| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2014-11-03 | correct test logic. ok guenther | Ted Unangst | |
| 2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
| format string, create a temporary message. OK claudio@ | |||
| 2014-11-03 | Add a blurb about "Discovered old directory in ..." in the man page. | Brian Callahan | |
| Direction/tweaks from sthen@ espie@ ok espie@ | |||
| 2014-11-03 | the man page says it is impossible to cheat, but since the shuffle is | Ted Unangst | |
| lopsided, a sharp counter can detect uneven permutations. fix this by using knuth shuffle. ok mlarkin pjanzen | |||
| 2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
| format string, create a temporary message. OK claudio@ | |||
| 2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
| format string, create a temporary message. OK deraadt@ | |||
| 2014-11-03 | Eliminate RTLD_PROTECT_PLT: ld.so is built with -Bsymbolic so the | Philip Guenther | |
| PLT is empty/unused. On at least macppc and sparc64, ld.so's attempt to mprotect its PLT could instead hit its own allocated data and cause a segfault shortly there after. While here, take a shot at preventing the same issue with the GOT by checking for __got_start != __got_end. reproduction *with ktracing* by afresh1@ provided the key data ok miod@ deraadt@ | |||
| 2014-11-03 | only call SRTP (whatever that is) functions when the connection type is | Ted Unangst | |
| DTLS (whatever that is) instead of for TLS too. ok jsing. | |||
| 2014-11-03 | Put the socket splicing fields into a seperate struct sosplice that | Alexander Bluhm | |
| gets only allocated when needed. This way struct socket shrinks from 472 to 392 bytes on amd64. When splicing gets active, another 88 bytes are allocated for struct sosplice. OK dlg@ | |||
| 2014-11-03 | minor cleanup of zlib code. DSO is gone. ok jsing. | Ted Unangst | |
| 2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
| format string, create a temporary message. OK benno@ doug@ | |||
| 2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
| format string, create a temporary message. OK benno@ doug@ claudio@ | |||
| 2014-11-03 | deobfuscate by pulling le conversions up. use mallocarray. | Ted Unangst | |
| 2014-11-03 | reduce dependency on passwd. just call bcrypt_newhash to do the dummy work. | Ted Unangst | |
| 2014-11-03 | hoist blowfish up and use bcrypt_newhash directly | Ted Unangst | |
| 2014-11-03 | actually use macro argument instead of shadowed variable name | Ted Unangst | |
| 2014-11-03 | comment out no-tab-mode, since mg is currently compiled without it; | Jason McIntyre | |
| From: Kaspars Bankovskis ok lum | |||
| 2014-11-03 | introspection feature: ${MAKEFILE_LIST} contains the list of makefiles | Marc Espie | |
| parsed. name stolen from gmake, from a suggestion from guenther@, to avoid gratuitous confusin. okay guenther@, millert@ | |||
| 2014-11-03 | Fix kernel stack overflow by preventing carp_send_ad_all() from re-entrant | Gerhard Roth | |
| calls. Also, when adjusting demote counts, don't call carp_send_ad_all() for every ifgroup with a demote count of 1 but rather call it only once after adjusting the demote counts of all ifgroups. ok bluhm@ mpf@ | |||
| 2014-11-03 | Do no change the gateway of local routes for p2p interfaces. | Martin Pieuchot | |
| This change was defeating the code in rtrequest1(9) checking for route entries with the same dst/gw when the same IP address was configured on multiple interfaces. As a result, multiple local routes were created for the same address and marked as multipath. But changing their gateway to 127.0.0.1 would make them similar and impossible to remove. This would leaves entries with a stall ifa pointer as soon as the address was removed. Prevent a panic reported by todd@ | |||
| 2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
| format string, create a temporary message. OK deraadt@ claudio@ | |||
| 2014-11-03 | Add hooks to override native arc4random_buf on FreeBSD. | Brent Cook | |
| The FreeBSD-native arc4random_buf implementation falls back to weak sources of entropy if the sysctl fails. Remove these dangerous fallbacks by overriding locally. Unfortunately, pthread_atfork() is also broken on FreeBSD (at least 9 and 10) if a program does not link to -lthr. Callbacks registered with pthread_atfork() simply fail silently. So, it is not always possible to detect a PID wraparound. I wish we could do better. This improves arc4random_buf's safety compared to the native FreeBSD implementation. Tested on FreeBSD 9 and 10. | |||
| 2014-11-03 | arc4random_uniform() transformation was off, resulting in badly skewed | Philip Guenther | |
| distribution in the placement of malloc's dir_info. ok otto@ deraadt@ | |||
| 2014-11-03 | Add gcc format attributes to yyerror() in httpd. | Doug Hogan | |
| Fix a few format characters as well. ok bluhm@ | |||
| 2014-11-03 | Add gcc format attributes to more warn/error functions in parse.y files. | Doug Hogan | |
| Fix a few missing or incorrect format characters. ok claudio@ | |||
| 2014-11-03 | simple conversion from select() to poll() | Theo de Raadt | |
| 2014-11-03 | pass size argument to free() | Theo de Raadt | |
| ok doug tedu | |||
| 2014-11-03 | No need to immediately remove an expired lease from the list of | Kenneth R Westerback | |
| leases. It will be ignored, so let the normal cleanup in bind_lease() take care of it. | |||
| 2014-11-02 | Unmap the hibernate hiballoc page after we are done with it. | Mike Larkin | |
| ok deraadt, kettenis | |||
| 2014-11-02 | increment s->datalen counter in append domain code to correctly account for | Gilles Chehade | |
| the data we wrote | |||
| 2014-11-02 | rework domain append by locating either the brackets or the last component | Gilles Chehade | |
| of an address and appending domain if not already there. this works better than trying to parse addresses and render them back, while allowing us to do the append "in place" and cope nicely with multi-line addresses. | |||
| 2014-11-02 | Pesky whitespace and spurious parenthesis. | Kenneth R Westerback | |
| 2014-11-02 | Add a tls_connect_fds() function that allows a secure connection to be | Joel Sing | |
| established using a pair of existing file descriptors. Based on a diff/request from Jan Klemkow. Rides previous libtls rename/library bump. Discussed with tedu@. | |||
| 2014-11-02 | sync | Theo de Raadt | |
| 2014-11-02 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
| format string, create a temporary message. OK deraadt@ | |||
| 2014-11-02 | Fix a NULL deref when getting an actual result for an invalid hostname | Eric Faurot | |
| in gethostbyname(). Similar fix for getnetbyname(). ok deraadt@ daniel@ jca@ | |||
| 2014-11-02 | use nanosleep() instead of select(); ok jsing | Theo de Raadt | |
| 2014-11-02 | revert, i did NOT ok this diff which bears no proof of testing in a bulk or ↵ | Jasper Lievisse Adriaanse | |
| xenocara | |||
| 2014-11-02 | Remove remnants from RC2 and SEED - there are no longer any cipher suites | Joel Sing | |
| that use these algorithms (and SEED was removed from libcrypto some time ago). ok doug@ | |||
| 2014-11-02 | Tests for constructs such as 'foo >= a.version foo != another.version'. | Jeremie Courreges-Anglas | |
| 2014-11-02 | localcipher is blowfish only. remove mention of ypcipher. | Ted Unangst | |
| 2014-11-02 | be a little more vague and a little less wrong about login.conf | Ted Unangst | |
| 2014-11-02 | awk script to upgrade from 4.3 passwd files is irrelevant now | Ted Unangst | |
| 2014-11-02 | update documentation regarding localcipher only | Ted Unangst | |
| 2014-11-02 | tweak wording and update panic messages | Ted Unangst | |
| 2014-11-02 | tweak free panic messages too | Ted Unangst | |
| 2014-11-02 | tweak panic messages for consistency | Ted Unangst | |
| 2014-11-02 | tmpfs free sizes | Ted Unangst | |
| 2014-11-02 | unnecessary malloc.h include | Ted Unangst | |
| 2014-11-02 | make comment select() vs poll() agnostic | Theo de Raadt | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |