summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2014-06-21Switch to the ISC licensed versions of these files, which Google has madeJoel Sing
2014-06-21Pull out the sequence number selection and handle this up front. Also, theJoel Sing
2014-06-21More KNF and clean up.Joel Sing
2014-06-21More KNF.Joel Sing
2014-06-21More KNF.Joel Sing
2014-06-21KNFMiod Vallat
2014-06-21KNFMiod Vallat
2014-06-21Fix memory leak in error path.Loganaden Velvindron
2014-06-21Protect explicit_bzero() from link-time optimizationMatthew Dempsky
2014-06-20Remove the OPENSSL_*cap getenv's. A program should not be able toTheo de Raadt
2014-06-20wrap getenv OPENSSL_ALLOW_PROXY_CERTS in an issetugid check, to protectTheo de Raadt
2014-06-20Work in progress on how to deal with the inherit unreliability ofBob Beck
2014-06-20Remove OPENSSL_instrument_halt and OPENSSL_far_spin, which both mightMiod Vallat
2014-06-20Fix incorrect bounds check in amd64 assembly version of bn_mul_mont();Miod Vallat
2012-10-13import OpenSSL-1.0.1cDamien Miller
2014-06-20arc4random: hard fail with raise(SIGKILL) if getentropy() returns -1Matthew Dempsky
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
2014-06-19check stack push return and make some effort to clean up. ok beck miodTed Unangst
2014-06-19improve error checking. set error code on error, and check malloc return.Ted Unangst
2014-06-19Move rs_chacha and rs_buf into the same memory page and don't mark itMatthew Dempsky
2014-06-18Always call atexit handlers as if they were registered with __cxa_atexit.Mark Kettenis
2014-06-18In ssl3_send_newsession_ticket(), fix a memory leak in an error path.Miod Vallat
2014-06-18Missinc calloc() return value check; ok deraadt@Miod Vallat
2014-06-18Make sure to always invoke EVP_CIPHER_CTX_cleanup() before returning in theMiod Vallat
2014-06-18Use asprintf() instead of a fixed 128-byte size in SSL_CIPHER_description()Miod Vallat
2014-06-18In SSL_COMP_add_compression_method(), make sure error cases actually returnMiod Vallat
2014-06-17ssl_session_cmp is not a sort function, can use CRYPTO_memcmp here too.Ted Unangst
2014-06-17Use MAP_INHERIT_ZERO in arc4random(3)Matthew Dempsky
2014-06-15free iv, then cleanse. from Cyril JouveTed Unangst
2014-06-15Simplify EVP_MD_CTX_create() by just using calloc(). Also, use 0 ratherJoel Sing
2014-06-15Simplify EVP_CIPHER_CTX_new() - stop pretending that EVP_CIPHER_CTX_init()Joel Sing
2014-06-15Add missing OPENSSL_cleanse() in aead_aes_gcm_cleanup().Joel Sing
2014-06-15The OPENSSL_cleanse() in aes_gcm_cleanup() only cleans the gcm field of theJoel Sing
2014-06-15Rename ssl3_record_sequence_update() to ssl3_record_sequence_increment(),Joel Sing
2014-06-15oops, typo. James Hartley is fast at trying -currentTheo de Raadt
2014-06-15In srandomdev(), use arc4random_buf() instead of from the kernel.Theo de Raadt
2014-06-14Add more bounded attributes to the buffer and md5/sha headers in libsslAnil Madhavapeddy
2014-06-13typoMiod Vallat
2014-06-13For now... assume success of getentropy() just like we assumed successTheo de Raadt
2014-06-13Correctly calculate the key block length when using export ciphers.Joel Sing
2014-06-13Overhaul the keyblock handling in ssl3_change_cipher_state(). UseJoel Sing
2014-06-13Correctly calculate the key block length when used with export ciphers.Joel Sing
2014-06-13Remove deprecated RFC2292 ancillary data convenience functions.Christopher Zimmermann
2014-06-13use getgentropy() call. If it fails, things are pretty bad --Theo de Raadt
2014-06-13use getentropy; from matthewTheo de Raadt
2014-06-13Use meaningful variable names, rather than i, j, k and cl.Joel Sing
2014-06-13Do not bother trying to work out of we can reuse a cipher context - justJoel Sing
2014-06-13Separate the comression handling from the cipher/message digest handling inJoel Sing
2014-06-13Swap compress/expand around so they are in the correct order - these endedJoel Sing
2014-06-13The export_key/export_iv variables are only used in the is_export case.Joel Sing