summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2017-03-17recallocarray() the string buffer, to avoid leaving such contentsTheo de Raadt
2017-03-17Use recallocarray() to avoid leaving detritus in memory when resizingTheo de Raadt
2017-03-17Grow buffers using recallocarray, to avoid the potential dribble thatTheo de Raadt
2017-03-16sync the vfs bits as best i can;Jason McIntyre
2017-03-16Only reallocate the buffer to fit for medium-size allocations whereTodd C. Miller
2017-03-16bit more consistent;Jason McIntyre
2017-03-16When reallocating the buffer for asprintf(), just round up to theTodd C. Miller
2017-03-16Convert BUF_MEM_grow() and BUF_MEM_grow_clean() to recallocarray(),Joel Sing
2017-03-16Use calloc() instead of malloc() followed by manually zeroing fields.Joel Sing
2017-03-16Fix overly-conservative overflow checks on mulitplications and add checksDarren Tucker
2017-03-15use recallocarray to resize buffer - ensures that detritus from previousTheo de Raadt
2017-03-15Collapse underflow and overflow checks into a single block.Darren Tucker
2017-03-15Catch integer underflow in scan_scaled reported by Nicolas Iooss.Darren Tucker
2017-03-14Use a macro for the initial length of the buffer instead of 127; OK deraadt@Todd C. Miller
2017-03-14don't need to handle the malloc case special, since realloc worksTheo de Raadt
2017-03-13- no KERN_RND: from schwarzeJason McIntyre
2017-03-13for each sysctl name, attach the variable name as seen by sysctl(8);Jason McIntyre
2017-03-11fix signed integer overflow in scan_scaled. Found by Nicolas IoossDamien Miller
2017-03-11shuffle back: wxabort is described in sysctl(3);Jason McIntyre
2017-03-11repair Xr, and point to sysctl(8) instead because sysctl(3) fails toTheo de Raadt
2017-03-10Remove the handshake digests and related code, replacing remaining usesJoel Sing
2017-03-10Switch CBB to use recallocarray() - this ensures that we do not leakJoel Sing
2017-03-10First pass at cleaning up the tls1_P_hash() function - remove a pointlessJoel Sing
2017-03-10Make tls1_PRF() non-static so it can be regress tested.Joel Sing
2017-03-08Correct arm64 sigprocmask parameter passing in setjmp/longjmp calls.Dale Rahn
2017-03-07If tcsetpgrp() is called by a background process and there is aTodd C. Miller
2017-03-07Correctly handle TLS PRF with MD5+SHA1 - the secret has to be partitionedJoel Sing
2017-03-07Some tweaks from jmc@ and describe better what recallocarray does;Otto Moerbeek
2017-03-06recallocarray bumpOtto Moerbeek
2017-03-06Introducing recallocarray(3), a blend of calloc(3) and reallocarray(3)Otto Moerbeek
2017-03-06size is unsigned so using ==0 not <=0 when checking for buffer exhaustionTodd C. Miller
2017-03-06Pull in a change from the bind 8 resolver that fixes a potentialTodd C. Miller
2017-03-06Clean up and simplify the tls1_PRF() implementation now that we have aJoel Sing
2017-03-05Correctly convert an SSLv2 challenge into an SSLv3/TLS client random byJoel Sing
2017-03-05Provide a rolling handshake hash that commences as soon as the cipherJoel Sing
2017-03-05Convert various handshake message generation functions to CBB.Joel Sing
2017-03-04Drop the second argument of dtls1_set_message_header() and make it a voidJoel Sing
2017-03-04Call ssl3_handshake_write() instead of ssl3_do_write() - this was missedJoel Sing
2017-03-03Ensure MD and key initialized before processing HMACKinichiro Inoguchi
2017-03-02document EPERM error when connect(2)ing.Sebastian Benoit
2017-03-02fix error in Dt; from robert kleinJason McIntyre
2017-03-01Convert ssl3_{get,send}_server_key_exchange() to EVP_md5_sha1().Joel Sing
2017-03-01Include EVP_md5_sha1() via OpenSSL_add_all_digests().Joel Sing
2017-02-28Bump minors due to symbol addition.Joel Sing
2017-02-28Document EVP_md5_sha1().Joel Sing
2017-02-28Add an EVP interface that provides concatenated MD5+SHA1 hashes, which areJoel Sing
2017-02-28Fix typo in issuingDistributionPoint description.Joel Sing
2017-02-28Stop pretending that MD5 and SHA1 might not exist - rather than locatingJoel Sing
2017-02-27use Dv, for consistency; from bruno flueckigerJason McIntyre
2017-02-27Add support for RES_USE_DNSSECJeremie Courreges-Anglas