Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | make grandparent-parent-child sshbuf chains robust to use-after-free | 2018-11-16 | 1 | -7/+10 | |
| | | | | | faults if the ancestors are freed before the descendents. Nothing in OpenSSH uses this deallocation pattern. Reported by Jann Horn | ||||
* | remove legacy buffer API emulation layer; ok djm@ | 2018-07-09 | 1 | -20/+2 | |
| | |||||
* | unconditionally zero init size of buffer; ok markus@ deraadt@ | 2017-06-01 | 1 | -3/+3 | |
| | |||||
* | Switch to recallocarray() for a few operations. Both growth and shrinkage | 2017-05-31 | 1 | -8/+8 | |
| | | | | | | are handled safely, and there also is no need for preallocation dances. Future changes in this area will be less error prone. Review and one bug found by markus | ||||
* | sshbuf_consume: reset empty buffer; ok djm@ | 2017-05-26 | 1 | -1/+4 | |
| | |||||
* | split allocation out of sshbuf_reserve() into a separate | 2016-11-25 | 1 | -33/+43 | |
| | | | | sshbuf_allocate() function; ok markus@ | ||||
* | Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions | 2016-09-12 | 1 | -4/+4 | |
| | | | | | rather than pulling <sys/param.h> and unknown namespace pollution. ok djm markus dtucker | ||||
* | use explicit_bzero() more liberally in the buffer code; ok deraadt | 2016-01-12 | 1 | -5/+5 | |
| | |||||
* | Remove NULL-checks before sshbuf_free(). | 2015-12-11 | 1 | -5/+3 | |
| | | | | ok djm@ | ||||
* | some more bzero->explicit_bzero, from Michael McConville | 2015-10-05 | 1 | -2/+2 | |
| | |||||
* | Reduce use of <sys/param.h> and transition to <limits.h> throughout. | 2015-01-20 | 1 | -2/+2 | |
| | | | | ok djm markus | ||||
* | unblock SIGSEGV before raising it | 2014-06-25 | 1 | -1/+2 | |
| | | | | ok djm | ||||
* | New buffer API; the first installment of the conversion/replacement | 2014-04-30 | 1 | -0/+403 | |
of OpenSSH's internals to make them usable as a standalone library. This includes a set of wrappers to make it compatible with the existing buffer API so replacement can occur incrementally. With and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review. |