Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-01-06 | Revise for change to tls_key_share_peer_public() | Joel Sing | |
2022-01-06 | Convert legacy TLS client to tls_key_share. | Joel Sing | |
This requires adding DHE support to tls_key_share. In doing so, tls_key_share_peer_public() has to lose the group argument and gains an invalid_key argument. The one place that actually needs the group check is tlsext_keyshare_client_parse(), so add code to do this. ok inoguchi@ tb@ | |||
2022-01-06 | Allocate and free the EVP_AEAD_CTX struct in tls13_record_protection. | Joel Sing | |
This brings the code more in line with the tls12_record_layer and reduces the effort needed to make EVP_AEAD_CTX opaque. Prompted by and ok tb@ | |||
2022-01-06 | Cleanup mft file handling, especially the stale mft bits. | Claudio Jeker | |
Move staleness check up into mft_parse_econtent() to simplify code. Remove the big FIXME bits since they are no longer needed. The parent process will only process MFTs that are not stale. Cleanup a few other bits mainly unneccessary else if cascades and use valid_filename() to check if the filename embedded in the mft fileandhash is sensible. OK tb@ | |||
2022-01-06 | Use a 64-bit integer for pcitag_t and define PCITAG_NODE and PCITAG_OFFSET | Theo de Raadt | |
macros to make kernel build again, same diff as armv7. ok kettenis visa | |||
2022-01-06 | Add regress tests for ASN1_BIT_STRING. | Joel Sing | |
2022-01-06 | Add a comment that explains why build_addr_block_tests isn't const | Theo Buehler | |
2022-01-06 | Convert SCT verification to CBB. | Joel Sing | |
ok inoguchi@ tb@ | |||
2022-01-06 | Sync from libssl. | Joel Sing | |
2022-01-06 | Test CBB_add_u64() | Joel Sing | |
2022-01-06 | Provide CBB_add_u64() | Joel Sing | |
Prompted by and ok tb@ | |||
2022-01-06 | minor tweaks, no code change | Theo Buehler | |
Adjust a comment to reality, zap a stray empty line and fix whitespace before comment after #endif | |||
2022-01-06 | With openssl-ruby-tests 20220105, test_post_connection_check_wildcard_san | Theo Buehler | |
is now an unexpected pass, so remove it from the expected failures. | |||
2022-01-06 | Make it possible to compile the patterns utility with the source tree | Anton Lindqvist | |
checked out anywhere. While here, tidy up the Makefile a bit. ok deraadt@ | |||
2022-01-06 | Free memory before assign to avoid leak | Kinichiro Inoguchi | |
CID 313263 313301 313322 | |||
2022-01-06 | Free memory if error occurred | Kinichiro Inoguchi | |
2022-01-06 | Remove NULL check before free | Kinichiro Inoguchi | |
2022-01-06 | Fix a copy-paste error that led to an out-of-bounds access. | Theo Buehler | |
Found via a crash on bluhm's i386 regress test box | |||
2022-01-06 | Use a 64-bit integer for pcitag_t and define PCITAG_NODE and PCITAG_OFFSET | Mark Kettenis | |
macros to make armv7 build again. ok deraadt@ | |||
2022-01-06 | Ignore windows without a size set (may be used for pane only), from | Nicholas Marriott | |
Anindya Mukherjee. | |||
2022-01-06 | regen | Jonathan Gray | |
2022-01-06 | ati 0x15e7 confirmed to be barcelo, 2022 ryzen 5000 apus | Jonathan Gray | |
uses the same green sardine firmware as cezanne | |||
2022-01-06 | Add test coverage for SCT validation. | Joel Sing | |
Of note, the public APIs for this mean that the only way you can add a CTLOG is by reading a configuration file from disk - there is no programmatic way to do this. | |||
2022-01-06 | t_syscall was a test for the gcc 1.x off_t syscall padding, | Philip Guenther | |
which was an implementation detail and has been deleted, so delete the test | |||
2022-01-06 | drm/amdgpu: add support for IP discovery gc_info table v2 | Jonathan Gray | |
From Alex Deucher b8553330a07749e488d143b5704adf1042fd7c0a in linux 5.10.y/5.10.90 5e713c6afa34c0fd6f113bf7bb1c2847172d7b20 in mainline linux | |||
2022-01-06 | drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly ↵ | Jonathan Gray | |
enabled From chen gong 28863ffe21ff711d5109e3c208676258bdec3a1f in linux 5.10.y/5.10.90 b7865173cf6ae59942e2c69326a06e1c1df5ecf6 in mainline linux | |||
2022-01-06 | unstub amdgpu_gem_force_release() | Jonathan Gray | |
2022-01-05 | add a comment so I don't make this mistake again | Damien Miller | |
2022-01-05 | fix cut-and-pasto in error message | Damien Miller | |
2022-01-05 | no longer needed | Theo de Raadt | |
2022-01-05 | funopen(): change seekfn argument to use off_t, not fpos_t | Todd C. Miller | |
On BSD, fpos_t is typedef'd to off_t but some systems use a struct. This means fpos_t is not a portable function argument or return value. Both FreeBSD and the Linux libbsd funopen() have switched to off_t for this--we should too. From Joe Nelson. OK deraadt@ | |||
2022-01-05 | Prepare to provide DSA_bits() | Theo Buehler | |
Used by Qt5 and Qt6 and slightly reduces the patching in there. ok inoguchi jsing | |||
2022-01-05 | Prepare to provide BIO_set_retry_reason() | Theo Buehler | |
Needed by freerdp. ok inoguchi jsing | |||
2022-01-05 | Prepare to provide a number of RSA accessors | Theo Buehler | |
This adds RSA_get0_{n,e,d,p,q,dmp1,dmq1,iqmp,pss_params}() which will be exposed in the upcoming bump. ok inoguchi jsing | |||
2022-01-05 | Prepare to provide ECDSA_SIG_get0_{r,s}() | Theo Buehler | |
ok inoguchi jsing | |||
2022-01-05 | Prepare to provide DH_get_length() | Theo Buehler | |
Will be needed by openssl(1) dhparam. ok inoguchi jsing | |||
2022-01-05 | Prepare to provide DSA_get0_{p,q,g,{priv,pub}_key}() | Theo Buehler | |
ok inoguchi jsing | |||
2022-01-05 | Prepare to provide DH_get0_{p,q,g,{priv,pub}_key}() | Theo Buehler | |
These are accessors that allow getting one specific DH member. They are less error prone than the current getters DH_get0_{pqg,key}(). They are used by many ports and will also be used in base for this reason. Who can remember whether the pub_key or the priv_key goes first in DH_get0_key()? ok inoguchi jsing | |||
2022-01-05 | Prepare to provide BIO_set_next(). | Theo Buehler | |
This will be needed in libssl and freerdp after the next bump. ok inoguchi jsing | |||
2022-01-05 | Prepare to provide X509_{set,get}_verify() and X509_STORE_get_verify_cb() | Theo Buehler | |
as well as the X509_STORE_CTX_verify_cb and X509_STORE_CTX_verify_fn types This will fix the X509_STORE_set_verify_func macro which is currently broken, as pointed out by schwarze. ok inoguchi jsing | |||
2022-01-05 | Use "bus-range" property to initialize the bus number configuration of | Mark Kettenis | |
the bridge when present on FDT platforms. Needed on platforms like the Apple M1 to make sure the PCI bus numbers match the IOMMU setup required by the device tree. ok patrick@ | |||
2022-01-05 | increase lifetime of wtmp, since it is annoyingly short | Theo de Raadt | |
discussed with millert | |||
2022-01-05 | Unindent a few lines of code and avoid shadowed variables. | Theo Buehler | |
2022-01-05 | Rename {c,p}_{min,max} into {child,parent}_{min,max} | Theo Buehler | |
2022-01-05 | Remove kbind(2)'s restriction that a target buffer not cross page | Philip Guenther | |
boundaries: hppa has 8-byte PLT entries that sometimes do that. ok kettenis@ | |||
2022-01-05 | Two minor KNF tweaks | Theo Buehler | |
2022-01-05 | Use child_aor and parent_aor instead of aorc and aorp | Theo Buehler | |
suggested by jsing | |||
2022-01-05 | Rename fp and fc into parent_af and child_af for readability. | Theo Buehler | |
suggested by jsing | |||
2022-01-05 | Globally rename all IPAddressFamily *f into af since this is slightly | Theo Buehler | |
more readable. Repeated complaints by jsing | |||
2022-01-05 | Add a helper function to turn unchecked (but sound) use of | Theo Buehler | |
sk_find + sk_value into something easier to follow and swallow. ok inoguchi jsing |