kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
983f6bdb58
boringssl/ssl
History
Alex Chernyakhovsky 983f6bdb58 Set OPENSSL_NO_BUF_FREELISTS 
The memory freelist maintained by OpenSSL claims to be a performance
optimization for platforms that have a slow malloc/free
implementation. This should not be the case on modern
linux/glibc. Remove the freelist as it poses a potential security
hazard of buffer-reuse that is of "initialized" memory that will not
be caught be tools such as valgrind.

Change-Id: I3cfa6a05f9bdfbbba7820060bae5a673dee43014
Reviewed-on: https://boringssl-review.googlesource.com/1385
Reviewed-by: Adam Langley <agl@google.com>
2014-08-04 20:14:33 +00:00
..
pqueue Move public headers to include/openssl/ 2014-07-14 22:42:18 +00:00
test runner: Implement DHE-RSA. 2014-08-04 20:12:58 +00:00
CMakeLists.txt Add visibility rules. 2014-07-31 22:03:11 +00:00
d1_both.c Make init_msg a uint8_t*. 2014-07-14 21:43:20 +00:00
d1_clnt.c Remove ssl3_check_finished. 2014-07-23 15:52:38 +00:00
d1_enc.c Remove crypto/comp and SSL_COMP support code. 2014-06-24 17:22:06 +00:00
d1_lib.c DTLS: fix memory leak when allocation fails. 2014-06-26 17:46:27 -07:00
d1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
d1_pkt.c Remove OPENSSL_NO_TLS{,1} 2014-08-04 19:20:19 +00:00
d1_srtp.c Fix typo in DTLS-SRTP extension parsing. 2014-07-18 00:52:51 +00:00
d1_srvr.c Fix DTLS certificate requesting code. 2014-07-28 17:05:14 -07:00
s3_both.c Set OPENSSL_NO_BUF_FREELISTS 2014-08-04 20:14:33 +00:00
s3_cbc.c Remove OPENSSL_NO_SHA512 2014-08-04 20:13:54 +00:00
s3_clnt.c Remove PKCS1_CHECK 2014-08-04 20:14:21 +00:00
s3_enc.c Remove support code for export cipher suites. 2014-07-24 21:14:08 +00:00
s3_lib.c Remove remnants of OPENSSL_NO_CAMELLIA 2014-08-04 19:19:35 +00:00
s3_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s3_pkt.c Remove OPENSSL_NO_TLS{,1} 2014-08-04 19:20:19 +00:00
s3_srvr.c Don't limit message sizes in ssl3_get_cert_verify. 2014-07-28 17:05:13 -07:00
s23_clnt.c Remove OPENSSL_MAX_TLS1_2_CIPHER_LENGTH. 2014-08-04 19:00:30 +00:00
s23_lib.c Remove some remnants of SSLv2 support. 2014-07-24 21:10:41 +00:00
s23_meth.c Remove OPENSSL_NO_TLS{,1} 2014-08-04 19:20:19 +00:00
s23_pkt.c Inital import. 2014-06-20 13:17:32 -07:00
s23_srvr.c Remove OPENSSL_FIPS blocks. 2014-07-07 20:31:50 +00:00
ssl_algs.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_asn1.c unifdef OPENSSL_NO_PSK. 2014-07-24 21:11:05 +00:00
ssl_cert.c Remove SSL_get_client_certificate_types. 2014-07-30 00:44:16 +00:00
ssl_ciph.c Make disabling last cipher work. 2014-07-28 17:05:13 -07:00
ssl_error.c Change CCS_OK to EXPECT_CCS. 2014-07-25 17:58:58 +00:00
ssl_lib.c Set OPENSSL_NO_BUF_FREELISTS 2014-08-04 20:14:33 +00:00
ssl_locl.h Set OPENSSL_NO_BUF_FREELISTS 2014-08-04 20:14:33 +00:00
ssl_rsa.c Introduce EVP_PKEY_is_opaque to replace RSA_METHOD_FLAG_NO_CHECK. 2014-07-18 23:35:04 +00:00
ssl_sess.c unifdef OPENSSL_NO_PSK. 2014-07-24 21:11:05 +00:00
ssl_stat.c Consolidate CCS_OK paths in s3_clnt.c. 2014-07-25 17:49:12 +00:00
ssl_test.c Fix magic SSL reason codes. 2014-07-16 18:54:06 +00:00
ssl_txt.c unifdef OPENSSL_NO_PSK. 2014-07-24 21:11:05 +00:00
t1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
t1_enc.c Remove support code for export cipher suites. 2014-07-24 21:14:08 +00:00
t1_lib.c Remove OPENSSL_NO_SHA512 2014-08-04 20:13:54 +00:00
t1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
t1_reneg.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00
t1_srvr.c Inital import. 2014-06-20 13:17:32 -07:00