summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2016-03-17remove NOTREACHEDmmcc
2016-03-17'miliseconds' -> 'milliseconds' in comments.Kenneth R Westerback
if_atu.c noted by Michal Mazurek.
2016-03-17properly guard to macrosmmcc
ok otto@
2016-03-17explicit_bzero for asn1 objects on free. Too often these contain sensitive ↵Bob Beck
information and they should not be a performance bottleneck ok miod@ krw@
2016-03-15'accomodate' -> 'accommodate' in comments.Kenneth R Westerback
Started by diff from Mical Mazurek.
2016-03-15remind people rewind is seldom a good choiceMarc Espie
okay jmc@
2016-03-14small step towards multiple pools: move two globls into the struct dir_infoOtto Moerbeek
ok @stefan armani@
2016-03-14Remove doaccess variable and access(2) call since this interfers withmestre
applications like zdump(8) because pledge(2) doesn't allow access(2) to /usr/share/zoneinfo. millert@ better described why this call can go away: "This looks like an attempt to do access checks based on the real uid instead of the effective uid. Basically for setuid programs we don't want to allow a user to set TZ to a path they should not be able to otherwise access. However, we already have a check for issetugid() above so I think the doaccess bits can just be removed and we can rely on open()." After discussion with tb@, deraadt@ and millert@, this was also OK'ed by them
2016-03-14(char *)0 -> NULLmmcc
2016-03-13crt0.c is already setting environ, so don't set it in MD_START_SETUPPhilip Guenther
ok kettenis@ mpi@
2016-03-13environ and __progname are not declared in a public header; declare themPhilip Guenther
in libc's hidden/stdlib.h instead of in each .c file that needs one ok deraadt@ gsoares@ mpi@
2016-03-13Fix examples for EVP_PKEY_CTX_set_rsa_padding.Brent Cook
Noted here, https://github.com/libressl-portable/portable/issues/161, we document a non-existent constant in the examples for EVP_PKEY_CTX_set_rsa_padding. ok deraadt@
2016-03-12Call mprotect() via its hidden _lib_mprotect alias to avoid accidentalPhilip Guenther
overriding ok deraadt@ kettenis@
2016-03-12Add error handling to the remaining calls to bn_wexpand().Brent Cook
Noticed by pascal-cuoq from Github: https://github.com/libressl-portable/openbsd/issues/56 ok beck@
2016-03-12Remove sentences in RETURN VALUES sections saying that functions withmmcc
void return types 'return no value'. This is obvious and therefore unneccessary to mention. We spare rewind(3)'s sentence because espie@ pointed out that it's a warning - the function masks a potential error. This commit also adds a sentence to X509_free clarifying that it's NULL-safe. This bit was discussed with doug@. ok martijn@, sentiment supported by schwarze@
2016-03-12Bump for LibreSSL 2.4.0Brent Cook
2016-03-12Fix markup problem introduced in the previous commit. Solution andtb
explanations provided by schwarze@.
2003-05-11import 0.9.7b (without idea and rc5)Markus Friedl
2016-03-11X509_free(3) is NULL-safe, so remove NULL checks before its calls.mmcc
ok doug@
2016-03-11missing article in previous;Jason McIntyre
2016-03-11pledge: define the meaning of passing NULL to one arguments of pledge(2) as "ISebastien Marie
don't want to change the current value" it changes only the `request' argument behaviour when NULL is passed: previously it was traited as "" was passed. with help from jmc@ for man-page OK tb@ on previous version
2016-03-10http -> https for a few more IETF URLs in comments or man pagesmmcc
2016-03-10Remove VAX-specific bits of libm manpages.tb
ok jmc@
2016-03-10no need for SUBDIR now that vax is gone; ok deraadtJason McIntyre
2016-03-10ANSIfy function declarations, move initializations to declaration blockmmcc
ok millert@
2016-03-10remove Xr to infnan, a trickily hidden (from me anyway) vax page;Jason McIntyre
2016-03-10un-vax;Jason McIntyre
i've also changed some "and" to "no", since i think it reads better;
2016-03-10un-vax;Jason McIntyre
2016-03-10un-vax;Jason McIntyre
2016-03-10un-vax;Jason McIntyre
2016-03-10more pieces of vaxTheo de Raadt
2016-03-10No point in keeping the threading support for vax, I guessPhilip Guenther
2016-03-09We are done providing support for the vax.Theo de Raadt
lots of agreement.
2016-03-07http -> https for IETF/IANA URLs in commentsmmcc
2016-03-06The range of PIDs has changed, and always included zero.Philip Guenther
Based on diff from Michal Mazurek (akfaew (at) jasminek.net)
2016-03-06No more compat emulations, so remove ktrace EMUL records and the baggagePhilip Guenther
for generating and parsing them. ok mpi@ naddy@ millert@ deraadt@
2016-03-06explict_bzero for some asn1 free's - ok miod@Bob Beck
2016-03-06Make sure stdio functions don't end up in the library, from miod@Bob Beck
ok doug@ bcook@
2016-03-06Document the PT_GET_THREAD_{FIRST,NEXT} requestsPhilip Guenther
From Michal Mazurek (akfaew (at) jasminek.net)
2016-03-04graduate bn_expand() to a real function. the openssl version of thisTheo de Raadt
uses a macro with multiple-evaluations of arguments (different amount than the previous version..), but doug/bcook's inline version makes BIGNUM not opaque [problem spotted by naddy] ok doug
2016-03-04Revert bn_expand until there's consensus on a fix.Doug Hogan
2016-03-03Remove option USER_LDT and everything depending on it.Christian Weisgerber
Remove machdep.userldt sysctl. Remove i386_[gs]et_ldt syscall stub from libi386. Remove i386_[gs]et_ldt regression test. ok mlarkin@ millert@ guenther@
2016-03-02fix the rest of the read_ledword() calls used as lengths to be bounded.Bob Beck
inspired by guido vranken https://guidovranken.wordpress.com/2016/03/01/public-disclosure-malformed-private-keys-lead-to-heap-corruption-in-b2i_pvk_bio/ ok doug@
2016-03-02Add bounds checking for BN_hex2bn/BN_dec2bn.Doug Hogan
Need to make sure i * 4 won't overflow. Based on OpenSSL: commit 99ba9fd02fd481eb971023a3a0a251a37eb87e4c input + ok bcook@ ok beck@
2016-03-02bound lengths coming out of a pem file to something like realityBob Beck
ok deraadt@
2016-03-01KNF this file; OK stsp@Todd C. Miller
2016-03-01Fix a segfault and functional error in c_gets(),Ingo Schwarze
which is used for extended command input and for vi search mode. It could be triggered by typing one or more characters, then pressing backspace once (functional error: the character was deleted from the screen, but not from the edit buffer) or a few more times than characters had been entered (segfault). OK czarkoff@. Also checked by Christos Zoulas.
2016-03-01Remove support for ancient, broken DSA implementations.Doug Hogan
Based on a few OpenSSL commits: Remove ancient DSA workarounds commit ab4a81f69ec88d06c9d8de15326b9296d7f498ed Remove workaround for broken DSA implementations using negative integers commit dfb10af92e9663ce4eefaa1d6b678817fa85344d Typo in error name (EVP_R_DECODE_ERROR -> DSA_R_DECODE_ERROR) commit f6fb7f1856d443185c23f1a5968c08b4269dd37d ok beck@
2016-02-29Add NET_RT_IFNAMES; OK deraadt@Tim van der Molen
2016-02-29__tfork is section 3, not 2;Jason McIntyre