summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-12-04Simplify the MSI bits a bit.Brad Smith
2014-12-04Stop people from cheating. Especially those that believe in FIPS, theyTheo de Raadt
are the worst. ok millert ingo tedu
2014-12-04init the mutex used in sleeping pool_gets with the right ipl if theDavid Gwynne
pool hasnt had pool_setipl called. ok kettenis@ ages ago
2014-12-04stop viral header propagation. none of this code uses sys/hash.hTed Unangst
from Max Fillinger
2014-12-04add RevokedHostKeys option for the clientDamien Miller
Allow textfile or KRL-based revocation of hostkeys.
2014-12-04fix handling of roff requests having a default scale other than "n",Ingo Schwarze
in particular .sp which uses "v", when the scale is not specified; cures groff-mandoc differences in about a dozen Xenocara manuals
2014-12-04split the word ops into int and longs so things that care a lotDavid Gwynne
about types are happy. ok jsg@
2014-12-04convert KRL code to new buffer APIDamien Miller
ok markus@
2014-12-04Ignore macros that never produce any text when deciding whetherIngo Schwarze
vertical whitespace is needed before a section or subsection. Cures groff-mandoc differences in more than 300 manuals, mostly Xenocara, some curses, a few GNU.
2014-12-04simplify wording; triggered by a shorter diff from Kaspars Bankovskis;Ingo Schwarze
OK jmc@ jasper@
2014-12-04AnonCVS is designed to work with a user account that has no password and aIngo Schwarze
very special shell, so do not complain about that particular combination. Idea originally brought up by landry@ five years ago, repeatedly forgotten. Using feedback from sthen@ millert@ halex@; OK landry@ ajacoutot@.
2014-12-04replace md5 with sha512. ok deraadtTed Unangst
2014-12-04use siphash for trunk loadbalancing. ok deraadtTed Unangst
2014-12-04use siphash for dirhash. ok deraadt dlgTed Unangst
2014-12-03syncTheo de Raadt
2014-12-03Init SPI using arc4random_buf, rather than (r << 32) | rTheo de Raadt
ok matthew
2014-12-03Use arc4random_buf() rather than iterating word by wordoTheo de Raadt
itk florian
2014-12-03use arc4random_buf() instead of (r << 32) | r; discussed with matthewTheo de Raadt
2014-12-03zap extra parameter that my first read missed, because that one is constant.Marc Espie
Strangeness noticed by aja@
2014-12-03Allow overriding the path to the testssl and openssl binaries.Brent Cook
This is needed by the portable tree to point directly to the newly-built binaries when running unit tests. discussed with jsing@ and others
2014-12-03Move Windows OS-specific functions to make porting easier.Brent Cook
Several functions that need to be redefined for a Windows port are right in the middle of other code that is relatively portable. This patch isolates the functions that need Windows-specific implementations so they can be built conditionally in the portable tree. Add calls to BIO_sock_init() as-needed to openssl(1) so that socket IO works on Windows. Sorry, these are no-op on other platforms. ok jsing@ deraadt@
2014-12-03Move Windows OS-specific functions to make porting easier.Brent Cook
Several functions that need to be redefined for a Windows port are right in the middle of other code that is relatively portable. This patch isolates the functions that need Windows-specific implementations so they can be built conditionally in the portable tree. ok jsing@ deraadt@
2014-12-03We're not supporting 16-bit Windows, remove cast.Brent Cook
ok jsing@ deraadt@
2014-12-03ifconfig $if inet6 autoconf sends periodic router solicitations.Florian Obser
input jmc@
2014-12-03rtsol is goneFlorian Obser
OK deraadt@
2014-12-03Unhook rtsol(8) and rtsold(8) from the build.Florian Obser
OK deraadt@
2014-12-03rtsol(8) is no longer needed on the ramdisks.Florian Obser
OK deraadt@
2014-12-03More duplicate #include cleanout.Kenneth R Westerback
ok deraadt@ tedu@
2014-12-03The kernel handles rtsol(8) functionality since some time now.Florian Obser
Treat rtsol in hostname.if as a keyword like dhcp and call ifconfig inet6 autoconf. "reads good" todd@ OK krw@ (who is *not* an IPv6 person), but I recruited him in his capacity as an installer person.
2014-12-03handle the (impossible) situation of a size_t - 1 buffer fromTheo de Raadt
EC_POINT_point2oct so that later allocation does not overflow with miod
2014-12-03Spotted another opportunity to use reallocarray().Theo de Raadt
ok miod
2014-12-03document -o and -a; requested by yonJason McIntyre
i had to tweak their descriptions a little to make the text read nicely while here, fix some minor issues: - kill some unneeded Xo/Xc - kill some unneeded Tn - replace "\*Gt" with ">"
2014-12-03Correct comment to state that the BPF program is patched inKenneth R Westerback
if_register_receive.
2014-12-03Fill the buffer with 'z' instead of 'a' since 'a' is part of theTodd C. Miller
string we are testing. Add tests to verify that we get SIGSEGV when passed a NULL src or dst. It is better to crash than for an implementation to check for NULL and try to recover.
2014-12-03no md5 in the kernel? not even close to trueTheo de Raadt
2014-12-03Fix off by one in check for socket path too long. From Nicolas Bedos.Todd C. Miller
2014-12-03Fix buffer overflow in .PS parsing. Found by afl and based on aTodd C. Miller
diff from jsg@. OK jsg@
2014-12-03Restore packetp and snapend pointers once we're done with an incorrectlyMike Belopuhov
aligned IP/IPv6 packet so that tcpdump can print hexdump of the whole packet including the Ethernet header (if requested) and not only the IP/IPv6 part of it. ok jsg
2014-12-03Fixup a crash found by jsg using the AFL fuzzer. IP and IPv6 printingMike Belopuhov
routines should check that there's at least a complete IP/IPv6 header available in the buffer before trying to do anything else. ok jsg
2014-12-03wb_init() calls wb_stop() and wb_reset() so remove some redundant callsBrad Smith
to those functions before wb_init() within wb_watchdog() / wb_intr() and wb_rxeof().
2014-12-03md5 when wlan is needed too. fixes i386 ramdiskCTed Unangst
2014-12-03deraadt points out i forgot about tcp_signature, although this won'tTed Unangst
usually matter as all generic configs with tcp sigs have crypto too.
2014-12-03should no longer need md5 by default in all kernel builds.Ted Unangst
tested with a few generic and ramdisk configs.
2014-12-03Turn ahci port start into a callback so sxiahci can do some magic toJonathan Gray
setup dma. Modified version of a patch from Edwin Amsler which was based on changes made in Bitrig by Artturi Alm. ok dlg@
2014-12-03stale header: this code hasn't used hash.h in a whileTed Unangst
2014-12-03test backslash handling because it was on my todo list;Ingo Schwarze
fortunately, it already seems to work
2014-12-03in the recent update of capitals, this critical file was forgottenIngo Schwarze
2014-12-02Add -F to if-shell to allow it to be used to check for format or optionNicholas Marriott
values rather than executing a command.
2014-12-02Permit option values to be used in formats.Nicholas Marriott
2014-12-02Add brainpool curves to eccurves_default[], accidentally missing from 1.32;Miod Vallat
from OpenSSL HEAD via Thomas Jakobi.