openssl, branch OpenSSL_1_0_0t

Prepare for 1.0.0t release

2015-12-03T14:56:22Z

Reviewed-by: Richard Levitte

Update CHANGES and NEWS

2015-12-02T23:36:05Z

Update the CHANGES and NEWS files for the new release. Reviewed-by: Rich Salz

Free up passed ASN.1 structure if reused.

2015-12-02T20:40:11Z

Change the "reuse" behaviour in ASN1_item_d2i: if successful the old structure is freed and a pointer to the new one used. If it is not successful then the passed structure is untouched. Exception made for primitive types so ssl_asn1.c still works. Reviewed-by: Tim Hudson Reviewed-by: Emilia Käsper Conflicts: doc/crypto/d2i_X509.pod

Fix leak with ASN.1 combine.

2015-12-02T20:40:11Z

When parsing a combined structure pass a flag to the decode routine so on error a pointer to the parent structure is not zeroed as this will leak any additional components in the parent. This can leak memory in any application parsing PKCS#7 or CMS structures. CVE-2015-3195. Thanks to Adam Langley (Google/BoringSSL) for discovering this bug using libFuzzer. PR#4131 Reviewed-by: Richard Levitte

_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE instead

2015-12-02T17:50:00Z

The feature_test_macros(7) manual tells us that _BSD_SOURCE is deprecated since glibc 2.20 and that the compiler will warn about it being used, unless _DEFAULT_SOURCE is defined as well. Reviewed-by: Rich Salz (cherry picked from commit f9fd35248c9a3b1125d9ab82ffb19d62e86533ac)

Fix uninitialised p error.

2015-11-24T16:55:54Z

Reviewed-by: Rich Salz (cherry picked from commit 63eb10a07ee29a312e50a227f5b3a290b1ad22b4)

Limit depth of ASN1 parse printing.

2015-11-24T15:30:40Z

Thanks to Guido Vranken for reporting this issue. Reviewed-by: Tim Hudson (cherry picked from commit 158e5207a794603f5d64ffa95e0247c7808ab445) Conflicts: crypto/asn1/asn1_par.c

Typo.

2015-10-10T23:38:04Z

PR#4079 Reviewed-by: Tim Hudson (cherry picked from commit c69ce9351336f5b4a8b33890756b3fd185528210) Conflicts: crypto/evp/e_des3.c

Don't try and parse boolean type.

2015-10-06T14:17:28Z

Reviewed-by: Rich Salz (cherry picked from commit e58c4d3cdde7a0a01df2884bfeec31a2b07be22d)

GH367: use random data if seed too short.

2015-09-29T16:50:14Z

Signed-off-by: Rich Salz Reviewed-by: Emilia Käsper (cherry picked from commit 6f997dc36504d67d1339ceb6bce4ecba673d8568)