summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-04-30Remove proxy cert api remmnantsTheo Buehler
2023-04-30Remove documentation of BN_generate_prime(), BN_is_prime{,_fasttest}()Theo Buehler
2023-04-30Remove documentation of BN_zero_ex() and update BN_one() and BN_zero()Theo Buehler
which are no longer macros (and the latter is no longer deprecated and no longer attempts to allocate memory).
2023-04-30Garbage collect BN_zero_ex()Theo Buehler
2023-04-30Remove the EFI RTC implementation on amd64. Since all amd64 systems weMark Kettenis
know have a MC146818A compatible RTC this code isn't actually used. But there are systems that have a buggy EFI implementation that blows up when we call the GetTime runtime service to check whether the RTC functionality is implemented. ok mlarkin@, dlg@
2023-04-30msdosfs: Never allocate clusters outside the volumeStefan Fritsch
- Assert that usemap_alloc() and usemap_free() cluster number argument is valid. - In chainlength(), return 0 if cluster start is after the max cluster. - In chainlength(), cut the calculated cluster chain length at the max cluster. Adapted from FreeBSD commit 097a1d5fbb7990980f8f806c6878537c964adf32 ok miod@
2023-04-30Remove __dead again. Apparently this causes issues for some upstreams.Theo Buehler
Thanks to orbea for the report
2023-04-30Revert disablement of the encoding cacheJob Snijders
Without the cache, we verify CRL signatures on bytes that have been pulled through d2i_ -> i2d_, this can cause reordering, which in turn invalidates the signature. for example if in the original CRL revocation entries were sorted by date instead of ascending serial number order. There are probably multiple things we can do here, but they will need careful consideration and planning. OK jsing@
2023-04-30Send x509_subject_cmp() to the atticTheo Buehler
This helper has been inside #if 0 for nearly 25 years. Let it go. If we should ever need it, I'm quite confident that we will be able to come up with its one line body on our own.
2023-04-30syncTheo Buehler
2023-04-30The policy tree is no moreTheo Buehler
Mop up documentation mentioning it or any of its numerous accessors that almost nothing ever used.
2023-04-30Zap extra blank lineTheo Buehler
2023-04-30Make the descriptions of BIO_get_retry_BIO(3) and BIO_get_retry_reason(3)Ingo Schwarze
more precise. Among other improvements, describe the three BIO_RR_* constants serving as reason codes.
2023-04-30Slightly improve the documentation of the "oper" parameter byIngo Schwarze
explicitly listing the valid arguments, i.e. the BIO_CB_* constants.
2023-04-30Document the eight BIO_CONN_S_* constants that are passed to BIO_info_cb(3)Ingo Schwarze
as the "state" argument. Document them here because connect BIOs are the only built-in BIO type using these constants.
2023-04-30Mark the five BIO_GHBN_* constants as intentionally undocumented.Ingo Schwarze
They are intended to be used by BIO_gethostbyname(), which is deprecated in OpenSSL and already marked as intentionally undocumented in LibreSSL. Besides, these constants are completely unused by anything.
2023-04-30Remove artifical limit of 2 hours on a PIO lifetime, as recommended byPeter Hessler
draft-ietf-6man-slaac-renum-05 and implemented by Linux in 2020. OK florian@
2023-04-30whitespaceTheo Buehler
2023-04-30Sort alphabeticallyTheo Buehler
2023-04-30Remove unnecessary targetTheo Buehler
2023-04-30policy test: simplify MakefileTheo Buehler
2023-04-30Fix that atactl sd0 readattr didn't work for some disks. Change it toYASUOKA Masahiko
check the cksums of the attribute values instead of comparing the revisions. diff from NetBSD through naito.yuichiro at gmail.com. test by kolipe.c at exoticsilicon.com. ok kevlo miod deraadt
2023-04-29bump version to 8.4Sebastian Benoit
2023-04-29New manual page written by Ted Bullock,Ingo Schwarze
dropping the empty RETURN VALUES section and adding the missing "#include <stdilib.h>" below EXAMPLES.
2023-04-29Provide function prototypes for macros that take arguments,Ingo Schwarze
rename the "ev" argument to "event" to make some text read better, and get rid of colons at the ends of list tags. OK jmc@ and Ted Bullock.
2023-04-29Mention a few standard BIO_ctrl(3) command constantsIngo Schwarze
that provide type-specific functionality here. While here, fix some wrong return types in the SYNOPSIS.
2023-04-29Mention a few standard BIO_ctrl(3) command constantsIngo Schwarze
that provide type-specific functionality here, and add the missing return type to one function prototype.
2023-04-29Add "counter-timer" to openboot_special[] in order to not mention it asMiod Vallat
unconfigured during boot, now that timer(4) is gone.
2023-04-29Mention the type-specific BIO_ctrl(3) command constantsIngo Schwarze
in the manual pages of the respective BIO types.
2023-04-29Mention the type-specific BIO_ctrl(3) command constantsIngo Schwarze
in the manual pages of the respective BIO type. While here, fix some wrong return types in the SYNOPSIS.
2023-04-29Remove net lock from DIOCGETQUEUEKlemens Nanni
Same logic and argument as for the parent *S ioctl unlocked in r1.400, might as well have committed them together: Both ticket and number of queues stem from the pf_queues_active list which is effectively static to pf_ioctl.c and fully protected by the pf lock. OK sashan
2023-04-29remove some 19 year old #if 0 codeMike Larkin
ok deraadt
2023-04-29whitespaceMike Larkin
2023-04-29as noticed by sdk@, a package with an exact numbers of 64K chunks wouldMarc Espie
produce a spurious error (so 1 chance in 2^26) It's like read/write: we need to recognize 0 as EOF and not try to checksum a non-existing block. while there, also make sure that we got all the signed blocks at EOF before exit(0) Note that none of those two bugs affect the actual security of signed packages: the basic assertion that only signed data gets written through the pipe is still 100% valid ! but it's a good idea to not emit spurious messages for valid files, and also to recognize truncated files ! okay tb@ (thanks a lot)
2023-04-29Print VHE feature in dmesg.Mark Kettenis
ok mlarkin@, patrick@
2023-04-29Run open rsync and ports rsync programs against each other usingAlexander Bluhm
the --rsync-path option. So we can see whether the tests pass in all interoperability combinations. Suggested by claudio@
2023-04-28Mark OpenSSLDie() as __deadTheo Buehler
This tells gcc that OPENSSL_assert() will not return and thus avoids a silly warning that triggers scary gentoo QA warnings. From claudio
2023-04-28vmd(8): fix specifying boot image in vm.confDave Voutila
Previous change to allow overriding changed the way we parsed and stored the boot image path. The lifetime of the path was...much too short. Heap allocate the kernel path. Found by Mischa Peters. ok mlarkin@
2023-04-28adjust after man_validate.c rev. 1.128 improved the error messagesIngo Schwarze
2023-04-28Make LLVM 15 happier by changing from K&R to ANSI prototypesTheo Buehler
2023-04-28Do not rewrite MAN_LP and MAN_P to MAN_PP because doing that causesIngo Schwarze
confusing warning messages complaining about macros that don't even appear in the input file. As a welcome side effect, this also shortens the code... Fixing a minibug reported by Alejandro Colomar <alx dot manpages at gmail dot com>.
2023-04-28Clarify -b usage by `vmctl start`.Dave Voutila
2023-04-28Add rtentry refcnt type to dt(4).Vitaliy Makkoveev
ok bluhm@
2023-04-28vmd(8)/vmctl(8): allow vm owners to override boot kernel.Dave Voutila
vmd allows non-root users to "own" a vm defined in vm.conf(5). While the user can start/stop the vm, if they break their filesystem they have no means of booting recovery media like a ramdisk kernel. This change opens the provided boot kernel via vmctl and passes the file descriptor through the control channel to vmd. The next boot of the vm will use the provided file descriptor as boot kernel/bios. Subsequent boots (e.g. a reboot) will return to using behavior defined in vm.conf or the default bios image. ok mlarkin@
2023-04-28Execute each test as make target. Remove the shell wrapper. MarkAlexander Bluhm
failing test so that claudio@ can fix them.
2023-04-28Remove unneeded header includes in vmd.Dave Voutila
No functional change. virtio block/networking emulation do not need to know about vmm or any kernel types.
2023-04-28bump MAXDSIZ to 128G on amd64 and 64G on arm64Robert Nagy
discussed with kettenis@, ok deraadt@
2023-04-28Free all libcrypto global state memory before returningJob Snijders
Found with the help of Otto's malloc memory leak detector!
2023-04-28Return a non-zero error exit code on any DER cache discrepanciesJob Snijders
2023-04-28timer(4/sparc64): remove driverScott Soule Cheloha
The timer(4/sparc64) driver was effectively disabled during the previous release. Nobody has come forward asking for it to be adapted to work with the new clockintr framework, so it's time to remove the driver from the tree. As of today, if you want to run OpenBSD on SPARC v9 hardware, that hardware needs to sport either %tick and %tick_compare (%asr23), or %stick (%asr24) and %stick_compare (%asr25). All Sun/Oracle SPARC v9 hardware meets these conditions, from the UltraSPARC I onward. Most HAL/Fujitsu SPARC v9 hardware meets these conditions, from the SPARC64 III onward. The only HAL/Fujitsu hardware that might not have %tick_compare are the HAL SPARC64 I and SPARC64 II, for which I can find no documentation. However, those processors are currently unsupported by OpenBSD for other reasons, so their support status is unchanged by the removal of this driver. With help from miod@. Link: https://marc.info/?l=openbsd-tech&m=167898759928206&w=2 "after unlock" deraadt@, ok mlarkin@ miod@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-11 02:21:34 +0000