| Age | Commit message (Expand) | Author |
|---|
| 2014-12-06 | Avoid modifying input on failure in X509_(TRUST|PURPOSE)_add. | Doug Hogan |
| 2014-11-18 | further BUF_strdup conversion: these places should be safe to rely on | Ted Unangst |
| 2014-10-16 | Get rid of the last remaining BUF_strdup and BUF_strlcpy and friends, use | Bob Beck |
| 2014-09-29 | Previous fix (1.12) would cause a NULL pointer dereference in the error path | Miod Vallat |
| 2014-09-29 | check_cert(): be sure to reset ctx->current_crl to NULL before freeing it. | Miod Vallat |
| 2014-09-29 | X509_NAME_get_text_by_OBJ(): make sure we do not pass a negative size to | Miod Vallat |
| 2014-09-29 | X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the second | Miod Vallat |
| 2014-09-28 | X509v3_add_ext(): do not free stuff we did not allocate in the error path. | Miod Vallat |
| 2014-09-28 | X509_TRUST_add(): check X509_TRUST_get0() return value before dereferencing it, | Miod Vallat |
| 2014-09-28 | Someone (TM) thought it was smart to save memory by using malloc(1) and | Miod Vallat |
| 2014-09-26 | X509_STORE_new(): do not leak memory upon error. | Miod Vallat |
| 2014-09-26 | X509_issuer_and_serial_hash(): do not leak memory if an error occurs during | Miod Vallat |
| 2014-09-26 | X509at_add1_attr(): do not free stuff we did not allocate in the error path. | Miod Vallat |
| 2014-09-23 | Fix regression introduced in revision 1.15 by using strndup() instead of | Miod Vallat |
| 2014-07-25 | BIO_free() returns immediately when the sole input is NULL. | Doug Hogan |
| 2014-07-22 | Kill a bunch more BUF_strdup's - these are converted to have a check for | Bob Beck |
| 2014-07-17 | Free sktmp when it's no longer needed. By doing so, we fix a bunch of memory ... | Loganaden Velvindron |
| 2014-07-13 | Check X509_NAME_oneline() return value when it will have to allocate memory. | Miod Vallat |
| 2014-07-12 | jsing and I are investigating removal of all? most? 'getenv from library' | Theo de Raadt |
| 2014-07-12 | if (x) FOO_free(x) -> FOO_free(x). | Miod Vallat |
| 2014-07-12 | Principle of least surprise: make CMAC_CTX_free(), OCSP_REQ_CTX_free() and | Miod Vallat |
| 2014-07-11 | When looking for the issuer of a certificate, if the current candidate is | Miod Vallat |
| 2014-07-11 | Only import cryptlib.h in the four source files that actually need it. | Joel Sing |
| 2014-07-10 | Explicitly include <openssl/opensslconf.h> in every file that references | Joel Sing |
| 2014-07-10 | Stop including standard headers via cryptlib.h - pull in the headers that | Joel Sing |
| 2014-07-10 | delete some casts. ok miod | Ted Unangst |
| 2014-07-09 | remove unused, private version strings except SSL_version_str | Brent Cook |
| 2014-07-03 | Memory-leak-in-error-path of the day in X509_ATTRIBUTE_set1_data(). | Miod Vallat |
| 2014-06-28 | Fix a memory leak and another one that occurs in the error paths. | Loganaden Velvindron |
| 2014-06-24 | Unifdef -UNO_SYS_TYPES_H | Miod Vallat |
| 2014-06-23 | Since this is a library, place issetugid() before every getenv() | Theo de Raadt |
| 2014-06-20 | wrap getenv OPENSSL_ALLOW_PROXY_CERTS in an issetugid check, to protect | Theo de Raadt |
| 2014-06-19 | check stack push return and make some effort to clean up. ok beck miod | Ted Unangst |
| 2014-06-19 | improve error checking. set error code on error, and check malloc return. | Ted Unangst |
| 2014-06-12 | tags as requested by miod and tedu | Theo de Raadt |
| 2014-06-11 | Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored since | Joel Sing |
| 2014-06-07 | malloc() result does not need a cast. | Theo de Raadt |
| 2014-05-30 | no need for null check before free. from Brendan MacDonell | Ted Unangst |
| 2014-05-29 | convert 53 malloc(a*b) to reallocarray(NULL, a, b). that is 53 | Theo de Raadt |
| 2014-05-29 | Everything sane has stdio, and FILE *. we don't need ifdefs for this. | Bob Beck |
| 2014-05-29 | Any sane platform has stdio. Stop pretending we will ever use a platform | Bob Beck |
| 2014-05-25 | calloc instead of malloc/memset. from Benjamin Baier | Ted Unangst |
| 2014-05-24 | Almost nothing actually needs to include <openssl/e_os2.h>, however by | Joel Sing |
| 2014-04-26 | Replace all use of ERR_add_error_data with ERR_asprintf_error_data. | Bob Beck |
| 2014-04-20 | Restore beck's (void)snprintf(): they were reviewed. | Philip Guenther |
| 2014-04-20 | KNF. | Joel Sing |
| 2014-04-20 | More KNF. | Joel Sing |
| 2014-04-20 | KNF. | Joel Sing |
| 2014-04-20 | KNF. | Joel Sing |
| 2014-04-20 | KNF. | Joel Sing |
