32863 Commits

All Branches

Search

Author	SHA1	Message	Date
Tomas Mraz	18a17538cf	Keep the provided peer EVP_PKEY in the EVP_PKEY_CTX too ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26976) (cherry picked from commit 2656922feb)	2025-03-14 09:51:40 +01:00
RSA-1977	6fdf39cc7d	Updated SSL_SESSION_get0_hostname() documentation to be consistent with the function ... CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26559) (cherry picked from commit 8d6fd6142b)	2025-03-05 19:13:25 +01:00
Tomas Mraz	73c66d8b4c	compiler-zoo.yml: Switch to ubuntu-22.04 where possible ... And drop the rest. The ubuntu-20.04 CI runners are discontinued. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26971) (cherry picked from commit 4e9b542868)	2025-03-04 16:53:03 +01:00
14MM4CH1N3	3e1e4f29de	Update doc README URLs ... This updates the openssl documentation link to the one currently in use, and removes the standards.txt section as that URL leads to the normal documentation page and there is no "standards" page in the openssl documentation site. CLA: trivial Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26759) (cherry picked from commit da44eb2901)	2025-03-03 09:41:24 +01:00
Dmitry Misharov	77c1d47b45	Fix hashsum files in release assets ... We use the coreutils format since 3.4.0. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26907) (cherry picked from commit 808a086171)	2025-03-03 09:34:23 +01:00
Jakub Zelenka	6b3d70ffa4	Fix libctx passing for CMS PWRI use ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26937) (cherry picked from commit 5045712d3d)	2025-03-03 09:27:21 +01:00
slontis	76d1ffb6f1	Encoder : Fix floating pointer when OSSL_ENCODER_to_data() is called ... twice. Fixes #26862 This only happens when using the FIPS provider, since it needs to export the key. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26891) (cherry picked from commit c2f4d7aae1)	2025-02-28 13:57:48 +01:00
Viktor Dukhovni	812fc0be0f	Tolerate 3.5+ FIPS providers in kem_rsa_params test ... Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26909) (cherry picked from commit 23cdc77328)	2025-02-26 12:30:37 +01:00
Tomas Mraz	4d8852b8ad	add_uris_recursive(): Avoid OSSL_STORE_INFO leak on error ... Fixes #26480 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26511) (cherry picked from commit be5965acad)	2025-02-25 15:51:19 +01:00
Niels Dossche	9e1fb45a18	Fix potential leak in error path in cert_response() ... get1_cert_status() returns an object that must be freed, but the error path does not do that. Fix it by adding a call to X509_free() in the error path. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26513) (cherry picked from commit 56160f173d)	2025-02-25 15:49:20 +01:00
Burkov Egor	2560c117ae	fix: add OOM handler for x509 fuzz test ... CLA: trivial Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26830) (cherry picked from commit 6d42072e0b)	2025-02-25 11:59:27 +01:00
Bernd Edlinger	a0f7e0d5da	Use linux-arm64 or the public ubuntu-24.04-arm runner image ... dependent on whether this runs on the openssl/openssl repository or a clone. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26855) (cherry picked from commit 51597e2ee6)	2025-02-21 15:45:53 -05:00
Bernd Edlinger	d2cc1974ee	Make CRYPTO_atomic_load/store use the same preprocessor guards ... as the other CRYPTO_atomic_X functions. All CRYPTO_atomic functions should use the same logic here, just in case... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26815) (cherry picked from commit 3240427a85)	2025-02-21 14:52:37 +01:00
Bernd Edlinger	c191aba029	Enhance thread sanitizer CI tests ... Related to issue #26798 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26815) (cherry picked from commit 00a173af77)	2025-02-21 14:51:13 +01:00
Burkov Egor	f9dcb2bd17	fix: add check for NULL zalloc in tls-provider.c (reverse if statement) ... CLA: trivial Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26814) (cherry picked from commit c5eb70de75)	2025-02-20 09:44:51 +01:00
Neil Horman	bdce042649	Fix memory leak in ecdsa_keygen_knownanswer_test ... We allocate an EC_POINT with EC_POINT_new here, but in failing a subsequent check, we don't free it, correct that. Fixes #26779 Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26799) (cherry picked from commit 20a2f3beba)	2025-02-19 09:40:03 -05:00
Kim, Hyuk	b2c88ffda2	Replace snprintf with BIO_snprintf ... Updated snprintf to BIO_snprintf for consistency with previous changes. #24008 CLA: trivial Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26749) (cherry picked from commit aa6b7ac875)	2025-02-18 16:24:41 +01:00
Sebastian Andrzej Siewior	7e3308062f	SPARC assembly: Don't file aes-cbc on T4 with small sizes. ... The "openssl speed -testmode -seconds 1 -bytes 1 aes-128-cbc" test revealed that the assembly code is crashing if length is less than 16. The code shifts the provided length by 4 and than subtracts one until the length hits zero. If it was already zero then it underflows the counter and continues until it segfaults on reading or writing. Replace the check against 0 with less than 15. Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25637) (cherry picked from commit c71c65b922)	2025-02-14 11:43:23 +01:00
openssl-machine	2777560b94	Prepare for 3.1.9 ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-02-11 14:42:27 +00:00
openssl-machine	77e6daafba	Prepare for release of 3.1.8 ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-02-11 14:42:21 +00:00
openssl-machine	548335b9f5	make update ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-02-11 14:42:20 +00:00
openssl-machine	d946580be6	Copyright year updates ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-02-11 14:40:50 +00:00
Auto Vincent	5c28ce3b21	Fix compile error when building VC-WIN64-CLANGASM-ARM target ... With MSVC v143, C++ Clang Compiler for Windows (18.1.8) there are many errors similar to: crypto\aes\libcrypto-lib-aesv8-armx.obj.asm:3795:7: error: unknown token in expression ld1 {v2.16b},[x0],#16 CLA: trivial Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26603) (cherry picked from commit becc0078f8)	2025-02-06 17:30:53 +01:00
Dmitry Misharov	4f8c195b0c	backport make-release.yml workflow to openssl-3.x branches ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26541) (cherry picked from commit 39cd63bdc9)	2025-02-06 17:21:04 +01:00
Mae	43f96e1fb1	Fix passing struct by value rather than by reference to syscall ... Fixes #26521 CLA: trivial Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26523) (cherry picked from commit b6f2ff9363)	2025-01-24 14:26:46 +01:00
Stas Cymbalov	a905dd23d2	Fix data race in asn1_str2tag() on tntmp which was accidentally made static ... Variables tntmp and tnst are declared in the same declaration and thus share storage class specifiers (static). This is unfortunate as tntmp is used during iteration through tnst array and shouldn't be static. In particular this leads to two problems that may arise when multiple threads are executing asn1_str2tag() concurrently: 1. asn1_str2tag() might return value that doesn't correspond to tagstr parameter. This can happen if other thread modifies tntmp to point to a different tnst element right after a successful name check in the if statement. 2. asn1_str2tag() might perform an out-of-bounds read of tnst array. This can happen when multiple threads all first execute tntmp = tnst; line and then start executing the loop. If that case those threads can end up incrementing tntmp past the end of tnst array. CLA: trivial Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26504) (cherry picked from commit 7262c0bcc4)	2025-01-23 12:14:39 +01:00
Tomas Mraz	454bd65461	eddsa_signverify_init(): Avoid memory leak on error ... Add missing WPACKET_cleanup() call. Fixes Coverity 1638693 Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26500) (cherry picked from commit abbc407314)	2025-01-23 12:12:20 +01:00
Tomas Mraz	f71858d4a4	mac_legacy_kmgmt.c: Avoid possible memory leak on error ... Use mac_gen_cleanup() instead of just freeing the gctx. Fixes Coverity 1638702 Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26500) (cherry picked from commit 2455ef2112)	2025-01-23 12:12:14 +01:00
Tomas Mraz	9bb97aca3a	test_kdf_scrypt(): Test resetting the KDF context ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26488) (cherry picked from commit 4f7d2b4809)	2025-01-23 12:08:15 +01:00
Tomas Mraz	3f40345597	kdf_scrypt_reset(): NULLify freed pointers ... Otherwise doublefree happens with further usage. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26488) (cherry picked from commit 901b108154)	2025-01-23 12:08:15 +01:00
Tomas Mraz	231d2297a6	scrypt: Do not free the context itself when fetch fails ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26488) (cherry picked from commit 2dded72022)	2025-01-23 12:08:14 +01:00
Michael Baentsch	d345ce4d78	Improve ASN1_TIME_print documentation and output ... This adds missing GMT indication when printing the local time as it is converted to the UTC timezone before printing. Also fixing the fractional seconds printing on EBCDIC platforms. Fixes #26313 Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26344) (cherry picked from commit c81ff97866)	2025-01-22 11:31:31 +01:00
Nadav Tasher	9765cd86ec	s_socket: naccept: close listening socket after accepting clients ... When `-naccept` is passed (i.e with `s_server`), the listening socket remains open while handling client, even after `naccept` is supposed to reach `0`. This is caused to to the decrementation of `naccept` and closing of the socket happening a little too late in the `do_server` function. Signed-off-by: Nadav Tasher <tashernadav@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26228) (cherry picked from commit 113c12ee8c)	2025-01-22 09:20:57 +01:00
Tomas Mraz	7d8a8c20e1	Add CHANGES.md and NEWS.md updates for CVE-2024-13176 ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26429) (cherry picked from commit c3144e1025)	2025-01-20 09:41:38 +01:00
Tomas Mraz	2af62e74fb	Fix timing side-channel in ECDSA signature computation ... There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. Attacks on ECDSA nonce are also known as Minerva attack. Fixes CVE-2024-13176 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26429) (cherry picked from commit 63c40a66c5)	2025-01-20 09:41:32 +01:00
otherddn1978	2bd0e81e50	If you call X509_add_cert with cert == NULL and the X509_ADD_FLAG_UP_REF ... flag, it will сrash to X509_up_ref. Passing NULL here is not valid, return 0 if cert == NULL. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26267) (cherry picked from commit 3c7db9e0fd)	2025-01-20 08:44:50 +01:00
Nikolay Nikolaev	c4429159f9	Workaround for RSA on AArch64 Big Endian ... 1064616012 introduced and optimized RSA NEON implementation for AArch64 architecture, namely Cortex-A72 and Neoverse N1. This implementation is broken in Big Endian mode, which is not widely used, therefore not properly verified. Here we disable this optimized implementation when Big Endian platform is used. Fixes: #22687 CLA: trivial Signed-off-by: Nikolay Nikolaev <nicknickolaev@gmail.com> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26257) (cherry picked from commit b26894ec69)	2025-01-15 17:53:18 +01:00
Bernd Edlinger	f5aa0fadea	Fix test failure in 30-test_evp_pkey_provided.t ... In this test there is a random test output corruption. `make test TESTS=test_evp_pkey_provided V=1` has some random output, that can with a certain probability start a line with "ok" or so: # Setting up a OSSL_ENCODER context with passphrase # Testing with no encryption jLixONcRPi/m64CGie4KKKDuGeTjtYwfima3BNYCGlgbLGeK3yYxBfZb9JjviOJ4 # nHaNsRsONTAKyg== This happens because large random data is output to bio_out but some data remains buffered, and then test_note() is used to print some comments on the bio_err file. This causes output corruption that confuses the TAP parser. Fix that by flushing any pending output with test_flush_stdout() first. Fixes #23992 Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26383) (cherry picked from commit c37f564bb8)	2025-01-15 09:16:43 +01:00
Michael Baentsch	66f481d98f	updated (lib+)oqsprovider to latest releases ... Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (cherry picked from commit f3f3f86a14) Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26408)	2025-01-14 13:59:19 +01:00
Tom Cosgrove	b022d66e28	Fix obvious misspelling of ASN1_VALUE ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26118) (cherry picked from commit 4188ab2b19)	2025-01-14 12:08:44 +01:00
Tom Cosgrove	6f22d3a76b	Fix double 'the's ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26118) (cherry picked from commit 690bb5192c)	2025-01-14 12:08:40 +01:00
Bernd Edlinger	9e362d7a9d	Fix intermittent test failure in 80-test_cmp_http.t ... output to stderr is unbuffered bypassing the normal output, which does not happen at line boundaries and is therefore confusing the TAP parser. This is known to cause random test failures like this one: 80-test_cmp_http.t (Wstat: 0 Tests: 5 Failed: 0) Parse errors: Tests out of sequence. Found (6) but expected (5) Bad plan. You planned 6 tests but ran 5. Fixes #23992 Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26364)	2025-01-13 20:21:35 +01:00
Ingo Franzki	97d7337fb5	speed: Pass IV to EVP_CipherInit_ex for -evp runs with non-AEAD ciphers ... Some (non-AEAD) ciphers require an IV to be used. Always pass a (dummy) IV when setting the key. It is ignored by ciphers that do not use an IV. Commit 607a46d003 corrected the use of AEAD ciphers, but removed the IV from being passed to EVP_CipherInit_ex() for non-AEAD ciphers. Fixes: 607a46d003 Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26346) (cherry picked from commit b8028d4890)	2025-01-13 11:48:03 +01:00
Dmitry Belyavskiy	4b3b4027c6	Take into account no_store when pushing algorithm ... When we put algorithm to the store, we have a fallback to the OSSL_LIB_CTX level store when store is NULL. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (cherry picked from commit b3bb214720) Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/26231)	2025-01-13 10:48:15 +01:00
Dmitry Belyavskiy	2decc85cfb	This is a test for nocache provider behavior ... A follow-up to #26038 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (cherry picked from commit f6097c7c5d) Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/26231)	2025-01-13 10:48:15 +01:00
Alicja Kario	3c5b28a8a8	update tlsfuzzer to new version ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26377) (cherry picked from commit 290dfd2eea)	2025-01-10 16:15:09 +01:00
Dmitry Misharov	41faf4f5bf	fix linux-arm64 and freebsd-x86_64 CI jobs ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26375) (cherry picked from commit 4b2f41b3ef)	2025-01-10 15:49:26 +01:00
Kai Pastor	ba0fdad773	Fix buildinf.h generation for space and backslash ... Builds may be configured with CC or CFLAGS containing space and double quotes. In particular on Windows, this may lead to passing more than two arguments into mkbuildinf.pl. In addition, backslashes must be escaped for constructing the C string. Fixes #26253. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26315) (cherry picked from commit e87a3473fd)	2025-01-10 11:59:45 +01:00
Dmitry Misharov	2f1fd7cb97	Replace self-hosted runners with GitHub hosted ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26304) (cherry picked from commit ea71f8cd40)	2025-01-09 15:42:49 +01:00
Frederik Wedel-Heinen	e85a59441f	Fix memory leaks from missing checks of return value from sk_OPENSSL_STRING_push() ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26238) (cherry picked from commit d48874ab47)	2025-01-09 15:24:41 +01:00