summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2019-04-20Avoid undefined behaviour that results from negating a signed long withJoel Sing
2019-04-19Allocate md_data with calloc to avoid use of uninitialised memory.Joel Sing
2019-04-19Allocate fixed NIDs for SM3/SM4.Joel Sing
2019-04-19Work around a limitation of clang integrated assembler on mips64.Visa Hankala
2019-04-19Prevent clang from using builtins and jump tables in _dl_boot_bind()Visa Hankala
2019-04-18describe EIO failure state. noted by Maximilian LorlacksTed Unangst
2019-04-18unfold some compound operations to make this easier to followTed Unangst
2019-04-16Rewrite & fix X509V3_add_value()Theo Buehler
2019-04-16indent err: labelsTheo Buehler
2019-04-16wrap an overlong line and kill a space before a tabTheo Buehler
2019-04-16Move function types to their own lines; rewrap.Theo Buehler
2019-04-15Avoid signed integer overflow.Joel Sing
2019-04-14Add input validation to BIO_read()/BIO_write().Joel Sing
2019-04-14Some more malloc() to calloc() conversions.Joel Sing
2019-04-14Remove two pointless chunks of code.Joel Sing
2019-04-14Use calloc() when allocating cipher_data.Joel Sing
2019-04-14Annotate a future improvement.Joel Sing
2019-04-14Avoid potential double-frees following EVP_CIPHER_CTX_copy().Joel Sing
2019-04-14Fix previous: I forgot to rename the bn_to_string() prototype.Theo Buehler
2019-04-13Null out pointers on asprintf() failure.Theo Buehler
2019-04-13Avoid quadratic behavior of decimal BIGNUM conversionTheo Buehler
2019-04-13Avoid leak in SSL_dup_CA_list()Theo Buehler
2019-04-10Avoid an overread caused by d2i_PrivateKey().Joel Sing
2019-04-09Recommend SSL_CTX_add1_chain_cert(3) rather thanIngo Schwarze
2019-04-09Document SSL_CTX_clear_mode(3) and SSL_clear_mode(3).Ingo Schwarze
2019-04-07Revert tasn_prn.c r1.18.Joel Sing
2019-04-05By design, our state machine is a DAG contrary to the state machine inTheo Buehler
2019-04-05Import SSL_CTX_add1_chain_cert(3) from OpenSSL branch 1.1.1, which is stillIngo Schwarze
2019-04-05Zap two dead #defines that were unused since jsing deleted theTheo Buehler
2019-04-04Implement legacy fallback for the TLS 1.3 client.Joel Sing
2019-04-04Clean up the cipher/digest table mess.Joel Sing
2019-04-04Only assign destlen when src is non-NULL.Joel Sing
2019-04-04Switch to pthread_mutex_init().Joel Sing
2019-04-04Bump libssl/libtls minors due to symbol addition.Joel Sing
2019-04-04Provide SSL chain/cert chain APIs.Joel Sing
2019-04-04This case also needs to be fatal.Joel Sing
2019-04-04update root CAs in cert.pem in sync with MozillaStuart Henderson
2019-04-03Avoid some out of bound accesses in aesni_cbc_hmac_sha1_cipher().Theo Buehler
2019-04-02Restrict which filesystems are available for swap. This rules outVisa Hankala
2019-04-02fix broken commentStuart Henderson
2019-04-01Add a mutex to guard reference counting for tls_config.Joel Sing
2019-04-01Implement a print function for BIGNUM_it.Joel Sing
2019-04-01Correct the return values from long_print.Joel Sing
2019-04-01Require all ASN1_PRIMITIVE_FUNCS functions to be provided.Joel Sing
2019-04-01mark ERR_R_INTERNAL_ERROR instead of assert or _exit, sighTheo de Raadt
2019-04-01repair confusing "} if" indentation as suggested by deraadt@Christian Weisgerber
2019-04-01Compile with -gdwarf-4 to suppress wrnings about DWARF2 in assembly codeMark Kettenis
2019-04-01Correct subtle bug in sigalgs, only care about curve_nid if we areBob Beck
2019-03-31Clean up and simplify the client verify code:Joel Sing
2019-03-31Wrap long lines and apply some style(9).Joel Sing