- Jun 01, 2016
-
-
Matt Caswell authored
The ASN1_GENERALIZEDTIME_adj() function leaks an ASN1_GENERALIZEDTIME object on an error path. Reviewed-by:Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
The v2i_POLICY_MAPPINGS() function leaked ASN1_OBJECT pointers on error paths. Reviewed-by: -
Matt Caswell authored
The notice_section() function allocates a STACK_OF(CONF_VALUE) but then fails to free it on an error path. Reviewed-by: -
Matt Caswell authored
The v2i_AUTHORITY_KEYID() function can leak memory under an error condition. Reviewed-by: -
Matt Caswell authored
The crl2pkcs7 app leaks a stack of OPENSSL_STRINGs in error paths. Reviewed-by: -
Matt Caswell authored
The dsaparam application allocates a temporary buffer but then doesn't free it. Reviewed-by: -
Matt Caswell authored
The function a2i_ASN1_INTEGER() allocates a buffer |s| but then fails to free it on error paths. Reviewed-by: -
Matt Caswell authored
The make_receipt_request() function in the cms app can leak memory on an error condition. Reviewed-by: -
Matt Caswell authored
The ec_wNAF_mul() function allocates some temporary storage that it doesn't always free on an error condition. Reviewed-by: -
Rich Salz authored
After this merge, the only things left (from doc-nit-check) is 74 pages without a "RETURN VALUES" section. Reviewed-by: -
Rich Salz authored
Reviewed-by: -
Rich Salz authored
Reviewed-by: -
Rich Salz authored
Add copyright to missing assembler files. Add copyrights to missing test/* files. Add copyrights Various source and misc files. Reviewed-by: -
Rich Salz authored
RT2630 -- segfault for int overlow RT2877 -- check return values in apps/rand Update CHANGES file for previous "windows rand" changes. Reviewed-by: -
Matt Caswell authored
Reviewed-by: -
Matt Caswell authored
Reviewed-by: -
Matt Caswell authored
Reviewed-by: -
Matt Caswell authored
Reviewed-by: -
Matt Caswell authored
Reviewed-by: -
Matt Caswell authored
Swap the ordering of some code to avoid a leak in an error path. Reviewed-by: -
Rich Salz authored
Salt must be two ASCII characters. Add tests to check for that, and a test to test the checks. Reviewed-by:Matt Caswell <matt@openssl.org>
-
Matt Caswell authored
The -text argument to dhparam is broken, because the DHparams_print() function always returns an error. The problem is that always expects a public or private key to be present, even though that is never the case with parameters. Reviewed-by: -
Matt Caswell authored
The -check argument to dhparam should never identify any problems if we have just generated the parameters. Add a sanity check for this and print an error and fail if necessary. Also updates the documentation for the -check argument, and the DH_check() function. RT#4244 Reviewed-by: -
FdaSilvaYY authored
Add missing error raise call, as it is done everywhere else. and as CRYPTO_THREAD_lock_new don't do it internally. Reviewed-by:
-
Matt Caswell authored
When the "req" command is used to generate a new EC key using the -newkey option it will incorrectly display: Generating a 2048 bit EC private key This commit fixes the message to not display the bit length for EC keys because we don't currently support getting that during generation. GitHub Issue #1068 Reviewed-by: -
Matt Caswell authored
On OpenBSD we turn off async capabilities due to no ucontext.h. RT#4379 Reviewed-by:
-
- May 31, 2016
-
-
Matt Caswell authored
Reviewed-by: -
Mat authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Mat authored
If openssl is compiled with no-ui or no-stdio, then PEM_read_bio_PrivateKey fails if a password but no callback is provided. The reason is that the premature return in the PEM_def_callback implementation when OPENSSL_NO_STDIO or OPENSSL_NO_UI is defined, comes too early. This patch moves the ifdef block to the correct place. Reviewed-by:
-
TJ Saunders authored
Reviewed-by:
-
TJ Saunders authored
Reviewed-by:
-
TJ Saunders authored
accompanying documentation. Reviewed-by:
-
Rich Salz authored
Reviewed-by: -
Cristian Stoica authored
When an unrecognized algorithm is given on command line together with -async_jobs, speed_main will jump to clean-up and run ASYNC_cleanup_thread without calling ASYNC_init_thread first. Example: openssl speed -async_jobs 4 ras2048 Signed-off-by:
Cristian Stoica <cristian.stoica@nxp.com> Reviewed-by:
-
Dr. Stephen Henson authored
Don't copy parameters is they're already present in the destination. Return error if an attempt is made to copy different parameters to destination. Update documentation. If key type is not initialised return missing parameters RT#4149 Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by:Viktor Dukhovni <viktor@openssl.org>
-
- May 30, 2016
-
-
Emilia Kasper authored
- Use the new enable-ubsan and enable-asan configuration options. - Separate ubsan and asan runs. - In addition, run shared ubsan tests to get more coverage. (Shared asan tests need a bit more thought to get them working.) Reviewed-by: -
Mat authored
This fixes the following error when the CRT debug heap (crtdbg.h) is used: e_os.h(476): warning C4005: 'strdup': macro redefinition C:\Program Files (x86)\Windows Kits\10\Include\10.0.10586.0\ucrt\crtdbg.h(319): note: see previous definition of 'strdup' Reviewed-by:
-
Richard Levitte authored
Trying to use normal perl conditions to conditionally 'use' a perl module didn't quite work. Using the 'if' module to do so does work. Reviewed-by:Andy Polyakov <appro@openssl.org>
-
Richard Levitte authored
Reviewed-by:
-
