summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-05-01Update with recently added objects.Joel Sing
ok miod@
2012-10-13import OpenSSL-1.0.1cDamien Miller
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2014-05-01Extend fread() and fwrite() to check for integer overflow, in which caseTheo de Raadt
errno EOVERFLOW is returned and error is set on the FILE. ok kettenis miod beck
2014-05-01Nuke unused evptests.txt - the real one is over in regress.Joel Sing
ok miod@
2014-05-01Provide an EVP implementation for ChaCha.Joel Sing
ok miod@
2014-05-01Add ChaCha to libcrypto, based on djb's public domain implementation.Joel Sing
ok deraadt@
2014-05-01Add support for the french ANSSI FRP256v1 elliptic curve.Miod Vallat
While not to be considered a good choice of elliptic curve (refer to http://safecurves.cr.yp.to/ for more details), it is nevertheless deemed a good decision to allow developers with requirements to use such a curve, to be able to do this via a crypto library allowing for much better choices to be made, without having to change (much of) their code to get better crypto. ok beck@ deraadt@
2014-05-01Add Brainpool elliptic curves. From OpenSSL RT#2239 via ${DAYJOB}.Miod Vallat
Be sure to rerun `make includes' after updating. ok tedu@ beck@ deraadt@
2014-05-01Remove fips_md_init() macro indirection for digest algorithms, used by theMiod Vallat
OpenSSL FIPS module to prevent forbidden digests to be allowed. No functional change but readability. ok deraadt@
2010-10-01import OpenSSL-1.0.0aDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2014-05-01nibbles aren't enough random, use bytes. does a better job of pickingTed Unangst
a free chunk at random and may allow to increase delayed chunk array. ok otto
2014-04-30first cut at documenting the change to malloc doing a partial 'junk' byStuart Henderson
default and the new 'j' option to disable this; ok jmc@
2014-04-30Avoid a potential null pointer dereference by checking that we actuallyJoel Sing
managed to allocate a fragment, before trying to memcpy data into it. ok miod@
2014-04-30First pass at removing win64 support from the assembly generating PerlJoel Sing
scripts. We certainly do not need an identical copy of the win64 exception handler in each script (surely one copy would be sufficient). ok miod@
2012-10-13import OpenSSL-1.0.1cDamien Miller
2010-10-01import OpenSSL-1.0.0aDamien Miller
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2014-04-30i suck at math. b - 8 = 3, not 4. detected by Antoine Pitrou. thanks.Ted Unangst
2014-04-30minor++ because of AI_ADDRCONFIGsperreault
prodded by naddy, confirmed by Mark Kettenis
2014-04-29Constrain bytes read/written to positive values.Bob Beck
ok miod@ tedu@
2014-04-28Implement AI_ADDRCONFIGsperreault
This is a getaddrinfo() flag that is defined thusly in RFC 3493: If the AI_ADDRCONFIG flag is specified, IPv4 addresses shall be returned only if an IPv4 address is configured on the local system, and IPv6 addresses shall be returned only if an IPv6 address is configured on the local system. The loopback address is not considered for this case as valid as a configured address. For example, when using the DNS, a query for AAAA records should occur only if the node has at least one IPv6 address configured (other than IPv6 loopback) and a query for A records should occur only if the node has at least one IPv4 address configured (other than the IPv4 loopback). The flag is set by default when hints is NULL. ok Eric Faurot, Jason McIntyre
2014-04-28Remove WIN32, WIN64 and MINGW32 tentacles.Miod Vallat
Also check for _LP64 rather than __arch64__ (the former being more reliable than __LP64__ or __arch64__) to tell 64-bit int platforms apart from 32-bit int platforms. Loosely based upon a diff from Martijn van Duren on tech@
2014-04-28use the correct algorithm mask. reported by satish lvr viaTed Unangst
http://marc.info/?l=openssl-dev&m=139779977532459&w=2 ok miod
2014-04-28SSL_OP_ALL is supposed to be all options and workarounds that are safe,Ted Unangst
but disabling attack mitigations is not safe. 0.9.6d contained a workaround for an attack against CBC modes. 0.9.6e disabled it by default because "some" implementations couldn't handle empty fragments. 12 years have passed. Does anybody still care? Let's find out. ok miod
2014-04-28Remove ending cplusplus guard followed by starting cplusplus guard; fromMiod Vallat
Gebruiker Schoot.
2014-04-28Leftover includes and local declarations; from Gebruiker SchootMiod Vallat
2003-05-11import 0.9.7b (without idea and rc5)Markus Friedl
2014-04-28Add support for 255 character file names in fuse.Sylvestre Gallon
from Helg Bredow, thanks! input/OK reyk@
2014-04-27typo in commentMiod Vallat
2014-04-27Remove orphaned l2n6 and n2l6 macros.Miod Vallat
2014-04-27Use C99 initializers for the various FOO_METHOD structs. More readable, andMiod Vallat
avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@
2014-04-27static const char * = "" -> static const char[] = "", to produce shorter code.Miod Vallat
No functional change.
2014-04-27Unifdef -U OPENSSL_BUILD_SHLIBCRYPTO, since all it causes under Unix is toMiod Vallat
redefine OPENSSL_EXTERN from `extern' to `extern'.
2014-04-27Put explicit (void) in function declarations and shuffle keywords in someMiod Vallat
declaration to pass -Wextra, should we want to add it to CFLAGS. No binary change.
2014-04-27zap trailing whitespace;Jason McIntyre
2012-10-13import OpenSSL-1.0.1cDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2014-04-27We do not need a separate file for two compatibility wrapper functions.Joel Sing
ok miod@
2014-04-27Fix leak last commit introduced. Spotted by Sebastian Kapfer.Bob Beck
2014-04-27Document net.inet6.ip6.dad_pending.Loganaden Velvindron
OK from jmc@, and thanks to sthen@ for pointing out my mistake in the first version of the diff.
2014-04-26Appease gcc3 -Wuninitialized.Miod Vallat
2014-04-26Replace all use of ERR_add_error_data with ERR_asprintf_error_data.Bob Beck
This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@
2014-04-26More KNF.Joel Sing
2014-04-26KNF.Joel Sing
2014-04-26This is not FreeBSD.Joel Sing
ok miod@
2014-04-26Do you really want to build OpenSSL for 16-bit Windows? Well, we don't.Joel Sing
ok miod@
2014-04-25KNF.Joel Sing