summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2009-11-10zap handle method, we finally no longer use it.Marc Espie
2009-11-10dont compare devids when we dont have a devid to compare with.David Gwynne
DEVID_CMP now evaluates to false if the devids are NULL. some stupid devices dont understand luns, so we have code that detects when the device at lun 0 also appears at luns 1, 2, 3, and so on. this check is short circuited if the devices report different devids. no devids isnt the same as different devids though. found by okan@ on ciss (which currently ignores luns). tested by krw@ marco@ johan@ okan@ ok krw@ marco@
2009-11-10document what's going on...Marc Espie
2009-11-10move format expansion to the right place, from gilles@Jacek Masiulaniec
2009-11-10fix the NO_CCB handling i broke when working on simplifying the midlayer.David Gwynne
marco@ discovered my rewrite retried commands rejected by an adapter from a timeout, which was trivially starved by normal io going to disks. this diff allows an xs to be marked as XS_NO_CCB, which will cause it to be returned to the device driver to be retried as part of the normal io queue. tested by krw@ marco@ johan@ ok krw@ marco@
2009-11-10backout the backout marco did of my code because of the NO_CCB breakage.David Gwynne
the fix for the NO_CCB breakage will follow shortly. tested by krw@ marco@ johan@ ok krw@ marco@
2009-11-10sync code with comment, from gilles@Jacek Masiulaniec
2009-11-10adjust one of the examples/descriptions for nat-to; it used to beStuart Henderson
'nat pass' and nearest equivalent now is to use 'pass quick...nat-to' not just 'pass...nat-to'. ok henning@ jmc@
2009-11-10pull Ben Lauries blind prefix injection fix for CVE-2009-3555 fromMarkus Friedl
openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@
2009-11-10fix typo: in the example use ``rate'' instead of ``sample_rate'',Alexandre Ratchov
since the later is a hidden alias of the former. from Jan Stary <hansi _at_ stare.cz>, thanks
2009-11-10ctim -> ctime; from ca (pr #6256)Jason McIntyre
2009-11-10lint prompted cleanupTheo de Raadt
2009-11-10Set close-on-exec on various descriptors so they don't get leaked toDarren Tucker
child processes. bz #1643, patch from jchadima at redhat, ok deraadt.
2009-11-10syncTheo de Raadt
2009-11-10clarify that StrictModes does not apply to ChrootDirectory. PermissionsDamien Miller
and ownership are always checked when chrooting. bz#1532
2009-11-10explain the constraints on LocalCommand some more so people don'tDamien Miller
try to abuse it.
2009-11-10- add comments to explain the logic in the aliases expansion loopGilles Chehade
- more cosmethic changes to help readability - fix memory leaks - if deliverylist is empty, it means something went bad during expansion, reject recipient
2009-11-10pfff remove a comment i pasted to help me refactor code ;-)Gilles Chehade
2009-11-10more cleanup, let lka_resolve_path() request forward files and populateGilles Chehade
expandtree, this makes a lot of code clearer and removes quite a bit of complexity from various places.
2009-11-10Check for extension keywords on final multiline reply. Skip theJacek Masiulaniec
check for states other than CLIENT_EHLO. Verify response is not shorter than 3 chars. From Nils Frohberg ok gilles@
2009-11-10cosmethic changes, code reordering, no functionnal changeGilles Chehade
2009-11-10introduce lka_session_fail() which factors a small piece of code used inGilles Chehade
three places: set code to 530, send imsg to notify rejection, kill lkasession
2009-11-09now that we don't keep an expand_node in memory for each expansion result,Gilles Chehade
we don't need to calloc them as they won't be saved in the tree.
2009-11-09- add a reference count and flags to struct expand_nodeGilles Chehade
- during expansion, no longer create a new node for each result but try to lookup for an existing equivalent node and increment its reference count so that: a) we save on memory, b) we don't need to expand the same users again and again just because they keep appearing in expansion results. - while expanding, flag nodes as F_EXPAND_DONE so that we know which nodes we already processed - be smarter when expanding, if we have a clue that an iteration has not brought any new result (because no new nodes were added and all existing nodes have F_EXPAND_DONE), end expansion and proceed to delivery. - various small cleanups discussed with jacekm@ yesterday, rebuild aliases db, make clean
2009-11-09bump pfsync protocol versionDavid Gwynne
requested by deraadt@
2009-11-09Just ignore tty fd errors rather than dying, stops the server dying if theNicholas Marriott
session is disconnected abrubtly (eg ssh ~.).
2009-11-09support the userpart+foobar@domainpart syntax which got wiped when i wroteGilles Chehade
the virtual domains support as it was in my way. this time, make it work as it should: userpart+foobar@domainpart becomes: path->user = userpart+foobar path->domain = domainpart path->pw_name = userpart discussed quickly with jacekm@
2009-11-09pfsync devices can be dynamically created too; from vladimir kirillovJason McIntyre
ok henning
2009-11-09Fix error message.Mark Kettenis
2009-11-09Update to tzdata2009r from elsie.nci.nih.govTodd C. Miller
2009-11-09s/MPLS_DEBUG/VETHER_DEBUGMarco Pfatschbacher
OK deraadt
2009-11-09fix, need to keep =version for "no need to update" to occur...Marc Espie
2009-11-09Every selwakeup() should have a matching KNOTE() (even if kqueue isn'tNicholas Marriott
supported it doesn't do any harm), so put the KNOTE() in selwakeup() itself and remove it from any occurences where both are used, except one for kqueue itself and one in sys_pipe.c (where the selwakeup is under a PIPE_SEL flag). Based on a diff from tedu. ok deraadt
2009-11-09document -F downgrades (note: for now, it's just the package name, we shouldMarc Espie
look further at the signature if we can actually compare things)
2009-11-09okay, so updates become "true" updates: unless you say -F downgradeMarc Espie
then packages with an older version will be filtered out.
2009-11-09fix. cant_update list is again a simple list of names.Marc Espie
2009-11-09Make sure we correctly return failure in l1_serial_ppp_read() when a readMiod Vallat
fails after an escape character, and while there put explicit casts to l1_command_build() variadic arguments.
2009-11-09Only invoke the L1 code if IP35.Miod Vallat
2009-11-09The input key should be a u_char. Fixes top-bit-set input problem reported byNicholas Marriott
ajacoutot@.
2009-11-09Link state change interrupt was not generated due to a missing bit inDavid Gwynne
the MAC event register. fix from atte dot peltomaki at iki dot fi tested by me on 5708 and 5709
2009-11-09A few more places to be updated for the route pool change.Jonathan Gray
expanded version of a diff from Vadim Zhukov. ok henning@ claudio@
2009-11-09syncStuart Henderson
2009-11-09- remove wrongly-sorted duplicate entriesStuart Henderson
- add some unknown Intel devices in dmeslog from infinst911_autol.zip ok jsg@
2009-11-09move mutually exclusive options (-c, -e, -f, -n and -u) to the right place.Igor Sobrado
ok jmc@
2009-11-09Constify buf.Nicholas Marriott
2009-11-09fatal on RB_INSERT failureJacek Masiulaniec
2009-11-09the new protocol moved insert and update.David Gwynne
2009-11-09mbrlen returns size_t not int.Nicholas Marriott
ok espie
2009-11-09simplify the sub-ioctl functionTheo de Raadt
2009-11-09add regression test for ssh-keygen pubkey conversionsDarren Tucker