summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-05-18In dtls1_reassemble_fragment() and dtls1_process_out_of_seq_message(), in caseMiod Vallat
of error, make sure we do not free pitem which is still linked into the pqueue. In the same vain, only free `frag' if we allocated it in this function. Help and ok beck@
2014-05-18In ssl3_send_certificate_request(), when adding the extra payload ifMiod Vallat
NETSCAPE_HANG_BUG is defined, make sure we BUF_MEM_grow() the buffer to accomodate for the payload size. Issue reported by David Ramos; ok beck@
2014-05-18Make sure ssl3_setup_buffers() does not return upon error with a freedMiod Vallat
pqueue still chained, by inserting it into the list only after all possible failure conditions have been avoided. Reported and fix proposed by David Ramos; ok beck@
2014-05-18More KNF.Joel Sing
2014-05-18No need to check for NULL before invoking free(); use calloc() whenMiod Vallat
applicable; further simplify pqueue_find(). From Dimitris Papastamos on tech@
2014-05-17does sunos not have memmove? sorry, i guess sunos will not have libressl.Ted Unangst
ok guenther miod
2014-05-17unchecked malloc() return value in OCSP_sendreq_new().Miod Vallat
2014-05-17KNFMiod Vallat
2014-05-17simple reallocarray to check multiplies. ok guentherTed Unangst
2014-05-17no no md2Ted Unangst
2014-05-17no no seedTed Unangst
2014-05-17deleted seed some time agoTed Unangst
2014-05-17switch RSA key generation default to 2048 bits (matching ssh); ok miod@Stuart Henderson
2014-05-16When OPENSSL_LOAD_CONF was added it ended up with more #if 0 code,Joel Sing
more #ifdefs and a new source file that contains a single function. Nuke the #if 0 code that is now a macro and move the single function in evp_acnf.c to c_all.c, which is where the other code lives. While here, tidy evp.h slightly, remove an unnecessary #ifdef __OpenBSD__ and nuke a comment that is now a lie. ok miod@
2014-05-15Fix memory leaks upon failure.Miod Vallat
ok beck@
2014-05-15Replace ASN1_GENERALIZEDTIME_adj(), ASN1_UTCTIME_adj() andMiod Vallat
ASN1_TIME_to_generalizedtime() with wrappers around their former implementations, making sure memory allocated is freed in all failure cases. help and ok from beck@ and Brendan MacDonell.
2014-05-15No longer make pqueue.h a public (and installed) header file. Replace itsMiod Vallat
inclusion in <ssl/dtls1.h> by the benign `struct _pqueue; typedef struct _pqueue *pqueue;'. Note that said dtls1.h should probably be considered a private header as well... ok beck@
2014-05-15More KNF.Joel Sing
2014-05-15Use C99 initialisers for the AEAD struct.Joel Sing
2014-05-15KNF.Joel Sing
2014-05-15Add a ChaCha20-Poly1305 AEAD EVP implementation to libcrypto, from AdamJoel Sing
Langley's Chromium OpenSSL patches. ok miod@
2014-05-15KNF.Joel Sing
2014-05-15KNF.Joel Sing
2014-05-15KNF.Joel Sing
2014-05-15Add an AEAD EVP interface to libcrypto, along with AES-GCM AEADJoel Sing
implementations. This largely pulls in Adam Langley's AEAD patches from Chromium's OpenSSL. ok miod@
2014-05-15Stop being a dummy... presumably these are left overs from pedantic modeJoel Sing
that were not wrapped with #if PEDANTIC. ok miod@
2014-05-14Add poly1305 to libcrypto utilising Andrew Moon's public domainJoel Sing
implementation. ok miod@
2014-05-12Remove AES_bi_ige_encrypt() from libcrypto. This routine is supposed to useMiod Vallat
two keys and four IVs to do much magic, is specified as such with test vectors, but the implementation actually always uses the first key, and the test vectors were computed with it, so they are wrong. Fixing the code to match the intended specification would break interoperability with existing code (assuming such code would exist), so it is better to remove this interface, which is obviously too complex for mere mortals if even its author can not implement it correctly. Riding on the libcrypto major bump.
2014-05-12Bring back ASN1_seq_pack(), ASN1_seq_unpack(), ASN1_pack_string() andMiod Vallat
ASN1_unpack_string() from the NO_ASN1_OLD purge; turns out that some Ruby extensions still use them, unfortunately, so we need to give them some more time to catch up on ``recent'' interfaces. Riding on the libcrypto major bump.
2014-05-12Move the `pqueue' part of libcrypto, which is a glorified sorted linked listMiod Vallat
of 64-bit data, and only used by DTLS, to libssl where it belongs. Remove pqueue_print() which is a debugging interface and serves no useful purpose, except for the regress test, which grows its own pqueue_print() routine. Bump libcrypto major and libssl minor. WARNING: do not update your tree right now, more changes are coming, which will ride the libcrypto major bump.
2014-05-11More KNF.Joel Sing
2014-05-11KNF.Joel Sing
2014-05-10__bounded => __attribute__((__bounded__Damien Miller
2014-05-09Typo in C99 field initializer introduced in r1.3;Miod Vallat
reported by Steven Chamberlain
2014-05-09Replace Apache v2 license with ISC license.Matthew Dempsky
Thanks to Google for agreeing to offer the code under more agreeable licensing terms!
2014-05-08Replace hand-crafted STRICT_ALIGNMENT with system provided __STRICT_ALIGNMENT.Miod Vallat
Forgotten during yesterday's STRICT_ALIGNMENT cleanup commit.
2014-05-08More KNF.Joel Sing
2014-05-08KNF.Joel Sing
2014-05-08Remove KSSL debug code.Joel Sing
"fire bomb" tedu@
2014-05-08KNF.Joel Sing
2014-05-08Nuke OPENSSL_FIPS - having #ifdefs inside a #ifndef for the same thingJoel Sing
is amusing. ok deraadt@
2014-05-08KNF.Joel Sing
2014-05-08knfectomie.Joel Sing
2014-05-08Emergency knfectomie requested by tedu@.Joel Sing
2014-05-08kill some more VMS ifdefsGiovanni Bechis
ok miod@
2014-05-07Get __STRICT_ALIGNMENT from <machine/endian.h> and decide upon it, ratherMiod Vallat
than defining it for not (i386 and amd64 (and sometimes s390)) only. Compile-time tests remain compile-time tests, and runtime-test remain runtime-test instead of being converted to compile-time tests, per matthew@'s explicit demand (rationale: this makes sure the compiler checks your code even if you won't run it). No functional change except on s390 (which we don't run on) and vax (which we run on, but noone cares about) ok matthew@
2014-05-07don't free memory unless we allocated it.Ted Unangst
reported to openssl by David Ramos (rt 3338) stealing commit from logan, who's run away. ok miod.
2014-05-07with the first bug it uncovered fixed, clear all bignums again.Ted Unangst
i've never worked on codebase so resistant to efforts to improve it.
2014-05-07in BN_clear_free, don't cleanse the data if the static data flag is set.Ted Unangst
much debugging work done by otto. ok miod otto. side note: BN_FLG_STATIC_DATA doesn't actually mean the data is static. it's also used to indicate the data may be secretly shared behind your back as a sort of poor man's refcounting, but without the refcounting.
2014-05-07KNF.Joel Sing