summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2015-07-19Now that it is safe to invoke X509_STORE_CTX_cleanup() if X509_STORE_CTX_init()miod2-8/+16
2015-07-19Put explicit braces around assignment used in a conditional.miod1-2/+2
2015-07-19Remove the logic responsible for outputting most AES-NI instructions asmiod3-107/+0
2015-07-19Replace `.byte 0x48,0x83,0xEC,0x08' with `sub \$8,%rsp' which is exactly themiod1-2/+2
2015-07-19Simplify X509_STORE_CTX_init and make it safe with stack variables.doug1-58/+55
2015-07-19Remove case that can never happen.doug1-5/+1
2015-07-19Fix Coverity 72742 - ret is overwritten immediately after this.beck1-2/+1
2015-07-19Assign p to CBS_data since it is used later.doug2-4/+6
2015-07-19abort when ENGINE_remove fails, fix Coverity 21656bcook1-5/+2
2015-07-18Convert dtls1_get_message_header to CBS and change to int.doug6-32/+74
2015-07-18rand_err doesn't exist anymore, coverity 78808beck1-3/+3
2015-07-18Coverity 21651beck1-3/+7
2015-07-18Convert dtls1_get_record to CBS.doug2-42/+56
2015-07-18Remove repeated code in dtls1_get_record.doug2-80/+32
2015-07-18Dead code, Coverity 78798beck1-3/+1
2015-07-18Coverity ID 78910 - Yet another stupid API designed to not show failures. do thebeck1-6/+8
2015-07-18Remove SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER workaround.doug10-58/+26
2015-07-18Check the return value of ASN1_STRING_set(), for it may fail to allocatemiod2-6/+14
2015-07-18Remove support for the SSL_OP_TLS_D5_BUG compat hack from SSLeay.doug6-28/+22
2015-07-18Fix leak found by coverity, issue 78897 - which also brough tobeck3-25/+33
2015-07-17delete doubled words;schwarze4-4/+4
2015-07-17extenstion -> extensionmiod1-1/+1
2015-07-17Convert ssl_parse_serverhello_use_srtp_ext to CBS.doug4-24/+34
2015-07-17Remove compat hack that disabled ECDHE-ECDSA on OS X.doug10-208/+26
2015-07-17Remove workaround for TLS padding bug from SSLeay days.doug12-74/+24
2015-07-16Bump LIBRESSL_VERSION defines.bcook1-3/+7
2015-07-16Enforce V_ASN1_OCTET_STRING type before accessing the object as octet string;miod1-2/+4
2015-07-16After reading a password with terminal echo off, restore the terminal toguenther1-6/+5
2015-07-16Explicitely cast a char into unsigned long before shifting it left by 24, formiod1-2/+2
2015-07-16Check return value of all used functions in OCSP_REQUEST_print(); coversmiod1-5/+9
2015-07-16Make sure the `reject negative sizes' logic introduced in 1.34 is actuallymiod1-3/+4
2015-07-15check n before cbs_init, coverity - ID 125063beck2-6/+18
2015-07-15test for n<0 before use in CBS_init - mostly to shut up coverity.beck6-22/+66
2015-07-15Flense out dead code, we don't do ecdhe_clnt_cert.beck4-368/+144
2015-07-15Fix inverted test in previous. Commit message told what we intended, butmiod1-2/+2
2015-07-15Remove dead code. Coverity CID 21688miod1-4/+1
2015-07-15Fix two theoretical NULL pointer dereferences which can only happen if youmiod1-4/+9
2015-07-15Fix possible 32 byte buffer overrun, found by coverity, CID 78869beck1-2/+2
2015-07-15Memory leak; Coverity CID 78836miod1-6/+8
2015-07-15Unchecked allocations, and make sure we do not leak upon error. Fixesmiod1-21/+36
2015-07-15Avoid leaking objects upon error; tweaks & ok doug@miod1-18/+18
2015-07-15Do not allow TS_check_signer_name() with signer == NULL frommiod1-1/+4
2015-07-15Previous fix for Coverity CID 21785 did not cope correctly with seed_len != 0,miod1-1/+3
2015-07-14Partially convert ssl3_get_message to CBS.doug2-12/+30
2015-07-14Convert dtls1_get_hello_verify to CBS.doug2-34/+46
2015-07-14Convert ssl3_get_cipher_by_char to CBS.doug2-4/+16
2015-07-14Convert ssl3_get_client_certificate to CBS.doug2-30/+38
2015-07-14Convert ssl3_get_finished to CBS.doug2-12/+18
2015-07-14Convert ssl_parse_clienthello_use_srtp_ext to CBS.doug4-84/+50
2015-07-14Convert ssl3_get_cert_status to CBS.doug2-34/+52