Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-06-27 | Fix mmap() flag usage: explicitly specify MAP_PRIVATE and drop useless | Matthew Dempsky | |
MAP_FILE and MAP_HASSEMAPHORE flags. Discussed with deraadt, tedu, and kettenis | |||
2014-06-27 | zap unneccessary punctuation; | Jason McIntyre | |
2014-06-27 | When building a BN on the stack in BN_div(), make sure to initialize all its | Miod Vallat | |
fields (i.e. the flags field) before using it. This is currently harmless, but might not be if we end up invoking other BN functions checking for constant-time processing requirement in the future. | |||
2014-06-27 | re-init and init code paths are now more shared, so the getpid()-based | Theo de Raadt | |
portable code path must handle that; with brent cook | |||
2014-06-27 | Cleanup ioctl.2 slightly: | Matthew Dempsky | |
- Markup ioctl argument types with Fa - Be clearer that ioctl arguments are pointers to ints. Similar changes to follow for manual pages that describe device-specific ioctl commands. Discussed with jmc and schwarze. | |||
2014-06-27 | OpenBSD supports mmap() on block special files too. | Matthew Dempsky | |
2014-06-27 | Split out mmap's compatibility flags into a separate section, so users | Matthew Dempsky | |
aren't misled into thinking they're useful on OpenBSD. | |||
2014-06-27 | Revise wording to reflect that callers should always specify (exactly) | Matthew Dempsky | |
one of MAP_PRIVATE or MAP_SHARED, as required by POSIX. However, also caveat that currently OpenBSD doesn't strictly enforce this behavior. | |||
2014-06-27 | extra evil spaces snuck in over the last while | Theo de Raadt | |
2014-06-27 | Move to a smaller rbytes buffer and skip a random part. Not to | Otto Moerbeek | |
improve the random stream itself (it doesn't), but to introduce noise in the arc4random calling pattern. Thanks to matthew@ who pointed out bias in a previous diff, ok deraadt@ matthew@ | |||
2014-06-27 | save_errno botch; spotted by miod | Theo de Raadt | |
2014-06-27 | hand-KNF macro the do { } while loops | Theo de Raadt | |
2014-06-27 | hand-KNF the remaining bits | Theo de Raadt | |
2014-06-27 | Remove M_ASN1_New* macros which are only used in X509_PKEY_new() are obfuscate | Miod Vallat | |
it to hide memory leaks in the error paths, and fix aforementioned memory leaks. ok jsing@ logan@ deraadt@ | |||
2014-06-26 | Add back an #ifndef MAP_INHERIT_ZERO chunk to support the old getpid() | Theo de Raadt | |
mechanism, to aid in portability to other systems as requested. ok matthew | |||
2014-06-26 | Document that mmap() confirms to POSIX 2008, except that we generate | Matthew Dempsky | |
SIGSEGV instead of SIGBUS for page references beyond the end of a mapped object. | |||
2014-06-26 | save errno in ERR_put_error(), so that SYSerr doesn't have any accidental | Theo de Raadt | |
cases where errno can be trashed. ok jsing | |||
2014-06-26 | fix HD() misuse; from brent cook | Theo de Raadt | |
2014-06-26 | Convert several calloc calls to reallocarray. These calloc calls were | Lawrence Teo | |
originally malloc(n * m) calls (without memset/bzero) in the past. ok deraadt@ tedu@ | |||
2014-06-25 | AT_BASE returns us the *address* of the start of ld.so, so | Bob Beck | |
use the address, not what it points to (which is always the same) ok deraadt@ | |||
2014-06-25 | get the page of data at AT_SYSINFO_EHDR | Bob Beck | |
ok deraadt@ | |||
2014-06-25 | comment fixes from theo | Bob Beck | |
2014-06-25 | Possibly obtain a little bit of entropy from addresses returned | Bob Beck | |
by getauxval if we have it. ok deraadt@ | |||
2014-06-25 | O_NOFOLLOW would be very nice to have here if the version of linux | Bob Beck | |
we are running supports it. from enh@google.com | |||
2014-06-25 | document why we explicit_bzero | Theo de Raadt | |
2014-06-24 | Unifdef -UNO_SYS_TYPES_H | Miod Vallat | |
2014-06-24 | Remove previously commented out wrong code, as well as the comment saying this | Miod Vallat | |
is incorrect code. | |||
2014-06-24 | Remove ancient workaround for previous century's compilers in the declaration | Miod Vallat | |
of CRYPTO_EX_DATA; riding upon the libcrypto major bump. | |||
2014-06-24 | Remove BIO_f_reliable(), guilty of playing with EVP_MD_CTX internals it | Miod Vallat | |
should not know anything about. Verified not to be used in ports; riding upon the recent libcrypto major bump. | |||
2014-06-24 | Crank libcrypto major since my previous commit changed the size of the | Joel Sing | |
ChaCha context. Other changes will also ride this crank. | |||
2014-06-24 | If a chacha operation does not consume all of the generated key stream, | Joel Sing | |
ensure that we save it and consume it on subsequent writes. Otherwise we end up discarding part of the key stream and instead generate a new block at the start of the next write. This was only an issue for callers that did multiple writes that are not multiples of 64 bytes - in particular, the ChaCha20Poly1305 usage does not hit this problem since it performs encryption in a single-shot. For the same reason, this is also a non-issue when openssl(1) is used to encrypt with ChaCha. Issue identified by insane coder; reported to bugs@ by Joseph M. Schwartz. ok beck@ | |||
2014-06-24 | Some KNF. | Joel Sing | |
2014-06-24 | Replace 48 lines of code with a single inet_pton() call. The previous | Joel Sing | |
handrolled version could not even make use of sscanf(), since that would not work with a certain antiquated compiler. It is worth noting that there is a tiny change in behaviour - previously calling BIO_get_host_ip() with something that looked like it might be a valid IP address (for example, "1." or even ".") would result in it returning failure rather than trying a BIO_gethostbyname() - now we'll always try a BIO_gethostbyname() if it was not a valid IPv4 address. ok beck@ miod@ deraadt@ | |||
2014-06-24 | Actually make BIO_set_tcp_ndelay() work - TCP_NODELAY will not magically | Joel Sing | |
appear by itself. ok beck@ miod@ | |||
2014-06-24 | Fix memory leak. | Loganaden Velvindron | |
Thanks to Brenk Cook. OK from miod@ | |||
2014-06-23 | Since this is a library, place issetugid() before every getenv() | Theo de Raadt | |
ok miod | |||
2014-06-23 | unbreak build of getentropy_sysctl - we need linux/sysctl.h, and | Bob Beck | |
RANDOM_UUID is an enum member. | |||
2014-06-23 | unbreak - main needs to be extern in here somewhere. | Bob Beck | |
2014-06-21 | repair indentation for an inner loop; shorten some macros and variable | Theo de Raadt | |
names to shorten line lengths ok beck | |||
2014-06-21 | loosen the spec for timingsafe functions slightly, so as to not | Ted Unangst | |
artificially constrain alternative implementations. ok deraadt | |||
2014-06-21 | hash in correct pointer | Theo de Raadt | |
2014-06-20 | KNF | Bob Beck | |
2014-06-20 | indent | Theo de Raadt | |
2014-06-20 | rearrange so that the main function with the important comments is at the top | Otto Moerbeek | |
ok deraadt@ beck@ | |||
2014-06-15 | occured -> occurred; | Jason McIntyre | |
2014-06-14 | Change return value of getentropy() to int 0 for success. Maximum | Theo de Raadt | |
buffersize is enforced strictly, this supplies sufficient entropy payload to act as seed material. Discourage general use of this API, but lock down this function name as the go-to for userland PRNG seeding. Improve documentation. ok miod matthew | |||
2014-06-13 | typo; Piotr Sikora | Theo de Raadt | |
2014-06-23 | Remove unintended statement from my copyright block | Philip Guenther | |
2014-06-22 | KNF, particularly wrapped lines of calls to PEM_read_bio_FOO() and | Philip Guenther | |
multiline comments ok jsing@ | |||
2014-06-22 | BIO_sock_init() no longer does anything, so stop calling it. | Joel Sing | |