summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2017-03-20Generate the bogus challenge using arc4random_buf(3) instead of readingTheo Buehler
2017-03-20use explicit_bzero. one from Ricardo Mestre plus two more.Ted Unangst
2017-03-19Stop setting the second register; it's unnecessary on 64bit archsPhilip Guenther
2017-03-18Simplify fork/vfork logic: the kernel has handled returning zero in the childMark Kettenis
2017-03-18Use the userspace-visible thread register directly in __cerror insteadMark Kettenis
2017-03-18Fewer magic numbers.Joel Sing
2017-03-18t1_enc.cJoel Sing
2017-03-18Currently tls1_PRF() requires that a temporary buffer be provided, thatJoel Sing
2017-03-18Make brk(2) actually work and sync the brk()/sbrk() implementation with arm,Mark Kettenis
2017-03-18Use recallocarray() to avoid leaving detritus in memory when resizingTheo de Raadt
2017-03-17remove unneccessary macro;Jason McIntyre
2017-03-17Strengthen description of recallocarray(3) behaviour, hoping that readersTheo de Raadt
2017-03-17Use recallocarray() to avoid leaving detritus in memory when resizingTodd C. Miller
2017-03-17recallocarray() the string buffer, to avoid leaving such contentsTheo de Raadt
2017-03-17Use recallocarray() to avoid leaving detritus in memory when resizingTheo de Raadt
2017-03-17Grow buffers using recallocarray, to avoid the potential dribble thatTheo de Raadt
2017-03-16sync the vfs bits as best i can;Jason McIntyre
2017-03-16Only reallocate the buffer to fit for medium-size allocations whereTodd C. Miller
2017-03-16bit more consistent;Jason McIntyre
2017-03-16When reallocating the buffer for asprintf(), just round up to theTodd C. Miller
2017-03-16Convert BUF_MEM_grow() and BUF_MEM_grow_clean() to recallocarray(),Joel Sing
2017-03-16Use calloc() instead of malloc() followed by manually zeroing fields.Joel Sing
2017-03-16Fix overly-conservative overflow checks on mulitplications and add checksDarren Tucker
2017-03-15use recallocarray to resize buffer - ensures that detritus from previousTheo de Raadt
2017-03-15Collapse underflow and overflow checks into a single block.Darren Tucker
2017-03-15Catch integer underflow in scan_scaled reported by Nicolas Iooss.Darren Tucker
2017-03-14Use a macro for the initial length of the buffer instead of 127; OK deraadt@Todd C. Miller
2017-03-14don't need to handle the malloc case special, since realloc worksTheo de Raadt
2017-03-13- no KERN_RND: from schwarzeJason McIntyre
2017-03-13for each sysctl name, attach the variable name as seen by sysctl(8);Jason McIntyre
2017-03-11fix signed integer overflow in scan_scaled. Found by Nicolas IoossDamien Miller
2017-03-11shuffle back: wxabort is described in sysctl(3);Jason McIntyre
2017-03-11repair Xr, and point to sysctl(8) instead because sysctl(3) fails toTheo de Raadt
2017-03-10Remove the handshake digests and related code, replacing remaining usesJoel Sing
2017-03-10Switch CBB to use recallocarray() - this ensures that we do not leakJoel Sing
2017-03-10First pass at cleaning up the tls1_P_hash() function - remove a pointlessJoel Sing
2017-03-10Make tls1_PRF() non-static so it can be regress tested.Joel Sing
2017-03-08Correct arm64 sigprocmask parameter passing in setjmp/longjmp calls.Dale Rahn
2017-03-07If tcsetpgrp() is called by a background process and there is aTodd C. Miller
2017-03-07Correctly handle TLS PRF with MD5+SHA1 - the secret has to be partitionedJoel Sing
2017-03-07Some tweaks from jmc@ and describe better what recallocarray does;Otto Moerbeek
2017-03-06recallocarray bumpOtto Moerbeek
2017-03-06Introducing recallocarray(3), a blend of calloc(3) and reallocarray(3)Otto Moerbeek
2017-03-06size is unsigned so using ==0 not <=0 when checking for buffer exhaustionTodd C. Miller
2017-03-06Pull in a change from the bind 8 resolver that fixes a potentialTodd C. Miller
2017-03-06Clean up and simplify the tls1_PRF() implementation now that we have aJoel Sing
2017-03-05Correctly convert an SSLv2 challenge into an SSLv3/TLS client random byJoel Sing
2017-03-05Provide a rolling handshake hash that commences as soon as the cipherJoel Sing
2017-03-05Convert various handshake message generation functions to CBB.Joel Sing
2017-03-04Drop the second argument of dtls1_set_message_header() and make it a voidJoel Sing