wireguard-openbsd/lib/libcrypto/asn1/a_object.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/asn1/a_object.c?h=jd%2Fqueueboosts 2018-04-25T11:48:21Z Add const to functions in asn1/asn1.h as they did in OpenSSL. 2018-04-25T11:48:21Z tb tb@openbsd.org 2018-04-25T11:48:21Z urn:sha1:9b3891c73c550d75274c40aa68329a04f91c2de4 BIO_f_asn1() will be taken care of later. Tested in a bulk by sthen ok bcook jca jsing use freezero() instead of memset/explicit_bzero + free. Substantially 2017-05-02T03:59:44Z deraadt deraadt@openbsd.org 2017-05-02T03:59:44Z urn:sha1:7de8a6843ca16b4f1c9d2a7eab4c71e8af96a4e6 reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:22Z beck beck@openbsd.org 2017-01-29T17:49:22Z urn:sha1:5067ae9f807f8af9e6350e51e6a54619386c06ba as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ don't dereference a if NULL 2016-11-06T17:04:48Z bcook bcook@openbsd.org 2016-11-06T17:04:48Z urn:sha1:cc1afe3e6be813bd81fdf05c3a35c978cb7f0491 simplify error handling in c2i_ASN1_OBJECT 2016-11-06T14:00:49Z bcook bcook@openbsd.org 2016-11-06T14:00:49Z urn:sha1:16290f2a1ca6928b490068003bc8c614a1a8509e ok beck@, miod@ explicit_bzero for asn1 objects on free. Too often these contain sensitive information 2016-03-17T03:51:49Z beck beck@openbsd.org 2016-03-17T03:51:49Z urn:sha1:83ad5f4005b0a15641a9cd1669bcae9305e96ed3 and they should not be a performance bottleneck ok miod@ krw@ explict_bzero for some asn1 free's - ok miod@ 2016-03-06T18:05:00Z beck beck@openbsd.org 2016-03-06T18:05:00Z urn:sha1:a1178666f9e8d4eacdcbcae6b1ab031b552ecbc8 The IMPLEMENT_STACK_OF and IMPLEMENT_ASN1_SET_OF macros were turned into 2015-02-10T08:33:10Z jsing jsing@openbsd.org 2015-02-10T08:33:10Z urn:sha1:c33941b7863804a3cd2c52f5322202c5e25c6bb7 noops around 15 years ago. Remove multiple occurances of both that still exist in the code today. Fix CVE-2014-3508, pretty printing and OID validation: 2014-08-08T04:53:43Z guenther guenther@openbsd.org 2014-08-08T04:53:43Z urn:sha1:fca39bf77338b32d5264edaa28a2d4ffd38b333f - make sure the output buffer is always NUL terminated if buf_len was initially greater than zero. - reject OIDs that are too long, too short, or not in proper base-127 Based on https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87 ok bcook@ if (x) FOO_free(x) -> FOO_free(x). 2014-07-12T16:03:36Z miod miod@openbsd.org 2014-07-12T16:03:36Z urn:sha1:6d04a7b1e8407e9617237f4260725ef336c500fb Improves readability, keeps the code smaller so that it is warmer in your cache. review & ok deraadt@