openssl/crypto/buffer, branch OpenSSL_1_0_2r

BUF_strndup: tidy

2015-09-22T18:04:01Z

Fix comment, add another overflow check, tidy style Reviewed-by: Matt Caswell (cherry picked from commit de8883e11befde31d9b6cfbbd1fc017c365e0bbf)

Make BUF_strndup() read-safe on arbitrary inputs

2015-09-22T18:03:57Z

BUF_strndup was calling strlen through BUF_strlcpy, and ended up reading past the input if the input was not a C string. Make it explicitly part of BUF_strndup's contract to never read more than |siz| input bytes. This augments the standard strndup contract to be safer. The commit also adds a check for siz overflow and some brief documentation for BUF_strndup(). Reviewed-by: Matt Caswell (cherry picked from commit 110f7b37de9feecfb64950601cc7cec77cf6130b)

RT4044: Remove .cvsignore files.

2015-09-15T15:58:27Z

Reviewed-by: Matt Caswell

Replace memset with OPENSSL_cleanse()

2015-06-10T09:24:30Z

BUF_MEM_free() attempts to cleanse memory using memset immediately prior to a free. This is at risk of being optimised away by the compiler, so replace with a call to OPENSSL_cleanse() instead. With thanks to the Open Crypto Audit Project for reporting this issue. Reviewed-by: Stephen Henson

Fix the update target and remove duplicate file updates

2015-05-23T04:25:12Z

We had updates of certain header files in both Makefile.org and the Makefile in the directory the header file lived in. This is error prone and also sometimes generates slightly different results (usually just a comment that differs) depending on which way the update was done. This removes the file update targets from the top level Makefile, adds an update: target in all Makefiles and has it depend on the depend: or local_depend: targets, whichever is appropriate, so we don't get a double run through the whole file tree. Reviewed-by: Rich Salz (cherry picked from commit 0f539dc1a2f45580435c39dada44dd276e79cb88) Conflicts: Makefile.org apps/Makefile test/Makefile

Run util/openssl-format-source -v -c .

2015-01-22T09:31:38Z

Reviewed-by: Tim Hudson

Check length first in BUF_strnlen().

2014-05-22T09:12:10Z

Remove redundant test.

2014-05-21T11:03:50Z

Implement BUF_strnlen() and use it instead of strlen().

2014-05-21T10:56:21Z

Don't allocate more than is needed in BUF_strndup().

2014-05-20T12:53:35Z