Age | Commit message (Expand) | Author |
2018-08-24 | Change PEM_Sign{Init,Update}() to return an int. | Theo Buehler |
2018-08-24 | Check return value of EVP_EncodeUpdate() in PEM_write_bio(). | Theo Buehler |
2018-08-05 | Fix memory leak in i2b_PVK in error handling. | Brent Cook |
2018-05-13 | Add const qualifier to the 'name', 'header', and 'data' arguments of | Theo Buehler |
2018-04-14 | make ENGINE_finish() succeed on NULL and simplify callers as in | Theo Buehler |
2017-05-02 | use freezero() instead of memset/explicit_bzero + free. Substantially | Theo de Raadt |
2017-01-29 | Send the function codes from the error functions to the bit bucket, | Bob Beck |
2017-01-21 | Make explicit _ct and _nonct versions of bn_mod_exp funcitons that | Bob Beck |
2016-11-05 | Make sure PEM_SealInit() will correctly destroy the PEM_ENCODE_SEAL_CTX | Miod Vallat |
2016-10-19 | unifdef OPENSSL_NO_CMS | Joel Sing |
2016-09-04 | Place IMPLEMENT_PEM macros under #ifndef LIBRESSL_INTERNAL. | Joel Sing |
2016-09-04 | Sort and group functions. | Joel Sing |
2016-09-04 | Expand IMPLEMENT_PEM macros. | Joel Sing |
2016-03-02 | fix the rest of the read_ledword() calls used as lengths to be bounded. | Bob Beck |
2016-03-02 | bound lengths coming out of a pem file to something like reality | Bob Beck |
2015-09-10 | Correct spelling of OPENSSL_cleanse. | Joel Sing |
2015-07-19 | Drop stupid (int) casts for the arguments of malloc() and friends. This is | Miod Vallat |
2015-07-16 | Make sure the `reject negative sizes' logic introduced in 1.34 is actually | Miod Vallat |
2015-05-15 | Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls. | Jonathan Gray |
2015-02-11 | Guenther has plans for OPENSSL_NO_CMS, so revert this for the moment. | Bob Beck |
2015-02-11 | get rid of OPENSSL_NO_CMS code we do not use. | Bob Beck |
2015-02-11 | Enable building with -DOPENSSL_NO_DEPRECATED. | Doug Hogan |
2015-02-10 | Replace assert() and OPENSSL_assert() calls with proper error return paths. | Miod Vallat |
2014-10-22 | Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). | Joel Sing |
2014-10-18 | None of these need to include <openssl/rand.h> | Joel Sing |
2014-07-23 | Make sure PEM_def_callback() correctly handles negative buffer sizes; all uses | Miod Vallat |
2014-07-12 | if (x) FOO_free(x) -> FOO_free(x). | Miod Vallat |
2014-07-11 | Missing bounds check in do_PVK_body(); OpenSSL RT #2277, from OpenSSL trunk, | Miod Vallat |
2014-07-11 | Only import cryptlib.h in the four source files that actually need it. | Joel Sing |
2014-07-10 | Explicitly include <openssl/opensslconf.h> in every file that references | Joel Sing |
2014-07-10 | Stop including standard headers via cryptlib.h - pull in the headers that | Joel Sing |
2014-07-10 | delete some casts. ok miod | Ted Unangst |
2014-07-10 | Missing allocation checks and potential NULL pointer dereference in the | Miod Vallat |
2014-07-09 | remove unused, private version strings except SSL_version_str | Brent Cook |
2014-06-12 | tags as requested by miod and tedu | Theo de Raadt |
2014-06-07 | malloc() result does not need a cast. | Theo de Raadt |
2014-06-01 | Avoid the use of an uninitialised variable. In reality, this is a non-issue | Joel Sing |
2014-05-30 | more: no need for null check before free | Theo de Raadt |
2014-05-29 | convert 53 malloc(a*b) to reallocarray(NULL, a, b). that is 53 | Theo de Raadt |
2014-05-29 | Everything sane has stdio, and FILE *. we don't need ifdefs for this. | Bob Beck |
2014-05-26 | We don't really to keep history in constructs such as: | Miod Vallat |
2014-05-24 | Almost nothing actually needs to include <openssl/e_os2.h>, however by | Joel Sing |
2014-05-22 | if (x) free(x) -> free(x); semantic patch generated with coccinelle, carefully | Miod Vallat |
2014-04-26 | Replace all use of ERR_add_error_data with ERR_asprintf_error_data. | Bob Beck |
2014-04-23 | Unifdef -UPEDANTIC. ok beck@ tedu@ | Miod Vallat |
2014-04-21 | More KNF. | Joel Sing |
2014-04-21 | KNF. | Joel Sing |
2014-04-20 | Restore beck's rev 1.7: snprintf() was reviewed. | Philip Guenther |
2014-04-19 | We'll interpret a (void) cast on snprintf() to mean it's been verified that | Philip Guenther |
2014-04-19 | use intrinsic strlcpy and strlcat everywhere so we only have one set of | Bob Beck |