summaryrefslogtreecommitdiffstats
path: root/lib/libcrypto/objects/obj_dat.c
AgeCommit message (Collapse)AuthorFilesLines
2019-07-03snprintf/vsnprintf return < 0 on error, rather than -1.deraadt1-3/+3
2018-09-08ASN1_OBJECTs should be freed with ASN1_OBJECT_free(3), not with free(3).tb1-2/+2
ok inoguchi, jsing
2018-09-08indent labelstb1-6/+6
2017-01-29Send the function codes from the error functions to the bit bucket,beck1-9/+9
as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@
2017-01-21Expand DECLARE_OBJ_BSEARCH_CMP_FN and IMPLEMENT_OBJ_BSEARCH_CMP_FN macros.jsing1-7/+55
No change to generated assembly excluding line numbers.
2016-12-22OBJ_obj2txt() should return the total amount of space requiredinoguchi1-5/+1
reported by @rhenium on GitHub ok jsing@
2016-07-17remove unused OPENSSL_NO_OBJECT casebcook1-14/+1
ok tedu@
2015-10-14better fix for overrun reported by Qualys Security.tedu1-4/+1
buf is at all times kept nul terminated, so there is no need to enforce this again upon exit. (no need to move buf around after we exahust space.) ok beck miod
2015-10-14Bail out early if we have no buf_lenbeck1-1/+5
ok miod@
2015-10-14fix a memory leak reported by Qualys Security.tedu1-3/+4
move the bndec variable in tighter since it's not used elsewhere in the loop, then always free it after use. ok bcook miod
2015-10-14Ensure we don't write a 0 byte past end of the buffer in the error case.beck1-3/+3
ok bcook@ deraadt@
2014-08-08Fix CVE-2014-3508, pretty printing and OID validation:guenther1-2/+7
- make sure the output buffer is always NUL terminated if buf_len was initially greater than zero. - reject OIDs that are too long, too short, or not in proper base-127 Based on https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87 ok bcook@
2014-07-11Only import cryptlib.h in the four source files that actually need it.jsing1-4/+4
Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@
2014-07-10Explicitly include <openssl/opensslconf.h> in every file that referencesjsing1-1/+3
an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers.
2014-07-10Stop including standard headers via cryptlib.h - pull in the headers thatjsing1-2/+4
are needed in the source files that actually require them. ok beck@ miod@
2014-06-12tags as requested by miod and teduderaadt1-1/+1
2014-06-07malloc() result does not need a cast.deraadt1-6/+6
ok miod
2014-06-01Clean up some of the nightmare of string and pointer arithmatic inbeck1-52/+36
this nasty function. This gets rid of the nasty tmp variables used to hold temporary strings and the DECIMAL_SIZE hack. it gets rid of the rather pointless null checks for buf (since the original code dereferences it before checking). It also gets rid of the insane possibility this could return -1 when stuff is using the return values to compute lengths All the failure cases now return 0 and an empty string like the first error case in the original code. ok miod@ tedu@
2014-05-30more: no need for null check before freederaadt1-6/+3
ok tedu guenther
2014-04-20Restore beck's rev 1.21: snprintf() was reviewedguenther1-1/+1
2014-04-19KNF.jsing1-427/+427
2014-04-19We'll interpret a (void) cast on snprintf() to mean it's been verified thatguenther1-1/+1
truncation is either desirable, not an issue, or is detected and handled later ok deraadt@
2014-04-19use intrinsic strlcpy and strlcat everywhere so we only have one set ofbeck1-3/+3
funcitons to check for incorrect use. keep BUF_strlcpy and BUF_strlcat for API comptibility only. ok tedu@
2014-04-18Shrink a local buffer to the size it really needs to be; this is the onlymiod1-1/+1
discrepancy found while checking proper {HEX,DECIMAL}_SIZE macro usage, which is confusing enough. tweaks and ok jca@, ok guenther@
2014-04-17Change library to use intrinsic memory allocation functions instead ofbeck1-13/+13
OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free
2014-04-15Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternitybeck1-16/+0
with the bearded ones... some API's that nobody should be using will dissapear with this commit.
2014-04-15Part 1 of eliminating BIO_snprintf(). This fixes mechanical conversionsbeck1-1/+1
where the return value is ignored changing to (void) snprintf. ok deraadt@
2014-04-13Remove some stuff that isn't needed.beck1-1/+1
ok miod@ deraadt@
2010-10-01resolve conflicts, fix local changesdjm1-78/+102
2008-09-06resolve conflictsdjm1-67/+185
2005-04-29resolve conflictsdjm1-5/+7
2004-04-08merge 0.9.7dmarkus1-2/+2
2003-05-12merge 0.9.7b with local changes; crank majors for libssl/libcryptomarkus1-4/+3
2003-04-05Trivial sprintf() -> snprintf() changes. ok deraadt@ho1-2/+2
2002-09-14merge with openssl-0.9.7-stable-SNAP-20020911,markus1-1/+1
new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@
2002-07-30apply patches from OpenSSL Security Advisory [30 July 2002],markus1-1/+1
http://marc.theaimsgroup.com/?l=openssl-dev&m=102802395104110&w=2
2002-06-07Merge OpenSSL 0.9.7-stable-20020605,beck1-1/+1
correctly autogenerate obj_mac.h
2002-05-15OpenSSL 0.9.7 stable 2002 05 08 mergebeck1-18/+28
2000-12-15openssl-engine-0.9.6 mergebeck1-28/+36
2000-03-19OpenSSL 0.9.5 mergebeck1-13/+9
*warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs
1999-09-29OpenSSL 0.9.4 mergebeck1-97/+172
1998-10-05Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD buildryker1-0/+578
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible.