openssl/crypto/buffer, branch openssl-3.3.1

Stop raising ERR_R_MALLOC_FAILURE in most places

2022-10-05T12:02:03Z

Since OPENSSL_malloc() and friends report ERR_R_MALLOC_FAILURE, and at least handle the file name and line number they are called from, there's no need to report ERR_R_MALLOC_FAILURE where they are called directly, or when SSLfatal() and RLAYERfatal() is used, the reason `ERR_R_MALLOC_FAILURE` is changed to `ERR_R_CRYPTO_LIB`. There were a number of places where `ERR_R_MALLOC_FAILURE` was reported even though it was a function from a different sub-system that was called. Those places are changed to report ERR_R_{lib}_LIB, where {lib} is the name of that sub-system. Some of them are tricky to get right, as we have a lot of functions that belong in the ASN1 sub-system, and all the `sk_` calls or from the CRYPTO sub-system. Some extra adaptation was necessary where there were custom OPENSSL_malloc() wrappers, and some bugs are fixed alongside these changes. Reviewed-by: Tomas Mraz Reviewed-by: Hugo Landau (Merged from https://github.com/openssl/openssl/pull/19301)

Update copyright year

2021-06-17T12:24:59Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/15801)

err: rename err_load_xxx_strings_int functions

2021-05-26T03:01:47Z

The new names are ossl_err_load_xxx_strings. Reviewed-by: Tomas Mraz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/15446)

Update copyright year

2020-11-26T14:18:57Z

Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/13533)

ERR: Rebuild all generated error headers and source files

2020-11-24T14:22:33Z

This is the result of 'make errors ERROR_REBUILD=-rebuild' Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/13390)

Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call

2020-11-13T08:35:02Z

This includes error reporting for libcrypto sub-libraries in surprising places. This was done using util/err-to-raise Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/13318)

Rework how our providers are built

2019-10-10T12:12:15Z

We put almost everything in these internal static libraries: libcommon Block building code that can be used by all our implementations, legacy and non-legacy alike. libimplementations All non-legacy algorithm implementations and only them. All the code that ends up here is agnostic to the definitions of FIPS_MODE. liblegacy All legacy implementations. libnonfips Support code for the algorithm implementations. Built with FIPS_MODE undefined. Any code that checks that FIPS_MODE isn't defined must end up in this library. libfips Support code for the algorithm implementations. Built with FIPS_MODE defined. Any code that checks that FIPS_MODE is defined must end up in this library. The FIPS provider module is built from providers/fips/*.c and linked with libimplementations, libcommon and libfips. The Legacy provider module is built from providers/legacy/*.c and linked with liblegacy, libcommon and libcrypto. If module building is disabled, the object files from liblegacy and libcommon are added to libcrypto and the Legacy provider becomes a built-in provider. The Default provider module is built-in, so it ends up being linked with libimplementations, libcommon and libnonfips. For libcrypto in form of static library, the object files from those other libraries are simply being added to libcrypto. Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/10088)

util/mkerr.pl: make it not depend on the function code

2019-09-12T15:59:52Z

The output C code was made to use ERR_func_error_string() to see if a string table was already loaded or not. Since this function returns NULL always, this check became useless. Change it to use ERR_reason_error_string() instead, as there's no reason to believe we will get rid of reason strings, ever. To top it off, we rebuild all affected C sources. Fixes #9756 Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/9756)

Make the EC code available from inside the FIPS provider

2019-08-06T10:19:07Z

Reviewed-by: Nicola Tuveri (Merged from https://github.com/openssl/openssl/pull/9380)

Regenerate mkerr files

2019-07-16T03:26:28Z

Reviewed-by: Tomas Mraz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/9058)