Re: [CVS] OpenSSL: openssl/apps/ apps.c openssl/crypto/jpake/ Makefile jpa...

2008-10-27 Thread Ben Laurie
Dr. Stephen Henson wrote: OpenSSL CVS Repository http://cvs.openssl.org/ Server: cvs.openssl.org Name: Dr. Stephen Henson Root: /v/openssl/cvs Email: [EMAIL

[openssl.org #1767] bug of EVP_Cipher when use openssl engine

2008-10-27 Thread forxy via RT
I found a bug in s3_enc.c t1_enc.c and d1_enc.c. following function int ssl3_enc(SSL *s, int send) int tls1_enc(SSL *s, int send) int dtls1_enc(SSL *s, int send) locat: EVP_Cipher(ds,rec-data,rec-input,l); openssl has not check the return value of EVP_Cipher, and the address of

Re: [CVS] OpenSSL: openssl/apps/ apps.c openssl/crypto/jpake/ Makefile jpa...

2008-10-27 Thread Dr. Stephen Henson
On Mon, Oct 27, 2008, Ben Laurie wrote: Dr. Stephen Henson wrote: OpenSSL CVS Repository http://cvs.openssl.org/ Server: cvs.openssl.org Name: Dr. Stephen Henson Root:

Re: [PATCH] keep CHIL engine from breaking in non-threaded situations [openssl.org #1736]

2008-10-27 Thread Sander Temme
On Oct 20, 2008, at 11:21 AM, Sander Temme via RT wrote: Dear OpenSSL developers, I would like to propose the following patch to engines/e_chil.c: -- Polite nag -- I have been trying to raise this topic, on the list and through RT, since August. I have had no reaction from any of the

Re: [PATCH] keep CHIL engine from breaking in non-threaded situations [openssl.org #1736]

2008-10-27 Thread Geoff Thorpe
Well, FWIW, I will ACK the patch. And if nobody gets round to putting it in (and doing any other admin that goes with it, like regenerating the error definitions which probably change as a consequence of this, etc), then I'll try to do this myself this some time this week. If you want to help