Fixed some typographic errors in comments.

src/ec/ec_prime_i15.c

@@ -765,7 +765,7 @@ api_muladd(unsigned char *A, const unsigned char *B, size_t len,
 
 	/*
 	 * TODO: see about merging the two ladders. Right now, we do
-	 * two independant point multiplications, which is a bit
+	 * two independent point multiplications, which is a bit
 	 * wasteful of CPU resources (but yields short code).
 	 */
 

src/ec/ec_prime_i31.c

@@ -764,7 +764,7 @@ api_muladd(unsigned char *A, const unsigned char *B, size_t len,
 
 	/*
 	 * TODO: see about merging the two ladders. Right now, we do
-	 * two independant point multiplications, which is a bit
+	 * two independent point multiplications, which is a bit
 	 * wasteful of CPU resources (but yields short code).
 	 */
 

src/inner.h

@@ -85,7 +85,7 @@
  *
  * The test on 'unsigned long' should already catch most cases, the one
  * notable exception being Windows code where 'unsigned long' is kept to
- * 32-bit for compatbility with all the legacy code that liberally uses
+ * 32-bit for compatibility with all the legacy code that liberally uses
  * the 'DWORD' type for 32-bit values.
  *
  * Macro names are taken from: http://nadeausoftware.com/articles/2012/02/c_c_tip_how_detect_processor_type_using_compiler_predefined_macros

src/int/i15_decmod.c

@@ -46,7 +46,7 @@ br_i15_decode_mod(uint16_t *x, const void *src, size_t len, const uint16_t *m)
 	 * or 0x00000000 (value does not fit).
 	 *
 	 * We must iterate over all bytes of the source, _and_ possibly
-	 * some extra virutal bytes (with value 0) so as to cover the
+	 * some extra virtual bytes (with value 0) so as to cover the
 	 * complete modulus as well. We also add 4 such extra bytes beyond
 	 * the modulus length because it then guarantees that no accumulated
 	 * partial word remains to be processed.

src/int/i31_decmod.c

@@ -46,7 +46,7 @@ br_i31_decode_mod(uint32_t *x, const void *src, size_t len, const uint32_t *m)
 	 * or 0x00000000 (value does not fit).
 	 *
 	 * We must iterate over all bytes of the source, _and_ possibly
-	 * some extra virutal bytes (with value 0) so as to cover the
+	 * some extra virtual bytes (with value 0) so as to cover the
 	 * complete modulus as well. We also add 4 such extra bytes beyond
 	 * the modulus length because it then guarantees that no accumulated
 	 * partial word remains to be processed.

src/rand/sysrng.c

@@ -139,7 +139,7 @@ seeder_win32(const br_prng_class **ctx)
 }
 #endif
 
-/* see bearssl_rand.h.h */
+/* see bearssl_rand.h */
 br_prng_seeder
 br_prng_seeder_system(const char **name)
 {

src/rsa/rsa_pkcs1_sig_unpad.c

@@ -68,7 +68,7 @@ br_rsa_pkcs1_sig_unpad(const unsigned char *sig, size_t sig_len,
 
 	/*
 	 * Check the "00 01 FF .. FF 00" with at least eight 0xFF bytes.
-	 * The comparaison is valid because we made sure that the signature
+	 * The comparison is valid because we made sure that the signature
 	 * is at least 11 bytes long.
 	 */
 	if (memcmp(sig, pad1, sizeof pad1) != 0) {

src/ssl/ssl_hs_client.c

@@ -86,7 +86,7 @@ void br_ssl_hs_client_run(void *t0ctx);
  * specific name. It must be noted that since the engine context is the
  * first field of the br_ssl_client_context structure ('eng'), then
  * pointers values of both types are interchangeable, modulo an
- * appropriate cast. This also means that "adresses" computed as offsets
+ * appropriate cast. This also means that "addresses" computed as offsets
  * within the structure work for both kinds of context.
  */
 #define CTX  ((br_ssl_client_context *)ENG)

src/ssl/ssl_hs_client.t0

@@ -31,7 +31,7 @@ preamble {
  * specific name. It must be noted that since the engine context is the
  * first field of the br_ssl_client_context structure ('eng'), then
  * pointers values of both types are interchangeable, modulo an
- * appropriate cast. This also means that "adresses" computed as offsets
+ * appropriate cast. This also means that "addresses" computed as offsets
  * within the structure work for both kinds of context.
  */
 #define CTX  ((br_ssl_client_context *)ENG)
@@ -969,7 +969,7 @@ cc: get-client-chain ( auth_types -- ) {
 
 \ Parse CertificateRequest. Header has already been read.
 : read-contents-CertificateRequest ( lim -- )
-	\ Read supported client authentification types. We keep only
+	\ Read supported client authentication types. We keep only
 	\ RSA, ECDSA, and ECDH.
 	0 { auth_types }
 	read8 open-elt

src/ssl/ssl_hs_common.t0

@@ -581,7 +581,7 @@ cc: more-incoming-bytes? ( -- bool ) {
 	read16 skip-blob ;
 
 \ Open a substructure: the inner structure length is checked against,
-\ and substracted, from the output structure current limit.
+\ and subtracted, from the output structure current limit.
 : open-elt ( lim len -- lim-outer lim-inner )
 	dup { len }
 	- dup 0< if ERR_BAD_PARAM fail then

src/ssl/ssl_hs_server.c

@@ -86,7 +86,7 @@ void br_ssl_hs_server_run(void *t0ctx);
  * specific name. It must be noted that since the engine context is the
  * first field of the br_ssl_server_context structure ('eng'), then
  * pointers values of both types are interchangeable, modulo an
- * appropriate cast. This also means that "adresses" computed as offsets
+ * appropriate cast. This also means that "addresses" computed as offsets
  * within the structure work for both kinds of context.
  */
 #define CTX  ((br_ssl_server_context *)ENG)

src/ssl/ssl_hs_server.t0

@@ -31,7 +31,7 @@ preamble {
  * specific name. It must be noted that since the engine context is the
  * first field of the br_ssl_server_context structure ('eng'), then
  * pointers values of both types are interchangeable, modulo an
- * appropriate cast. This also means that "adresses" computed as offsets
+ * appropriate cast. This also means that "addresses" computed as offsets
  * within the structure work for both kinds of context.
  */
 #define CTX  ((br_ssl_server_context *)ENG)
@@ -864,7 +864,7 @@ cc: save-session ( -- ) {
 	\ suites are filtered out. In particular:
 	\ -- ECDHE suites are removed if there is no common hash function
 	\    (for the relevant signature algorithm) or no common curve.
-	\ -- TLS-1.2-only suites are removed if the negociated version is
+	\ -- TLS-1.2-only suites are removed if the negotiated version is
 	\    TLS-1.1 or lower.
 	addr-client_suites dup >css-off
 	begin dup css-max < while

src/x509/asn1.t0

@@ -278,7 +278,7 @@ cc: get32 ( addr -- val ) {
 	0x80 - dup ifnot ERR_X509_INDEFINITE_LENGTH fail then
 
 	\ Masking out bit 7, this yields the number of bytes over which
-	\ the value is encoded. Since the total certicate length must
+	\ the value is encoded. Since the total certificate length must
 	\ fit over 3 bytes (this is a consequence of SSL/TLS message
 	\ format), we can reject big lengths and keep the length in a
 	\ single integer.