summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2014-06-05Do not recurse when a 'Hello Request' message is received while gettingJoel Sing
2014-06-05Ensure that sess_cert is not NULL before trying to use it.Joel Sing
2014-06-05Avoid a buffer overflow that can be triggered by sending specially craftedJoel Sing
2014-06-05ssl_sess_cert_new() can return NULL. Fix two cases where the return valueJoel Sing
2014-06-05Ensure that we do not process a ChangeCipherSpec with an empty masterJoel Sing
2014-06-05Be selective as to when ChangeCipherSpec messages will be accepted.Joel Sing
2014-06-05More KNF.Joel Sing
2014-06-04Sanitize use of client_opaque_prf_input: set it to NULL immediately afterMiod Vallat
2014-06-04without overthinking it, replace a few memcmp calls with CRYPTO_memcmpTed Unangst
2014-06-02Remove RANDFILE remnants.Joel Sing
2014-06-02Rename more variables for readability and consistency.Joel Sing
2014-06-02Since pqueue is a private interface and the header defining the structPhilip Guenther
2014-06-01Overhaul the key block handling in tls1_change_cipher_state() - useJoel Sing
2014-06-01In tls1_setup_key_block(), use the correct IV length for GCM mode, whichJoel Sing
2014-06-01Clean up the tls1_change_cipher_state() key length handling and use aJoel Sing
2014-06-01Use C99 initialisers for cipher_aliases. This improves readability,Joel Sing
2014-05-31BUF_MEM_grow_clean() takes a size_t as the size argument. Remove false commentsMiod Vallat
2014-05-31Some KNF and fix the vairable spelling.Joel Sing
2014-05-31More KNF.Joel Sing
2014-05-31More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup.Joel Sing
2014-05-31unifdef -UDOXYGEN and manually remove the few doxygen comments that are notJoel Sing
2014-05-31ECDH and ECDSA will not work overly well if there is no EC, so unifdefJoel Sing
2014-05-31TLS would not be entirely functional without extensions, so unifdefJoel Sing
2014-05-30More KNF.Joel Sing
2014-05-30remove some #if 0 code. we don't need any more reminders that we're usingTed Unangst
2014-05-30Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS andJoel Sing
2014-05-30While working on another diff I ended up looking to see why on earth theJoel Sing
2014-05-29the comment says RAND_pseudo_bytes should be RAND_bytes. make it so.Ted Unangst
2014-05-29we no longer care that these aren't used for ssl2Ted Unangst
2014-05-29Everything sane has stdio, and FILE *. we don't need ifdefs for this.Bob Beck
2014-05-29remove back compat that was already disabled back in 1998.Ted Unangst
2014-05-29Any sane platform has stdio. Stop pretending we will ever use a platformBob Beck
2014-05-29no space before labelTed Unangst
2014-05-29line up else betterTed Unangst
2014-05-29consistent bracesTed Unangst
2014-05-29unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them.Ted Unangst
2014-05-29repair KNF indentTheo de Raadt
2014-05-29Make it substantially easier to identify protocol version requirementsJoel Sing
2014-05-29When you have functions that perform specific functions, use them.Joel Sing
2014-05-29Fix another two cases where the return value of ssl_replace_hash() isJoel Sing
2014-05-28More KNF.Joel Sing
2014-05-28Refactor tls1_change_cipher_state() and split the compression handling outJoel Sing
2014-05-28EVP_MD_CTX_create() calls malloc and can return NULL. However, only one ofJoel Sing
2014-05-28There is no point in checking if a pointer is non-NULL before calling free,Joel Sing
2014-05-28More KNF.Joel Sing
2014-05-27Remove unused defines.Miod Vallat
2014-05-27Remove redundant test introduced in s3_pkt.c on 20001225, which got cargo-cultedMiod Vallat
2014-05-27Wrap some long lines.Joel Sing
2014-05-27Remove MemCheck_{on,off} that escaped last time around.Joel Sing
2014-05-27More KNF.Joel Sing