Commits · f28e8bd300b32710c829316b4f620960154cf3e2 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

27 Dec, 2003 8 commits
- Only use environment variables if uid and gid are the same as euid and egid. · f28e8bd3
  Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
  f28e8bd3
- Check if a random "file" is really a device file, and treat it · de02ec27
  Richard Levitte authored Dec 27, 2003
```
specially if it is.
Add a few OpenBSD-specific cases.
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
  de02ec27
- Correct documentation typos. · 11234103
  Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
  11234103
- OpenBSD-internal changes. · 7cf80323
  Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
  7cf80323
- Use sh explicitely to run point.sh · 79b42e76
  Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
  79b42e76
- Include strings.h so strcasecmp() and strncasecmp() get properly declared. · f0c5db92
  Richard Levitte authored Dec 27, 2003
  
  f0c5db92
- Use BUF_strlcpy() instead of strcpy(). · d420ac2c
  Richard Levitte authored Dec 27, 2003
```
Use BUF_strlcat() instead of strcat().
Use BIO_snprintf() instead of sprintf().
In some cases, keep better track of buffer lengths.
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
  d420ac2c
- Add a newline at the end of the last line. · b79aa47a
  Richard Levitte authored Dec 27, 2003
```
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
```
  b79aa47a
20 Dec, 2003 1 commit
- Typos. · e88c5777
  Dr. Stephen Henson authored Dec 20, 2003
  
  e88c5777
11 Dec, 2003 1 commit
- To figure out if we're going outside the buffer, use the size of the buffer, · a2b0de98
  Richard Levitte authored Dec 11, 2003
```
not the size of the integer used to index in said buffer.

PR: 794
Notified by: Rhett Garber <rhett_garber@hp.com>
```
  a2b0de98
10 Dec, 2003 2 commits
- Document that you need to include x509.h (to get [i2d|d2i]_RSA_PUBKEY()). · 4775944f
  Richard Levitte authored Dec 10, 2003
```
Correct the typo PUKEY...
```
  4775944f
- Document that you need to include x509.h (to get [i2d|d2i]_DSA_PUBKEY()). · 2abd5b7a
  Richard Levitte authored Dec 10, 2003
```
Correct the typo PUKEY...
```
  2abd5b7a
06 Dec, 2003 3 commits
- Add "dif" variable to clean up the loop implementations. · 380e145d
  Ulf Möller authored Dec 06, 2003
```
Submitted by: Nils Larsch
```
  380e145d
- Skip a curve with generator of non-prime order. · a9f2330f
  Ulf Möller authored Dec 06, 2003
```
Submitted by: Nils Larsch
```
  a9f2330f
- Avoid segfault if ret==0. · ce38bb1a
  Ulf Möller authored Dec 06, 2003
```
Submitted by: Nils Larsch
```
  ce38bb1a
03 Dec, 2003 1 commit
- Restructure make targets to allow parallel make. · 919f8bcd
  Lutz Jänicke authored Dec 03, 2003
```
Submitted by: Witold Filipczyk <witekfl@poczta.gazeta.pl>

PR: #513
```
  919f8bcd
02 Dec, 2003 3 commits

Incremental cleanups to bn_lib.c. · 2bfd2c74

Geoff Thorpe authored Dec 02, 2003

- Add missing bn_check_top() calls and relocate some others
- Use BN_is_zero() where appropriate
- Remove assert()s that bn_check_top() is already covering
- Simplify the code in places (esp. bn_expand2())
- Only keep ambiguous zero handling if BN_STRICT isn't defined
- Remove some white-space and make some other aesthetic tweaks

2bfd2c74

Use the BN_is_odd() macro in place of code that (inconsistently) does much · 82b2f57e

Geoff Thorpe authored Dec 02, 2003

the same thing.

Also, I have some stuff on the back-burner related to some BN_CTX notes
from Peter Gutmann about his cryptlib hacks to the bignum code. The BN_CTX
comments are there to remind me of some relevant points in the code.

82b2f57e

BN_FLG_FREE is of extremely dubious usefulness, and is only referred to · 2ae1ea37

Geoff Thorpe authored Dec 02, 2003

once in the source (where it is set for the benefit of no other code
whatsoever). I've deprecated the declaration in the header and likewise
made the use of the flag conditional in bn_lib.c. Note, this change also
NULLs the 'd' pointer in a BIGNUM when it is reset but not deallocated.

2ae1ea37

01 Dec, 2003 9 commits

Declare the static BIGNUM "BN_value_one()" more carefully. · 34066d74
Geoff Thorpe authored Dec 01, 2003

34066d74
Add missing bn_check_top()s to bn_kron.c, remove some miscellaneous · b74cc077
Geoff Thorpe authored Dec 01, 2003
```
white-space, and include extra headers to satisfy debugging builds.
```
b74cc077
Add missing bn_check_top()s to bn_gf2m.c and remove some miscellaneous · e7e5fe47
Geoff Thorpe authored Dec 01, 2003
```
white-space.
```
e7e5fe47

The bn_set_max() macro is only "used" by the bn_set_[low|high]() macros · 998ae048

Geoff Thorpe authored Dec 01, 2003

which, in turn, are used nowhere at all. This is a good thing because
bn_set_max() would currently generate code that wouldn't compile (BIGNUM
has no 'max' element).

The only apparent use for bn_set_[low|high] would be for implementing
windowing algorithms, and all of openssl's seem to use bn_***_words()
helpers instead (including the BN_div() that Nils fixed recently, which had
been using independently-coded versions of what these unused macros are
intended for). I'm therefore consigning these macros to cvs oblivion in the
name of readability.

998ae048

bn_fix_top() exists for compatibility's sake and is mapped to · e65c2b98

Geoff Thorpe authored Dec 01, 2003

bn_correct_top() or bn_check_top() depending on debug settings. For
internal source, all bn_fix_top()s should be converted one way or the other
depending on whether the use of bn_correct_top() is justified.

For BN_div_recp(), these cases should not require correction if the other
bignum functions are doing their jobs properly, so convert to
bn_check_top().

e65c2b98

It was pointed out to me that if the requested size is 0, we shouldn't · 2fe9ab8e
Richard Levitte authored Dec 01, 2003
```
ty to allocate anything at all.  This will allow eNULL to still work.

PR: 751
Notified by: Lutz Jaenicke
```
2fe9ab8e
Check that OPENSSL_malloc() really returned some memory. · 1145e038
Richard Levitte authored Dec 01, 2003
```
PR: 751
Notified by: meder@mcs.anl.gov
Reviewed by: Lutz Jaenicke, Richard Levitte
```
1145e038
CRYPTO_malloc(), CRYPTO_realloc() and variants of them should return NULL · 6781efb9
Richard Levitte authored Dec 01, 2003
```
if the give size is 0.

This is a thought that came up in PR 751.
```
6781efb9
Some more ASFLAGS settings required · 0bf1c1d8
Lutz Jänicke authored Dec 01, 2003
```
PR: #735
Submitted by: Tim Rice <tim@multitalents.net>
```
0bf1c1d8

30 Nov, 2003 4 commits

Add more debugging to my Configure target, and "make update" to incorporate · 6ed474ca
Geoff Thorpe authored Nov 30, 2003
```
this and a few other changes.
```
6ed474ca

If BN_STRICT is defined, don't accept an ambiguous representation of zero · 46cb8d36

Geoff Thorpe authored Nov 30, 2003

(ie. where top may be zero, or it may be one if the corresponding word is
set to zero). Note, this only affects the macros in bn.h, there are probably
similar corrections required in some c files.

Also, clarify the audit-related macros at the top of the header. Mental
note: I must not forget to clean all this out before 0.9.8 is released ...

46cb8d36

Improve a couple of the bignum macros. Note, this doesn't eliminate · 23fc5ac6

Geoff Thorpe authored Nov 30, 2003

tolerance of ambiguous zero-representation, it just improves
BN_abs_is_word() and simplifies other macros that depend on it.

23fc5ac6

Make BN_DEBUG_RAND less painfully slow by only consuming one byte of · 5734bebe
Geoff Thorpe authored Nov 30, 2003
```
pseudo-random data for each bn_pollute().
```
5734bebe

29 Nov, 2003 5 commits
- This improves the placement of check_top() macros in a couple of bn_lib · 657a9195
  Geoff Thorpe authored Nov 29, 2003
```
functions.
```
  657a9195
- Make sure the documentation matches reality. · 6859bb1a
  Richard Levitte authored Nov 29, 2003
```
PR: 755
Notified by: Jakub Bogusz <qboosh@pld-linux.org>
```
  6859bb1a
- We're getting a clash with C++ because it has a type called 'list'. · 3822740c
  Richard Levitte authored Nov 29, 2003
```
Therefore, change all instances of the symbol 'list' to something else.

PR: 758
Submitted by: Frédéric Giudicelli <groups@newpki.org>
```
  3822740c
- Add IPSec/IKE/Oakley curves. · 0d78bc33
  Richard Levitte authored Nov 29, 2003
```
PR: 768
Submitted by: Vadim Fedukovich <vf@unity.net>
```
  0d78bc33
- Damnit, I'm sick of having to do something special every time a module · d87b79bf
  Richard Levitte authored Nov 29, 2003
```
that gets built before objects barfs all over the place because it
uses a new NID that hasn't had a chance of getting defined yet (in
this case, it was about a couple of new EC curves, and therefore a
couple of new corresponding NIDs).

I'm placing objects first in SDIRS!  There.
```
  d87b79bf
28 Nov, 2003 3 commits
- RSA_size() and DH_size() return the amount of bytes in a key, and we · 70ef9c5a
  Richard Levitte authored Nov 28, 2003
```
compared it to the amount of bits required...
PR: 770
Submitted by: c zhang <czhang2005@hotmail.com>
```
  70ef9c5a
- 1024 is the export key bits limit according to current regulations, not 512. · b727907a
  Richard Levitte authored Nov 28, 2003
```
PR: 771
Submitted by: c zhang <czhang2005@hotmail.com>
```
  b727907a
- Get rid of some signed/unsigned comparison warnings. · 444c3a84
  Geoff Thorpe authored Nov 28, 2003
  
  444c3a84