GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — deps: upgrade openssl sources to quictls/openssl-3.0.12+quic1 · nodejs/node@3308189

File tree

Expand file treeCollapse file tree
Open diff view settings
Filter options
  • deps/openssl/openssl
    • CHANGES.md
    • Configurations
      • 10-main.conf
      • README.md
      • unix-Makefile.tmpl
    • INSTALL.md
    • NEWS.md
    • README-OpenSSL.md
    • README.md
    • VERSION.dat
    • apps
      • cmp.c
      • dgst.c
      • dhparam.c
      • dsaparam.c
      • enc.c
      • gendsa.c
      • genpkey.c
      • genrsa.c
      • lib
        • apps.c
      • req.c
      • s_server.c
      • speed.c
    • appveyor.yml
    • crypto
      • aes/asm
        • aesv8-armx.pl
      • arm_arch.h
      • asn1
        • a_strnid.c
        • asn1_gen.c
      • bn
        • bn_gcd.c
      • build.info
      • chacha/asm
        • chacha-ia64.pl
      • cmp
        • cmp_asn.c
        • cmp_client.c
        • cmp_status.c
      • cms
        • cms_enc.c
        • cms_env.c
        • cms_err.c
        • cms_lib.c
        • cms_local.h
        • cms_sd.c
      • conf
        • conf_sap.c
      • dh
        • dh_check.c
        • dh_key.c
        • dh_lib.c
      • dsa
        • dsa_check.c
        • dsa_lib.c
        • dsa_ossl.c
      • encode_decode
        • decoder_lib.c
        • decoder_pkey.c
      • engine
        • eng_lib.c
        • eng_list.c
        • eng_local.h
        • eng_pkey.c
        • eng_table.c
      • err
        • openssl.txt
      • evp
        • ctrl_params_translate.c
        • evp_enc.c
        • legacy_sha.c
        • p_lib.c
        • pmeth_lib.c
      • ex_data.c
      • ffc
        • ffc_key_validate.c
      • http
        • http_client.c
      • lhash
        • lhash.c
      • mem.c
      • modes/asm
        • ghashv8-armx.pl
      • objects
        • obj_dat.c
      • param_build_set.c
      • pem
        • pem_pkey.c
      • perlasm
        • arm-xlate.pl
        • x86asm.pl
      • pkcs12
        • p12_crt.c
      • poly1305/asm
        • poly1305-armv8.pl
        • poly1305-x86_64.pl
      • property
        • property.c
        • property_parse.c
      • provider_core.c
      • rsa
        • rsa_ameth.c
        • rsa_backend.c
        • rsa_lib.c
      • srp
        • srp_vfy.c
      • store
        • store_lib.c
      • threads_pthread.c
      • x509
        • v3_ist.c
        • x509_cmp.c
    • doc
      • man1
        • openssl-cmp.pod.in
        • openssl-cms.pod.in
        • openssl-ts.pod.in
      • man3
        • BIO_s_mem.pod
        • CMS_add1_signer.pod
        • CMS_sign.pod
        • DH_generate_parameters.pod
        • DSA_generate_parameters.pod
        • EVP_MAC.pod
        • EVP_SIGNATURE.pod
        • EVP_aes_128_gcm.pod
        • EVP_aria_128_gcm.pod
        • EVP_bf_cbc.pod
        • EVP_blake2b512.pod
        • EVP_camellia_128_ecb.pod
        • EVP_cast5_cbc.pod
        • EVP_chacha20.pod
        • EVP_des_cbc.pod
        • EVP_desx_cbc.pod
        • EVP_idea_cbc.pod
        • EVP_md2.pod
        • EVP_md4.pod
        • EVP_md5.pod
        • EVP_mdc2.pod
        • EVP_rc2_cbc.pod
        • EVP_rc4.pod
        • EVP_rc5_32_12_16_cbc.pod
        • EVP_ripemd160.pod
        • EVP_seed_cbc.pod
        • EVP_sha1.pod
        • EVP_sha224.pod
        • EVP_sha3_224.pod
        • EVP_sm3.pod
        • EVP_sm4_cbc.pod
        • EVP_whirlpool.pod
        • OSSL_CMP_CTX_new.pod
        • OSSL_CMP_exec_certreq.pod
        • OSSL_HTTP_REQ_CTX.pod
        • OSSL_HTTP_transfer.pod
        • PKCS12_create.pod
        • PKCS12_gen_mac.pod
        • PKCS5_PBKDF2_HMAC.pod
        • SSL_CONF_CTX_set_ssl_ctx.pod
        • SSL_CTX_set_info_callback.pod
        • SSL_new.pod
        • d2i_PKCS8PrivateKey_bio.pod
        • d2i_RSAPrivateKey.pod
        • d2i_X509.pod
      • man5
        • x509v3_config.pod
      • man7
        • EVP_KDF-PKCS12KDF.pod
        • migration_guide.pod
    • fuzz
      • build.info
      • x509.c
    • include
      • crypto
        • bn_conf.h
        • dso_conf.h
      • openssl
        • asn1.h
        • asn1t.h
        • bio.h
        • cmp.h
        • cms.h
        • cmserr.h
        • conf.h
        • configuration.h
        • crmf.h
        • crypto.h
        • ct.h
        • err.h
        • ess.h
        • evp.h
        • fipskey.h
        • lhash.h
        • ocsp.h
        • opensslv.h
        • pkcs12.h
        • pkcs7.h.in
        • pkcs7.h
        • safestack.h
        • srp.h
        • ssl.h
        • ui.h
        • x509.h
        • x509_vfy.h
        • x509v3.h
    • providers
      • fips-sources.checksums
      • fips.checksum
      • implementations
        • ciphers
          • cipher_chacha20.c
        • encode_decode
          • decode_der2key.c
          • decode_msblob2key.c
          • decode_pvk2key.c
          • encode_key2any.c
          • encode_key2text.c
        • keymgmt
          • dh_kmgmt.c
          • dsa_kmgmt.c
          • ecx_kmgmt.c
          • mac_legacy_kmgmt.c
        • macs
          • kmac_prov.c
    • ssl
      • ssl_lib.c
      • ssl_sess.c
      • statem
        • extensions_srvr.c
    • test
      • README-dev.md
      • chacha_internal_test.c
      • cmp_asn_test.c
      • cmp_protect_test.c
      • cmsapitest.c
      • endecode_test.c
      • evp_extra_test.c
      • ffc_internal_test.c
      • pbetest.c
      • pemtest.c
      • pkcs12_format_test.c
      • property_test.c
      • provider_internal_test.c
      • recipes
        • 05-test_rand.t
        • 15-test_rsapss.t
        • 25-test_req.t
        • 30-test_defltfips.t
        • 30-test_evp.t
        • 80-test_cms.t
        • 99-test_fuzz_x509.t
      • rsa_test.c
      • ssl_old_test.c
      • sslapitest.c
      • testutil
        • main.c
    • util
      • missingssl.txt

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Dismiss banner
Expand file treeCollapse file tree
Open diff view settings
Collapse file

‎deps/openssl/openssl/CHANGES.md‎

Copy file name to clipboardExpand all lines: deps/openssl/openssl/CHANGES.md
+35-1Lines changed: 35 additions & 1 deletion
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -28,12 +28,44 @@ breaking changes, and mappings for the large list of deprecated functions.
2828

2929
[Migration guide]: https://github.com/openssl/openssl/tree/master/doc/man7/migration_guide.pod
3030

31-
### Changes between 3.0.10 and 3.0.10+quic [1 Aug 2023]
31+
### Changes between 3.0.12 and 3.0.12+quic [24 Oct 2023]
3232

3333
* Add QUIC API support from BoringSSL
3434

3535
*Todd Short*
3636

37+
### Changes between 3.0.11 and 3.0.12 [24 Oct 2023]
38+
39+
* Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(),
40+
EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PARAM parameters
41+
that alter the key or IV length ([CVE-2023-5363]).
42+
43+
*Paul Dale*
44+
45+
### Changes between 3.0.10 and 3.0.11 [19 Sep 2023]
46+
47+
* Fix POLY1305 MAC implementation corrupting XMM registers on Windows.
48+
49+
The POLY1305 MAC (message authentication code) implementation in OpenSSL
50+
does not save the contents of non-volatile XMM registers on Windows 64
51+
platform when calculating the MAC of data larger than 64 bytes. Before
52+
returning to the caller all the XMM registers are set to zero rather than
53+
restoring their previous content. The vulnerable code is used only on newer
54+
x86_64 processors supporting the AVX512-IFMA instructions.
55+
56+
The consequences of this kind of internal application state corruption can
57+
be various - from no consequences, if the calling application does not
58+
depend on the contents of non-volatile XMM registers at all, to the worst
59+
consequences, where the attacker could get complete control of the
60+
application process. However given the contents of the registers are just
61+
zeroized so the attacker cannot put arbitrary values inside, the most likely
62+
consequence, if any, would be an incorrect result of some application
63+
dependent calculations or a crash leading to a denial of service.
64+
65+
([CVE-2023-4807])
66+
67+
*Bernd Edlinger*
68+
3769
### Changes between 3.0.9 and 3.0.10 [1 Aug 2023]
3870

3971
* Fix excessive time spent checking DH q parameter value.
@@ -19714,6 +19746,8 @@ ndif
1971419746

1971519747
<!-- Links -->
1971619748

19749+
[CVE-2023-5363]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5363
19750+
[CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807
1971719751
[CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817
1971819752
[CVE-2023-3446]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3446
1971919753
[CVE-2023-2975]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2975
Collapse file

‎deps/openssl/openssl/Configurations/10-main.conf‎

Copy file name to clipboardExpand all lines: deps/openssl/openssl/Configurations/10-main.conf
+7-4Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,19 +9,22 @@ sub vc_win64a_info {
99
$vc_win64a_info = { AS => "nasm",
1010
ASFLAGS => "-g",
1111
asflags => "-Ox -f win64 -DNEAR",
12-
asoutflag => "-o " };
12+
asoutflag => "-o ",
13+
perlasm_scheme => "nasm" };
1314
} elsif ($disabled{asm}) {
1415
# assembler is still used to compile uplink shim
1516
$vc_win64a_info = { AS => "ml64",
1617
ASFLAGS => "/nologo /Zi",
1718
asflags => "/c /Cp /Cx",
18-
asoutflag => "/Fo" };
19+
asoutflag => "/Fo",
20+
perlasm_scheme => "masm" };
1921
} else {
2022
$die->("NASM not found - make sure it's installed and available on %PATH%\n");
2123
$vc_win64a_info = { AS => "{unknown}",
2224
ASFLAGS => "",
2325
asflags => "",
24-
asoutflag => "" };
26+
asoutflag => "",
27+
perlasm_scheme => "auto" };
2528
}
2629
}
2730
return $vc_win64a_info;
@@ -1416,7 +1419,7 @@ my %targets = (
14161419
sys_id => "WIN64A",
14171420
uplink_arch => 'x86_64',
14181421
asm_arch => 'x86_64',
1419-
perlasm_scheme => "auto",
1422+
perlasm_scheme => sub { vc_win64a_info()->{perlasm_scheme} },
14201423
multilib => "-x64",
14211424
},
14221425
"VC-WIN32" => {
Collapse file

‎deps/openssl/openssl/Configurations/README.md‎

Copy file name to clipboardExpand all lines: deps/openssl/openssl/Configurations/README.md
+6Lines changed: 6 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -233,8 +233,14 @@ In each table entry, the following keys are significant:
233233
is ILP32;
234234
RC4_CHAR RC4 key schedule is made
235235
up of 'unsigned char's;
236+
Note: should not be used
237+
for new configuration
238+
targets
236239
RC4_INT RC4 key schedule is made
237240
up of 'unsigned int's;
241+
Note: should not be used
242+
for new configuration
243+
targets
238244

239245
[1] as part of the target configuration, one can have a key called
240246
`inherit_from` that indicates what other configurations to inherit

0 commit comments

Comments
0 (0)
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.