CVS commit: [netbsd-9] src

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Mon Mar 25 14:26:16 UTC 2024

Modified Files:
        src/crypto/external/bsd/openssl/dist/crypto/evp [netbsd-9]: m_sha1.c
        src/crypto/external/bsd/openssl/dist/include/crypto [netbsd-9]: sha.h
        src/crypto/external/bsd/openssl/lib/libcrypto [netbsd-9]: libc-sha2xx.c
        src/distrib/sets/lists/debug [netbsd-9]: mi
        src/distrib/sets/lists/tests [netbsd-9]: mi
        src/tests/crypto/libcrypto [netbsd-9]: Makefile
Added Files:
        src/tests/crypto/libcrypto [netbsd-9]: t_sha512trunc.c

Log Message:
Pull up following revision(s) (requested by riastradh in ticket #1819):

        crypto/external/bsd/openssl/dist/providers/implementations/digests/sha2_prov.c: revision 1.2
          (applied to crypto/external/bsd/openssl/dist/crypto/evp/m_sha1.c)
        tests/crypto/libcrypto/t_sha512trunc.c: revision 1.1
        tests/crypto/libcrypto/t_sha512trunc.c: revision 1.2
        tests/crypto/libcrypto/Makefile: revision 1.16
        distrib/sets/lists/tests/mi: revision 1.1311
        distrib/sets/lists/debug/mi: revision 1.430
        crypto/external/bsd/openssl/dist/include/crypto/sha.h: revision 1.2
        crypto/external/bsd/openssl/lib/libcrypto/libc-sha2xx.c: revision 1.4
        (all via patch)

libcrypto: Add some trivial tests for truncated SHA-512 variants.
These should use more of the test vectors from
https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Secure-Hashing#Testing
but this will do for now to detect the buffer overrun rake we left
lying around for ourselves.
PR lib/58039

libcrypto: Fix buffer overrun in truncated SHA-512 functions.
Further fallout from the libc/openssl sha2 symbol collision.
PR lib/58039


To generate a diff of this commit:
cvs rdiff -u -r1.11.2.1 -r1.11.2.2 \
    src/crypto/external/bsd/openssl/dist/crypto/evp/m_sha1.c
cvs rdiff -u -r1.1.1.1.4.2 -r1.1.1.1.4.3 \
    src/crypto/external/bsd/openssl/dist/include/crypto/sha.h
cvs rdiff -u -r1.1.6.1 -r1.1.6.2 \
    src/crypto/external/bsd/openssl/lib/libcrypto/libc-sha2xx.c
cvs rdiff -u -r1.285.2.6 -r1.285.2.7 src/distrib/sets/lists/debug/mi
cvs rdiff -u -r1.818.2.4 -r1.818.2.5 src/distrib/sets/lists/tests/mi
cvs rdiff -u -r1.14 -r1.14.2.1 src/tests/crypto/libcrypto/Makefile
cvs rdiff -u -r0 -r1.2.4.2 src/tests/crypto/libcrypto/t_sha512trunc.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.