summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2017-01-22Convert publically visible structs to translucent structs.Joel Sing
This change adds an internal opaque struct for each of the significant publically visible structs. The opaque struct is then allocated and attached to the publically visible struct when the appropriate *_new() function is called, then cleared and freed as necessary. This will allow for changes to be made to the internals of libssl, without requiring a major bump each time the publically visible structs are modified. ok beck@
2017-01-22Clean up ssl3_new() - in particular, we do not need to zero fields thatJoel Sing
are within a struct that was just allocated via calloc. ok beck@
2017-01-22There is no point in setting struct fields to zero, when you've alreadyJoel Sing
zeroed the entire struct via memset. ok beck@
2017-01-21use BN_div_nonct where it is safe to do so.Bob Beck
ok guenther@
2017-01-21Add ct and nonct versions of BN_mod_inverse for internal useBob Beck
ok jsing@
2017-01-21Split out BN_div and BN_mod into ct and nonct versions for Internal use.Bob Beck
ok jsing@
2017-01-21Make explicit _ct and _nonct versions of bn_mod_exp funcitons thatBob Beck
matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@
2017-01-21Nuke whitespace foolish enough to expose itself during the greatKenneth R Westerback
"warning:" rectification.
2017-01-211. When shrinking a chunk allocation, compare the size of the currentOtto Moerbeek
allocation to the size of the new allocation (instead of the requested size). 2. Previously realloc takes the easy way and always reallocates if C is active. This commit fixes by carefully updating the recorded requested size in all cases, and writing the canary bytes in the proper location after reallocating. 3. Introduce defines to test if MALLOC_MOVE should be done and to compute the new value.
2017-01-21Specify minimum and maximum protocol version for each method. This isJoel Sing
currently unused, but will be in the near future. ok beck@
2017-01-21Make crtbegin.c and crtbeginS.c consistent on stylistic pointsPhilip Guenther
ok kettenis@
2017-01-21p_comm is the process's command and isn't per thread, so move it fromPhilip Guenther
struct proc to struct process. ok deraadt@ kettenis@
2017-01-21Place {DECLARE,IMPLEMENT}_OBJ_BSEARCH{_GLOBAL,}_CMP_FN macros undefJoel Sing
LIBRESSL_INTERNAL.
2017-01-21Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.Joel Sing
No change to generated assembly excluding line numbers.
2017-01-21Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.Joel Sing
No change to generated assembly excluding line numbers.
2017-01-21Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.Joel Sing
No change to generated assembly excluding line numbers.
2017-01-21/usr/bin/unifdef -D MONT_MUL_MOD -D MONT_EXP_WORD -D RECP_MUL_MOD -m bn_exp.cBob Beck
with some style cleanup after. no binary change ok jsing@
2017-01-21Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.Joel Sing
No change to generated assembly excluding line numbers.
2017-01-21Expand DECLARE_OBJ_BSEARCH_GLOBAL_CMP_FN macro.Joel Sing
No change in preprocessor output (ignoring whitespace and line numbers).
2017-01-21Expand IMPLEMENT_OBJ_BSEARCH_GLOBAL_CMP_FN macro.Joel Sing
No change in generated assembly.
2017-01-21Pull in declarations for main() and __init() to make clang happy.Philip Guenther
Mark __init() as hidden ok kettenis@ deraadt@
2017-01-21Fix misspelling in commentPhilip Guenther
2017-01-21Hook up libcompiler_rt, libcxx and libcxxabi to the build. Since theirPatrick Wildt
Makefiles are now guarded to not compile on non-clang architectures, we can safely add them. ok deraadt@
2017-01-21fix bogus commentBob Beck
ok jsing@
2017-01-21Make return value of X509_verify_cert be consistent with the error code,Bob Beck
with the caveat that we force V_OK when a user provided callback has us returning success. ok inoguchi@ jsing@
2017-01-21amd64 can build rcrt0.o with the stack-protectorPhilip Guenther
ok kettenis@ deraadt@
2017-01-21Declare the symbols that label the .ctors, .dtors, .eh_frame, and .jcrPhilip Guenther
sections as extern hidden arrays of indefinite size, so that the compiler (well, clang) doesn't believe it knows the exact contents and thus optimize things into infinite loops. Actually set the symbols to be in the sections and insert the leading and trailing values via __asm(). Problem pointed out by patrick@ testing and ok kettenis@
2017-01-20Implement gcc suggestion of extra parentheses. No functional change.Kenneth R Westerback
ok guenther@
2017-01-20Depend compilation on the compiler version, so that we can alwaysPatrick Wildt
enter the directory to create an objdir. ok deraadt@
2017-01-20Rework internal_verify, mostly from OpenSSL. so we can progressBob Beck
towards cleaning up the V_OK stuff. ok kinichiro@
2017-01-19MD_START is now always ___start, so expand and eliminate itPhilip Guenther
ok phessler@ deraadt@
2017-01-13whitespaceTheo de Raadt
2017-01-12Inline strlen() call to reduce/simplify code.Joel Sing
2017-01-12Inline tls_get_new_cb_bio() from the only place that it gets called,Joel Sing
simplifying the code. Also check the provided read and write callbacks before assigning to the context.
2017-01-12If tls_set_cbs() fails an error will already be specified, so do notJoel Sing
replace it with a less specific one.
2017-01-12change two trailing Xr to Fn; ok schwarzeJason McIntyre
2017-01-12Simplify the TLS callback BIO code - a pointer to the tls context can beJoel Sing
stored directly in bio->ptr, rather than allocating and deallocating an intermediate struct. Diff from Marko Kreen <markokr at gmail dot com> - thanks!
2017-01-12If tls_get_new_cb_bio() fails, an error will already be set.Joel Sing
2017-01-12If no callbacks are specified, return after setting an error rather thanJoel Sing
continuing on. Also noticed by Marko Kreen.
2017-01-11Add support for AArch64.Patrick Wildt
2017-01-11Add support for AArch64.Patrick Wildt
2017-01-11Add "support" for OpenBSD/arm64 so that it compiles. It's a copy ofPatrick Wildt
the 32-bit ARM version and might need updates.
2017-01-11Build a bunch more floating point helpers for AArch64.Patrick Wildt
2017-01-11Add support for AArch64.Patrick Wildt
2017-01-11Add support for AArch64.Patrick Wildt
2017-01-11Add support for AArch64. Based on FreeBSD's msun header, modifiedPatrick Wildt
to look and feel like our code.
2017-01-09Avoid leaking conninfo servername.Joel Sing
Issue found by and fix from Shuo Chen <chenshuo at chenshuo dot com>.
2017-01-07add missing comma in the NAME sectionIngo Schwarze
2017-01-07fix a typo in an .Xr reported by jmc@Ingo Schwarze
2017-01-07Add and remove some blank lines, in order to make X509_verify_cert()Joel Sing
(slightly) more readable.