Age | Commit message (Collapse) | Author | |
---|---|---|---|
2009-11-10 | zap handle method, we finally no longer use it. | Marc Espie | |
2009-11-10 | dont compare devids when we dont have a devid to compare with. | David Gwynne | |
DEVID_CMP now evaluates to false if the devids are NULL. some stupid devices dont understand luns, so we have code that detects when the device at lun 0 also appears at luns 1, 2, 3, and so on. this check is short circuited if the devices report different devids. no devids isnt the same as different devids though. found by okan@ on ciss (which currently ignores luns). tested by krw@ marco@ johan@ okan@ ok krw@ marco@ | |||
2009-11-10 | document what's going on... | Marc Espie | |
2009-11-10 | move format expansion to the right place, from gilles@ | Jacek Masiulaniec | |
2009-11-10 | fix the NO_CCB handling i broke when working on simplifying the midlayer. | David Gwynne | |
marco@ discovered my rewrite retried commands rejected by an adapter from a timeout, which was trivially starved by normal io going to disks. this diff allows an xs to be marked as XS_NO_CCB, which will cause it to be returned to the device driver to be retried as part of the normal io queue. tested by krw@ marco@ johan@ ok krw@ marco@ | |||
2009-11-10 | backout the backout marco did of my code because of the NO_CCB breakage. | David Gwynne | |
the fix for the NO_CCB breakage will follow shortly. tested by krw@ marco@ johan@ ok krw@ marco@ | |||
2009-11-10 | sync code with comment, from gilles@ | Jacek Masiulaniec | |
2009-11-10 | adjust one of the examples/descriptions for nat-to; it used to be | Stuart Henderson | |
'nat pass' and nearest equivalent now is to use 'pass quick...nat-to' not just 'pass...nat-to'. ok henning@ jmc@ | |||
2009-11-10 | pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from | Markus Friedl | |
openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@ | |||
2009-11-10 | fix typo: in the example use ``rate'' instead of ``sample_rate'', | Alexandre Ratchov | |
since the later is a hidden alias of the former. from Jan Stary <hansi _at_ stare.cz>, thanks | |||
2009-11-10 | ctim -> ctime; from ca (pr #6256) | Jason McIntyre | |
2009-11-10 | lint prompted cleanup | Theo de Raadt | |
2009-11-10 | Set close-on-exec on various descriptors so they don't get leaked to | Darren Tucker | |
child processes. bz #1643, patch from jchadima at redhat, ok deraadt. | |||
2009-11-10 | sync | Theo de Raadt | |
2009-11-10 | clarify that StrictModes does not apply to ChrootDirectory. Permissions | Damien Miller | |
and ownership are always checked when chrooting. bz#1532 | |||
2009-11-10 | explain the constraints on LocalCommand some more so people don't | Damien Miller | |
try to abuse it. | |||
2009-11-10 | - add comments to explain the logic in the aliases expansion loop | Gilles Chehade | |
- more cosmethic changes to help readability - fix memory leaks - if deliverylist is empty, it means something went bad during expansion, reject recipient | |||
2009-11-10 | pfff remove a comment i pasted to help me refactor code ;-) | Gilles Chehade | |
2009-11-10 | more cleanup, let lka_resolve_path() request forward files and populate | Gilles Chehade | |
expandtree, this makes a lot of code clearer and removes quite a bit of complexity from various places. | |||
2009-11-10 | Check for extension keywords on final multiline reply. Skip the | Jacek Masiulaniec | |
check for states other than CLIENT_EHLO. Verify response is not shorter than 3 chars. From Nils Frohberg ok gilles@ | |||
2009-11-10 | cosmethic changes, code reordering, no functionnal change | Gilles Chehade | |
2009-11-10 | introduce lka_session_fail() which factors a small piece of code used in | Gilles Chehade | |
three places: set code to 530, send imsg to notify rejection, kill lkasession | |||
2009-11-09 | now that we don't keep an expand_node in memory for each expansion result, | Gilles Chehade | |
we don't need to calloc them as they won't be saved in the tree. | |||
2009-11-09 | - add a reference count and flags to struct expand_node | Gilles Chehade | |
- during expansion, no longer create a new node for each result but try to lookup for an existing equivalent node and increment its reference count so that: a) we save on memory, b) we don't need to expand the same users again and again just because they keep appearing in expansion results. - while expanding, flag nodes as F_EXPAND_DONE so that we know which nodes we already processed - be smarter when expanding, if we have a clue that an iteration has not brought any new result (because no new nodes were added and all existing nodes have F_EXPAND_DONE), end expansion and proceed to delivery. - various small cleanups discussed with jacekm@ yesterday, rebuild aliases db, make clean | |||
2009-11-09 | bump pfsync protocol version | David Gwynne | |
requested by deraadt@ | |||
2009-11-09 | Just ignore tty fd errors rather than dying, stops the server dying if the | Nicholas Marriott | |
session is disconnected abrubtly (eg ssh ~.). | |||
2009-11-09 | support the userpart+foobar@domainpart syntax which got wiped when i wrote | Gilles Chehade | |
the virtual domains support as it was in my way. this time, make it work as it should: userpart+foobar@domainpart becomes: path->user = userpart+foobar path->domain = domainpart path->pw_name = userpart discussed quickly with jacekm@ | |||
2009-11-09 | pfsync devices can be dynamically created too; from vladimir kirillov | Jason McIntyre | |
ok henning | |||
2009-11-09 | Fix error message. | Mark Kettenis | |
2009-11-09 | Update to tzdata2009r from elsie.nci.nih.gov | Todd C. Miller | |
2009-11-09 | s/MPLS_DEBUG/VETHER_DEBUG | Marco Pfatschbacher | |
OK deraadt | |||
2009-11-09 | fix, need to keep =version for "no need to update" to occur... | Marc Espie | |
2009-11-09 | Every selwakeup() should have a matching KNOTE() (even if kqueue isn't | Nicholas Marriott | |
supported it doesn't do any harm), so put the KNOTE() in selwakeup() itself and remove it from any occurences where both are used, except one for kqueue itself and one in sys_pipe.c (where the selwakeup is under a PIPE_SEL flag). Based on a diff from tedu. ok deraadt | |||
2009-11-09 | document -F downgrades (note: for now, it's just the package name, we should | Marc Espie | |
look further at the signature if we can actually compare things) | |||
2009-11-09 | okay, so updates become "true" updates: unless you say -F downgrade | Marc Espie | |
then packages with an older version will be filtered out. | |||
2009-11-09 | fix. cant_update list is again a simple list of names. | Marc Espie | |
2009-11-09 | Make sure we correctly return failure in l1_serial_ppp_read() when a read | Miod Vallat | |
fails after an escape character, and while there put explicit casts to l1_command_build() variadic arguments. | |||
2009-11-09 | Only invoke the L1 code if IP35. | Miod Vallat | |
2009-11-09 | The input key should be a u_char. Fixes top-bit-set input problem reported by | Nicholas Marriott | |
ajacoutot@. | |||
2009-11-09 | Link state change interrupt was not generated due to a missing bit in | David Gwynne | |
the MAC event register. fix from atte dot peltomaki at iki dot fi tested by me on 5708 and 5709 | |||
2009-11-09 | A few more places to be updated for the route pool change. | Jonathan Gray | |
expanded version of a diff from Vadim Zhukov. ok henning@ claudio@ | |||
2009-11-09 | sync | Stuart Henderson | |
2009-11-09 | - remove wrongly-sorted duplicate entries | Stuart Henderson | |
- add some unknown Intel devices in dmeslog from infinst911_autol.zip ok jsg@ | |||
2009-11-09 | move mutually exclusive options (-c, -e, -f, -n and -u) to the right place. | Igor Sobrado | |
ok jmc@ | |||
2009-11-09 | Constify buf. | Nicholas Marriott | |
2009-11-09 | fatal on RB_INSERT failure | Jacek Masiulaniec | |
2009-11-09 | the new protocol moved insert and update. | David Gwynne | |
2009-11-09 | mbrlen returns size_t not int. | Nicholas Marriott | |
ok espie | |||
2009-11-09 | simplify the sub-ioctl function | Theo de Raadt | |
2009-11-09 | add regression test for ssh-keygen pubkey conversions | Darren Tucker | |