ec_curve_tables: silence a noisy MSVC warning
Explicitly clear the upper bits of n0 on LP32 so that we don't see
D:\a\portable\portable\crypto\ec\ec_curve_tables.h(1310,8): warning C4310: cast truncates constant value [D:\a\portable\portable\build\crypto\crypto_obj.vcxproj]
(compiling source file '../../crypto/ec/ec_curve.c')
on (almost?) every line using EC_CURVE_N0() on 32-bit Windows.
Portable regress is happy: https://github.com/libressl/portable/pull/1464
ok beck
automatically load the DTB for the new Qualcomm based
Thinkpad T14s Gen 7 and Yoga Slim laptops.
Also add the 32bit DMA limit for the newer gen systems.
OK kettenis@ tobhe@
simplify fetchname
it's a bit too complex and prevents further changes to this routine.
divide the "path extraction" from the stripping.
survived a bulk build by kirill@, thanks!
okay kirill@
8 years ago, I had a brainfart moment and put an mbuf pkthdr flag into
m_pkthdr.pf.tag instead of m_pkthdr.pf.flags - and nobody noticed, until
acts-1631 came. fix it. ok sashan
freeradius: disable setting of X509_V_FLAG_USE_DELTAS
beck is going to throw an error in the verifier if that flag is set, so it
is no longer harmless to set it.
ok sthen (maintainer)
Add a Merkle tree implementation for MTC
Add the RFC 9162 Merkle tree with the subtree operations of section 4 of
draft-ietf-plants-merkle-tree-certs-05, as internal libcrypto functions.
Ported from BoringSSL
ok joshua@, kenjiro@
Correct outgoing record checks in the legacy TLSv1.2 stack.
Ensure an existing record is not being written prior to commencing
renegotiation or sending an alert in the legacy TLSv1.2 stack. The way
that TLSv1.2 records are sent was changed in r1.79 of ssl_pkt.c, however
this failed to correctly handle outgoing record checks. This means that
renegotiation can be commenced or an alert can be sent while an application
data record is being written, the size of which is then returned instead of
the size of the handshake record or alert record, resulting in a buffer
overread. This is reachable via renegotiation being triggered in the legacy
TLSv1.2 stack, under the right conditions.
For now also restore the previous SSL_R_BAD_WRITE_RETRY behaviour, which
checks that the retried write matches a given set of constraints. This will
be revisited again in the future.
Thanks to William T. Nelson for reporting the issue and providing a fix.
ok kenjiro@
Wrap pthread rwlock, mutex and conditions into simple inline functions
Introduce thread.h which contains static inline wrappers for the most
commonly used pthread operations (rwlocks, mutexs and conditions).
Every pthread call requires an extra error check and this adds a lot of
unneeded noise into the parser code.
Use similar names as used in the OpenBSD kernel for mutexes and rwlocks.
This makes the code more legible.
OK tb@ job@
