openssl/crypto/objects, branch openssl-3.4.6

Copyright year updates

2026-06-09T12:00:17Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický MergeDate: Tue Jun 9 12:00:18 2026 Release: yes

OBJ_bsearch_ex_(): Fix const qualifier warning with CHARSET_EBCDIC

2026-05-18T11:08:19Z

Fixes #31161 When building with CHARSET_EBCDIC defined,the compiler warns about discarding the 'const' qualifier when assigning from base_[i * size] to the non-const pointer p1: `warning: assignment discards 'const' qualifier from pointer target type` Change p1 from 'char *' to 'const char *' to maintain const-correctness since the data being pointed to should not be modified through this pointer. Additionally, remove the unused variables l and h that were left over from a previous implementation of the fallback linear search. These variables served no purpose and only generated unused variable warnings. Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Kurt Roeckx Reviewed-by: Tomas Mraz MergeDate: Mon May 18 11:07:53 2026 (Merged from https://github.com/openssl/openssl/pull/31173) (cherry picked from commit 413eff874dd7ea34dfaef821f8e81983cd3c6069)

Allow 0 length comparisons in OBJ_CMP to return 0 without UB memcmp

2026-05-06T15:35:55Z

X509_verify is documented to return -1 if the algorithm is invalid or can't be compared for any reason. Sadly this implies that it is legitimate to pass it an incorrect X509 object and it should see this. If we hand it a new X509 object with nothing filled in, it will memcmp(NULL...) at the end of a stack of FOO_cmp abstractions, which is UB. Fix this by permitting the 0 length case to return equal without a memcmp, as suggested by slontis@ and botovq@ Fixes: https://github.com/openssl/openssl/issues/30922 Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Shane Lontis Reviewed-by: Nikola Pajkovsky Reviewed-by: Neil Horman MergeDate: Wed May 6 14:55:20 2026 (Merged from https://github.com/openssl/openssl/pull/30943) (cherry picked from commit ce22d29f5fbeaa976fbc6ab2fc5be7a806142df0) (cherry picked from commit 09af34b4d905c1b5983ccf0ec45c3931d56deff7) (cherry picked from commit 1e9dfbbad826340e3912157e30cebb2a73e21a31)

3.4-POST-CLANG-FORMAT-WEBKIT

2025-12-09T13:48:07Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs (Merged from https://github.com/openssl/openssl/pull/29260)

Copyright year updates

2024-09-05T07:35:49Z

Reviewed-by: Neil Horman Release: yes

fix: alias auditEntity OID

2024-08-26T09:38:44Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/24754)

feat: support auditIdentity X.509v3 extension

2024-08-26T09:38:44Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/24754)

fix: wrong name for OID -> auditIdentity

2024-08-26T09:25:23Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/24754)

Fix error handling in OBJ_add_object

2024-08-21T13:53:37Z

This fixes the possible memory leak in OBJ_add_object when a pre-existing object is replaced by a new one, with identical NID, OID, and/or short/long name. We do not try to delete any orphans, but only mark them as type == -1, because the previously returned pointers from OBJ_nid2obj/OBJ_nid2sn/OBJ_nid2ln may be cached by applications and can thus not be cleaned up before the application terminates. Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/22534)

Add OIDs id-kp-wisun-fan-device and id-on-hardwareModule

2024-08-07T17:53:19Z

Sub-OIDs for {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) 45605} are recorded in the document "Wi-SUN Assigned Value Registry" (WAVR). OID id-on-hardwareModule is defined in RFC 4108. Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/23428)