CVS: cvs.openbsd.org: src

2023-03-14 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/03/15 00:34:07 Modified files: lib/libcrypto/ec: ecx_methods.c Log message: Return the signature length after successful signing operation This is required behavior of the EVP_DigestSign() API, but see

CVS: cvs.openbsd.org: src

2023-03-14 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/03/15 00:30:21 Modified files: lib/libcrypto/asn1: bio_ndef.c Log message: Add comments that explain why things are done in this strange order. There's some method to this madness. ok jsing

CVS: cvs.openbsd.org: src

2023-03-14 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/03/15 00:28:55 Modified files: lib/libcrypto/asn1: bio_ndef.c Log message: Push calloc() of ndef_aux down as far as possible and pull the setting of the ex_arg up, so we can do error checking. ok jsing

CVS: cvs.openbsd.org: src

2023-03-14 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/03/15 00:22:42 Modified files: lib/libcrypto/asn1: bio_ndef.c Log message: Error check BIO_asn1_set_{prefix,suffix}() calls ok jsing

CVS: cvs.openbsd.org: src

2023-03-14 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/03/15 00:14:02 Modified files: lib/libcrypto/bio: bio_lib.c Log message: Streaming BIOs assume they can write to NULL BIOs At least SMIME_text() relies on this. Pushing an error on the stack trips PKCS

CVS: cvs.openbsd.org: src

2023-03-14 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2023/03/14 22:30:20 Modified files: lib/libcrypto/bn: bn_exp.c Log message: Ensure negative input to BN_mod_exp_mont_consttime() is correctly reduced. A negative input to BN_mod_exp_mont_consttime() is not

CVS: cvs.openbsd.org: src

2023-03-14 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2023/03/14 22:26:23 Modified files: regress/lib/libcrypto/bn: bn_mod_exp.c Log message: Include tests with negative values in BN_mod_exp* regress. This currently fails.

CVS: cvs.openbsd.org: src

2023-03-14 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/03/14 18:41:04 Modified files: regress/lib/libcrypto/bn: bn_mod_exp_zero.c Log message: bn_mod_exp_zero: rename result into got

CVS: cvs.openbsd.org: src

2023-03-14 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2023/03/14 07:31:16 Modified files: usr.sbin/rpki-client: version.h Log message: Prep for rpki-client 8.3

CVS: cvs.openbsd.org: src

2023-03-14 Thread Klemens Nanni
CVSROOT:/cvs Module name:src Changes by: k...@cvs.openbsd.org2023/03/14 05:25:23 Modified files: share/man/man4 : bwfm.4 Log message: WEP in bfwm(4) never worked, sync with reality "ifconfig bwfm0 [-]nwkey ..." does not work and thus the installer no longer offers WE

CVS: cvs.openbsd.org: src

2023-03-14 Thread Darren Tucker
CVSROOT:/cvs Module name:src Changes by: dtuc...@cvs.openbsd.org 2023/03/14 01:28:47 Modified files: usr.bin/ssh: krl.c Log message: Free KRL itself in addition to its contents. From Coverity CID 291841, ok djm@

CVS: cvs.openbsd.org: src

2023-03-14 Thread Darren Tucker
CVSROOT:/cvs Module name:src Changes by: dtuc...@cvs.openbsd.org 2023/03/14 01:26:25 Modified files: usr.bin/ssh: authfile.c Log message: Check pointer for NULL before attempting to deref. None of the existing callers seem to do that, but it's worth checking. From C

CVS: cvs.openbsd.org: src

2023-03-14 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/03/14 01:09:11 Modified files: usr.sbin/rpki-client: x509.c Log message: rpki-client: disallow AIA in self-signed certs Per RFC 6487, 4.8.7, self-signed certificates must not have an Authority Info Acc