Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-04-18 | XXXXXXXXXXXXXXXX -> XXX | Ted Unangst | |
XXXXXXXXXXXXXXXXXXXXXXX -> XXXX | |||
2014-04-18 | unifdef NO_SOCK | Ted Unangst | |
2014-04-18 | now that knf carpet bombing is finished, switch to hand to hand combat. | Ted Unangst | |
still not sure what to make of mysteries like this: for (i = 7; i >= 0; i--) { /* increment */ | |||
2014-04-18 | Unsurprisingly, since <unistd.h> was so darn hard to find for OpenSSL developers | Bob Beck | |
they had resorted to manually protyping read(2) instead of incredible amount of preprocessor wizardry needed to find the ever illusive <unistd.h>. Let's just include <unistd.h> and we don't need to do this.. While we're at it flense out _OSD_POSIX and __DGJPP__ cruft. ok krw@ | |||
2014-04-18 | Do not ask the user to pass either -DB_ENDIAN or -DL_ENDIAN to the compiler, | Miod Vallat | |
but rather figure out the endianness from <machine/endian.h> automagically; help from guenther@ ok jca@ guenther@ beck@ and the rest of the `Buena SSL rampage club' | |||
2014-04-18 | Shrink a local buffer to the size it really needs to be; this is the only | Miod Vallat | |
discrepancy found while checking proper {HEX,DECIMAL}_SIZE macro usage, which is confusing enough. tweaks and ok jca@, ok guenther@ | |||
2014-04-18 | eroMgib dne- nai 68xtnetelca .s | Miod Vallat | |
2014-04-18 | Not welcome | Miod Vallat | |
2014-04-18 | typo | Miod Vallat | |
2014-04-18 | first round of static config. ok miod | Ted Unangst | |
2014-04-18 | Put back i2d_ASN1_SET() and d2i_ASN1_SET() from the NO_ASN1_OLD prune, as there | Miod Vallat | |
are still some 3rd-party code using it, and fixing them is not trivial. As an excuse gift, the memory leaks on failure in resurrected a_set.c have been fixed. | |||
2014-04-18 | guenther would prefer more separation | Ted Unangst | |
2014-04-18 | we need to crank | Ted Unangst | |
2014-04-18 | remove include files not needed | Theo de Raadt | |
2014-04-18 | Finish zapping SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION usage; only keep | Philip Guenther | |
the #define for compat, but document that it's a no-op now. Also, neuter the -legacy_renegotiation option to "openssl s_{client,server}" ok beck@ | |||
2014-04-18 | use the portable construct around asprintf; pointed out by halex | Theo de Raadt | |
2014-04-18 | Some dude named Tavis Ormandy reported a bug which has gone unfixed. | Ted Unangst | |
http://marc.info/?l=openssl-users&m=138014120223264&w=2 Arguably a doc bug, but we argue not. If you parse a new cert into memory occupied by a previously verified cert, the new cert will inherit that state, bypassing future verification checks. To avoid this, we will always start fresh with a new object. grudging ok from guenther, after i threatened to make him read the code yet again. "that ok was way more painful and tiring then it should have been" | |||
2014-04-18 | Put the final pieces from e_os.h in the required places, and remove it. | Theo de Raadt | |
"dance on it's grave" says beck ok guenther beck | |||
2014-04-18 | blank lines between decls and code | Ted Unangst | |
2014-04-18 | in CONF_get1_default_config_file(), don't calculate a buffer size, | Theo de Raadt | |
malloc it, do unbounded strlcpy's to it... but instead of asnprintf. While there, let's put a '/' between the two path components! Wonder how old that bug is.. ok guenther | |||
2014-04-18 | More KNF. | Joel Sing | |
2014-04-18 | another round of chemo for the RAND code to provide clarity. | Ted Unangst | |
ok deraadt | |||
2014-04-18 | More KNF. | Joel Sing | |
2014-04-18 | egd support is too dangerous to leave where somebody might find it. | Ted Unangst | |
ok deraadt. | |||
2014-04-18 | More KNF. | Joel Sing | |
2014-04-18 | unistd.h for protos where needed | Theo de Raadt | |
2014-04-18 | define RFILE only in the file that needs it | Theo de Raadt | |
2014-04-18 | More KNF. | Joel Sing | |
2014-04-18 | add braces missed when fixing leaks | Jonathan Gray | |
2014-04-18 | More KNF. | Joel Sing | |
2014-04-18 | More KNF. | Joel Sing | |
2014-04-18 | igetest.c moved to regress we don't need another copy | Jonathan Gray | |
ok miod@ | |||
2014-04-18 | fix another potential double free | Jonathan Gray | |
ok miod@ lteo@ jca@ | |||
2014-04-18 | -netware | Ted Unangst | |
2014-04-18 | blunt force knf | Ted Unangst | |
2014-04-18 | lob a few more knf grenades in here to soften things up. | Ted Unangst | |
2014-04-18 | putting most of the braces in the right column is the very least we can do. | Ted Unangst | |
2014-04-17 | whack a bunch of disabled code. ok beck lteo | Ted Unangst | |
2014-04-17 | stab at indentation | Ted Unangst | |
2014-04-17 | don't fake up SSIZE_MAX | Ted Unangst | |
2014-04-17 | more windows/netware leftovers | Ted Unangst | |
2014-04-17 | delete if 0 code | Ted Unangst | |
2014-04-17 | more spring VMS cleanup | Giovanni Bechis | |
ok miod@ lteo@ | |||
2014-04-17 | no need for a variable which is hardcoded and only used in an snprintf, | Stuart Henderson | |
ok giovanni@. tidy comments nearby while there. | |||
2014-04-17 | no longer need to fool emacs indentation and other if (0) oddities. | Ted Unangst | |
2014-04-17 | always build in RSA and DSA. ok deraadt miod | Ted Unangst | |
2014-04-17 | kill REF_PRINT/REF_CHECK debugging framework noone would use | Theo de Raadt | |
ok miod | |||
2014-04-17 | Some VMS and WIN32 cleanup | Giovanni Bechis | |
ok miod@ lteo@ | |||
2014-04-17 | Get rid of MS Visual C compiler and Intel C compiler specific defines. | Miod Vallat | |
2014-04-17 | SHA and AES (and sadly MD5) can't be considered optional. ok beck miod | Ted Unangst | |