aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* split big lineBrent Cook2014-07-281-1/+2
|
* prefer - over /dev/stdin for cmp testBrent Cook2014-07-281-1/+1
|
* check link requirements for dl_iterate_phdrBrent Cook2014-07-281-0/+3
| | | | | | | | | Note that gcc chose to disable this rather than cause link issues with older copies of Solaris 10: https://gcc.gnu.org/ml/gcc-patches/2012-01/msg00816.html If we want to support Solaris <10.10 (I'd rather support up-to-date versions), getentropy_solaris would need to change.
* remove bash-isms from test scriptsBrent Cook2014-07-282-3/+4
|
* add strndup/strnlen compat functions from OpenBSDBrent Cook2014-07-285-1/+17
|
* include system headers for err.h compat macrosBrent Cook2014-07-281-0/+4
|
* remove thread_private.h, no longer neededBrent Cook2014-07-272-1/+0
|
* remove per-OS arc4random_buf overridesBrent Cook2014-07-241-6/+0
| | | | | | | | | | | | | | If an OS provides an arc4random_buf implementation in its C library, prefer it over an in-library version. This allows OS-specific implementations to become more robust over time. It also prevents possible link-time confusion as to which arc4random_buf implementation is in use by an application when linked with LibreSSL. The built-in unit tests will identify some common issues, such as fork safety and PID wrap handling. Other elements, such as seeding mechanisms, should be audited by the vendor or user for correctness. ok deraadt@ beck@
* clarify license and origin for pidwraptestBrent Cook2014-07-232-1/+8
| | | | | | | | The original author clarified the license, so we are fine to ship with the PID wraparound test. Run it by default if libressl is using the native arc4random supplied from the OS. ok deraadt@
* add calloc to the list (integer overflow..)Bob Beck2014-07-211-1/+1
|
* Update README to indicate general policy about intrinsicsBob Beck2014-07-211-0/+5
|
* bump versionBrent Cook2014-07-211-1/+1
|
* build openbsd memmem implementation for explicit_bzero testBrent Cook2014-07-213-1/+7
| | | | | | memmem is not always available, and not all memmem's work the same way ok beck@ guenther@
* compute absolute paths to sourceBrent Cook2014-07-211-10/+11
| | | | | | removes relative path hackery ok beck@ guenther@
* better handle disabled tests and exclude filesBrent Cook2014-07-212-7/+21
| | | | ok beck@ guenther@
* rename local tests to end in test.cBrent Cook2014-07-212-0/+0
| | | | ok beck@ guenther@
* test for and use system explicit_bzero if it existsBrent Cook2014-07-212-1/+10
| | | | ok beck@ guenther@
* include err.h shimBrent Cook2014-07-213-1/+28
| | | | | | Includes compatible replacements, or uses system err.h if available. ok beck@ guenther@
* use correct link order for app and testsBrent Cook2014-07-212-3/+3
| | | | ok beck@ guenther@
* preserve timestamps on copy from upstream checkoutBrent Cook2014-07-211-28/+30
| | | | | | this saves time on rebuilds when testing tarballs ok beck@ guenther@
* conditionally disable -Wpointer-sign where supportedBrent Cook2014-07-201-0/+10
| | | | ok beck@
* update guard, add win32 support for endian.hBrent Cook2014-07-201-6/+22
| | | | | | Thanks to Jonas 'Sortie' Termansen for pointing the guard inconsistency out. ok beck@
* Use correct static link order for unit tests.Brent Cook2014-07-201-2/+2
| | | | | | thanks to Jonas 'Sortie' Termansen ok beck@
* include <_bsd_types.h> on MinGWBrent Cook2014-07-201-0/+4
| | | | ok beck@
* remove thread_private.h defines, moved to arc4random_*.hBrent Cook2014-07-191-14/+0
|
* update to newly-refactored arc4random compatibility shimsBrent Cook2014-07-184-0/+23
| | | | | | the thread-private bits can move next ok beck@
* initial underpinnings for mingw/cross compilation supportBrent Cook2014-07-182-13/+22
| | | | | | | | | Use canonical host rather than target so that this works: CC=i686-w64-mingw32-gcc ./configure --host=i686-w64-mingw32 Conditionally compile Linux issetugid compatibility function ok beck@
* move fork_rand.sh so it does not get run every timeBrent Cook2014-07-151-0/+0
| | | | | | the test takes many minutes to run on an OS with a slow fork() call ok beck@
* indicate failure to the test harnessBrent Cook2014-07-151-0/+1
| | | | ok beck@
* added fork_rand test to check for PID wraparoundBrent Cook2014-07-153-2/+93
| | | | ok beck@
* crank versionBob Beck2014-07-151-1/+1
|
* register the atfork handler from arc4randomBrent Cook2014-07-151-0/+8
| | | | | | | | | | | | | | | | | | From kettenis@ People have suggested using pthread_atfork(3) before, but discarded the idea because it involves linking with -lpthread, which has other undesirable consequences. However: * Most systems actually have pthread_atfork(3) in libc. I verified this on OS X and Solaris. I believe this is the case on Linux systems that use musl as well. * On Linux systems that use glibc, this isn't the case. However, those systems have __register_atfork(3), which is fully documented in the "Linux Standard Base Core Specification". ok kettenis@ deraadt@ beck@
* enable the asn1 testBrent Cook2014-07-151-1/+1
|
* Add the public signing key so it can be fetched from githubBob Beck2014-07-141-0/+2
|
* give section 1 man pages a .1 suffix instead of .3Mark Kettenis2014-07-141-2/+2
| | | | ok beck@
* remove stray brackets in --with-enginesdir/openssldir supportMark Kettenis2014-07-141-2/+2
| | | | ok beck@
* use generic test for clock_gettime flagsBrent Cook2014-07-121-1/+3
| | | | ok beck@
* added configurable ENGINESDIR and OPENSSLDIRBrent Cook2014-07-121-0/+10
| | | | | | use --with-enginesdir and --with-openssldir ok beck@
* CrankBob Beck2014-07-131-1/+1
| | | | ok bcook@
* remove problematic DISTCLEANFILES variableBob Beck2014-07-131-2/+0
| | | | ok bcook@
* cleanup auto-generated .pc filesBrent Cook2014-07-121-1/+1
| | | | ok beck@
* rc4_util.c went awayBob Beck2014-07-131-1/+1
| | | | ok bcook@
* add platform libraries to libcompat's LIBADD listBrent Cook2014-07-128-4/+66
| | | | ok beck@
* disable unconditional -Wno-pointer-signBrent Cook2014-07-111-1/+1
| | | | ok beck@
* add a check to see if <sys/sysctl.h> existsBrent Cook2014-07-111-0/+2
| | | | ok beck@
* We're probably gonna need this for solaris 10Bob Beck2014-07-121-0/+101
|
* source library version from a common place, speed man buildsBrent Cook2014-07-124-23/+22
| | | | | | | grab library version from VERSION file build manpages only on changes ok beck@
* hide unit test build results in .gitignoreBrent Cook2014-07-121-2/+3
| | | | ok beck@
* source the proper man links fileBrent Cook2014-07-111-1/+1
| | | | otherwise, this picks up 'links' in the path
* remove unconditional -WerrorBrent Cook2014-07-111-1/+1
| | | | | | Allow warnings to be reported without failing the entire build. ok beck@