summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2015-10-16Check file sizes only for regular files. The current code breaks savecoreTobias Stoeckmann
due to its kvm handling. ok deraadt
2015-10-16Remove pointless externs - the structs are declared in the same files aJoel Sing
few lines above.
2015-10-16Expand DECLARE_ASN1_ALLOC_FUNCTIONS and DECLARE_ASN1_FUNCTIONS_constJoel Sing
macros. The only change in the generated assembly is due to line numbering.
2015-10-16Remove pointless uses of DECLARE_ASN1_ENCODE_FUNCTIONS_const.Joel Sing
DECLARE_ASN1_FUNCTIONS_const already includes this macro so using both means we end up with duplicate function prototypes and externs.
2015-10-16Fix use of pointer value after BIO_free, and remove senseless NULL checks.Bob Beck
ok bcook@
2015-10-16Merge nlist out of boundary access fix with other nlist implementations.Tobias Stoeckmann
While at it, merge style and typo fixes back into nlist(3), too. ok deraadt, jsing, millert
2015-10-16Put tls_config_verify_client_optional() in the right place.Joel Sing
2015-10-16Fix tpyo.Joel Sing
2015-10-16actually include the prerequisite dependency for BIO instead of doing nastynessBob Beck
2015-10-16Validate parsed ELF values to prevent out of boundary accesses.Tobias Stoeckmann
While at it, return proper return value when encountering a stripped binary. Instead of -1 (illegal file), it should be the amount of symbols that were tried to be resolved. ok millert
2015-10-15Don't Xr flock, since that is not the locking method used.Theo de Raadt
ok millert
2015-10-15Handle F_ISATTY in the fcntl() stub as wellTheo de Raadt
ok guenther
2015-10-14Document flock requestTodd C. Miller
2015-10-14better fix for overrun reported by Qualys Security.Ted Unangst
buf is at all times kept nul terminated, so there is no need to enforce this again upon exit. (no need to move buf around after we exahust space.) ok beck miod
2015-10-14Bail out early if we have no buf_lenBob Beck
ok miod@
2015-10-14fix a memory leak reported by Qualys Security.Ted Unangst
move the bndec variable in tighter since it's not used elsewhere in the loop, then always free it after use. ok bcook miod
2015-10-14Ensure we don't write a 0 byte past end of the buffer in the error case.Bob Beck
ok bcook@ deraadt@
2015-10-14tweak previous (two details i apparently missed)Ingo Schwarze
2015-10-14Add EVP_AEAD_CTX_init(3) manpage to document the new(ish) AEAD API.Reyk Floeter
The "authenticated encryption with additional data" API is used for ciphers like AES-GCM or ChaCha20-Poly1305. The manpage is a beginning and certainly needs more work, especially improvements in the EXAMPLES section. Based on agl's source code comments. Converted from pod to mandoc by schwarze@ OK schwarze@ jsing@
2015-10-13In rev 1.15 the sizeof argument was fixed in a strlcat() call butTodd C. Miller
the truncation check immediately following it was not updated to match. Not an issue in practice since the buffers are the same size. OK deraadt@
2015-10-13Put ASN1_dup() under #ifndef LIBRESSL_INTERNAL.Joel Sing
2015-10-13Convert ECParameters_dup() from a macro that uses ASN1_dup_of() into anJoel Sing
actual function. This removes the last ASN1_dup_of usage from the tree. Feedback from doug@ and miod@
2015-10-13Convert a number of the old ASN1_{d2i,i2d}_{bio,fp}_of() macros toJoel Sing
ASN1_item_{d2i,i2d}_{bio,fp}() function calls. ok beck@ doug@
2015-10-13Group d2i/i2d function prototypes by type and add missing externs for theJoel Sing
DSAPublicKey, DSAPrivateKey and DSAparams ASN1_ITEMs.
2015-10-13Sync printf family return value with ISO C which specifies thatTodd C. Miller
these functions return a negative value on failure. OK doug@ deraadt@
2015-10-13new sentence, new line;Jason McIntyre
do not Xr self;
2015-10-13Tighten the ranges in wcrtomb(3).Anthony J. Bentley
By definition, the range of valid Unicode code points is the union of U+0000..U+D7FF and U+E000..U+10FFFF (see Unicode 8.0.0, chapter 3.9). In UTF-16, the encoded values that would represent U+D800..U+DFFF are used for surrogate pairs. UTF-8 has no concept of surrogate pairs; attempting to treat them as regular code points violates the standard and makes no sense besides. ok stsp@
2015-10-12satisfy jmc!Theo de Raadt
2015-10-12Add details about a variety of semantics; going to keep adding and thenTheo de Raadt
reevaluate the direction of this manual page a bit later.
2015-10-12When isatty() was switched to F_ISATTY, the inline copy in ttyname()Christian Weisgerber
was forgotten. Just call isatty(). ok deraadt@
2015-10-12Make it clear that umask ignores everything but the rwx bits.Todd C. Miller
OK deraadt@
2015-10-12Make wcrtomb() more readable by weeding out range errors up front,Ingo Schwarze
doing ASCII handling once rather than twice, and using <= rather than ((&~)==) obfuscation (which already caused a bug in the past). No functional change. Joint work with and OK stsp@ semarie@ bentley@
2015-10-12pledge wasn't called pledge in 5.8, and it was disabled;Ingo Schwarze
issue noticed by tim@, solution suggested by deraadt@
2015-10-12unifdef EVP_CHECK_DES_KEY: Ben Kaduk noticed it has a syntax error; thatPhilip Guenther
error was present in the original 2004 commit, so it hasn't been used in over 11 years, thus exceeding our deprecation requirements by over a decade. OpenSSL has chosen to *fix it*; we'll gladly watch it burn ok jsing@
2015-10-12make description of ERRORS more complete;Ingo Schwarze
diff from Benny Lofgren <bl dash lists at lofgren dot biz>; ok nicm@
2015-10-11Do not insert whitespace into syntax displays, it's just confusing,Ingo Schwarze
except at the one place where it is indeed helpful. Add some missing .Cm macros. Remove some useless escaping, one needless .Xo, and an empty .No. Triggered by a much smaller patch from guenther@. OK jmc@ guenther@
2015-10-11Fix empty .No macros, use .Pf to prefix delimiters to macros.Ingo Schwarze
Based on a patch from guenther@, tweaked by me. OK jmc@ guenther@
2015-10-11Document that execve(2) resets SIGCHLD to SIG_DFLPhilip Guenther
wordsmithing and ok jmc@
2015-10-11Prefer .Fa over .Em for struct membersPhilip Guenther
ok jmc@
2015-10-11Document that bind(2) and connect(2) ignore the incoming sa_lenPhilip Guenther
suggest by and ok deraadt@ wordsmithing jmc@
2015-10-10Code points U+10000 to U+fffff are valid, too.Ingo Schwarze
Fixing a regression in wcrtomb(3) found with the mandoc testsuite that was caused by the last commit. OK semarie@ bentley@
2015-10-09do not use weak; plus this dies next weekTheo de Raadt
2015-10-09oops, typo spotted in temporary .c file, by semarieTheo de Raadt
2015-10-09fix a gotcha in the connect refactoring, that could result in droppingTheo de Raadt
through and trying to bind failed v6 connects. ok guenther
2015-10-09tame -> pledge conversion, in libc. I should crank libc, but am cheatingTheo de Raadt
hoping things go well. The old symbol is faked via a stupid stub function, until next major crank when it can be removed. I am expecting guenther to scream at me.
2015-10-08If getaddrinfo() succeeds, then don't try look ups with other flags, evenPhilip Guenther
if the connect()s failed. In concert with some resolver fixes in libc, this lets ntpd be tame()ed problem isolated by theo, who had fun untangling the libc and libtls behaviors to place blame for not being able to tame ntpd ok beck@ deraadt@ jsing@
2015-10-08fix conditionalsEric Faurot
ok deraadt@
2015-10-08Handle case where no hint is passed in. Found as a crash of fdm by jturner@Theo de Raadt
2015-10-08trailing whitespace;Jason McIntyre
2015-10-08Rip the guts out of another gibbering horror of a time comparison function, andBob Beck
mark it as #ifndef LIBRESSL_INTERNAL at least we don't use this. ok jsing@