[openssl/openssl] aba621: Ensure `$(MAKE)` commands and `CFLAGS` are appropr...

[Job Snijders]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: aba621934696ca52193bd41cd35816649b6b321b
      https://github.com/openssl/openssl/commit/aba621934696ca52193bd41cd35816649b6b321b
  Author: Hamilton Chapman <hamchapman at gmail.com>
  Date:   2024-02-25 (Sun, 25 Feb 2024)

  Changed paths:
    M Configurations/15-ios.conf
    M Configurations/unix-Makefile.tmpl

  Log Message:
  -----------
  Ensure `$(MAKE)` commands and `CFLAGS` are appropriately quoted in the Makefile.

If a user's `make` command came from a path that contained a space then both the
`$(MAKE)` variable (and parts of the generated `CFLAGS`, when building for iOS)
would not be properly quoted and the build would fail.

Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23663)


  Commit: 5d70f11823e3d8b7214a1e094b8a4f744ad396f5
      https://github.com/openssl/openssl/commit/5d70f11823e3d8b7214a1e094b8a4f744ad396f5
  Author: Martin Oliveira <martin.oliveira at eideticom.com>
  Date:   2024-02-25 (Sun, 25 Feb 2024)

  Changed paths:
    M apps/engine.c

  Log Message:
  -----------
  apps/engine: add EC to list of capabilities

openssl engine -c wasn't showing if an engine implemented EC

cla: trivial

Reviewed-by: Nicola Tuveri <nic.tuv at gmail.com>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23538)


  Commit: eadd8c4727b703049e4d2764751cb04f3108434d
      https://github.com/openssl/openssl/commit/eadd8c4727b703049e4d2764751cb04f3108434d
  Author: Job Snijders <job at sobornost.net>
  Date:   2024-02-25 (Sun, 25 Feb 2024)

  Changed paths:
    M CHANGES.md
    M crypto/asn1/a_time.c
    M crypto/asn1/asn1_err.c
    M crypto/asn1/tasn_dec.c
    M crypto/err/openssl.txt
    M include/openssl/asn1err.h
    M test/asn1_decode_test.c
    M test/asn1_time_test.c
    M test/x509_time_test.c

  Log Message:
  -----------
  Add appropriate lower bound checks for GeneralizedTime and UTCTime

ITU-T X.690 / ISO/IEC 8825-1 section 11.7 and section 11.8
impose specific constraints on how GeneralizedTime and UTCTime
can be encoded in BER/CER/DER. Following from these constraints
a minimum length can be derived.

Checking the length in this context can potentially help prevent
applications from interpreting an invalid GeneralizedTime as a
valid UTCTime.

Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23483)


Compare: https://github.com/openssl/openssl/compare/11adf9a75d6b...eadd8c4727b7

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications