Matt Caswell 23cd01ef61 Replace memset with OPENSSL_cleanse() ...

BUF_MEM_free() attempts to cleanse memory using memset immediately prior
to a free. This is at risk of being optimised away by the compiler, so
replace with a call to OPENSSL_cleanse() instead.

With thanks to the Open Crypto Audit Project for reporting this issue.

Reviewed-by: Stephen Henson <steve@openssl.org>

2015-06-10 10:24:30 +01:00

..

aes

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

asn1

Add funtions to set item_sign and item_verify

2015-06-03 15:18:14 +01:00

bf

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

bio

Fix compilation failure for some tool chains

2015-06-02 23:38:03 +01:00

bn

Fix off-by-one error in BN_bn2hex

2015-06-04 09:26:43 +01:00

buffer

Replace memset with OPENSSL_cleanse()

2015-06-10 10:24:30 +01:00

camellia

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

cast

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

cmac

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

cms

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

comp

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

conf

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

des

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

dh

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

dsa

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

dso

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

ec

fix copy paste error in ec_GF2m function prototypes

2015-05-26 10:14:19 +02:00

ecdh

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

ecdsa

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

engine

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

err

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

evp

Use CRYPTO_memcmp when comparing authenticators

2015-06-08 15:01:14 +02:00

hmac

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

idea

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

jpake

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

krb5

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

lhash

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

md2

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

md4

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

md5

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

mdc2

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

modes

Use CRYPTO_memcmp when comparing authenticators

2015-06-08 15:01:14 +02:00

objects

return correct NID for undefined object

2015-06-08 21:46:42 +01:00

ocsp

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

pem

check for error when creating PKCS#8 structure

2015-05-28 18:01:52 +01:00

perlasm

Fix crash in SPARC T4 XTS.

2015-02-24 10:12:57 +01:00

pkcs7

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

pkcs12

Use CRYPTO_memcmp when comparing authenticators

2015-06-08 15:01:14 +02:00

pqueue

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

rand

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

rc2

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

rc4

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

rc5

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

ripemd

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

rsa

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

seed

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

sha

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

srp

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

stack

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

store

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

threads

Code style: space after 'if'

2015-04-16 13:50:01 -04:00

ts

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

txt_db

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

ui

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

whrlpool

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

x509

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

x509v3

make update

2015-06-03 15:18:20 +01:00

.cvsignore

Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev

2008-04-17 10:19:16 +00:00

alphacpuid.pl

Alpha assembler fixed from HEAD.

2011-08-12 12:31:08 +00:00

arm64cpuid.S

Add linux-aarch64 taget.

2014-06-10 23:20:55 +02:00

arm_arch.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

armcap.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

armv4cpuid.S

Remove inconsistency in ARM support.

2015-01-06 11:14:23 +01:00

constant_time_locl.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

constant_time_test.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

cpt_err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

cryptlib.c

RT3820: Don't call GetDesktopWindow()

2015-05-02 08:01:52 -04:00

cryptlib.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

crypto-lib.com

Adjust VMS build to Unix build. Most of all, make it so the disabled

2014-06-18 13:43:09 +02:00

crypto.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

cversion.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ebcdic.c

Appease clang -Wempty-translation-unit

2015-04-08 17:59:40 +02:00

ebcdic.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ex_data.c

Fix memory leak reporting.

2015-02-09 13:01:15 +00:00

fips_err.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

fips_ers.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ia64cpuid.S

IA64 assembler pack update from HEAD.

2011-11-14 20:45:57 +00:00

install-crypto.com

Adjust VMS build to Unix build. Most of all, make it so the disabled

2014-06-18 13:43:09 +02:00

LPdir_nyi.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

LPdir_unix.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

LPdir_vms.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

LPdir_win32.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

LPdir_win.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

LPdir_wince.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

Makefile

Fix the update target and remove duplicate file updates

2015-05-23 06:25:12 +02:00

md32_common.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

mem_clr.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

mem_dbg.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

mem.c

Fix CRYPTO_strdup

2015-04-22 17:20:38 +01:00

o_dir_test.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

o_dir.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

o_dir.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

o_fips.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

o_init.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

o_str.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

o_str.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

o_time.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

o_time.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

opensslconf.h.in

Eliminate warning induced by http://cvs.openssl.org/chngview?cn=14690 and

2005-12-16 10:37:24 +00:00

opensslv.h

Prepare for 1.0.2b-dev

2015-03-19 13:34:56 +00:00

ossl_typ.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

pariscid.pl

PA-RISC assembler pack: switch to bve in 64-bit builds.

2013-06-30 23:13:23 +02:00

ppc_arch.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ppccap.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ppccpuid.pl

Initial POWER8 support from development branch.

2014-07-20 14:36:49 +02:00

s390xcap.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

s390xcpuid.S

s390x assembler pack update from HEAD.

2011-11-14 20:47:22 +00:00

sparc_arch.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

sparccpuid.S

sparcv9cap.c: update from master.

2013-05-20 00:16:18 +02:00

sparcv9cap.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

symhacks.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

uid.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

vms_rms.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x86_64cpuid.pl

x86[_64]cpuid.pl: add low-level RDSEED.

2014-02-14 17:25:14 +01:00

x86cpuid.pl

x86[_64]cpuid.pl: add low-level RDSEED.

2014-02-14 17:25:14 +01:00