From 6f2ee5a9a79b7b50dcd481715ff4209cfb40223c Mon Sep 17 00:00:00 2001
From: tb <>
Date: Wed, 31 Dec 2025 13:48:01 +0000
Subject: Remove STABLE_FLAGS_MALLOC

Formerly used by ASN1_STRING_TABLE_{add,cleanup}() which were removed two
years ago. Annotate why STABLE_NO_MASK stays: as usual, security/xca ends
up being the sole consumer of some nonsense. Apparently it needs its own
reimplementation of ASN1_STRING_set_by_NID(), another removable public API
that should never have been exposed.

ok kenjiro
---
 src/lib/libcrypto/asn1/asn1.h | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'src/lib/libcrypto/asn1')

diff --git a/src/lib/libcrypto/asn1/asn1.h b/src/lib/libcrypto/asn1/asn1.h
index ec31b9dd19..7285ad0590 100644
--- a/src/lib/libcrypto/asn1/asn1.h
+++ b/src/lib/libcrypto/asn1/asn1.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: asn1.h,v 1.93 2025/12/21 09:37:05 tb Exp $ */
+/* $OpenBSD: asn1.h,v 1.94 2025/12/31 13:48:00 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -202,8 +202,9 @@ typedef struct ASN1_ENCODING_st {
 /* Used with ASN1 LONG type: if a long is set to this it is omitted */
 #define ASN1_LONG_UNDEF	0x7fffffffL
 
-#define STABLE_FLAGS_MALLOC	0x01
+/* Used by security/xca */
 #define STABLE_NO_MASK		0x02
+
 #define DIRSTRING_TYPE	\
  (B_ASN1_PRINTABLESTRING|B_ASN1_T61STRING|B_ASN1_BMPSTRING|B_ASN1_UTF8STRING)
 #define PKCS9STRING_TYPE (DIRSTRING_TYPE|B_ASN1_IA5STRING)
-- 
cgit v1.2.3-55-g6feb