- 17 Aug, 2016 15 commits
-
-
FdaSilvaYY authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> Reviewed-by:
Matt Caswell <matt@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:Richard Levitte <levitte@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Matt Caswell authored
Reviewed-by:
Stephen Henson <steve@openssl.org>
-
Matt Caswell authored
Put the main object first in the params list. Reviewed-by:
-
Dr. Stephen Henson authored
Reviewed-by: -
Matt Caswell authored
Reviewed-by:
-
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Remi Gacogne authored
* SSL_SESSION_set1_id() * SSL_SESSION_get0_id_context() * SSL_CTX_get_tlsext_status_cb() * SSL_CTX_get_tlsext_status_arg() Reviewed-by:
-
Richard Levitte authored
Unfortunately, it means that the VMS IVP gets a bit crippled. This will be fixed later on. Reviewed-by: -
Richard Levitte authored
Correct small error from last config.com change Reviewed-by:
-
- 16 Aug, 2016 18 commits
-
-
Matt Caswell authored
Reviewed-by:
Viktor Dukhovni <viktor@openssl.org> Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
Emilia Käsper <emilia@openssl.org> Reviewed-by:
-
Gergely Nagy authored
The generated asm code from x86cpuid.pl contains CMOVE instructions which are only available on i686 and later CPUs. Reviewed-by:
Andy Polyakov <appro@openssl.org> Reviewed-by:
-
Matt Caswell authored
These functions are no longer relevant to 1.1.0 (we always have auto ecdh on) - but no reason to break old code that tries to call it. The macros will only return a dummy "success" result if the app was trying to enable ecdh. Disabling can't be done in quite this way any more. Fixes Github Issue #1437 Reviewed-by: -
Matt Caswell authored
The read pipelining code broke constant time unpadding. See GitHub issue #1438 Reviewed-by: -
Dr. Stephen Henson authored
If -badsig is selected corrupt the signature before printing out any details so the output reflects the modified signature. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Deprecate the function ASN1_STRING_data() and replace with a new function ASN1_STRING_get0_data() which returns a constant pointer. Update library to use new function. Reviewed-by: -
Richard Levitte authored
Reviewed-by: -
Andy Polyakov authored
Reviewed-by:Tim Hudson <tjh@openssl.org>
-
Andy Polyakov authored
Reviewed-by: -
Andy Polyakov authored
Reviewed-by: -
David Woodhouse authored
Now we support (u)int64_t this can be very much simpler. Reviewed-by:
-
Emilia Kasper authored
Reviewed-by: -
Richard Levitte authored
Modify VMS config.com to match Reviewed-by: -
Richard Levitte authored
Reviewed-by:
-
- 15 Aug, 2016 7 commits
-
-
Dr. Stephen Henson authored
Apply a limit to the maximum blob length which can be read in do_d2i_bio() to avoid excessive allocation. Thanks to Shi Lei for reporting this. Reviewed-by: -
Dr. Stephen Henson authored
Check for error return in BN_div_word(). Reviewed-by: -
Dr. Stephen Henson authored
If an oversize BIGNUM is presented to BN_bn2dec() it can cause BN_div_word() to fail and not reduce the value of 't' resulting in OOB writes to the bn_data buffer and eventually crashing. Fix by checking return value of BN_div_word() and checking writes don't overflow buffer. Thanks to Shi Lei for reporting this bug. CVE-2016-2182 Reviewed-by: -
Tomas Mraz authored
The 64 bit pointer must not be cast to 32bit unsigned long on x32 platform. Reviewed-by:
-
Tomas Mraz authored
Reviewed-by:
-
Tomas Mraz authored
Add extra cast to unsigned long to avoid sign extension when converting pointer to 64 bit data. Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
