Commits · 4b66e713de39a6f396b938c1a93983c0ba7cb45f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Dec 27, 2003

Check if a random "file" is really a device file, and treat it · 4b66e713

Richard Levitte authored Dec 27, 2003

specially if it is.
Add a few OpenBSD-specific cases.
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>

4b66e713

Correct documentation typos. · 90dd4d34
Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
90dd4d34
OpenBSD-internal changes. · 2d6452cd
Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
2d6452cd
Use sh explicitely to run point.sh · cc056d63
Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
cc056d63

Use BUF_strlcpy() instead of strcpy(). · 394178c9

Richard Levitte authored Dec 27, 2003

Use BUF_strlcat() instead of strcat().
Use BIO_snprintf() instead of sprintf().
In some cases, keep better track of buffer lengths.
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>

394178c9

Add a newline at the end of the last line. · 61590d89
Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
61590d89
Change 'exp' to something else, as 'exp' is predefined by GNU C. This · ec2a5956
Richard Levitte authored Dec 27, 2003
```
was already done in HEAD, but not in this branch (I wonder why...).
```
ec2a5956

Dec 20, 2003
- Typos. · 8f5c833f
  Dr. Stephen Henson authored Dec 20, 2003
  
  8f5c833f
Dec 11, 2003
- To figure out if we're going outside the buffer, use the size of the buffer, · ffe966b0
  Richard Levitte authored Dec 11, 2003
```
not the size of the integer used to index in said buffer.

PR: 794
Notified by: Rhett Garber <rhett_garber@hp.com>
```
  ffe966b0
Dec 10, 2003
- Document that you need to include x509.h (to get [i2d|d2i]_RSA_PUBKEY()). · bb3de147
  Richard Levitte authored Dec 10, 2003
```
Correct the typo PUKEY...
```
  bb3de147
- Document that you need to include x509.h (to get [i2d|d2i]_DSA_PUBKEY()). · 95ec1a71
  Richard Levitte authored Dec 10, 2003
```
Correct the typo PUKEY...
```
  95ec1a71
Dec 03, 2003
- Restructure make targets to allow parallel make. · 325829a9
  Lutz Jänicke authored Dec 03, 2003
```
Submitted by: Witold Filipczyk <witekfl@poczta.gazeta.pl>

PR: #513
```
  325829a9
Dec 01, 2003
- It was pointed out to me that if the requested size is 0, we shouldn't · b0ea8b16
  Richard Levitte authored Dec 01, 2003
```
ty to allocate anything at all.  This will allow eNULL to still work.

PR: 751
Notified by: Lutz Jaenicke
```
  b0ea8b16
- Check that OPENSSL_malloc() really returned some memory. · bb569f97
  Richard Levitte authored Dec 01, 2003
```
PR: 751
Notified by: meder@mcs.anl.gov
Reviewed by: Lutz Jaenicke, Richard Levitte
```
  bb569f97
- CRYPTO_malloc(), CRYPTO_realloc() and variants of them should return NULL · 31670c94
  Richard Levitte authored Dec 01, 2003
```
if the give size is 0.

This is a thought that came up in PR 751.
```
  31670c94
- Some more ASFLAGS settings required · 67e5d33d
  Lutz Jänicke authored Dec 01, 2003
```
PR: #735
Submitted by: Tim Rice <tim@multitalents.net>
```
  67e5d33d
Nov 29, 2003
- Make sure the documentation matches reality. · da17495b
  Richard Levitte authored Nov 29, 2003
```
PR: 755
Notified by: Jakub Bogusz <qboosh@pld-linux.org>
```
  da17495b
- We're getting a clash with C++ because it has a type called 'list'. · b64614ad
  Richard Levitte authored Nov 29, 2003
```
Therefore, change all instances of the symbol 'list' to something else.

PR: 758
Submitted by: Frédéric Giudicelli <groups@newpki.org>
```
  b64614ad
Nov 28, 2003

RSA_size() and DH_size() return the amount of bytes in a key, and we · 6a6a08cb
Richard Levitte authored Nov 28, 2003
```
compared it to the amount of bits required...
PR: 770
Submitted by: c zhang <czhang2005@hotmail.com>
```
6a6a08cb
1024 is the export key bits limit according to current regulations, not 512. · 753cbc28
Richard Levitte authored Nov 28, 2003
```
PR: 771
Submitted by: c zhang <czhang2005@hotmail.com>
```
753cbc28

Make a number of changes to the OS/2 build. Submitter's comment below. · 9d68b289

Richard Levitte authored Nov 28, 2003

PR: 732
Submitted by: Ilya Zakharevich <nospam-abuse@ilyaz.org>

Submitter's comment:

This patch:

a) Introduces a new file os2/backwardify.pl.

b) Introduces a new mk1mf.pl variable $preamble.  As you can see, it may
   be used also to move some OS-specific code to VC-CE too (the the
   first chunk of the patch);

c) The DESCRIPTION specifier of the .def file is made more informative:
   now it contains the version number too.  On OS/2 it is made conformant
   to OS/2 conventions; in particular, when one runs the standard command
	BLDLEVEL this.DLL
   one can see:

   Vendor:      www.openssl.org/
   Revision:    0.9.7c
   Description: OpenSSL: implementation of Secure Socket Layer; DLL for library crypto.  Build for EMX -Zmtd

   [I did not make Win32 descriptions as informative as this - I'm afraid to
    break something.  Be welcome to fix this.]

d) On OS/2 the generated DLL was hardly usable (it had a shared initialized
   data...

9d68b289

Let's use text/plain in the example instead of crapy HTML. · eb5f555f
Richard Levitte authored Nov 28, 2003
```
PR: 777
Submitted by: Michael Shields <mshields@sunblocksystems.com>
```
eb5f555f

Nov 27, 2003

If dynamically-loadable ENGINEs are linked against a shared-library version · 04dc4edb

Richard Levitte authored Nov 27, 2003

of libcrypto, then it is possible that when they are loaded they will share
the same static data as the loading application/library. This means it will
be too late to set memory/ERR/ex_data/[etc] callbacks, but entirely
unnecessary to try.

This change (and a great part of this comment) was implemented in
0.9.8-dev a long time ago, but slightly differently. In 0.9.8-dev, a
specific function that just returns a pointer to some static object is
used. For 0.9.7x, we couldn't do that, since the way we handle feature
freezes is, among other, to not add any more non-static functions.
Instead, we use the function ERR_get_implementation() and compare the
returned value with fns->err_fns, a member of fns that already is
there, and which therefore can safely be used in this manner.

What happens is that if the loaded ENGINE's return value from this
function matches the loading application/library's return value - they
share static data. If they don't match, the loaded ENGINE has its own
copy of libcrypto's static data and so the callbacks need to be set.

04dc4edb

Nov 24, 2003
- Free "engine" resource in case of failure to prevent memory leak · d161f5a9
  Lutz Jänicke authored Nov 24, 2003
```
PR: #778
Submitted by: George Mitchell <george@m5p.com>
```
  d161f5a9
Nov 22, 2003
- bn_sub_part_words() is unused in 0.9.7. · 28474e26
  Ulf Möller authored Nov 22, 2003
```
Spotted by Markus Friedl.
```
  28474e26
Nov 20, 2003
- Give CRLDP its standard name. · 85421c71
  Dr. Stephen Henson authored Nov 20, 2003
```
Max req -x509 use V1 if extensions section absent.
```
  85421c71
Nov 19, 2003
- Remove duplicate prototypes have already been (correctly) added to rsa.h, · 77cc150b
  Geoff Thorpe authored Nov 19, 2003
```
as this is already included by x509.h anyway.
```
  77cc150b
Nov 18, 2003
- Make sure to initialize AES counters to obtain proper results. · 890b2abf
  Lutz Jänicke authored Nov 18, 2003
```
Submitted by: Kirill Kochetkov <kochet@ixbt.com>

PR: #748
```
  890b2abf
Nov 16, 2003
- Catch error condition to prevent NULL pointer dereference. · 6b051c4e
  Lutz Jänicke authored Nov 16, 2003
```
Submitted by: Goetz Babin-Ebell <babin-ebell@trustcenter.de>

PR: #766
```
  6b051c4e
- Provide ASFLAGS in the subdirectories handling assembler code. · a601df36
  Lutz Jänicke authored Nov 16, 2003
```
Submitted by: Tim Rice <tim@multitalents.net>

PR: #735, #765
```
  a601df36
Nov 10, 2003
- Oops! · 2d4b8349
  Dr. Stephen Henson authored Nov 10, 2003
  
  2d4b8349
- Print out GeneralizedTime and UTCTime in ASN1_STRING_print_ex(). · c22e6753
  Dr. Stephen Henson authored Nov 10, 2003
  
  c22e6753
Oct 29, 2003
- Removing those memcpy()s also took away the possibility for in and out to · db5b10fa
  Richard Levitte authored Oct 29, 2003
```
be the same.  Therefore, the removed memcpy()s need to be restored.
```
  db5b10fa
Oct 15, 2003

Correct serious bug in AES-CBC decryption when the message length isn't · fa5846e5

Richard Levitte authored Oct 15, 2003

a multiple of AES_BLOCK_SIZE.
Optimize decryption of all complete blocks in AES-CBC by removing an
unnecessary memcpy().

The error was notified by James Fernandes <jf210032@exchange.DAYTONOH.NCR.com>.
The unnecessary memcpy() was found as an effect of investigating that error.

fa5846e5

Oct 11, 2003
- Simplify cipher and digest lookup in PKCS#7 code. · 79e4022a
  Dr. Stephen Henson authored Oct 11, 2003
  
  79e4022a
Oct 10, 2003
- Retrieve correct content to sign when the · 80986c9c
  Dr. Stephen Henson authored Oct 10, 2003
```
type is "other".
```
  80986c9c
Oct 07, 2003
- In realloc, don't destroy the old memory area if a new one couldn't be · ede7c28e
  Richard Levitte authored Oct 07, 2003
```
allocated.
Notified by Daniel Lucq <daniel@lucq.org>
```
  ede7c28e
Oct 02, 2003
- Check for errors from SSL_COMP_add_compression_method(). · c9d39579
  Richard Levitte authored Oct 02, 2003
```
Notified by Andrew Marlow <AMARLOW1@bloomberg.net>
```
  c9d39579
- Correct a mixup of return values · 05e962dd
  Richard Levitte authored Oct 02, 2003
  
  05e962dd
Oct 01, 2003
- Include e_os.h to get a proper definition for memmove() for the · d680c130
  Richard Levitte authored Oct 01, 2003
```
platforms that don't have it.
```
  d680c130