summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2014-06-27Remove M_ASN1_New* macros which are only used in X509_PKEY_new() are obfuscateMiod Vallat
2014-06-26save errno in ERR_put_error(), so that SYSerr doesn't have any accidentalTheo de Raadt
2014-06-24Unifdef -UNO_SYS_TYPES_HMiod Vallat
2014-06-24Remove previously commented out wrong code, as well as the comment saying thisMiod Vallat
2014-06-24Remove ancient workaround for previous century's compilers in the declarationMiod Vallat
2014-06-24Remove BIO_f_reliable(), guilty of playing with EVP_MD_CTX internals itMiod Vallat
2014-06-24If a chacha operation does not consume all of the generated key stream,Joel Sing
2014-06-24Some KNF.Joel Sing
2014-06-24Replace 48 lines of code with a single inet_pton() call. The previousJoel Sing
2014-06-24Actually make BIO_set_tcp_ndelay() work - TCP_NODELAY will not magicallyJoel Sing
2014-06-24Fix memory leak.Loganaden Velvindron
2014-06-23Since this is a library, place issetugid() before every getenv()Theo de Raadt
2014-06-22KNF, particularly wrapped lines of calls to PEM_read_bio_FOO() andPhilip Guenther
2014-06-22BIO_sock_init() no longer does anything, so stop calling it.Joel Sing
2014-06-22Just use SOMAXCONN and IPPROTO_TCP, since we know we have them.Joel Sing
2014-06-22In BIO_get_port(), use strol() with appropriate range checks rather thanJoel Sing
2014-06-22nuke unused test programs; ok jsingTheo de Raadt
2014-06-22More KNF.Joel Sing
2014-06-22KNF.Joel Sing
2014-06-22KNF.Joel Sing
2014-06-22More KNF.Joel Sing
2014-06-21always compare memcmp against 0, for clarity.Ted Unangst
2014-06-21Pull the code that builds a DTLS sequence number out into its own functionJoel Sing
2014-06-21Specify the correct strength bits for 3DES cipher suites.Joel Sing
2014-06-21Switch to the ISC licensed versions of these files, which Google has madeJoel Sing
2014-06-21Pull out the sequence number selection and handle this up front. Also, theJoel Sing
2014-06-21More KNF and clean up.Joel Sing
2014-06-21More KNF.Joel Sing
2014-06-21More KNF.Joel Sing
2014-06-21KNFMiod Vallat
2014-06-21KNFMiod Vallat
2014-06-21Fix memory leak in error path.Loganaden Velvindron
2014-06-20Remove the OPENSSL_*cap getenv's. A program should not be able toTheo de Raadt
2014-06-20wrap getenv OPENSSL_ALLOW_PROXY_CERTS in an issetugid check, to protectTheo de Raadt
2014-06-20Remove OPENSSL_instrument_halt and OPENSSL_far_spin, which both mightMiod Vallat
2014-06-20Fix incorrect bounds check in amd64 assembly version of bn_mul_mont();Miod Vallat
2012-10-13import OpenSSL-1.0.1cDamien Miller
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
2014-06-19check stack push return and make some effort to clean up. ok beck miodTed Unangst
2014-06-19improve error checking. set error code on error, and check malloc return.Ted Unangst
2014-06-18In ssl3_send_newsession_ticket(), fix a memory leak in an error path.Miod Vallat
2014-06-18Missinc calloc() return value check; ok deraadt@Miod Vallat
2014-06-18Make sure to always invoke EVP_CIPHER_CTX_cleanup() before returning in theMiod Vallat
2014-06-18Use asprintf() instead of a fixed 128-byte size in SSL_CIPHER_description()Miod Vallat
2014-06-18In SSL_COMP_add_compression_method(), make sure error cases actually returnMiod Vallat
2014-06-17ssl_session_cmp is not a sort function, can use CRYPTO_memcmp here too.Ted Unangst
2014-06-15free iv, then cleanse. from Cyril JouveTed Unangst
2014-06-15Simplify EVP_MD_CTX_create() by just using calloc(). Also, use 0 ratherJoel Sing
2014-06-15Simplify EVP_CIPHER_CTX_new() - stop pretending that EVP_CIPHER_CTX_init()Joel Sing
2014-06-15Add missing OPENSSL_cleanse() in aead_aes_gcm_cleanup().Joel Sing