Browse Source

deps: update openssl to 1.0.1l

Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Timothy J Fontaine <tjfontaine@gmail.com>
Reviewed-By: Julien Gilli <julien.gilli@joyent.com>
v0.10.36-release
James M Snell 10 years ago
committed by Julien Gilli
parent
commit
deef605085
  1. 5
      deps/openssl/openssl/CHANGES
  2. 2
      deps/openssl/openssl/Makefile
  3. 2
      deps/openssl/openssl/Makefile.bak
  4. 4
      deps/openssl/openssl/NEWS
  5. 2
      deps/openssl/openssl/README
  6. 2
      deps/openssl/openssl/crypto/Makefile
  7. 2
      deps/openssl/openssl/crypto/cversion.c
  8. 13
      deps/openssl/openssl/crypto/ecdsa/Makefile
  9. 2
      deps/openssl/openssl/crypto/ecdsa/ecs_vrf.c
  10. 6
      deps/openssl/openssl/crypto/opensslv.h
  11. 61
      deps/openssl/openssl/crypto/rand/rand_win.c
  12. 2
      deps/openssl/openssl/crypto/x509v3/v3_ncons.c
  13. 4
      deps/openssl/openssl/e_os.h
  14. 2
      deps/openssl/openssl/makevms.com
  15. 2
      deps/openssl/openssl/openssl.spec
  16. 2
      deps/openssl/openssl/util/mk1mf.pl
  17. 2
      deps/openssl/openssl/util/mkbuildinf.pl

5
deps/openssl/openssl/CHANGES

@ -2,6 +2,11 @@
OpenSSL CHANGES OpenSSL CHANGES
_______________ _______________
Changes between 1.0.1k and 1.0.1l [15 Jan 2015]
*) Build fixes for the Windows and OpenVMS platforms
[Matt Caswell and Richard Levitte]
Changes between 1.0.1j and 1.0.1k [8 Jan 2015] Changes between 1.0.1j and 1.0.1k [8 Jan 2015]
*) Fix DTLS segmentation fault in dtls1_get_record. A carefully crafted DTLS *) Fix DTLS segmentation fault in dtls1_get_record. A carefully crafted DTLS

2
deps/openssl/openssl/Makefile

@ -4,7 +4,7 @@
## Makefile for OpenSSL ## Makefile for OpenSSL
## ##
VERSION=1.0.1k VERSION=1.0.1l
MAJOR=1 MAJOR=1
MINOR=0.1 MINOR=0.1
SHLIB_VERSION_NUMBER=1.0.0 SHLIB_VERSION_NUMBER=1.0.0

2
deps/openssl/openssl/Makefile.bak

@ -4,7 +4,7 @@
## Makefile for OpenSSL ## Makefile for OpenSSL
## ##
VERSION=1.0.1k-dev VERSION=1.0.1l-dev
MAJOR=1 MAJOR=1
MINOR=0.1 MINOR=0.1
SHLIB_VERSION_NUMBER=1.0.0 SHLIB_VERSION_NUMBER=1.0.0

4
deps/openssl/openssl/NEWS

@ -5,6 +5,10 @@
This file gives a brief overview of the major changes between each OpenSSL This file gives a brief overview of the major changes between each OpenSSL
release. For more details please read the CHANGES file. release. For more details please read the CHANGES file.
Major changes between OpenSSL 1.0.1k and OpenSSL 1.0.1l [15 Jan 2015]
o Build fixes for the Windows and OpenVMS platforms
Major changes between OpenSSL 1.0.1j and OpenSSL 1.0.1k [8 Jan 2015] Major changes between OpenSSL 1.0.1j and OpenSSL 1.0.1k [8 Jan 2015]
o Fix for CVE-2014-3571 o Fix for CVE-2014-3571

2
deps/openssl/openssl/README

@ -1,5 +1,5 @@
OpenSSL 1.0.1k 8 Jan 2015 OpenSSL 1.0.1l 15 Jan 2015
Copyright (c) 1998-2011 The OpenSSL Project Copyright (c) 1998-2011 The OpenSSL Project
Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson

2
deps/openssl/openssl/crypto/Makefile

@ -55,7 +55,7 @@ top:
all: shared all: shared
buildinf.h: ../Makefile buildinf.h: ../Makefile
$(PERL) $(TOP)/util/mkbuildinf.pl "$(CFLAGS)" "$(PLATFORM)" >buildinf.h $(PERL) $(TOP)/util/mkbuildinf.pl "$(CC) $(CFLAGS)" "$(PLATFORM)" >buildinf.h
x86cpuid.s: x86cpuid.pl perlasm/x86asm.pl x86cpuid.s: x86cpuid.pl perlasm/x86asm.pl
$(PERL) x86cpuid.pl $(PERLASM_SCHEME) $(CFLAGS) $(PROCESSOR) > $@ $(PERL) x86cpuid.pl $(PERLASM_SCHEME) $(CFLAGS) $(PROCESSOR) > $@

2
deps/openssl/openssl/crypto/cversion.c

@ -77,7 +77,7 @@ const char *SSLeay_version(int t)
if (t == SSLEAY_CFLAGS) if (t == SSLEAY_CFLAGS)
{ {
#ifdef CFLAGS #ifdef CFLAGS
return(cflags); return(CFLAGS);
#else #else
return("compiler: information not available"); return("compiler: information not available");
#endif #endif

13
deps/openssl/openssl/crypto/ecdsa/Makefile

@ -126,16 +126,15 @@ ecs_sign.o: ../../include/openssl/safestack.h ../../include/openssl/sha.h
ecs_sign.o: ../../include/openssl/stack.h ../../include/openssl/symhacks.h ecs_sign.o: ../../include/openssl/stack.h ../../include/openssl/symhacks.h
ecs_sign.o: ../../include/openssl/x509.h ../../include/openssl/x509_vfy.h ecs_sign.o: ../../include/openssl/x509.h ../../include/openssl/x509_vfy.h
ecs_sign.o: ecs_locl.h ecs_sign.c ecs_sign.o: ecs_locl.h ecs_sign.c
ecs_vrf.o: ../../e_os.h ../../include/openssl/asn1.h ecs_vrf.o: ../../include/openssl/asn1.h ../../include/openssl/bio.h
ecs_vrf.o: ../../include/openssl/bio.h ../../include/openssl/buffer.h ecs_vrf.o: ../../include/openssl/buffer.h ../../include/openssl/crypto.h
ecs_vrf.o: ../../include/openssl/crypto.h ../../include/openssl/e_os2.h ecs_vrf.o: ../../include/openssl/e_os2.h ../../include/openssl/ec.h
ecs_vrf.o: ../../include/openssl/ec.h ../../include/openssl/ecdh.h ecs_vrf.o: ../../include/openssl/ecdh.h ../../include/openssl/ecdsa.h
ecs_vrf.o: ../../include/openssl/ecdsa.h ../../include/openssl/engine.h ecs_vrf.o: ../../include/openssl/engine.h ../../include/openssl/evp.h
ecs_vrf.o: ../../include/openssl/err.h ../../include/openssl/evp.h
ecs_vrf.o: ../../include/openssl/lhash.h ../../include/openssl/obj_mac.h ecs_vrf.o: ../../include/openssl/lhash.h ../../include/openssl/obj_mac.h
ecs_vrf.o: ../../include/openssl/objects.h ../../include/openssl/opensslconf.h ecs_vrf.o: ../../include/openssl/objects.h ../../include/openssl/opensslconf.h
ecs_vrf.o: ../../include/openssl/opensslv.h ../../include/openssl/ossl_typ.h ecs_vrf.o: ../../include/openssl/opensslv.h ../../include/openssl/ossl_typ.h
ecs_vrf.o: ../../include/openssl/pkcs7.h ../../include/openssl/safestack.h ecs_vrf.o: ../../include/openssl/pkcs7.h ../../include/openssl/safestack.h
ecs_vrf.o: ../../include/openssl/sha.h ../../include/openssl/stack.h ecs_vrf.o: ../../include/openssl/sha.h ../../include/openssl/stack.h
ecs_vrf.o: ../../include/openssl/symhacks.h ../../include/openssl/x509.h ecs_vrf.o: ../../include/openssl/symhacks.h ../../include/openssl/x509.h
ecs_vrf.o: ../../include/openssl/x509_vfy.h ../cryptlib.h ecs_locl.h ecs_vrf.c ecs_vrf.o: ../../include/openssl/x509_vfy.h ecs_locl.h ecs_vrf.c

2
deps/openssl/openssl/crypto/ecdsa/ecs_vrf.c

@ -57,7 +57,7 @@
*/ */
#include "ecs_locl.h" #include "ecs_locl.h"
#include "cryptlib.h" #include <string.h>
#ifndef OPENSSL_NO_ENGINE #ifndef OPENSSL_NO_ENGINE
#include <openssl/engine.h> #include <openssl/engine.h>
#endif #endif

6
deps/openssl/openssl/crypto/opensslv.h

@ -29,11 +29,11 @@ extern "C" {
* (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for
* major minor fix final patch/beta) * major minor fix final patch/beta)
*/ */
#define OPENSSL_VERSION_NUMBER 0x100010bfL #define OPENSSL_VERSION_NUMBER 0x100010cfL
#ifdef OPENSSL_FIPS #ifdef OPENSSL_FIPS
#define OPENSSL_VERSION_TEXT "OpenSSL 1.0.1k-fips 8 Jan 2015" #define OPENSSL_VERSION_TEXT "OpenSSL 1.0.1l-fips 15 Jan 2015"
#else #else
#define OPENSSL_VERSION_TEXT "OpenSSL 1.0.1k 8 Jan 2015" #define OPENSSL_VERSION_TEXT "OpenSSL 1.0.1l 15 Jan 2015"
#endif #endif
#define OPENSSL_VERSION_PTEXT " part of " OPENSSL_VERSION_TEXT #define OPENSSL_VERSION_PTEXT " part of " OPENSSL_VERSION_TEXT

61
deps/openssl/openssl/crypto/rand/rand_win.c

@ -196,12 +196,6 @@ int RAND_poll(void)
DWORD w; DWORD w;
int good = 0; int good = 0;
/* Determine the OS version we are on so we can turn off things
* that do not work properly.
*/
OSVERSIONINFO osverinfo ;
osverinfo.dwOSVersionInfoSize = sizeof(OSVERSIONINFO) ;
GetVersionEx( &osverinfo ) ;
#if defined(OPENSSL_SYS_WINCE) #if defined(OPENSSL_SYS_WINCE)
# if defined(_WIN32_WCE) && _WIN32_WCE>=300 # if defined(_WIN32_WCE) && _WIN32_WCE>=300
@ -281,56 +275,6 @@ int RAND_poll(void)
* at random times on Windows 2000. Reported by Jeffrey Altman. * at random times on Windows 2000. Reported by Jeffrey Altman.
* Only use it on NT. * Only use it on NT.
*/ */
/* Wolfgang Marczy <WMarczy@topcall.co.at> reports that
* the RegQueryValueEx call below can hang on NT4.0 (SP6).
* So we don't use this at all for now. */
#if 0
if ( osverinfo.dwPlatformId == VER_PLATFORM_WIN32_NT &&
osverinfo.dwMajorVersion < 5)
{
/* Read Performance Statistics from NT/2000 registry
* The size of the performance data can vary from call
* to call so we must guess the size of the buffer to use
* and increase its size if we get an ERROR_MORE_DATA
* return instead of ERROR_SUCCESS.
*/
LONG rc=ERROR_MORE_DATA;
char * buf=NULL;
DWORD bufsz=0;
DWORD length;
while (rc == ERROR_MORE_DATA)
{
buf = realloc(buf,bufsz+8192);
if (!buf)
break;
bufsz += 8192;
length = bufsz;
rc = RegQueryValueEx(HKEY_PERFORMANCE_DATA, TEXT("Global"),
NULL, NULL, buf, &length);
}
if (rc == ERROR_SUCCESS)
{
/* For entropy count assume only least significant
* byte of each DWORD is random.
*/
RAND_add(&length, sizeof(length), 0);
RAND_add(buf, length, length / 4.0);
/* Close the Registry Key to allow Windows to cleanup/close
* the open handle
* Note: The 'HKEY_PERFORMANCE_DATA' key is implicitly opened
* when the RegQueryValueEx above is done. However, if
* it is not explicitly closed, it can cause disk
* partition manipulation problems.
*/
RegCloseKey(HKEY_PERFORMANCE_DATA);
}
if (buf)
free(buf);
}
#endif
if (advapi) if (advapi)
{ {
@ -383,7 +327,7 @@ int RAND_poll(void)
if (advapi) if (advapi)
FreeLibrary(advapi); FreeLibrary(advapi);
if ((osverinfo.dwPlatformId != VER_PLATFORM_WIN32_NT || if ((!check_winnt() ||
!OPENSSL_isservice()) && !OPENSSL_isservice()) &&
(user = LoadLibrary(TEXT("USER32.DLL")))) (user = LoadLibrary(TEXT("USER32.DLL"))))
{ {
@ -407,8 +351,7 @@ int RAND_poll(void)
* on NT4 even though it exists in SP3 (or SP6) and * on NT4 even though it exists in SP3 (or SP6) and
* higher. * higher.
*/ */
if ( osverinfo.dwPlatformId == VER_PLATFORM_WIN32_NT && if (check_winnt() && !check_win_minplat(5))
osverinfo.dwMajorVersion < 5)
cursor = 0; cursor = 0;
} }
if (cursor) if (cursor)

2
deps/openssl/openssl/crypto/x509v3/v3_ncons.c

@ -401,7 +401,7 @@ static int nc_dns(ASN1_IA5STRING *dns, ASN1_IA5STRING *base)
if (dns->length > base->length) if (dns->length > base->length)
{ {
dnsptr += dns->length - base->length; dnsptr += dns->length - base->length;
if (dnsptr[-1] != '.') if (*baseptr != '.' && dnsptr[-1] != '.')
return X509_V_ERR_PERMITTED_VIOLATION; return X509_V_ERR_PERMITTED_VIOLATION;
} }

4
deps/openssl/openssl/e_os.h

@ -368,11 +368,13 @@ static __inline unsigned int _strlen31(const char *str)
# define DEFAULT_HOME "C:" # define DEFAULT_HOME "C:"
# endif # endif
/* Avoid Windows 8 SDK GetVersion deprecated problems */ /* Avoid Visual Studio 13 GetVersion deprecated problems */
#if defined(_MSC_VER) && _MSC_VER>=1800 #if defined(_MSC_VER) && _MSC_VER>=1800
# define check_winnt() (1) # define check_winnt() (1)
# define check_win_minplat(x) (1)
#else #else
# define check_winnt() (GetVersion() < 0x80000000) # define check_winnt() (GetVersion() < 0x80000000)
# define check_win_minplat(x) (LOBYTE(LOWORD(GetVersion())) >= (x))
#endif #endif
#else /* The non-microsoft world */ #else /* The non-microsoft world */

2
deps/openssl/openssl/makevms.com

@ -646,7 +646,7 @@ $ if (CFLAGS .nes. "") then CFLAGS = CFLAGS+ " "
$ CFLAGS = CFLAGS+ "/DEFINE=ZLIB" $ CFLAGS = CFLAGS+ "/DEFINE=ZLIB"
$ endif $ endif
$! $!
$ WRITE H_FILE "#define CFLAGS" $ WRITE H_FILE "#define CFLAGS cflags"
$ WRITE H_FILE "static const char cflags[] = ""compiler: ''CFLAGS'"";" $ WRITE H_FILE "static const char cflags[] = ""compiler: ''CFLAGS'"";"
$ WRITE H_FILE "#define PLATFORM ""platform: VMS ''ARCHD' ''VMS_VERSION'""" $ WRITE H_FILE "#define PLATFORM ""platform: VMS ''ARCHD' ''VMS_VERSION'"""
$ WRITE H_FILE "#define DATE ""built on: ''TIME'"" " $ WRITE H_FILE "#define DATE ""built on: ''TIME'"" "

2
deps/openssl/openssl/openssl.spec

@ -7,7 +7,7 @@ Release: 1
Summary: Secure Sockets Layer and cryptography libraries and tools Summary: Secure Sockets Layer and cryptography libraries and tools
Name: openssl Name: openssl
#Version: %{libmaj}.%{libmin}.%{librel} #Version: %{libmaj}.%{libmin}.%{librel}
Version: 1.0.1k Version: 1.0.1l
Source0: ftp://ftp.openssl.org/source/%{name}-%{version}.tar.gz Source0: ftp://ftp.openssl.org/source/%{name}-%{version}.tar.gz
License: OpenSSL License: OpenSSL
Group: System Environment/Libraries Group: System Environment/Libraries

2
deps/openssl/openssl/util/mk1mf.pl

@ -625,7 +625,7 @@ open (OUT,">>crypto/buildinf.h") || die "Can't open buildinf.h";
printf OUT <<EOF; printf OUT <<EOF;
#ifdef $platform_cpp_symbol #ifdef $platform_cpp_symbol
/* auto-generated/updated by util/mk1mf.pl for crypto/cversion.c */ /* auto-generated/updated by util/mk1mf.pl for crypto/cversion.c */
#define CFLAGS "$cc $cflags" #define CFLAGS "compiler: $cc $cflags"
#define PLATFORM "$platform" #define PLATFORM "$platform"
EOF EOF
printf OUT " #define DATE \"%s\"\n", scalar gmtime(); printf OUT " #define DATE \"%s\"\n", scalar gmtime();

2
deps/openssl/openssl/util/mkbuildinf.pl

@ -7,7 +7,7 @@ $date = localtime();
print <<"END_OUTPUT"; print <<"END_OUTPUT";
#ifndef MK1MF_BUILD #ifndef MK1MF_BUILD
/* auto-generated by util/mkbuildinf.pl for crypto/cversion.c */ /* auto-generated by util/mkbuildinf.pl for crypto/cversion.c */
#define CFLAGS #define CFLAGS cflags
/* /*
* Generate CFLAGS as an array of individual characters. This is a * Generate CFLAGS as an array of individual characters. This is a
* workaround for the situation where CFLAGS gets too long for a C90 string * workaround for the situation where CFLAGS gets too long for a C90 string

Loading…
Cancel
Save