2 |
| | | | | | | | Fixes COV-186146 ok tb, beck | ||||
| * | Revert part of r1.36: in the case of GCM, gcm.key is assigned from | tb | 2019-05-10 | 1 | -1/+7 |
| | | | | | | | | | | aesni_gcm_init_key() via CRYPTO_gcm128_init(), so it needs to be copied over... Fixes cryptofuzz issue #14352 and likely also #14374. ok beck jsing | ||||
| * | Inroduce malloc_conceal() and calloc_conceal(). Similar to their | otto | 2019-05-10 | 2 | -199/+219 |
| | | | | | | counterparts but return memory in pages marked MAP_CONCEAL and on free() freezero() is actually called. | ||||
| * | Add a test vector for Streebog 512 from Guido Vranken | tb | 2019-05-09 | 1 | -1/+2 |
| | | |||||
| * | Fix incorrect carry operation in 512 bit addition: in the case | tb | 2019-05-09 | 1 | -6/+8 |
| | | | | | | | | | | that there is already a carry and Sigma[i-1] == -1, the carry must be kept. From Dmitry Eremin-Solenik. Fixes incorrect Streebog result reported by Guido Vranken. | ||||
| * | Proper prototype for main(). Make sparc64 happier. | claudio | 2019-05-09 | 1 | -2/+4 |
| | | |||||
| * | In DTLS, use_srtp is part of the extended server hello while in TLSv1.3, | tb | 2019-05-08 | 1 | -2/+3 |
| | | | | | | | | | | | it is an encrypted extension. Include it in the server hello for now. This will have to be revisited once TLSv1.3 gets there. Fixes SRTP negotiation. Problem found by two rust-openssl regress failures reported by mikeb. with & ok beck | ||||
| * | initialize safestack pointers | bcook | 2019-05-08 | 3 | -6/+6 |
| | | | | | ok beck@, tb@ | ||||
| * | Make sure that the tag buffer size is equal to the tag size | tb | 2019-05-08 | 1 | -2/+2 |
| | | | | | | | | | | in CRYPTO_ccm128_tag(). Otherwise the caller might end up using the part of the tag buffer that was left uninitialized. Issue found by Guido Vranken. ok inoguchi | ||||
| * | Add test fseek(,-1) works properly. | yasuoka | 2019-05-02 | 1 | -3/+8 |
| | | |||||
| * | Avoid an undefined shift in ASN1_ENUMERATED_get(). | tb | 2019-04-28 | 1 | -4/+9 |
| | | | | | | | | | (same fix as in a_int.c rev 1.34) Fixes oss-fuzz issue #13809 ok beck, jsing | ||||
| * | Avoid an undefined shift in ASN1_INTEGER_get(). | tb | 2019-04-28 | 1 | -4/+8 |
| | | | | | | | Fixes oss-fuzz issue #13804 ok beck, jsing | ||||
| * | Use calloc/freezero when allocating and freeing the session ticket data. | jsing | 2019-04-25 | 1 | -4/+6 |
| | | | | | | | The decrypted session ticket contains key material. ok tb@ | ||||
| * | Use EVP_CIPHER_CTX_{new,free}() and HMAC_CTX_{new,free}() instead of | jsing | 2019-04-25 | 1 | -24/+29 |
| | | | | | | | | | | allocating on stack. While here also check the return values from EVP_DecryptInit_ex() and HMAC_Init_ex(). ok tb@ | ||||
| * | Rename some variables in tls_decrypt_ticket(). | jsing | 2019-04-25 | 1 | -18/+18 |
| | | | | | | | | | | Rename mlen to hlen since it is a hmac (and this matches hctx and hmac). Rename ctx to cctx since it is a cipher context and ctx is usually used to mean SSL_CTX in this code. ok tb@ | ||||
| * | Do not check for working go executable during make clean cleandir obj. | bluhm | 2019-04-24 | 1 | -1/+3 |
| | | | | | reminded by jsing@ | ||||
| * | Do not check for working go executable during make clean cleandir obj. | bluhm | 2019-04-24 | 1 | -1/+3 |
| | | |||||
| * | Convert tls_decrypt_ticket() to CBS. | jsing | 2019-04-23 | 1 | -44/+72 |
| | | | | | | | This removes various pointer arithmetic and manual length checks. ok tb@ | ||||
| * | Add error checking to i2v_POLICY_MAPPINGS(). | tb | 2019-04-22 | 1 | -9/+26 |
| | | | | | ok jsing | ||||
| * | Add error checking to i2v_POLICY_CONSTRAINTS(). | tb | 2019-04-22 | 1 | -5/+19 |
| | | | | | ok jsing | ||||
| * | Add error checking to i2v_EXTENDED_KEY_USAGE(). | tb | 2019-04-22 | 1 | -8/+23 |
| | | | | | ok jsing | ||||
| * | Add error checking to i2v_ASN1_BIT_STRING(). | tb | 2019-04-22 | 1 | -4/+18 |
| | | | | | ok jsing | ||||
| * | Add error checking to i2v_BASIC_CONSTRAINTS(). | tb | 2019-04-22 | 1 | -3/+18 |
| | | | | | ok jsing | ||||
| * | Add error checking to i2v_AUTHORITY_INFO_ACCESS(). While there, replace | tb | 2019-04-22 | 1 | -19/+27 |
| | | | | | | | an ugly strlen + malloc + strcat/strcpy dance by a simple asprintf(). ok jsing | ||||
| * | Avoid potential double frees in i2v_AUTHORITY_KEYID(), i2v_GENERAL_NAME() | tb | 2019-04-22 | 2 | -6/+22 |
| | | | | | | | | | | | | | | | and i2v_GENERAL_NAMES() by taking ownership of the extlist only if we were passed NULL. Otherwise it remains the caller's responsibility to free it. To do so, we allocate the extlist explicitly instead of using X509V3_add_value()'s implicit allocation feature. Preserve behavior in i2v_AUTHORITY_KEYID() by adding an explicit check that something was pushed onto the stack. The other i2v_* functions will receive a similar treatment in upcoming commits. ok jsing | ||||
| * | Provide a derr label (decode/decrypt error) in tls1_decrypt_ticket(). | jsing | 2019-04-22 | 1 | -41/+29 |
| | | | | | | | This handles the ret = 2 case and makes the code more readable. ok tb@ | ||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |