On Fri, Jan 17, 2014 at 11:16 AM, Viktor Dukhovni <openssl-us...@dukhovni.org> wrote: > On Fri, Jan 17, 2014 at 09:57:00AM -0500, Jeffrey Walton wrote: > >> > BN_CTX_init() (deprecated) initializes an existing uninitialized >> > BN_CTX. This should not be used for new programs. Use BN_CTX_new() >> > instead. >> >> Odd its still being used in the source code. > > Not that odd. Libraries are free to make use of their own opaque > data types, but applications are not. When the data type internals > change, applications don't break. > I have no problem with them having their private structures. I have no problems with opaque structures.
If I have to have it, I'd like to put it on the stack minimize the cost of using it. Its hard to claim safe harbor in "its private" when an application is forced to use it (the application crashes in the BN_* routine if its absent). Jeff ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org