CVSROOT: /cvs
Module name: src
Changes by: bc...@cvs.openbsd.org 2016/07/04 20:54:35
Modified files:
regress/lib/libcrypto/bn/general: bntest.c
lib/libssl/src/crypto/bn: bn_prime.c bn_word.c
lib/libssl/src/crypto/dh: dh_check.c
lib/libcrypto/man: BN_add_word.3
Log message:
On systems where we do not have BN_ULLONG defined (most 64-bit systems),
BN_mod_word() can return incorrect results if the supplied modulus is
too big, so we need to fall back to BN_div_word.
Now that BN_mod_word may fail, handle errors properly update the man page.
Thanks to Brian Smith for pointing out these fixes from BoringSSL:
https://boringssl.googlesource.com/boringssl/+/67cb49d045f04973ddba0f92fe8a8ad483c7da89
https://boringssl.googlesource.com/boringssl/+/44bedc348d9491e63c7ed1438db100a4b8a830be
ok beck@
