summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-01-06Revise for change to tls_key_share_peer_public()Joel Sing
2022-01-06Convert legacy TLS client to tls_key_share.Joel Sing
This requires adding DHE support to tls_key_share. In doing so, tls_key_share_peer_public() has to lose the group argument and gains an invalid_key argument. The one place that actually needs the group check is tlsext_keyshare_client_parse(), so add code to do this. ok inoguchi@ tb@
2022-01-06Allocate and free the EVP_AEAD_CTX struct in tls13_record_protection.Joel Sing
This brings the code more in line with the tls12_record_layer and reduces the effort needed to make EVP_AEAD_CTX opaque. Prompted by and ok tb@
2022-01-06Cleanup mft file handling, especially the stale mft bits.Claudio Jeker
Move staleness check up into mft_parse_econtent() to simplify code. Remove the big FIXME bits since they are no longer needed. The parent process will only process MFTs that are not stale. Cleanup a few other bits mainly unneccessary else if cascades and use valid_filename() to check if the filename embedded in the mft fileandhash is sensible. OK tb@
2022-01-06Use a 64-bit integer for pcitag_t and define PCITAG_NODE and PCITAG_OFFSETTheo de Raadt
macros to make kernel build again, same diff as armv7. ok kettenis visa
2022-01-06Add regress tests for ASN1_BIT_STRING.Joel Sing
2022-01-06Add a comment that explains why build_addr_block_tests isn't constTheo Buehler
2022-01-06Convert SCT verification to CBB.Joel Sing
ok inoguchi@ tb@
2022-01-06Sync from libssl.Joel Sing
2022-01-06Test CBB_add_u64()Joel Sing
2022-01-06Provide CBB_add_u64()Joel Sing
Prompted by and ok tb@
2022-01-06minor tweaks, no code changeTheo Buehler
Adjust a comment to reality, zap a stray empty line and fix whitespace before comment after #endif
2022-01-06With openssl-ruby-tests 20220105, test_post_connection_check_wildcard_sanTheo Buehler
is now an unexpected pass, so remove it from the expected failures.
2022-01-06Make it possible to compile the patterns utility with the source treeAnton Lindqvist
checked out anywhere. While here, tidy up the Makefile a bit. ok deraadt@
2022-01-06Free memory before assign to avoid leakKinichiro Inoguchi
CID 313263 313301 313322
2022-01-06Free memory if error occurredKinichiro Inoguchi
2022-01-06Remove NULL check before freeKinichiro Inoguchi
2022-01-06Fix a copy-paste error that led to an out-of-bounds access.Theo Buehler
Found via a crash on bluhm's i386 regress test box
2022-01-06Use a 64-bit integer for pcitag_t and define PCITAG_NODE and PCITAG_OFFSETMark Kettenis
macros to make armv7 build again. ok deraadt@
2022-01-06Ignore windows without a size set (may be used for pane only), fromNicholas Marriott
Anindya Mukherjee.
2022-01-06regenJonathan Gray
2022-01-06ati 0x15e7 confirmed to be barcelo, 2022 ryzen 5000 apusJonathan Gray
uses the same green sardine firmware as cezanne
2022-01-06Add test coverage for SCT validation.Joel Sing
Of note, the public APIs for this mean that the only way you can add a CTLOG is by reading a configuration file from disk - there is no programmatic way to do this.
2022-01-06t_syscall was a test for the gcc 1.x off_t syscall padding,Philip Guenther
which was an implementation detail and has been deleted, so delete the test
2022-01-06drm/amdgpu: add support for IP discovery gc_info table v2Jonathan Gray
From Alex Deucher b8553330a07749e488d143b5704adf1042fd7c0a in linux 5.10.y/5.10.90 5e713c6afa34c0fd6f113bf7bb1c2847172d7b20 in mainline linux
2022-01-06drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly ↵Jonathan Gray
enabled From chen gong 28863ffe21ff711d5109e3c208676258bdec3a1f in linux 5.10.y/5.10.90 b7865173cf6ae59942e2c69326a06e1c1df5ecf6 in mainline linux
2022-01-06unstub amdgpu_gem_force_release()Jonathan Gray
2022-01-05add a comment so I don't make this mistake againDamien Miller
2022-01-05fix cut-and-pasto in error messageDamien Miller
2022-01-05no longer neededTheo de Raadt
2022-01-05funopen(): change seekfn argument to use off_t, not fpos_tTodd C. Miller
On BSD, fpos_t is typedef'd to off_t but some systems use a struct. This means fpos_t is not a portable function argument or return value. Both FreeBSD and the Linux libbsd funopen() have switched to off_t for this--we should too. From Joe Nelson. OK deraadt@
2022-01-05Prepare to provide DSA_bits()Theo Buehler
Used by Qt5 and Qt6 and slightly reduces the patching in there. ok inoguchi jsing
2022-01-05Prepare to provide BIO_set_retry_reason()Theo Buehler
Needed by freerdp. ok inoguchi jsing
2022-01-05Prepare to provide a number of RSA accessorsTheo Buehler
This adds RSA_get0_{n,e,d,p,q,dmp1,dmq1,iqmp,pss_params}() which will be exposed in the upcoming bump. ok inoguchi jsing
2022-01-05Prepare to provide ECDSA_SIG_get0_{r,s}()Theo Buehler
ok inoguchi jsing
2022-01-05Prepare to provide DH_get_length()Theo Buehler
Will be needed by openssl(1) dhparam. ok inoguchi jsing
2022-01-05Prepare to provide DSA_get0_{p,q,g,{priv,pub}_key}()Theo Buehler
ok inoguchi jsing
2022-01-05Prepare to provide DH_get0_{p,q,g,{priv,pub}_key}()Theo Buehler
These are accessors that allow getting one specific DH member. They are less error prone than the current getters DH_get0_{pqg,key}(). They are used by many ports and will also be used in base for this reason. Who can remember whether the pub_key or the priv_key goes first in DH_get0_key()? ok inoguchi jsing
2022-01-05Prepare to provide BIO_set_next().Theo Buehler
This will be needed in libssl and freerdp after the next bump. ok inoguchi jsing
2022-01-05Prepare to provide X509_{set,get}_verify() and X509_STORE_get_verify_cb()Theo Buehler
as well as the X509_STORE_CTX_verify_cb and X509_STORE_CTX_verify_fn types This will fix the X509_STORE_set_verify_func macro which is currently broken, as pointed out by schwarze. ok inoguchi jsing
2022-01-05Use "bus-range" property to initialize the bus number configuration ofMark Kettenis
the bridge when present on FDT platforms. Needed on platforms like the Apple M1 to make sure the PCI bus numbers match the IOMMU setup required by the device tree. ok patrick@
2022-01-05increase lifetime of wtmp, since it is annoyingly shortTheo de Raadt
discussed with millert
2022-01-05Unindent a few lines of code and avoid shadowed variables.Theo Buehler
2022-01-05Rename {c,p}_{min,max} into {child,parent}_{min,max}Theo Buehler
2022-01-05Remove kbind(2)'s restriction that a target buffer not cross pagePhilip Guenther
boundaries: hppa has 8-byte PLT entries that sometimes do that. ok kettenis@
2022-01-05Two minor KNF tweaksTheo Buehler
2022-01-05Use child_aor and parent_aor instead of aorc and aorpTheo Buehler
suggested by jsing
2022-01-05Rename fp and fc into parent_af and child_af for readability.Theo Buehler
suggested by jsing
2022-01-05Globally rename all IPAddressFamily *f into af since this is slightlyTheo Buehler
more readable. Repeated complaints by jsing
2022-01-05Add a helper function to turn unchecked (but sound) use ofTheo Buehler
sk_find + sk_value into something easier to follow and swallow. ok inoguchi jsing