)]}'
{
  "commit": "9a01b4177a51841baab1e9962e2238684e8df7a6",
  "tree": "4977d24c852d1d294685adc6f10b1747c4b9e3d2",
  "parents": [
    "e471cf9d47cad34f3cc9db41b2dcb7bbda3a280b"
  ],
  "author": {
    "name": "Piotr Sikora",
    "email": "piotrsikora@google.com",
    "time": "Fri Dec 08 14:18:59 2017 -0800"
  },
  "committer": {
    "name": "Piotr Sikora",
    "email": "piotrsikora@google.com",
    "time": "Wed Dec 13 01:40:17 2017 +0000"
  },
  "message": "Bazel: update BoringSSL to 296a61d / 27ae6ca (master-with-bazel).\n\nThis update includes the following changes:\n\n296a61d6 bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.\n2bc93706 Add X509_NAME_get0_der from OpenSSL 1.1.0.\nd8dbde79 Don\u0027t allow negative EC_KEY private keys.\n6979c7e8 Disable Clang -Wtautological-constant-compare.\n56d5d708 Update tools.\n494e4d0e Add an option for False Start without ALPN.\na5462d30 Actually deprecate ERR_remove_thread_state.\nd3ec6f1a Add missing errno.h include to bio_test.cc\nbc37ad91 Fix alignment-violating cast.\n9986f6b0 Fix renegotiation with TLS 1.3 draft 22.\n48eaa28a Make EC_POINT_mul work with arbitrary BIGNUMs again.\n2fc4f362 Revert \"Support high tag numbers in CBS/CBB.\"\n095b6c9b Also add a decoupled OBJ_obj2txt.\n1530ef3e Add early data input from file.\nfb535892 runner: Rewrite some more parsers.\nc5c31abe Enforce compression_method in TLS 1.3 draft 22.\ne6cefe41 Update PR 1091 CL to use draft22 version.\nfc9c6759 Bound the input to the bn_mod_exp fuzzer.\na7673fac runner: Parse CertificateRequest with byteReader.\n28b267b3 runner: Parse Certificate with byteReader.\nbd911af5 runner: Parse SH/HRR/EE with byteReader.\n7ce23787 runner: Send the right alert for handshake message parsing failures.\n47b8f00f Reimplement OBJ_txt2obj and add a lower-level function.\nbe8c8b4b runner: Add a byteReader type and convert ClientHello parsing.\n8c9ceadc Add switch to enable draft 22.\n56aaf164 Pretty-print large INTEGERs and ENUMERATEDs in hex.\n27bc0f26 Fix CBS tag class docs.\n2fce1bed Remove spurious ;\ne3b2a5d3 Const-correct X509_ALGOR_get0.\n61e92455 Use some of the word-based functions for ECDSA verification.\n86c2b854 Don\u0027t use BN_nnmod to convert from field element to scalar.\na838f9dc Make ECDSA signing 10% faster and plug some timing leaks.\n66801feb Support high tag numbers in CBS/CBB.\n02514002 Use dec/jnz instead of loop in bn_add_words and bn_sub_words.\n2056d729 Remove DSA_sign_setup too.\n42a8cbe3 Remove ECDSA_sign_setup and friends.\n8dc226ca Add some missing OpenSSL 1.1.0 accessors.\n855d5046 Unwind legacy SSL_PRIVATE_KEY_METHOD hooks.\n67623735 Fix memory leak on sk_X509_EXTENSION_push failure.\nc367ee54 Add a CFI build flag.\n8c565fa8 Include a couple of missing header files.\n8793942c Fix fuzzer mode suppressions.\n6d218d6d Remove unused function.\n0a5f0067 Test that EC_POINT_mul works with the order.\ne7c95d91 Run TLS 1.3 tests at all variants and fix bugs.\n3bba5ccf Add EndOfEarlyData to per-message tests.\nac4d5346 Add missing error path.\nb8d677bf Deduplicate built-in curves and give custom curves an order_mont.\n66f82355 Enforce some bounds and invariants on custom curves.\na08bba51 Add bn_mod_exp_mont_small and bn_mod_inverse_prime_mont_small.\n40e4ecb7 Add \"small\" variants of Montgomery logic.\na01aa9aa Split BN_from_montgomery_word into a non-BIGNUM core.\n6bc18a3b Add bn_mul_small and bn_sqr_small.\n64619dea Const-correct some of the low-level BIGNUM functions.\nbd275702 size_t a bunch of bn words bits.\n73df153b Make BN_generate_dsa_nonce internally constant-time.\nb25140c7 Fix timing leak in BN_from_montgomery_word.\n8db94be1 Add ECDSA tests for custom curves.\n74b828f2 Clarify the documentation for |BN_is_bit_set|.\ne6f30e4c Add tests for post-handshake CCS in draft \"22\".\n13761f28 Fix TLSInnerPlaintext limit.\nba8f1864 Disable \u0027draft 22\u0027 by default.\n4ddbc7bd Fix early data printout in bssl client.\nca8c2c7e Refresh TLS fuzzer corpora.\n964b2377 Implement PR 1091 (TLS 1.3 draft \u002722\u0027).\n3bcbb375 Fix -early-data documentation.\na00fd08c Use consistent notation in ECDSA_do_verify comments.\nd66bbf34 Tidy up BN_mod_exp_mont.\n607f9807 Remove BN_TBIT.\nbf3f6caa Document some BIGNUM internals.\n0a9222b8 Fix comment typo.\n238c2740 Capitalization nit.\n6aedfc13 Remove unnecessary loop over BN_generate_dsa_nonce.\n89633258 Appease UBSan on pointer alignment.\n929f8428 Remove custom memcpy and memset from poly1305_vec.\n0967853d Add CFI start/end for _aesni_ctr32[_ghash]_6x\nee2c1f3e aesni-gcm-x86_64.pl: sync CFI directives from upstream.\nfa60369d Add error handling in ASN1_i2d_bio.\nb8e2d632 es/asm/{aes-armv4|bsaes-armv7}.pl: make it work with binutils-2.29.\n40e8c921 change URL type in third_party METADATA files to GIT\naa4c3f21 fix a typo in third_party/fiat/METADATA\nd5dda9b8 Align |BN_div| with its documentation.\nb1cbe197 Say a bit more about BIO_METHOD.\n5b90eb98 Add a -require-any-client-cert flag to bssl server\nfdd5fed0 Also print name for SSL_SIGN_RSA_PKCS1_MD5_SHA1.\nb2c312d6 curve25519: fiat-crypto field arithmetic.\n5b280a80 Move curve25519 code to third_party/fiat.\n55761e68 Use a higher iteration limit for RSA key generation at e \u003d 3.\n431e767c curve25519: adhere to preconditions of fe_*.\n6cc352e2 Add helper functions for SSL_SIGN_*.\n2eb28897 bn/exp: don\u0027t check |copy_to_prebuf|\u0027s retval in |BN_mod_exp_mont_consttime|.\n6dda166d Support additional curve names.\na02ed04d Add more compatibility symbols for Node.\nf7412cb0 Update tools.\n2d07d30c bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqrx8x_internal.\ncd8470f7 Adding support for draft 21 as a TLS 1.3 variant.\ncfc120eb Remove RC4 remnants in runner.\n3b903f25 Move the SSL_eNULL special-case into the matching function.\n5be3a74c Remove supports_cipher hook.\ndca1afb3 Fix up make_errors.go.\nf1db1a39 Another scoper conversion.\n2637f3c4 Even more fun with Span.\n696c13bd Clear bottom three bits of password scalar in SPAKE2.\n08e817d3 Fix Python code formatting in comment in SPAKE2.\nba94746e Remove temporary logging.\n4281bcd5 Revert assembly changes in \"Hide CPU capability symbols in C.\"\n8f06074a Handle malloc failures better in bn_test.cc.\n4f94a838 asn1_item_embed_new(): don\u0027t free an embedded item\na67b1015 Fix memory leak in GENERAL_NAME_set0_othername.\n98ca81da Use unsigned integers for masks.\ncb16f17b Check EC_POINT/EC_GROUP compatibility more accurately.\n2a768d04 Fix overflow checks when converting ASN.1 integers to long.\nf5beb883 Disable macOS architecture hack on CMake 3.0.\naf92418b Generate bn_div and bn_mod_exp corpus from bn_tests.txt.\n51073ce0 Refcount EC_GROUP.\nd24fd47f Fold EC_POINT_clear_free into EC_POINT_free.\ned842911 Revert \"Pack encrypted handshake messages together.\"\nb26ab5c7 Clear remaining BORINGSSL_ANDROID_SYSTEM ifdefs.\n3f5d1381 Remove EVP_set_buggy_rsa_parser stub.\nfed560ff Clear no-op BN_MASK2 masks.\ncba79879 Revert \"Use uint128_t and __asm__ in clang-cl.\"\nf6942f0d Use uint128_t and __asm__ in clang-cl.\nacf2f34d Remove unused constant.\n6675cfdd Unexport more of lhash.\n4455e599 Clear some _CRT_SECURE_NO_WARNINGS warnings.\n883b5461 runner: Check c.hand before changing ciphers.\n75d43b57 Pack encrypted handshake messages together.\ndd6c2e88 Check early ALPN before offering 0-RTT.\n800046fe Give DTLS1_STATE a destructor.\nfadc975b For Android there is no need to expicitly link pthread lib.\n049fdfc7 Give hm_fragment and DTLS_OUTGOING_MESSAGE destructors.\n71ea6b12 Clear the last of ssl-\u003es3-\u003etmp.\n32ce0ac0 Move init_buf and rwstate into SSL3_STATE.\n8e7bbbab Use more scopers.\n94172578 Give SSL3_STATE a constructor and destructor.\na37f286f Remove the buggy RSA parser.\nea712e31 Make SSL3_BUFFER a proper C++ class.\n38636aba Hide CPU capability symbols in C.\n3b358b25 Specify -stdlib\u003dlibc++ if APPLE\n7f8c553d Add BN fuzzer.\nf6632dae Make all read errors idempotent.\na031b612 Replace open_close_notify with open_app_data.\ne8d0746b Prevent writing when write_shutdown is set.\nd9229f98 Lift BIO above SSL_PROTOCOL_METHOD.\n33febf60 Don\u0027t call ssl3_read_message from ssl3_read_app_data.\n97250f4d Switch a bunch of things from int to bool.\n31aad2dc Make low-level record errors idempotent.\nf8de2af7 Push read_shutdown logic down a layer.\na05d427b Align dtls_open_record and tls_open_record more closely.\n3b777adb Remove remnants of blocking DTLS timeouts.\n40e94701 Always process handshake records in full.\nf66e8822 Fix documentation for |ssl_ticket_aead_method_st|.\n2eb4bc5e Android.bp: Use target.linux for all linux kernel based targets\n619c8cec Fix uninitialized warning.\ne1068b76 Test RSA premaster unpad better.\n168fb2e9 Fix DEPS defaults.\n11ac519d Test DTLS record/packet packing more aggressively.\nfdb7a358 Add a test for SSL_pending.\n24f5b18f Update copies of tools.\n75a1f236 Have a bit more fun with Span.\ndbf12fc2 Use new DEPS conditionals.\n5dde6236 Fix location of Clang stamp file.\n00f48c82 Rename and move a few more ssl3_ functions around.\nd1e3ce1f Rename ssl3_send_alert and ssl3_protocol_version.\n64950cb0 Don\u0027t rely on x509.h for SSL_FILETYPE_*.\n4e840357 Fully hide LHASH_OF(SSL_SESSION).\nb15aa0aa Add chacha.h to the list of documented headers.\n01f26f3f Re-add hmac.h include to ssl.h.\n771df441 Initialise a variable to zero for GCC 7.2.0.\n1f1ac63b Fix typo in TODO comment.\n666d16e2 Go through SSL_PROTOCOL_METHOD in the handshake.\n31640931 Switch all the extension callbacks to bools.\n7e58c5ef Switch more things to bools.\n664e99a6 Make SSL_CTX opaque.\nbe165a2e Fix missing TicketMaxEarlyDataInfo in first session ticket.\ne05b72c2 Use constexpr to avoid kNamedGroups initializer\n2450027e Fold away clean boolean in BUF_MEM.\n03a4b96c Move has_message logic to ssl3_get_message.\n23c25d5b Rename some things for consistency.\na84b6f26 Fix comment.\nc64d1239 Push Span down a layer.\n751d1a1c Fold ssl_open_record_fatal_alert into ssl_open_record_error.\ne52f4c46 Replay the entire error queue on ssl_hs_error.\nb25a8999 Add the ability to save and restore the error state.\n89bd372a Revert \"Add new bots to the CQ.\"\n73ffb74b Add new bots to the CQ.\ne091af4f Special-case Eureka in generate_build_targets.py.\n10154320 Set -Wno-array-bounds on gcc\u003c4.8\n\nChange-Id: Ia9364c516175b402aeff5780a423275b7bb2aed6\nSigned-off-by: Piotr Sikora \u003cpiotrsikora@google.com\u003e\nReviewed-on: https://nginx-review.googlesource.com/3281\nReviewed-by: Lizan Zhou \u003czlizan@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d04e7c017316211e020f6cd723b8c3e19b1c8aa2",
      "old_mode": 33188,
      "old_path": "build.bzl",
      "new_id": "cc87871e92baa902f895fc53bc05e2d5a7d7fd94",
      "new_mode": 33188,
      "new_path": "build.bzl"
    }
  ]
}