A mirror of https://github.com/libressl/portable.git https://git.lua4.win/portable/atom?h=v2.2.0 2015-06-05T09:50:18+00:00 2015-06-05T09:50:18+00:00 Brent Cook busterb@gmail.com 2015-06-05T09:31:56+00:00 urn:sha1:b4a6a615134b59435efbecdd8c5b5407b6af8e8f this also adds a rename shim that allows overwrites 2015-04-14T12:55:23+00:00 Brent Cook busterb@gmail.com 2015-04-14T12:55:23+00:00 urn:sha1:3096ab0e45351b05b1f1df51cedc183ba6ca7763 From deraadt@ upstream: Remove all getenv() calls, especially those wrapped by issetugid(). getenv()'s wrapped by issetugid() are safe, but issetugid() is ... difficult to impliment on many operating systems. By accident, a grand experiment was run over the last year, where issetugid() returned 1 (the safe value) on a few operating systems. Noone noticed & complained that certain environment variables were not working....... 2015-03-31T14:25:21+00:00 Brent Cook busterb@gmail.com 2015-02-11T05:49:31+00:00 urn:sha1:fe3f7fc6365bfaac3418a72256b8c11603e80cbf This includes a WIP failsafe issetugid for now, while research continues on the proper way to do this in a race-free fashion in AIX. 2015-02-18T00:15:17+00:00 Brent Cook bcook@openbsd.org 2015-02-17T04:22:29+00:00 urn:sha1:a859b93ff583300349ee0b7fb8231cf6c387e269 Noticed while testing similar code for AIX. ok beck@ 2015-02-17T04:30:27+00:00 Brent Cook bcook@openbsd.org 2015-02-17T04:19:01+00:00 urn:sha1:adc416e922f98b4b52093f26c91216e3b4106f3d Fail closed if we cannot obtain the process flags. Noticed while looking at a similar function for AIX. 2015-01-21T12:14:24+00:00 Brent Cook busterb@gmail.com 2015-01-21T12:14:24+00:00 urn:sha1:a2233651277a50955cdc4c7810da7a12e4e33551 The current NetBSD release, 6.1.5, fails to reseed arc4random fork. Work around it by providing arc4random/getentropy shims. Revisit when NetBSD 7 is available. 2015-01-06T23:47:16+00:00 kinichiro kinichiro.inoguchi@gmail.com 2014-12-08T02:08:45+00:00 urn:sha1:0308b63cbf9983a9bcddc2794b1c9fa0d92f18ac tested on: HP-UX 11.31 ia64, gcc 4.7.1(HP AllianceOne version) gcc 4.2.3(http://hpux.connect.org.uk) HP C/aC++ HP-UX defaults to use LP32 and it treats long as 32 bit (= 4 bytes). This build forces LP64 for treating long as 64 bit. 2014-12-03T23:02:29+00:00 Brent Cook busterb@gmail.com 2014-11-20T06:26:55+00:00 urn:sha1:58fcd3c39c73d83eb9782a8ef935498b18b5ae73 This adds a Windows-specific versions of several symbols from libcrypto and openssl(1). 2014-11-18T13:41:08+00:00 宋冬生 dongsheng.song@gmail.com 2014-11-05T12:52:00+00:00 urn:sha1:648e9136276ca214a3af6c02e7b643d4029e3848 ok bcook@ 2014-11-03T07:19:36+00:00 Brent Cook bcook@openbsd.org 2014-10-28T00:22:03+00:00 urn:sha1:0aeb93b9fc9ecf0f9c2e98444545de485168823d The FreeBSD-native arc4random_buf implementation falls back to weak sources of entropy if the sysctl fails. Remove these dangerous fallbacks by overriding locally. Unfortunately, pthread_atfork() is broken on FreeBSD (at least 9 and 10) if a program does not link to -lthr. Callbacks registered with pthread_atfork() simply fail silently. So, it is not always possible to detect a PID wraparound. I wish we could do better. This improves arc4random_buf's safety compared to the native FreeBSD implementation. Tested on FreeBSD 9 and 10. ok beck@ deraadt@