summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2014-08-19PR2401: Typos in FAQJeffrey Walton
Also rewrite section on compiler bugs; Matt pointed out that it has some grammatical issues. Reviewed-by: Emilia Kasper <emilia@openssl.org>
2014-08-19RT2724: Remove extra declarationJohn Fitzgibbon
Extra SSL_get_selected_srtp_profile() declaration in ssl/srtp.h causes -Werror builds to fail. Reviewed-by: Tim Hudson <tjh@openssl.org>
2014-08-18RT2492: Remove extra NULL check.Laszlo Papp
2014-08-18RT2489: Remove extra "sig" local variable.Laszlo Papp
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-18RT2942: CRYPTO_set_dynlock_create_callback doc fixJohn Gardiner Myers
The file param is "const char*" not "char*" Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-18RT2163: Remove some unneeded #include'sDoug Goldstein
Several files #include stdio.h and don't need it. Also, per tjh, remove BN_COUNT Reviewed-by: Emilia Kasper <emilia@openssl.org>
2014-08-18RT1815: More const'ness improvementsJustin Blanchard
Add a dozen more const declarations where appropriate. These are from Justin; while adding his patch, I noticed ASN1_BIT_STRING_check could be fixed, too. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-17pub_decode_gost94, pub_decode_gost01: check for NULL after allocating ↵Jonas Maebe
databuf pub_encode_gost94, pub_encode_gost01: check for NULL after allocating databuf and octet Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17engine_md_copy: check for NULL after allocating to_md->HashBufferJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17process_pci_value: free (*policy)->data before setting to NULL after failed ↵Jonas Maebe
realloc Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17do_ext_i2d: free ext_der or ext_oct on error pathJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17do_othername: check for NULL after allocating objtmpJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17NETSCAPE_SPKI_b64_encode: free der_spki and b64_str on error pathJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-17get_cert_by_subject: check for NULL when allocating hentJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-17UI_construct_prompt: check for NULL when allocating promptJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-17hashbn: check for NULL result when allocating bin and return an error if it ↵Jonas Maebe
fails all (in)direct callers of hashbn: propagate potential error in hashbn Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-17JPAKE_CTX_new: check for NULL result when allocating ctxJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-17old_hmac_encode: check for NULL result when allocating *pderJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17dev_crypto_md5_copy: return error if allocating to_md->data failsJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17dev_crypto_md5_update: check result of realloc(md_data->data) and don't leak ↵Jonas Maebe
memory if it fails Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17dev_crypto_cipher: return immediately if allocating cin/cout failedJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-17dev_crypto_init_key: return error if allocating CDATA(ctx)->key failedJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15Add support for Camellia HMAC-Based cipher suites from RFC6367Hubert Kario
While RFC6367 focuses on Camellia-GCM cipher suites, it also adds a few cipher suites that use SHA-2 based HMAC that can be very easily added. Tested against gnutls 3.3.5 PR#3443 Reviewed-by: Tim Hudson <tjh@openssl.org>
2014-08-15Fixed out-of-bounds read errors in ssl3_get_key_exchange.Matt Caswell
PR#3450 Reviewed-by: Emilia Käsper <emilia@openssl.org>
2014-08-15RT2751: Declare get_issuer_sk() earlier.Rich Salz
Add a declaration for get_issuer_sk() so that other functions in x509_vf.c could use it. (Planned work around cross-certification chains.) Reviewed-by: Kurt Roeckx <kurt@openssl.org>
2014-08-15cryptodev_digest_copy: return error if allocating dstate->mac_data failsJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15cryptodev_digest_update: don't leak original state->mac_data if realloc failsJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15cms_SignerInfo_content_sign: free sig on failure pathJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15rtcp_new: return failure if allocation of bi->ptr failedJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15multi_split: check for NULL when allocating parts and bpart, and for failure ↵Jonas Maebe
of sk_BIO_push() Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15BIO_new_dgram_sctp, dgram_sctp_read: zero entire authchunksJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15mime_hdr_addparam: free tmpname, tmpval and mparam on error path, and check ↵Jonas Maebe
whether sk_MIME_PARAM_push succeeds Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15mime_hdr_new: free mhdr, tmpname, tmpval on error pathJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15ASN1_verify, ASN1_item_verify: cleanse and free buf_in on error pathJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15SetBlob: free rgSetBlob on error pathJonas Maebe
Signed-off-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2014-08-15Fix use after free bug.Istvan Noszticzius
Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
2014-08-15RT783: Minor optimization to ASN1_INTEGER_setFrédéric Giudicelli
Remove local variable and avoid extra assignment. Reviewed-by: Emilia Kasper <emilia@silkandcyanide.net>
2014-08-15RT2465: Silence some gcc warningsRob Austein
"Another machine, another version of gcc, another batch of compiler warnings." Add "=NULL" to some local variable declarations that are set by passing thier address into a utility function; confuses GCC it might not be set. Reviewed-by: Emilia Käsper <emilia@silkandcyanide.net>
2014-08-15RT3023: Redundant logical expressionsHans Wennborg
Remove some redundant logical expressions Reviewed-by: Emilia Kasper <emilia@silkandcyanide.net>
2014-08-15Merge branch 'master' of git.openssl.org:opensslRich Salz
2014-08-15RT3268: Fix spelling errors in CHANGES file.Claus Assmann
Fix a bunch of typo's and speling (sic) errors in the CHANGES file. Reviewed-by: Tim Hudson <tjh@cryptsoft.com>
2014-08-15Revision of custom extension code.Dr. Stephen Henson
Move custom extension structures from SSL_CTX to CERT structure. This change means the form can be revised in future without binary compatibility issues. Also since CERT is part of SSL structures so per-SSL custom extensions could be supported in future as well as per SSL_CTX. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
2014-08-15Include error messages on extension check failure.Dr. Stephen Henson
Reviewed-by: Emilia Käsper <emilia@openssl.org>
2014-08-14make dependEmilia Kasper
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-08-13Further improve/fix ec_GFp_simple_points_make_affine (ecp_smpl.c) andBodo Moeller
group_order_tests (ectest.c). Also fix the EC_POINTs_mul documentation (ec.h). Reviewed-by: emilia@openssl.org
2014-08-13RT1665: Fix podpath to get xref's rightMatt Caswell
In Makefile, when build manpages, put the current directory at the start of the podpath so that cross-refs find the local directory first. Reviewed-by: Tim Hudson <tjh@cryptosoft.com>
2014-08-12RT3239: Extra comma in NAME lines of two manpagesIngo Schwarze
In two OpenSSL manual pages, in the NAME section, the last word of the name list is followed by a stray trailing comma. While this may seem minor, it is worth fixing because it may confuse some makewhatis(8) implementations. While here, also add the missing word "size" to the one line description in SSL_CTX_set_max_cert_list(3). Reviewed by: Dr Stephen Henson <shenson@drh-consultancy.co.uk>
2014-08-12Merge branch 'master' of git.openssl.org:opensslRich Salz
2014-08-12PR 719: Configure not exiting with child statusnnposter@users.sourceforge.net
If subcommand fails, just die. Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
2014-08-12PR 718: Configure not exiting with child statusnnposter@users.sourceforge.net
If subcommand fails, just die. Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-19 07:16:46 +0000