Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-03-17 | remove NOTREACHED | mmcc | |
2016-03-17 | 'miliseconds' -> 'milliseconds' in comments. | Kenneth R Westerback | |
if_atu.c noted by Michal Mazurek. | |||
2016-03-17 | properly guard to macros | mmcc | |
ok otto@ | |||
2016-03-17 | explicit_bzero for asn1 objects on free. Too often these contain sensitive ↵ | Bob Beck | |
information and they should not be a performance bottleneck ok miod@ krw@ | |||
2016-03-15 | 'accomodate' -> 'accommodate' in comments. | Kenneth R Westerback | |
Started by diff from Mical Mazurek. | |||
2016-03-15 | remind people rewind is seldom a good choice | Marc Espie | |
okay jmc@ | |||
2016-03-14 | small step towards multiple pools: move two globls into the struct dir_info | Otto Moerbeek | |
ok @stefan armani@ | |||
2016-03-14 | Remove doaccess variable and access(2) call since this interfers with | mestre | |
applications like zdump(8) because pledge(2) doesn't allow access(2) to /usr/share/zoneinfo. millert@ better described why this call can go away: "This looks like an attempt to do access checks based on the real uid instead of the effective uid. Basically for setuid programs we don't want to allow a user to set TZ to a path they should not be able to otherwise access. However, we already have a check for issetugid() above so I think the doaccess bits can just be removed and we can rely on open()." After discussion with tb@, deraadt@ and millert@, this was also OK'ed by them | |||
2016-03-14 | (char *)0 -> NULL | mmcc | |
2016-03-13 | crt0.c is already setting environ, so don't set it in MD_START_SETUP | Philip Guenther | |
ok kettenis@ mpi@ | |||
2016-03-13 | environ and __progname are not declared in a public header; declare them | Philip Guenther | |
in libc's hidden/stdlib.h instead of in each .c file that needs one ok deraadt@ gsoares@ mpi@ | |||
2016-03-13 | Fix examples for EVP_PKEY_CTX_set_rsa_padding. | Brent Cook | |
Noted here, https://github.com/libressl-portable/portable/issues/161, we document a non-existent constant in the examples for EVP_PKEY_CTX_set_rsa_padding. ok deraadt@ | |||
2016-03-12 | Call mprotect() via its hidden _lib_mprotect alias to avoid accidental | Philip Guenther | |
overriding ok deraadt@ kettenis@ | |||
2016-03-12 | Add error handling to the remaining calls to bn_wexpand(). | Brent Cook | |
Noticed by pascal-cuoq from Github: https://github.com/libressl-portable/openbsd/issues/56 ok beck@ | |||
2016-03-12 | Remove sentences in RETURN VALUES sections saying that functions with | mmcc | |
void return types 'return no value'. This is obvious and therefore unneccessary to mention. We spare rewind(3)'s sentence because espie@ pointed out that it's a warning - the function masks a potential error. This commit also adds a sentence to X509_free clarifying that it's NULL-safe. This bit was discussed with doug@. ok martijn@, sentiment supported by schwarze@ | |||
2016-03-12 | Bump for LibreSSL 2.4.0 | Brent Cook | |
2016-03-12 | Fix markup problem introduced in the previous commit. Solution and | tb | |
explanations provided by schwarze@. | |||
2003-05-11 | import 0.9.7b (without idea and rc5) | Markus Friedl | |
2016-03-11 | X509_free(3) is NULL-safe, so remove NULL checks before its calls. | mmcc | |
ok doug@ | |||
2016-03-11 | missing article in previous; | Jason McIntyre | |
2016-03-11 | pledge: define the meaning of passing NULL to one arguments of pledge(2) as "I | Sebastien Marie | |
don't want to change the current value" it changes only the `request' argument behaviour when NULL is passed: previously it was traited as "" was passed. with help from jmc@ for man-page OK tb@ on previous version | |||
2016-03-10 | http -> https for a few more IETF URLs in comments or man pages | mmcc | |
2016-03-10 | Remove VAX-specific bits of libm manpages. | tb | |
ok jmc@ | |||
2016-03-10 | no need for SUBDIR now that vax is gone; ok deraadt | Jason McIntyre | |
2016-03-10 | ANSIfy function declarations, move initializations to declaration block | mmcc | |
ok millert@ | |||
2016-03-10 | remove Xr to infnan, a trickily hidden (from me anyway) vax page; | Jason McIntyre | |
2016-03-10 | un-vax; | Jason McIntyre | |
i've also changed some "and" to "no", since i think it reads better; | |||
2016-03-10 | un-vax; | Jason McIntyre | |
2016-03-10 | un-vax; | Jason McIntyre | |
2016-03-10 | un-vax; | Jason McIntyre | |
2016-03-10 | more pieces of vax | Theo de Raadt | |
2016-03-10 | No point in keeping the threading support for vax, I guess | Philip Guenther | |
2016-03-09 | We are done providing support for the vax. | Theo de Raadt | |
lots of agreement. | |||
2016-03-07 | http -> https for IETF/IANA URLs in comments | mmcc | |
2016-03-06 | The range of PIDs has changed, and always included zero. | Philip Guenther | |
Based on diff from Michal Mazurek (akfaew (at) jasminek.net) | |||
2016-03-06 | No more compat emulations, so remove ktrace EMUL records and the baggage | Philip Guenther | |
for generating and parsing them. ok mpi@ naddy@ millert@ deraadt@ | |||
2016-03-06 | explict_bzero for some asn1 free's - ok miod@ | Bob Beck | |
2016-03-06 | Make sure stdio functions don't end up in the library, from miod@ | Bob Beck | |
ok doug@ bcook@ | |||
2016-03-06 | Document the PT_GET_THREAD_{FIRST,NEXT} requests | Philip Guenther | |
From Michal Mazurek (akfaew (at) jasminek.net) | |||
2016-03-04 | graduate bn_expand() to a real function. the openssl version of this | Theo de Raadt | |
uses a macro with multiple-evaluations of arguments (different amount than the previous version..), but doug/bcook's inline version makes BIGNUM not opaque [problem spotted by naddy] ok doug | |||
2016-03-04 | Revert bn_expand until there's consensus on a fix. | Doug Hogan | |
2016-03-03 | Remove option USER_LDT and everything depending on it. | Christian Weisgerber | |
Remove machdep.userldt sysctl. Remove i386_[gs]et_ldt syscall stub from libi386. Remove i386_[gs]et_ldt regression test. ok mlarkin@ millert@ guenther@ | |||
2016-03-02 | fix the rest of the read_ledword() calls used as lengths to be bounded. | Bob Beck | |
inspired by guido vranken https://guidovranken.wordpress.com/2016/03/01/public-disclosure-malformed-private-keys-lead-to-heap-corruption-in-b2i_pvk_bio/ ok doug@ | |||
2016-03-02 | Add bounds checking for BN_hex2bn/BN_dec2bn. | Doug Hogan | |
Need to make sure i * 4 won't overflow. Based on OpenSSL: commit 99ba9fd02fd481eb971023a3a0a251a37eb87e4c input + ok bcook@ ok beck@ | |||
2016-03-02 | bound lengths coming out of a pem file to something like reality | Bob Beck | |
ok deraadt@ | |||
2016-03-01 | KNF this file; OK stsp@ | Todd C. Miller | |
2016-03-01 | Fix a segfault and functional error in c_gets(), | Ingo Schwarze | |
which is used for extended command input and for vi search mode. It could be triggered by typing one or more characters, then pressing backspace once (functional error: the character was deleted from the screen, but not from the edit buffer) or a few more times than characters had been entered (segfault). OK czarkoff@. Also checked by Christos Zoulas. | |||
2016-03-01 | Remove support for ancient, broken DSA implementations. | Doug Hogan | |
Based on a few OpenSSL commits: Remove ancient DSA workarounds commit ab4a81f69ec88d06c9d8de15326b9296d7f498ed Remove workaround for broken DSA implementations using negative integers commit dfb10af92e9663ce4eefaa1d6b678817fa85344d Typo in error name (EVP_R_DECODE_ERROR -> DSA_R_DECODE_ERROR) commit f6fb7f1856d443185c23f1a5968c08b4269dd37d ok beck@ | |||
2016-02-29 | Add NET_RT_IFNAMES; OK deraadt@ | Tim van der Molen | |
2016-02-29 | __tfork is section 3, not 2; | Jason McIntyre | |