openssl/include/internal/cryptlib.h, branch OpenSSL_1_1_1e

Fix header file include guard names

2019-09-27T21:58:12Z

Make the include guards consistent by renaming them systematically according to the naming conventions below The public header files (in the 'include/openssl' directory) are not changed in 1.1.1, because it is a stable release. For the private header files files, the guard names try to match the path specified in the include directives, with all letters converted to upper case and '/' and '.' replaced by '_'. An extra 'OSSL_' is added as prefix. Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/9681)

drbg: ensure fork-safety without using a pthread_atfork handler

2019-09-09T16:09:06Z

When the new OpenSSL CSPRNG was introduced in version 1.1.1, it was announced in the release notes that it would be fork-safe, which the old CSPRNG hadn't been. The fork-safety was implemented using a fork count, which was incremented by a pthread_atfork handler. Initially, this handler was enabled by default. Unfortunately, the default behaviour had to be changed for other reasons in commit b5319bdbd095, so the new OpenSSL CSPRNG failed to keep its promise. This commit restores the fork-safety using a different approach. It replaces the fork count by a fork id, which coincides with the process id on UNIX-like operating systems and is zero on other operating systems. It is used to detect when an automatic reseed after a fork is necessary. To prevent a future regression, it also adds a test to verify that the child reseeds after fork. CVE-2019-1549 Reviewed-by: Paul Dale Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/9802)

Update copyright year

2019-02-26T14:05:09Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/8347)

PPC: Try out if mftb works before using it

2019-01-21T14:45:53Z

If this fails try out if mfspr268 works. Use OPENSSL_ppccap=0x20 for enabling mftb, OPENSSL_ppccap=0x40 for enabling mfspr268, and OPENSSL_ppccap=0 for enabling neither. Fixes #8012 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/8043) (cherry picked from commit c8f370485c43729db44b680e41e875ddd7f3108c)

Use secure_getenv(3) when available.

2018-09-24T01:22:22Z

Change all calls to getenv() inside libcrypto to use a new wrapper function that use secure_getenv() if available and an issetugid then getenv if not. CPU processor override flags are unchanged. Extra checks for OPENSSL_issetugid() have been removed in favour of the safe getenv. Reviewed-by: Bernd Edlinger (Merged from https://github.com/openssl/openssl/pull/7047) (cherry picked from commit 5c39a55d04ea6e6f734b627a050b9e702788d50d)

crypto/dllmain.c: remove unused OPENSSL_NONPIC_relocated variable.

2018-07-25T14:37:31Z

Reviewed-by: Kurt Roeckx (Merged from https://github.com/openssl/openssl/pull/6752)

Remove __cplusplus preamble from internal headers

2018-06-22T10:24:59Z

These headers are internal and never exposed to a cpp compiler, hence no need for the preamble. Reviewed-by: Matt Caswell Reviewed-by: Rich Salz Reviewed-by: Paul Dale Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/6554)

Make OPENSSL_rdtsc universally available.

2018-02-07T00:08:15Z

If such a timer/counter register is not available, the return value is always zero. This matches the assembly implementations' behaviour. Reviewed-by: Richard Levitte Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/5231)

Create a prototype for OPENSSL_rdtsc

2017-11-25T13:30:11Z

Switch to make it return an uint32_t instead of the various different types it returns now. Fixes: #3125 Reviewed-by: Andy Polyakov GH: #4757

Add CRYPTO_get_alloc_counts.

2017-10-13T02:04:12Z

Use atomic operations for the counters Rename malloc_lock to memdbg_lock Also fix some style errors in mem_dbg.c Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/4359)