summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2014-05-06clear a stack buffer with explicit_bzeroTed Unangst
2014-05-06remove cpsw_{read,write}_4 wrapper functions and just use the realJasper Lievisse Adriaanse
2014-05-06change the create-child-sa responder code, so it does not store anyMarkus Friedl
2014-05-06zap stray word; ok markusJason McIntyre
2014-05-06Include <sys/vmmeter.h> directly instead of relying on it beingMartin Pieuchot
2014-05-06Explicitly zero out the ibufs before releasing the memory to make sureReyk Floeter
2014-05-06Fix two memory leaks: EVP_PKEY_get1_RSA() returns a referenced keyReyk Floeter
2014-05-06initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkeyMarkus Friedl
2014-05-06Fix a memleak when lookup of SA fails during forwarding of encrypted IPv6Gerhard Roth
2014-05-06cleanup IKE-SA tree handling (fixes repeated-insert & double-remove)Markus Friedl
2014-05-06Plug two xfer leaks and a buffer one.Martin Pieuchot
2014-05-06don't sa_free() in the receive path (prevents use-after-free); ok mikeb@Markus Friedl
2014-05-06send the delete with the locally allocated SPI in ikev2_init_create_child_sa()Markus Friedl
2014-05-06make sure some notify payloads are encrypted; ok mikeb@Markus Friedl
2014-05-06initial support for PFS; ok reyk@Markus Friedl
2014-05-06retire IKED_REQ_DELETE and fix delete parsing; ok reyk@Markus Friedl
2014-05-06no need to include rand.h now the RAND_seed() calls are gone.Jonathan Gray
2014-05-06knf approximationTed Unangst
2014-05-06move chacha context and buffer out of bss and allow mmap to place themTed Unangst
2014-05-06"stay backwards-compatible with 0.9.5; this should go away soon"Ted Unangst
2014-05-06remove KerberosTed Unangst
2014-05-06move a comment to make unifdef happierTed Unangst
2014-05-06bye bye SRPTed Unangst
2012-10-13import OpenSSL-1.0.1cDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2014-05-05Plug a memory leak, free the keymap's memory on detach.Martin Pieuchot
2014-05-05ca_x509_serialize: don't leak the bio buffer; ok reyk@Markus Friedl
2014-05-05make the ca_pubkey_serialize() code similar to the private key code, andMarkus Friedl
2014-05-05pfkey is unreliable, so add a select-timeout before MSG_PEEK;Markus Friedl
2014-05-05inspired by a cloudflare diff, cleanse old memory when expanding a bignum.Ted Unangst
2014-05-05Don't call the BOOTP handler indirectly.Martin Pelikan
2014-05-05Don't call the ICMP handler indirectly + clean up a bit.Martin Pelikan
2014-05-05Zap trailing whitespace. Started by pointed comments from andre@.Kenneth R Westerback
2014-05-05Ugly workaround for an overoptimistic alignment expectation of dos_partitionMiod Vallat
2014-05-05Enhance reading of saved ascii labels (-R) to process mountpointKenneth R Westerback
2014-05-05work-around the same location being reinstalled thru a different pathMarc Espie
2014-05-05Sort and group includes.Joel Sing
2014-05-05Repair BIO_socket_nbio operation.Joel Sing
2014-05-05During the great e_os.h nukathon we stopped pulling in <sys/filio.h> viaJoel Sing
2014-05-05the caller of ikev2_msg_retransmit_response already frees the sa; ok mikebMarkus Friedl
2014-05-05don't leak on pid mismatch; ok mikebMarkus Friedl
2014-05-05Kill memory debug calls that are now noops. While here, nuke an #if 0 andJoel Sing
2014-05-05OpenBSD has_SC_CLK_TCK.Joel Sing
2014-05-05validate the attribute length, too; from hshoexer; ok mikebMarkus Friedl
2014-05-05convert select to poll. from peter maloneTed Unangst
2014-05-05"new file systemsize is" -> "new filesystem size is".Kenneth R Westerback
2014-05-05Remove SRP and Kerberos support from libssl. These are complex protocolsTed Unangst
2014-05-05A couple of malloc()+memset(0) -> calloc.Kenneth R Westerback
2014-05-05Plug a memory leak related to HID descriptor parsing.Martin Pieuchot
2014-05-05Tweak comment on struct _partitionv0. It's no longer the partitionKenneth R Westerback