37055 Commits

All Branches

Search

Author	SHA1	Message	Date
Neil Horman	ae13964887	update to latest version of gost-engine ... Need to pull in the latest version of its submodule, libprov which has fixes for cmake 4.0 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27259)	2025-04-09 14:04:09 -04:00
Dr. David von Oheimb	46e14174da	cmp_client_test.c: relax tight timeout value in test_exec_IR_ses_poll_no_timeout() ... Fixes #27165 Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27249)	2025-04-09 12:29:06 +02:00
Neil Horman	30adecd725	Add known issues to NEWS.md for 3.5.0 ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27287)	2025-04-07 11:19:06 -04:00
Sebastian Andrzej Siewior	648366ad01	README: Remove client only restriction for QUIC. ... The QUIC protocol is also supported on server side. Update the README file accordingly. Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27258)	2025-04-05 09:16:54 -04:00
Samson S. Kolge	ba46275556	Fix code style in quicapitest.c ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27264)	2025-04-05 09:06:24 -04:00
Samson S. Kolge	5341e271d9	Fix SSL_new() with QUIC_server_method and improve formatting (Fixes #27255) ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27264)	2025-04-05 09:06:24 -04:00
Matt Caswell	0a16bb7e74	Fix a reference in the OpenSSL guide to QUIC for servers ... One part of the OpenSSL guide suggests we only support clients for QUIC which is no longer true. Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27265)	2025-04-04 10:12:46 +01:00
Neil Horman	69acfa358f	Disable stringop-overflow warnings on s390 ... Recently ci on master has been failing: https://github.com/openssl/openssl/actions/runs/14234051502/job/39919663876 Its occuring because the s390 gcc compiler is complaining about various functions attempting to write past the end of an array. However, I can find no case in which we actually do so in this case. The problem resolves when we either: 1) Disable the stringop-overflow warning or 2) disable all loop unrolling optimizations with fno-loop-nest-optimize Given that asan doesn't report any out of bounds errors on s390 when built with case (1), and case (2) can be a significant performance hit, coupled with the fact that gcc on any other platform avoids the same issue (s390 is stuck on gcc 12, instead of gcc 16 where the other platforms are), I think the right thing to do is just disable the warning here Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27253)	2025-04-03 10:54:31 -04:00
Samson S. Kolge	c66e00398c	Update README-QUIC.md with server-side QUIC support information ... - Add information about OpenSSL 3.5 server-side QUIC support - Include specific command instructions for running the QUIC server example - Explicitly note that s_server does NOT support QUIC - Fix documentation formatting (trailing spaces and blank lines around code blocks) Signed-off-by: Samson S. Kolge <eglok1980@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27230)	2025-04-03 12:47:15 +01:00
Richard Hughes	6545de9bbe	Add a SBOM template in CycloneDX format ... Improve supply chain security by including a SBOM file with substituted values. This will be used to construct a composite platform SBOM. Signed-off-by: Richard Hughes <rhughes@redhat.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26020)	2025-04-03 09:11:29 +02:00
Stanciu, Adrian	196b36f0d0	Enable x86-64 SHA-512 family optimizations with SHA512 ISA extension ... The SHA-256 (SZ=4) and SHA-512 (SZ=8) dispatcher paths have been separated while keeping the SHA-256 path unmodified. Due to early constraints in register availability, two 32-bit `OPENSSL_ia32cap_P` reads have been coalesced into one. As a consequence, several bit positions used in feature checks have gained a 32 bits offset. Replaced `test` with `bt` to allow use of 64-bit immediate indices in CPUID feature checks. Split the SHA512 BMI2+AVX2+BMI1 dispatcher branch into: - AVX2+SHA512: high priority, with SHA512 ISA extension - AVX2+BMI2+BMI1: fallback The added implementation has its own copy of `K512` without duplicated elements every 16 bytes. Shuffle indices have been reused from `K512`. Added binary translators for `vsha512msg1`, `vsha512msg2`, `vsha512rnds2` for older assemblers. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26147)	2025-04-03 11:14:42 +11:00
Elizarova, Alina	e1eb6fdb3a	Enable x86-64 SM3 optimizations with SM3 ISA extension ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26196)	2025-04-03 10:11:07 +11:00
Elizarova Alina	b12cd40e8b	Enable x86-64 SM4 optimizations with SM4 ISA extension ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26664)	2025-04-03 10:09:04 +11:00
Bernd Edlinger	c45f0dd803	Fix a visual glitch in test_cmp_http.t ... Kill the shell process after the Mock server is running, to prevent the shell from printing an error message when the Mock server is finally killed. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27144)	2025-04-02 19:42:33 +02:00
Matt Caswell	ff5a272e60	Detect segfault in the pkeyutl test ... Some tests are expected to fail in the pkeyutl test. However, if a segfault occurs then that counts as a failure and the test passes. A segfault should never be a "pass". Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27228)	2025-04-02 17:28:29 +02:00
Matt Caswell	3f0f723b52	Fix a segfault in the pkeyutl command line app ... Don't attempt to deref a pkey that is NULL Fixes #27156 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27228)	2025-04-02 17:28:29 +02:00
Neil Horman	db9771b5a0	Temporarily disable gost-engine tests in ci ... We need to temporarily disable this as we have a build break in CI: https://github.com/openssl/openssl/actions/runs/14192630435 Its occuring because gost-engine depends on libprov, which requires a minimum version cmake-3.0. The update of github runners to cmake-4.0 causes a bail out as cmake 4.0 no longers supports cmake 3.0 syntax. Libprov is fixed now, but gost-engine needs to update its libprov submodule, and then we need to update the gost-engine submodule. Until thats done (which may take days), we should disable the gost-engine external tests Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27234)	2025-04-02 17:25:12 +02:00
JiashengJiang	511cfacf8c	test/tls-provider.c: Remove redundant check ... Remove "if (key != NULL)" since there is already a check before. CLA: trivial Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27220)	2025-04-02 12:11:22 +02:00
Matt Caswell	9eb21877f5	Link SSL_get_negotiated_group() and SSL_get0_group_name() in the docs ... If you are intereseted in one you might be interested in the other. Fixes #27137 Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27210)	2025-04-02 08:47:23 +02:00
Dan Pittman	8ca8f9afbb	fix OOB issue in AVX-512 XTS decryption ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27216)	2025-04-02 08:39:56 +02:00
dare3path	6d3202e20f	move BIO_err_is_non_fatal() to bio_lib.c ... done this without running mkerr.pl otherwise this is what mkerr.pl would do: * remove BIO_err_is_non_fatal from bio_err.c * remove duplicate BIO_R_PORT_MISMATCH * reorder/sort 3 things * update copyright year from 2022 to 2025 see #27183 CLA: trivial Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27191)	2025-04-01 18:56:13 +02:00
Neil Horman	94b34ee67a	update rust toolchain ... Needs update to build new rust crate for pyca-cryptography Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27192)	2025-04-01 09:23:30 -04:00
Neil Horman	a5f377f280	Fix up external pyca test ... The latest version of pyca-cryptography no longer has a setup.py script, so change the check in the test to look for release.py instead Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27192)	2025-04-01 09:23:02 -04:00
Neil Horman	0a17171f94	update pyca-cryptography to latest master ... Was going to update to latest tagged release, but there are some python errors that need the latest fixes to avoid some invalid dict hashing Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27192)	2025-04-01 09:23:02 -04:00
Neil Horman	ba5ddef774	update wycheproof submodule to latest master ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27192)	2025-04-01 09:23:02 -04:00
Benjamin Kaduk	ddd99d52d3	statem: always save sigalgs during PHA ... We use the same extension-parsing function on server and client for convenience, but while the server might worry about tracking what was previously received and not overwriting it, on the client receiving a request for post-handshake authentication, we always want to use the values from the current extension (and should always have a new session object that we are free to mutate). It is somewhat unclear whether the server also needs the check for a resumed connection; it appears to have been added back in 2015 in commit 062178678f as part of a broad pass to handle extensions on resumption, but without specific documentation of each extension's handling. Fixes: #10370 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24651)	2025-04-01 15:10:54 +02:00
Pauli	dad4704a5d	ci: strict warnings the default ... Make building with --strict-warnings the default for most builds. Move this option to immediately after the ./config command so its presence is clearer. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27204)	2025-04-01 15:09:30 +02:00
Pauli	0fe8784131	rand: avoid unused function warning for FreeBSD and NetBSD. ... The existing checks were not sufficiently version specific. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27204)	2025-04-01 15:09:30 +02:00
Pauli	d04ea9af79	ci: remove unnecessary -Wall and -Werror options ... The oprion --strict-warnings automatically turns on -Wall and -Werror so there is no requirement to specify the latter two separately. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27204)	2025-04-01 15:09:30 +02:00
Neil Horman	0162f75fb1	Fix more quic_multistream test formatting ... We encountered another failure in the quic_multistream_test: https://github.com/openssl/openssl/actions/runs/14127125173/job/39578660601#step:9:1005 It appears we still occasionally get empty frames in our qlog, with the validate-qlog.py scripts properly bails out on. In the above case, the offending frame entry looked like this: { "name": "transport:packet_received", "data": { "header": { "packet_type": "initial", "packet_number": 4, "dcid": "", "scid": "6217813c336a012a" }, "datagram_id": 6, "frames": [ { "frame_type": "new_token", "token": { "raw": { "data": "44801add5794" } }, "length": 8 }, { "frame_type": "stream", "stream_id": 15897, "offset": 625652585, "payload_length": 11, "explicit_length": true, "fin": true, "length": 8 }, {} <= NOTE EMPTY FRAME HERE ] }, "time": 0 } I think we're still missing some frame formatting cases in script_21_inject_plain(), which can format potentially any of the frames listed in the forbidden_frame_types array when running the test_dyn_frame_types test. I think we need to enumerate all of those frame types in the case statement we have there. Fortunately we generally don't have to provide sane values, and most of the cases fall into 4 categories (those that need a 64 bit data value, and those that require 1, 2 or 3 variable integers). There are two special cases, NEW_TOKEN, and NEW_CONNECTION, but those just need a mix of fixed and variable width data. So lets fully enumerate those and hopefully put this to bed. Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> (Merged from https://github.com/openssl/openssl/pull/27200)	2025-04-01 08:40:51 -04:00
slontis	b8860598d2	Fix cpp comment in windows build ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27188)	2025-04-01 11:52:30 +02:00
slontis	0a78595eac	Fix Strict c issue in aes_gcm for armv8 ... Reported by David Makepeace Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27203)	2025-04-01 11:38:03 +02:00
Vavroch	b3955eaa26	Added 3.5 to coveralls.yml ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Dmitry Misharov <dmitry@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27202)	2025-03-31 11:17:34 -04:00
Viktor Dukhovni	a5f98e6da5	Fix sigalg corner cases ... - Tolerate RSA PKCS#1 *certificate* signatures when the peer sigals include RSA PSS with the same digest. Now that we're more strict about not sending sigalgs that are out of protocol range, when the client supports TLS 1.3 only, we might refuse to return an RSA PKCS#1-signed cert. - Don't send TLS 1.3 sigalgs when requesting client certs from a TLS 1.2 client. Fixes: #1144 Fixes: #25277 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27166)	2025-03-31 14:07:56 +02:00
slontis	ea77608920	Fix c++ comment in ec code. ... This is a 9 month old change, so I am not sure why it is only causing a compile issue now. Reported by David Makepeace Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27186)	2025-03-31 14:03:38 +02:00
Branden Clark	908e0f3728	Fix probing the registry for configuration ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26566)	2025-03-31 13:58:06 +02:00
Hugo Beauzée-Luyssen	0e38f78dca	crypto: windows: use LPCTSTR for the temp registry buffer ... mingw-w64 only defines LPCTCH when UNICODE isn't defined crypto/defaults.c: In function 'get_windows_regdirs': crypto/defaults.c:72:5: error: unknown type name 'LPCTCH'; did you mean 'LPTCH'? 72 | LPCTCH tempstr = NULL; | ^~~~~~ | LPTCH Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26566)	2025-03-31 13:58:06 +02:00
Hugo Beauzée-Luyssen	ed3876adb1	crypto: fix preprocessor concatenation ... String litteral don't need the '##' operator, which causes build failures: crypto/defaults.c:kepi:23: error: pasting ""SOFTWARE\\WOW6432Node\\OpenSSL"" and ""-"" does not give a valid preprocessing token Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26566)	2025-03-31 13:58:06 +02:00
Neil Horman	50316c18a0	Update FIPS-README.md to reflect latest versions ... With our new FIPS provider certification, lets update the FIPS-README to reflect our latest release and fips validated versions Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27178)	2025-03-30 15:33:48 -04:00
Viktor Dukhovni	02cada2e45	Avoid potential double-free with duplicated hybrid ML-KEM keys ... Issue reported by Apple Inc on 2025-03-26. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27173)	2025-03-28 14:10:48 +01:00
Alex Prabhat Bara	39229d93d5	added use IO::File; to 15-test_ml_kem_codecs.t ... CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27176)	2025-03-28 13:49:15 +01:00
Alex Prabhat Bara	6a6ce4c1f3	added use IO::File; 15-test_ml_dsa_codecs.t ... CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27176)	2025-03-28 13:49:15 +01:00
JiashengJiang	930c645e6b	apps/lib/apps.c: Add a check for OPENSSL_strdup() ... Add a check for the return value of OPENSSL_strdup() to guarantee the success of allocation, similar to the other call sites. Fixes: c7d5ea2670 ("Prepare to detect index changes in OCSP responder.") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27172)	2025-03-28 11:40:02 +01:00
Viktor Dukhovni	60f2a71400	Fix goto label indents to match style ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27175)	2025-03-28 11:37:12 +01:00
Julian Zhu	08c8dd6b8c	RISC-V: Provide optimized SHA-256 implementation using Zbb extension ... Signed-off-by: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27011)	2025-03-28 11:22:58 +01:00
Julian Zhu	a41f9135f0	RISC-V: Provide optimized SHA-512 implementation using Zbb extension ... Signed-off-by: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27161)	2025-03-28 11:17:35 +01:00
Julian Zhu	f04fdd908c	RISC-V: Add Zbb rori opcode in riscv.pm ... Signed-off-by: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27161)	2025-03-28 11:16:18 +01:00
Tomas Mraz	bf4c9b7b66	provider-compatibility.yml: Update the branches ... Fixes regression from 725f55e23 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27177)	2025-03-27 12:18:10 +01:00
Bernd Edlinger	8ed3eee3b4	Fix quic_multistream_test: correct more frame types ... There are a few more critical frame injections that previously created an out-of-diskspace problem and now only a CI test failure. The pattern in the qlog files is always similar to this: {"frame_type":"stop_sending","stream_id":6,"error_code":1152,"length":4}, {"frame_type":"path_challenge","length":9},...{} Note: The stream_id 6 is a OSSL_QUIC_FRAME_TYPE_CRYPTO. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27170)	2025-03-27 12:16:13 +01:00
sashan	7fa51041e4	Use OPENSSL_strdup() for strings freed by OPENSSL_free() ... Things can get messy when application decides to use it's own memory allocation functions using CRYPTO_set_mem_functions(3ossl) Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27163)	2025-03-27 12:03:55 +01:00