summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-05-09when demonstrating the correct "double-check" idiom, provide aTheo de Raadt
reminder that the return value is int...
2014-05-08move reallocarray() to a seperate file so that -portable applicationsTheo de Raadt
can avoid reinventing the wheel ok guenther schwarze
2014-05-08Replace hand-crafted STRICT_ALIGNMENT with system provided __STRICT_ALIGNMENT.Miod Vallat
Forgotten during yesterday's STRICT_ALIGNMENT cleanup commit.
2014-05-08More KNF.Joel Sing
2014-05-08KNF.Joel Sing
2014-05-08Remove KSSL debug code.Joel Sing
"fire bomb" tedu@
2014-05-08KNF.Joel Sing
2014-05-08Nuke OPENSSL_FIPS - having #ifdefs inside a #ifndef for the same thingJoel Sing
is amusing. ok deraadt@
2014-05-08KNF.Joel Sing
2014-05-08knfectomie.Joel Sing
2014-05-08Emergency knfectomie requested by tedu@.Joel Sing
2014-05-08kill some more VMS ifdefsGiovanni Bechis
ok miod@
2010-10-01import OpenSSL-1.0.0aDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2005-04-29import of openssl-0.9.7g; tested on platforms from alpha to zaurus, ok deraadt@Damien Miller
2014-05-07Get __STRICT_ALIGNMENT from <machine/endian.h> and decide upon it, ratherMiod Vallat
than defining it for not (i386 and amd64 (and sometimes s390)) only. Compile-time tests remain compile-time tests, and runtime-test remain runtime-test instead of being converted to compile-time tests, per matthew@'s explicit demand (rationale: this makes sure the compiler checks your code even if you won't run it). No functional change except on s390 (which we don't run on) and vax (which we run on, but noone cares about) ok matthew@
2014-05-07less than jpakeTed Unangst
2014-05-07don't free memory unless we allocated it.Ted Unangst
reported to openssl by David Ramos (rt 3338) stealing commit from logan, who's run away. ok miod.
2014-05-07with the first bug it uncovered fixed, clear all bignums again.Ted Unangst
i've never worked on codebase so resistant to efforts to improve it.
2014-05-07in BN_clear_free, don't cleanse the data if the static data flag is set.Ted Unangst
much debugging work done by otto. ok miod otto. side note: BN_FLG_STATIC_DATA doesn't actually mean the data is static. it's also used to indicate the data may be secretly shared behind your back as a sort of poor man's refcounting, but without the refcounting.
2014-05-07comment style fixAlexander Hall
ok crickets@
2014-05-07KNF.Joel Sing
2014-05-07KNF.Joel Sing
2012-10-13import OpenSSL-1.0.1cDamien Miller
2010-10-01import OpenSSL-1.0.0aDamien Miller
2014-05-07revert, thanks sthenTed Unangst
2014-05-07add additional includes from eng_cryptodev.cJonathan Gray
makes this compile with OPENSSL_NO_DEPRECATED defined. ok deraadt@
2014-05-07Kill the {nd6_,}useloopback buttons, using the loopback interface forMartin Pieuchot
local traffic is not optional. ok mikeb@, stsp@, jca@
2014-05-07use calloc. from Peter MaloneTed Unangst
2014-05-07miod forgot about fcrypt_b.c being needed, before he went off to get hisTheo de Raadt
beauty sleep. He's probably having a nightmare about this right now.... ok tedu
2014-05-06We don't really need uniform distribution for mktemp(3) so useTodd C. Miller
arc4random_buf() to avoid lots of arc4random() calls with a getpid() syscall for each one. We fetch 32 bytes of random data at a time which can handle up to 16 Xs. 16 Xs should be enough for anyone. Requested and OK deraadt@
2014-05-06small fix from mancha1. currently unused file, but no harm fixing it.Ted Unangst
2014-05-06Assorted cleanups:Miod Vallat
- replace hardcoded sizes with sizeof() - pqueue_find() apparently used to need to keep track of the previous node when iterating, which causes its logic to be complicated. However, nowadays it only needs to iterate, so replace with a straightforward, much readable logic. - remove #if 0'ed code From ``sin'' from 2f30 dot org on tech@, thanks!
2014-05-06Remove broken-by-design testMiod Vallat
2014-05-06Make sure PKCS7_get_octet_string() return values are checked for NULL.Miod Vallat
Reported by David Ramos (and simultaneously to OpenSSL as PR#3339). ok beck@ logan@
2014-05-06Sort CFLAGS, SRC and SSLASM stanzas by the directories they apply to, to makeMiod Vallat
these files similar in layout to the other md Makefile.inc; no functional change.
2014-05-06missing NULL checks to see if init is needed. found hard way by deraadt.Ted Unangst
2014-05-06fix stupid commitTed Unangst
2014-05-06enh@google reported a warning in crufty y2k code. just delete it.Ted Unangst
ok deraadt stsp
2014-05-06reallocarray for things which are arrays. ok deraadtTed Unangst
2014-05-06use explicit_bzeroTed Unangst
2014-05-06clear a stack buffer with explicit_bzeroTed Unangst
2014-05-06knf approximationTed Unangst
2014-05-06move chacha context and buffer out of bss and allow mmap to place themTed Unangst
wherever it decides it would like them. first step. ok deraadt dlg djm
2014-05-06"stay backwards-compatible with 0.9.5; this should go away soon"Ted Unangst
it's your lucky day!
2014-05-06remove KerberosTed Unangst
2014-05-06move a comment to make unifdef happierTed Unangst
2014-05-06bye bye SRPTed Unangst
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2014-05-05inspired by a cloudflare diff, cleanse old memory when expanding a bignum.Ted Unangst
however, instead of trying to audit all the places where a secret bignum is used, apply the big hammer and clear all bignums when freed. ok deraadt miod