Age | Commit message (Collapse) | Author |
|
This will allow us to get rid of EC_GROUP_method_of() in the near future.
ok djm
|
|
OK tb@
|
|
FUSE switched away from the horrible ufs inode abuse and so this is
no longer reached.
OK millert@ tb@ miod@
|
|
fixes jmc@ ok markus@ djm@.
|
|
Do not retry if that fails hoping for a different result.
OK tb@ kn@
|
|
vfs_busy() uses RW_SLEEPFAIL in a broken way. It is possible that the
object holding the rwlock is freed while other processes are sleeping
on this lock. This worked before by luck and no longer does now since
part of the struct needs to be updated after the sleep.
vfs_busy() needs to be fixed but that will take a bit of time.
OK dlg@
|
|
ok nicm
|
|
from evan silberman
ok sthen semarie millert nicm
|
|
respectively.
Also fix the rib query parameter to properly work. bgpctl calls this table.
OK sthen@
|
|
WinHello. From Michael Braun via GHPR542
|
|
ok tb@
|
|
ok miod@, tb@
|
|
from evan silberman
ok sthen semarie millert
|
|
libraries was changed. Before @tag we used to execute programs directly
as part of many updates (rebuilding desktop databases, icon cache, etc)
but those are now usually deferred until the end of the run, leaving
some executables not able to be run until pkg_add finishes.
From espie.
|
|
Adj-RIB-Out and in that case set F_CTL_ADJ_OUT on the request.
With this 'bgpctl show rib out' and 'bgpctl show rib table Adj-RIB-Out'
return the same results.
OK tb@
|
|
handle MAX_ASPA_SPAS_COUNT (10k) entries.
OK tb@
|
|
OK tb@
|
|
and more.
OK tb@
|
|
AS0 TALs represent unmitigated operational risks: what if the RIR by
accident marks some IP space as 'unassigned'?
APNIC notes in their limitation of liability statement:
"""
Depending on router configuration, errors in the AS0 ROA could
cause unintended interruption to routing with other networks.
For this reason, it is strongly recommended that the AS0 ROA is
used for advisory and/ or alerting purposes only, and not for
automatic filtering of BGP routes.
"""
https://www.apnic.net/community/security/resource-certification/apnic-limitations-of-liability-for-rpki-2/
Guard usage of AS0 TALs behind new '-0' option
OK deraadt@ tb@
|
|
|
|
OK compiler
|
|
|
|
|
|
getopt(3) says so and, e.g. 'mrouted -d 1' must be 'mrouted -d1' to work.
dhcpd(8) and sed(1) got this right, our multicast programs did not.
|
|
Reports the % of the available UPS power drawed by output outlets.
tested by sthen@, matthieu@ and Walter Alejandro Iglesias
ok sthen@ as part of a larger diff
|
|
This used to be documented in options(4), but was deleted there in 2017.
Reinstate the same text here.
ok jmc@
|
|
|
|
|
|
with job
|
|
Like most of the "group" methods these are shared between Montgomery
curves and simple curves. There's no point in five methods hanging off
the EC_METHODS struct whne they can just as well be inlined in the
public API. It makes all files involved shorter...
ok jsing
|
|
OK mglocker@
|
|
Jabra PanaCast 20 needs uvideo_vs_negotiation between usbd_set_interface
and usbd_open_pipe, otherwise it doesn't work with error:
ioctl VIDIOC_DQBUF: Invalid argument
OK mglocker@
|
|
|
|
OK mglocker@
|
|
While there likely won't be enough BNs already available in the ctx, and
thus it won't greatly reduce the amount of allocated BNs, it simplifies
the exit path quite a bit.
review feedback from jsing
|
|
It is unclear how the original code was supposed to work. It clearly
missed a few corner cases (like handling points at infinity correctly)
and the badly mangled comment that was supposed to display a binary
search tree didn't help at all.
Instead do something much more straightforward: multiply all the non-zero
Z coordinates of the points not at infinity together, keeping track of the
intermediate products. Then do a single expensive modular inversion before
working backwards to compute all the inverses. Then the transformation from
Jacobian coordinates to affine coordiantes (x, y, z) -> (x/z^2, y/z^3, 1)
becomes cheap. A little bit of care has to be taken for Montgomery curves
but that's very simple compared to the mess that was there before.
ok jsing
This is a cleaned up version of:
commit 0fe73d6c3641cb175871463bdddbbea3ee0b62ae
Author: Bodo Moeller <bodo@openssl.org>
Date: Fri Aug 1 17:18:14 2014 +0200
Simplify and fix ec_GFp_simple_points_make_affine
(which didn't always handle value 0 correctly).
Reviewed-by: emilia@openssl.org
|
|
secp160r1 and nistp192 are no longer available in libcrypto. Should have
been committed along with disabling these curves, but was missed.
ok jsing
|
|
ok beck miod
|
|
from evan silberman, tweaked by millert
ok sthen (pre-tweak)
|
|
from evan silberman
|
|
ok kettenis@, robert@
|
|
In the unlikely event that we should ever decide to implement this after
a quarter century of not needing it, we can readily put this back. Until
then this is dead weight.
prompted by a question by djm
ok jsing
|
|
because that makes it easier to see the big picture
of how EVP_PKEY_new_raw_private_key(3) is supposed to be used.
Feedback and OK tb@.
|
|
that are only intended for internal use, do very little (only validity
checking), are unused in the wild, and marked obsolete in OpenSSL 3.
|
|
Fix related indentation while here.
|
|
the weird thing it was supposed to be doing couldn't possibly work.
ok jsing
|
|
As for the upper layer, call pmap_update() only if, at least, a page has been
entered.
ok tb@, kettenis@
|
|
While here call pmap_update() only if, at least, a page has been entered.
ok tb@, kettenis@
|
|
ok claudio
|
|
|