summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2016-03-13crt0.c is already setting environ, so don't set it in MD_START_SETUPPhilip Guenther
ok kettenis@ mpi@
2016-03-13environ and __progname are not declared in a public header; declare themPhilip Guenther
in libc's hidden/stdlib.h instead of in each .c file that needs one ok deraadt@ gsoares@ mpi@
2016-03-13Fix examples for EVP_PKEY_CTX_set_rsa_padding.Brent Cook
Noted here, https://github.com/libressl-portable/portable/issues/161, we document a non-existent constant in the examples for EVP_PKEY_CTX_set_rsa_padding. ok deraadt@
2016-03-12Call mprotect() via its hidden _lib_mprotect alias to avoid accidentalPhilip Guenther
overriding ok deraadt@ kettenis@
2016-03-12Add error handling to the remaining calls to bn_wexpand().Brent Cook
Noticed by pascal-cuoq from Github: https://github.com/libressl-portable/openbsd/issues/56 ok beck@
2016-03-12Remove sentences in RETURN VALUES sections saying that functions withmmcc
void return types 'return no value'. This is obvious and therefore unneccessary to mention. We spare rewind(3)'s sentence because espie@ pointed out that it's a warning - the function masks a potential error. This commit also adds a sentence to X509_free clarifying that it's NULL-safe. This bit was discussed with doug@. ok martijn@, sentiment supported by schwarze@
2016-03-12Bump for LibreSSL 2.4.0Brent Cook
2016-03-12Fix markup problem introduced in the previous commit. Solution andtb
explanations provided by schwarze@.
2003-05-11import 0.9.7b (without idea and rc5)Markus Friedl
2016-03-11X509_free(3) is NULL-safe, so remove NULL checks before its calls.mmcc
ok doug@
2016-03-11missing article in previous;Jason McIntyre
2016-03-11pledge: define the meaning of passing NULL to one arguments of pledge(2) as "ISebastien Marie
don't want to change the current value" it changes only the `request' argument behaviour when NULL is passed: previously it was traited as "" was passed. with help from jmc@ for man-page OK tb@ on previous version
2016-03-10http -> https for a few more IETF URLs in comments or man pagesmmcc
2016-03-10Remove VAX-specific bits of libm manpages.tb
ok jmc@
2016-03-10no need for SUBDIR now that vax is gone; ok deraadtJason McIntyre
2016-03-10ANSIfy function declarations, move initializations to declaration blockmmcc
ok millert@
2016-03-10remove Xr to infnan, a trickily hidden (from me anyway) vax page;Jason McIntyre
2016-03-10un-vax;Jason McIntyre
i've also changed some "and" to "no", since i think it reads better;
2016-03-10un-vax;Jason McIntyre
2016-03-10un-vax;Jason McIntyre
2016-03-10un-vax;Jason McIntyre
2016-03-10more pieces of vaxTheo de Raadt
2016-03-10No point in keeping the threading support for vax, I guessPhilip Guenther
2016-03-09We are done providing support for the vax.Theo de Raadt
lots of agreement.
2016-03-07http -> https for IETF/IANA URLs in commentsmmcc
2016-03-06The range of PIDs has changed, and always included zero.Philip Guenther
Based on diff from Michal Mazurek (akfaew (at) jasminek.net)
2016-03-06No more compat emulations, so remove ktrace EMUL records and the baggagePhilip Guenther
for generating and parsing them. ok mpi@ naddy@ millert@ deraadt@
2016-03-06explict_bzero for some asn1 free's - ok miod@Bob Beck
2016-03-06Make sure stdio functions don't end up in the library, from miod@Bob Beck
ok doug@ bcook@
2016-03-06Document the PT_GET_THREAD_{FIRST,NEXT} requestsPhilip Guenther
From Michal Mazurek (akfaew (at) jasminek.net)
2016-03-04graduate bn_expand() to a real function. the openssl version of thisTheo de Raadt
uses a macro with multiple-evaluations of arguments (different amount than the previous version..), but doug/bcook's inline version makes BIGNUM not opaque [problem spotted by naddy] ok doug
2016-03-04Revert bn_expand until there's consensus on a fix.Doug Hogan
2016-03-03Remove option USER_LDT and everything depending on it.Christian Weisgerber
Remove machdep.userldt sysctl. Remove i386_[gs]et_ldt syscall stub from libi386. Remove i386_[gs]et_ldt regression test. ok mlarkin@ millert@ guenther@
2016-03-02fix the rest of the read_ledword() calls used as lengths to be bounded.Bob Beck
inspired by guido vranken https://guidovranken.wordpress.com/2016/03/01/public-disclosure-malformed-private-keys-lead-to-heap-corruption-in-b2i_pvk_bio/ ok doug@
2016-03-02Add bounds checking for BN_hex2bn/BN_dec2bn.Doug Hogan
Need to make sure i * 4 won't overflow. Based on OpenSSL: commit 99ba9fd02fd481eb971023a3a0a251a37eb87e4c input + ok bcook@ ok beck@
2016-03-02bound lengths coming out of a pem file to something like realityBob Beck
ok deraadt@
2016-03-01KNF this file; OK stsp@Todd C. Miller
2016-03-01Fix a segfault and functional error in c_gets(),Ingo Schwarze
which is used for extended command input and for vi search mode. It could be triggered by typing one or more characters, then pressing backspace once (functional error: the character was deleted from the screen, but not from the edit buffer) or a few more times than characters had been entered (segfault). OK czarkoff@. Also checked by Christos Zoulas.
2016-03-01Remove support for ancient, broken DSA implementations.Doug Hogan
Based on a few OpenSSL commits: Remove ancient DSA workarounds commit ab4a81f69ec88d06c9d8de15326b9296d7f498ed Remove workaround for broken DSA implementations using negative integers commit dfb10af92e9663ce4eefaa1d6b678817fa85344d Typo in error name (EVP_R_DECODE_ERROR -> DSA_R_DECODE_ERROR) commit f6fb7f1856d443185c23f1a5968c08b4269dd37d ok beck@
2016-02-29Add NET_RT_IFNAMES; OK deraadt@Tim van der Molen
2016-02-29__tfork is section 3, not 2;Jason McIntyre
2016-02-29delete the kern.emul/KERN_EMUL sysctl bits since there are noChristian Weisgerber
emulations left; ok millert@ deraadt@, jmc@ (man pages)
2016-02-29remove NULL checks for pqueue_free()mmcc
ok doug@
2016-02-28fruncate() returns EFBIG when length exceeds the max file size.natano
ok mpi@
2016-02-27Fix STANDARDS: use the appropriate .St argument and add the informationIngo Schwarze
that setting errno is required by POSIX, but not by ISO C.
2016-02-27If an incomplete character is passed to mbtowc(3), set errno to EILSEQ.Ingo Schwarze
This is unambiguously required both by POSIX and by our own manual page. It also makes a lot of sense because having a function that can fail and that sets errno in some failure modes but does not set errno in other failure modes would be a terrible idea. Such a function would be ridiculously complicated to use. To detect the reason for failure, you would have to: - save errno - reset errno to zero - call the function - inspect the return value to detect failure - inspect errno to decide about the reason for failure - if errno is zero, restore the saved errno That is completely unreasonable, in particular for a seemingly innocous function like mbtowc(3). Next to no programmer would get that right in any real-world program. Note that this bug is very widespread, it also affects NetBSD, FreeBSD, Solaris 11, and glibc. I will also send a note around to the other systems. There may be fallout from programs using the interface incorrectly. If you run into any, please report that to me. OK millert@
2016-02-26Fix negation of POSIX character classes; passed new regress test.Todd C. Miller
OK tb@
2016-02-25refactor option letter parsing into a subfunction, to increase clarityTheo de Raadt
about which options are turned on/off by 's' and 'S' ok tedu
2016-02-24Avoid a possible double-free if the "search" keyword is used multiple times.Eric Faurot
ok jca@ gilles@
2016-02-22Document sendsyslog2(2) in man page.Alexander Bluhm
from Rafael Neves; input jmc@; OK deraadt@