summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-04-20Refine the GPT partition entry table validity check to ensureKenneth R Westerback
that the partition entry table associated with the primary GPT header at sector 1 doesn't overwrite the header or intrude into the sectors available for partitions. Similarly ensure that the partition entry table associated with the alternate header does not overwrite that header or intrude into the sectors available for partitions.
2022-04-20Use glob to expand wildcards in "other device" paths rather than aJoshua Stein
custom implementation that only allowed matching all files in a directory. ok millert
2022-04-20In pfsync there were some KASSERT hidden behind #ifdef PFSYNC_DEBUG.Alexander Bluhm
Assertions should be active and rely on #ifdef DIAGNOSTIC. Retire PFSYNC_DEBUG. OK sashan@ dlg@
2022-04-20Wrap a long line.Kenneth R Westerback
2022-04-20Fix mandoc -Tlint warning about trailing whitespaceTheo Buehler
2022-04-20Fix white space and wrap long lines.Alexander Bluhm
2022-04-20While I'm here, prepare regress for claudio's upcoming diffTheo Buehler
2022-04-20Fix rpki-client regress after -j -f changeTheo Buehler
2022-04-20Sigh. Another forgotten header file.Kenneth R Westerback
2022-04-20Remove unnecessary includes: openssl/hmac.h and openssl/evp.h.Todd C. Miller
From Martin Vahlensieck.
2022-04-20Add missing includes of stdlib.h and stdint.h.Todd C. Miller
We need stdlib.h for malloc(3) and stdint.h for SIZE_MAX. Unlike the other xmss files, ssh-xmss.c does not include xmss_commons.h so ssh-xmss.c must include those headers itself. From Martin Vahlensieck
2022-04-20Avoid an unnecessary xstrdup in rm_env() when matching patterns.Todd C. Miller
Since match_pattern() doesn't modify its arguments (they are const), there is no need to make an extra copy of the strings in options->send_env. From Martin Vahlensieck
2022-04-20Simpify code manipulating GPT partition names by coalescingKenneth R Westerback
logic into GPT_get_name(), string_to_name() and name_to_string() functions. Remove unnecessarily abstract functions ask_string(), utf16le_to_string() and string_to_utf16le(). No intentional functional change.
2022-04-20more whitespace cleanupsTheo de Raadt
2022-04-20Fix various annoying whitespace errors.Theo Buehler
2022-04-20Print UTC time with gmtime()Theo Buehler
This replaces a strange hack that sets TZ=UTC and calls localtime(). Tweak format string to keep printing UTC. ok claudio
2022-04-20Improve proc_parser_file handling of Trust AnchorsJob Snijders
OK tb@
2022-04-20repair kstat entryTheo de Raadt
2022-04-20don't try to create a partial-* package when we find out there's nothingMarc Espie
where we expected a symlink.
2022-04-20Make the termp and winp arguments for openpty, et al. const.Todd C. Miller
This matches the prototypes in glibc and musl libc. From Matthew Martin. OK tb@
2022-04-20Avoid use of uninitialized in BN_mod_exp_recp()Theo Buehler
If either of the two initial BN_CTX_get() fails, we will call BN_RECP_CTX_free() on the uninitialized recp, which won't end well, so hoist the BN_RECP_CTX_init() call a few lines up. From Pauli, OpenSSL ad249412 ok inoguchi jsing
2022-04-20Use ssh -f and ControlPersist to start up test forwards and ssh -O stopDarren Tucker
to shut them down intead of sleep loops. This speeds up the test by an order of magnitude.
2022-04-20Add vmm(4) regress, disabled for now. ok rob@Dave Voutila
2022-04-20register new tests, they don't pass yetMarc Espie
2022-04-20it also breaks somewhat differently when files vanish, we still needMarc Espie
a few checks
2022-04-20Add Concatenated JSON output in filemode (rpki-client -j -f *)Job Snijders
The schema is still work in progress. OK claudio@
2022-04-20add a symlink test that currently fails, I want to fix it soonishMarc Espie
2022-04-20Route timeout was a mixture of int, u_int and long. Use type intAlexander Bluhm
for timeout, add sysctl bounds checking between 0 and max int, and use time_t for absolute times. Some code assumes that the route timeout queue can be NULL and at some places this was checked. Better make sure that all queues always exist. The pool_get for struct rttimer_queue is only called from initialization and from syscall, so PR_WAITOK is possible. Keep the special hack when ip_mtudisc is set to 0. Destroy the queue and generate an empty one. If redirect timeout is 0, it should not time out. Check the value in IPv6 to make the behavior like IPv4. Sysctl net.inet6.icmp6.redirtimeout had no effect as the queue timeout was not modified. Make icmp6_sysctl() look like icmp_sysctl(). OK claudio@
2022-04-20likewise for set flavorsMarc Espie
2022-04-20zap branch info so that pre-caching works with stuff like autoconf%2.64Marc Espie
2022-04-20reinstate temp-error3: do an update that will force temp files to beMarc Espie
created since the contents changed
2022-04-20better error report when I botch some test writingMarc Espie
2022-04-20Simplify forward-control test. Since we no longer need to support SSH1Darren Tucker
we don't need to run shell commands on the other end of the connection and can use ssh -N instead. This also makes the test less racy.
2022-04-20Remove an unreachable error messageTheo Buehler
If timeout != 0 and 0 <= timeout <= 24*60*60, then timeout < 1 is impossible. ok
2022-04-20Try to continue running local I/O for channels in state OPEN duringDamien Miller
SSH transport rekeying. The most visible benefit is that it should make ~-escapes work in the client (e.g. to exit) if the connection happened to have stalled during a rekey event. Based work by and ok dtucker@
2022-04-20syncTheo de Raadt
2022-04-20Import regenerated moduliDarren Tucker
2022-04-20Eliminate some local pointers to gp[pn] and just use gp[pn].Kenneth R Westerback
Fix some whitespace and memset() parameters in passing. No intentional functional change.
2022-04-19Add dummy implementation for rt_timer_init(). Kernel sources areAlexander Bluhm
build for regress and need that function now.
2022-04-19zap extra line break and extra empty lineTheo Buehler
2022-04-19Forgot a file for previous commit.Kenneth R Westerback
No functional change.
2022-04-19Use a pool instead of malloc for struct rttimer_queue. As routingAlexander Bluhm
runs without kernel lock, use IPL_MPFLOOR protection for its pools. OK mvs@ claudio@
2022-04-19Do not use a hidden global for the EVP_ENCODE_CTX to save a calloc() call.Claudio Jeker
Make this work concurrently by allocating and freeing the EVP_ENCODE_CTX for every call to base64_decode(). This is not a hot path so the impact is negligible. OK tb@
2022-04-19Avoid leaking crldp in mft_parse() if one of the crlfile checks fails.Theo Buehler
ok claudio
2022-04-19Bring GPT_print_partition() into line with other functions being passedKenneth R Westerback
an index to the gp[] array by calling said parameter 'pn' and making it const unsigned int. No functional change.
2022-04-19Move declaration of DEBUG-only variable inside #ifdef DEBUG.Kenneth R Westerback
No functional change.
2022-04-19Eliminate superfluous intermediate variables 'pncnt' now thatKenneth R Westerback
gh.gh_part_num does not need a letoh32(). No functional change.
2022-04-19Drop unused KeyUpdate from debug printfTheo Buehler
The handshake state machine does not handle key updates since that's a post-handshake handshake message. This is code under #ifdef TLS13_DEBUG and if it is ever to be reused in tls13_handshake_msg.c, that will have to be revisited. ok inoguchi jsing
2022-04-19Instead of a MP unsafe global variable to initialize at first use,Alexander Bluhm
call rt_timer_init() from rtable_init(). OK mvs@ claudio@
2022-04-19add missing unlock before returning in uvn_detach()Sebastien Marie
uvn_detach sets UVM_VNODE_RELKILL flag and wait for all async i/o to finish. but uvm_vnp_terminate() could clear the flag and take over the vnode. mpi@ noted that this code path is mostly dead code because there is no "async I/O" (uvn_io() is always synchronous). ok visa@ mpi@