openssl, branch OpenSSL_1_1_0c

Prepare for 1.1.0c release

2016-11-10T14:03:42Z

Reviewed-by: Richard Levitte

Update CHANGES and NEWS

2016-11-10T13:04:05Z

Reviewed-by: Richard Levitte

Fix the no-tls option

2016-11-10T13:04:05Z

Reviewed-by: Richard Levitte

Fix no-cms (CVE-2016-7053)

2016-11-10T13:04:05Z

Reviewed-by: Matt Caswell

test/evptests.txt: add negative tests for AEAD ciphers.

2016-11-10T13:04:05Z

This is done by taking one vector, "corrupting" last bit of the tag value and verifying that decrypt fails. Reviewed-by: Emilia Käsper

test: add TLS application data corruption test.

2016-11-10T13:04:05Z

Reviewed-by: Emilia Käsper

add test for CVE-2016-7053

2016-11-10T13:04:05Z

Reviewed-by: Richard Levitte

Don't set choice selector on parse failure.

2016-11-10T13:04:05Z

Don't set choice selector on parse failure: this can pass unexpected values to the choice callback. Instead free up partial structure directly. CVE-2016-7053 Thanks to Tyler Nighswander of ForAllSecure for reporting this issue. Reviewed-by: Richard Levitte

chacha20/poly1305: make sure to clear the buffer at correct position

2016-11-10T13:04:05Z

The offset to the memory to clear was incorrect, causing a heap buffer overflow. CVE-2016-7054 Thanks to Robert Święcki for reporting this Reviewed-by: Rich Salz (cherry picked from commit b8e4011fb26364e44230946b87ab38cc1c719aae)

aes/asm/aesp8-ppc.pl: improve [backward] portability.

2016-11-10T13:00:57Z

Some of stone-age assembler can't cope with r0 in address. It's actually sensible thing to do, because r0 is shunted to 0 in address arithmetic and by refusing r0 assembler effectively makes you understand that. Reviewed-by: Rich Salz (cherry picked from commit a54aba531327285f64cf13a909bc129e9f9d5970)