boringssl

Historique

David Benjamin 9a41d1b946 Deprecate SSL_*_read_ahead and enforce DTLS packet boundaries. Now that WebRTC honors packet boundaries (https://crbug.com/447431), we can start enforcing them correctly. Configuring read-ahead now does nothing. Instead DTLS will always set "read-ahead" and also correctly enforce packet boundaries when reading records. Add tests to ensure that badly fragmented packets are ignored. Because such packets don't fail the handshake, the tests work by injecting an alert in the front of the handshake stream and ensuring the DTLS implementation ignores them. ssl3_read_n can be be considerably unraveled now, but leave that for future cleanup. For now, make it correct. BUG=468889 Change-Id: I800cfabe06615af31c2ccece436ca52aed9fe899 Reviewed-on: https://boringssl-review.googlesource.com/4820 Reviewed-by: Adam Langley <agl@google.com>		il y a 9 ans
..
aead.h	AEAD: allow _cleanup after failed _init.	il y a 9 ans
aes.h	Compatibility changes for wpa_supplicant and OpenSSH.	il y a 9 ans
asn1.h	Support Trusty, an embedded platform.	il y a 9 ans
asn1_mac.h	Prune away (almost) all of asn1_mac.h	il y a 9 ans
asn1t.h	Remove last references to named locks.	il y a 9 ans
base.h	Support Trusty, an embedded platform.	il y a 9 ans
base64.h	Various documentation fixes.	il y a 9 ans
bio.h	Fix some malloc test crashs.	il y a 9 ans
blowfish.h	Add decrepit, initially containing CAST and Blowfish.	il y a 9 ans
bn.h	Require source files define __STDC_FORMAT_MACROS to use BN FMT macros.	il y a 9 ans
buf.h	Reset all the error codes.	il y a 9 ans
buffer.h	Add buffer.h for compatibility.	il y a 9 ans
bytestring.h	Don't accept tag number 31 (long form identifier octets) in CBB_add_asn1.	il y a 9 ans
cast.h	Add decrepit, initially containing CAST and Blowfish.	il y a 9 ans
chacha.h	Move public headers to include/openssl/	il y a 10 ans
cipher.h	Fix some malloc test crashs.	il y a 9 ans
cmac.h	Add support for CMAC (RFC 4493).	il y a 9 ans
conf.h	Eliminate unnecessary includes from low-level crypto modules.	il y a 9 ans
cpu.h	Never set RC4_CHAR.	il y a 9 ans
crypto.h	Fix \|SSLeay\|.	il y a 9 ans
des.h	Implement \|DES_ede2_cbc_encrypt\|.	il y a 9 ans
dh.h	Convert reference counts in crypto/	il y a 9 ans
digest.h	Replace MD5 in examples with SHA-256.	il y a 9 ans
dsa.h	Convert reference counts in crypto/	il y a 9 ans
dtls1.h	Opaquify DTLS structs.	il y a 9 ans
ec.h	Support arbitrary elliptic curve groups.	il y a 9 ans
ec_key.h	Compatibility changes for wpa_supplicant and OpenSSH.	il y a 9 ans
ecdh.h	Reset all the error codes.	il y a 9 ans
ecdsa.h	Remove TODO about removing ECDSA_do_sign/ECDSA_do_verify.	il y a 9 ans
engine.h	Convert reference counts in crypto/	il y a 9 ans
err.h	Define compatibility function \|ERR_remove_state\|.	il y a 9 ans
evp.h	Convert reference counts in crypto/	il y a 9 ans
ex_data.h	Remove hash table lookups from ex_data.	il y a 9 ans
hkdf.h	Implement HKDF.	il y a 9 ans
hmac.h	Forbid reusing HMAC key without reusing the hash function.	il y a 9 ans
lhash.h	Remove hash table lookups from ex_data.	il y a 9 ans
lhash_macros.h	Remove hash table lookups from ex_data.	il y a 9 ans
md4.h	Add digest_test with tests for all existing EVP_MDs.	il y a 10 ans
md5.h	Readd MD4.	il y a 10 ans
mem.h	Eliminate unnecessary includes from low-level crypto modules.	il y a 9 ans
modes.h	Add visibility rules.	il y a 10 ans
obj.h	Reset all the error codes.	il y a 9 ans
obj_mac.h	Renegerate OID outputs.	il y a 10 ans
objects.h	Move public headers to include/openssl/	il y a 10 ans
opensslfeatures.h	Remove remaining remnants of RIPEMD-160 support.	il y a 9 ans
opensslv.h	Get version-related functions from crypto.h rather than ssl.h.	il y a 9 ans
ossl_typ.h	Move public headers to include/openssl/	il y a 10 ans
pem.h	Reset all the error codes.	il y a 9 ans
pkcs7.h	Move public headers to include/openssl/	il y a 10 ans
pkcs8.h	Eliminate unnecessary includes from low-level crypto modules.	il y a 9 ans
pkcs12.h	Move public headers to include/openssl/	il y a 10 ans
poly1305.h	Always write the Poly1305 tag to an aligned buffer.	il y a 9 ans
pqueue.h	Export pqueue functions.	il y a 10 ans
rand.h	Add no-op \|RAND_load_file\| function for compatibility.	il y a 9 ans
rc4.h	Fix up whitespace in headers for doc.go.	il y a 9 ans
rsa.h	Convert reference counts in crypto/	il y a 9 ans
safestack.h	Rename safe_stack.h to safestack.h.	il y a 9 ans
sha.h	Fix SHA-384 and -512 in NO_ASM mode.	il y a 9 ans
srtp.h	Store SRTP_PROTECTION_PROFILES as const.	il y a 9 ans
ssl.h	Deprecate SSL_*_read_ahead and enforce DTLS packet boundaries.	il y a 9 ans
ssl2.h	Rename ssl_locl.h to internal.h	il y a 9 ans
ssl3.h	Factor SSL_AEAD_CTX into a dedicated type.	il y a 9 ans
ssl23.h	Reformat SSL/TLS headers.	il y a 9 ans
stack.h	Fix a couple of issues with building with strict C99.	il y a 9 ans
stack_macros.h	Add sk_deep_copy and its macro.	il y a 9 ans
thread.h	Remove leftovers of the old-style locks.	il y a 9 ans
time_support.h	Eliminate unnecessary includes from low-level crypto modules.	il y a 9 ans
tls1.h	Opaquify DTLS structs.	il y a 9 ans
type_check.h	Try to fix MSVC and __STDC_VERSION__ again.	il y a 9 ans
x509.h	Convert reference counts in crypto/	il y a 9 ans
x509_vfy.h	Remove remaining calls to the old lock functions.	il y a 9 ans
x509v3.h	Remove spurious declarations of \|X509V3_EXT_conf\| and friends.	il y a 9 ans