summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-06-19Move variables into struct in openssl(1) genrsaKinichiro Inoguchi
- Move local variables in genrsa_main() to struct genrsa_config - Leave long lines more than 80, still ok bcook@
2019-06-18Stop probing a Tx rate if transmission failure or too many retries occur.Stefan Sperling
Fixes stalling TCP connections on wifi in some situations. testing jmatthew@, jmc@, Bruno Flueckiger, Micah Muer, Matthias Schmidt
2019-06-18When the parser detects that it needs more tokens it returnsFlorian Obser
JSMN_ERROR_NOMEM. We then need to allocate more tokens and call the parser with its current state again. It will continue where it left of. For this to work we also need to pass in the old tokens from the previous run and not just more space. Found the hard way by Renaud Allard. OK millert
2019-06-18Ensure that timeout p_sleep_to is not left running when finishing sleep.Visa Hankala
This is necessary when invoking sleep_finish_timeout() without the kernel lock. If not cancelled properly, an already running endtsleep() might cause a spurious wakeup on the thread if the thread re-enters a sleep queue very quickly before the handler completes. The flag P_TIMEOUT should stay cleared across the timeout cancellation. Add an assertion for that. OK mpi@
2019-06-18do not need to allocate memory for execvp argumentsTheo de Raadt
2019-06-18Use correct terminilogy in rpki-client manpagejob
2019-06-18Use the test-files from rpki-client and some files from the rpki cache toClaudio Jeker
implement a basic regress test. Needs more work but should be a start.
2019-06-18Remove tests here and move them to regress. At least then they can useClaudio Jeker
the existing framework. OK job@
2019-06-18This is part of the old configure setup. Not needed here.Claudio Jeker
OK job@
2019-06-18Handle comments more correctly inside {}, from Avi Halachmi.Nicholas Marriott
2019-06-18Add a cmdq_continue function rather than twiddling the flag directly.Nicholas Marriott
2019-06-18Ensure the length passed to ffs_truncate() is within bounds before callinganton
uvm_vnp_setsize() which is not free from side-effects. ok visa@
2019-06-17Import Kristaps Dzonsons' RPKI validator into the treejob
rpki-client(1) is an implementation of the Resource Public Key Infrastructure (RPKI), specified by RFC 6480. The client is responsible for downloading, validating and converting Route Origin Authorisations (ROAs) into Validated ROA Payloads (VRPs). The client's output (VRPs) can be used by bgpd(8) to perform BGP Origin Validation (RFC 6811). The current rpki-client(1) version depends on the CMS functions in OpenSSL, this of course needs to be addressed urgently. Thanks to NetNod, IIS.SE, SUNET & 6connect for supporting this effort! OK deraadt@
2019-06-18There is no need to -I${.OBJDIR}Claudio Jeker
2019-06-18missing ,Theo de Raadt
2019-06-17syncPatrick Wildt
2019-06-17Merge libc++, libc++abi and libunwind version 8.0.0.Patrick Wildt
Ports build by naddy@ Tested by visa on octeon Tested by kettenis on macppc and sparc64
2019-06-17Import libunwind 8.0.0.Patrick Wildt
2019-06-17Import libc++abi 8.0.0.Patrick Wildt
2019-06-17Import libc++ 8.0.0.Patrick Wildt
2019-06-17A bit more KNF no binary changeClaudio Jeker
2019-06-17setusercontext resets PATH (which we want). but then it becomesTed Unangst
impossible to access the old PATH. save a copy in case we need it later. bug report from espie.
2019-06-17add code to check stack pointer is within MAP_STACKTheo de Raadt
from miod
2019-06-17mention environment resetting here as well. ok millertTed Unangst
2019-06-17syncPatrick Wildt
2019-06-17Add aplgpio(4) a driver for the gpio controllers found on Intel's ApolloPatrick Wildt
Lake SoC. From James Hastings ok kettenis@
2019-06-17add REGRESS_EXPECTED_FAILURES variable,Marc Espie
for those tests that are expected to fail because they're not yet implemented. okay bluhm@
2019-06-17Make BN_num_bits_word() constant time.Theo Buehler
Previously, this function would leak the most significant word of its argument due to branching and memory access pattern. This patch is enough to fix the use of BN_num_bits() on RSA prime factors in the library. The diff is a simplified and more readable (but perhaps less efficient) version of https://github.com/openssl/openssl/commit/972c87df by Andy Polyakov and David Benjamin (pre license change). Consult that commit message for details. Subsequent fixes to follow in the near future. Issue pointed out by David Schrammel and Samuel Weiser as part of a larger report. tests & ok inoguchi, ok jsing
2019-06-17Fix Makefilejob
2018-09-11import of libc++ 6.0.0Robert Nagy
2016-09-03Import libc++ 3.9.0Patrick Wildt
2019-06-17always reset the "su" variables, which is more consistent and predictable.Ted Unangst
ok martijn millert
2019-06-17It's enough to allocate the EC key once.Florian Obser
OK tb
2019-06-17rpk-client.8 -> rpki-client.8Jonathan Gray
2019-06-17One NULL-check before EVP_MD_CTX_free() was left in previous.Theo Buehler
2019-06-17free(9) sizes.Martin Pieuchot
ok reyk@
2019-06-17whitespaceTheo de Raadt
2019-06-17system includes first, always.Theo de Raadt
2019-06-17Use bsd.prog.mk style for buildingTheo de Raadt
2019-06-17We do not need for the -portable stubs here.Theo de Raadt
2019-06-17Don't do -portable in base. It is better done outside the tree.Theo de Raadt
Imagine if we did it throughout the tree, how many copies of strlcpy would we have, and how much time would all the configure shell scripts and includes take? It would be ludicrous.
2019-06-17 Use non-deprecated API; from Renaud Allard, thanks!Florian Obser
OK tb
2019-06-17This portable code knocking out pledge or unveil is better doneTheo de Raadt
as a C stub, rather than #define. Anyways, this "-portable by default" approach is not the OpenBSD way.
2019-06-17this file is not neededTheo de Raadt
2019-06-17should be rpki-client(8)Theo de Raadt
2019-06-17../../../logmessagejob
2019-06-17Import Kristaps Dzonsons' RPKI validator into the treejob
rpki-client(1) is an implementation of the Resource Public Key Infrastructure (RPKI), specified by RFC 6480. The client is responsible for downloading, validating and converting Route Origin Authorisations (ROAs) into Validated ROA Payloads (VRPs). The client's output (VRPs) can be used by bgpd(8) to perform BGP Origin Validation (RFC 6811). The current rpki-client(1) version depends on the CMS functions in OpenSSL, this of course needs to be addressed urgently. Thanks to NetNod, IIS.SE, SUNET & 6connect for supporting this effort! OK deraadt@
2019-06-17Replace spaces with tab for text indentClaudio Jeker
2019-06-17Cleanup some spaces here as well. Again no binary change.Claudio Jeker
2019-06-17Cleanup, remove some unneded spaces add some other where needed.Claudio Jeker
No binary change according to clang