Make sure *outl is always initialized in EVP_EncryptUpdate().

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index feeb46e9b286ca54d6e54a3a7de4d5557963007a..a2f1d02763e38679a546a02635076db3e3de98c0 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -12,6 +12,20 @@
          *) applies to 0.9.6a/0.9.6b/0.9.6c and 0.9.7
          +) applies to 0.9.7 only
 
+  +) Initial reduction of linker bloat: the use of some functions, such as
+     PEM causes large amounts of unused functions to be linked in due to
+     poor organisation. For example pem_all.c contains every PEM function
+     which has a knock on effect of linking in large amounts of (unused)
+     ASN1 code. Grouping together similar functions and splitting unrelated
+     functions prevents this.
+     [Steve Henson]
+
+  *) Initialize static variable in crypto/dsa/dsa_lib.c explicitely to
+     NULL, as at least on Solaris 8 this seems not to be done automatically
+     (in contradiction to the requirements of the C standard).
+     This made problems when used from OpenSSH.
+     [Lutz Jaenicke]
+
   *) In crypto/dh/dh_key.c, change generate_key() (the default
      implementation of DH_generate_key()) so that a new key is
      generated each time DH_generate_key() is used on a DH object.