summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-04-10sync cert.pem with Mozilla's root ca list, ok beck@Stuart Henderson
2020-04-10Typo in comment.Martin Pieuchot
2020-04-10Now that copy mode copies the pane content rather than keeping aNicholas Marriott
reference to it, it isn't necessary that the pane in copy mode is the same as the one copying from. Add a -s flag to copy-mode to specify a different pane for the source content. This means it is possible to view two places in a pane's history at the same time in different panes, or copy from a pane's history into an editor or shell in the same pane. From Anindya Mukherjee.
2020-04-10Place the 64bit key on the stack instead of malloc(9)in' it in pppx_if_find().Martin Pieuchot
Removing a malloc(9) with M_WAITOK reduces possible context switches which helps when dealing with parallelism issues. From Vitaliy Makkoveev.
2020-04-10Update ARG_MAX bytes countJeremie Courreges-Anglas
ok deraadt@
2020-04-10Implement stacktrace_save_at() required for upcoming WITNESS.Martin Pieuchot
ok gkoehler@
2020-04-10When printing the serialNumber, fall back to the colon separated hexTheo Buehler
bytes in case ASN1_INTEGER_get() failed. This happens more often since asn1/a_int.c -r1.34. Matches OpenSSL behavior. Issue in openssl x509 -text output reported by sthen ok jsing sthen
2020-04-10Add tests for TOKEN expansion of LocalForward and RemoteForward.Darren Tucker
2020-04-10Add TOKEN percent expansion to LocalFoward and RemoteForward when usedDarren Tucker
for Unix domain socket forwarding. Factor out the code for the config keywords that use the most common subset of TOKENS into its own function. bz#3014, ok jmc@ (man page bits) djm@
2020-04-09When I removed CCK fallback from iwm(4) I accidentally left an else-if blockStefan Sperling
in place which should have been deleted entirely. As a result firmware-based retries weren't being used in 11n mode anymore. Fix this. I really shouldn't be committing non-trivial changes without OK...
2020-04-09The -6 option is ignored and will be removed in the future.tobhe
2020-04-09Simplify socket creation logic. Normally iked needs two sockets, onetobhe
for normal operation (UDP port 500) and one for NAT traversal (UDP 4500). There are several command line options resulting in only one of the sockets being created (-T, -t and -p). Add a new 'enum natt_mode' to make the logic for those somewhat less complicated as well as some comments where it makes sense. From Wataru Ashihara <wataash (at) wataash (dot) com> ok patrick@
2020-04-09Revise test to handle the fact that TLSv1.3 cipher suites are now beingJoel Sing
included in the output from `openssl ciphers`.
2020-04-09Include TLSv1.3 cipher suites unless cipher string references TLSv1.3.Joel Sing
OpenSSL has always taken the approach of enabling almost everything by default. As a result, if you wanted to run a secure TLS client/server you had to specify your own "secure" cipher string, rather than being able to trust the defaults as being sensible and secure. The problem is that with the introduction of TLSv1.3, most of these "secure" cipher strings result in the new TLSv1.3 cipher suites being excluded. The "work around" for this issue in OpenSSL was to add a new TLSv1.3 API (SSL_CTX_set_ciphersuites(), SSL_set_ciphersuites()) and have separate knobs for the pre-TLSv1.3 and TLSv1.3 cipher suites. This of course means that every application now needs to call two APIs, but it does mean that applications that only call SSL_CTX_set_cipher_list()/SSL_set_cipher_list() cannot remove TLSv1.3 cipher suites and prevent TLSv1.3 from working. We've taken a different approach and have allowed TLSv1.3 cipher suites to be manipulated via the existing SSL_set_cipher_list() API. However, in order to avoid problems with hardcoded cipher strings, change this behaviour so that we always include TLSv1.3 cipher suites unless the cipher string has a specific reference to the TLSv1.3 protocol or a TLSv1.3 cipher suite. This means that: $ openssl ciphers -v TLSv1.2:!TLSv1.3 still gives TLSv1.2 only cipher suites and: $ openssl ciphers -v AEAD-CHACHA20-POLY1305-SHA256 only lists a single TLSv1.3 cipher, however: $ openssl ciphers -v ECDHE-RSA-AES256-GCM-SHA384 now includes both TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 and all TLSv1.3 cipher suites (which also matches OpenSSL's openssl(1) behaviour). Issue encountered by kn@ with mumble. ok tb@
2020-04-09Test both SSLv3 (aka pre-TLSv1.2) and TLSv1.2 cipher suites with TLS.Joel Sing
2020-04-09Tidy line wrapping and remove an extra blank line.Joel Sing
2020-04-09ssl_aes_is_accelerated() returns a boolean - treat it as such, rather thanJoel Sing
explicitly comparing against a value.
2020-04-09Make sure that we really don't emut quad-precision unless theMark Kettenis
"hard-quad-float" feature is available. Add missing replacement instruction patterns that are needed to emit alternative code for conditional moves of quad-precision floats. ok mortimer@
2020-04-09No need to check for NULL before free().Kenneth R Westerback
From Geoff Hill.
2016-09-03Use the space freed up by sparc and zaurus to import LLVM.Pascal Stumpf
ok hackroom@
2020-04-09No need to check for NULL before free().Kenneth R Westerback
From Geoff Hill.
2020-04-09More style nits.Nicholas Marriott
2020-04-09Make sure that we generate a PLT when a plabel is required even forMark Kettenis
symbols that were hidden. Fixes building Mesa on hppa. ok deraadt@
2020-04-09Account for environment when computing maximum space used for argsJeremie Courreges-Anglas
Already done by xargs(1). Pointed out by espie@, ok millert@
2020-04-09Fix history-bottom to use the right line when working out the length.Nicholas Marriott
2020-04-09Some minor style nits.Nicholas Marriott
2020-04-09Tweak how the default size is worked out so it is more obvious.Nicholas Marriott
2020-04-09A couple of other redundant checks/assignments.Nicholas Marriott
2020-04-09Do not try to use the client if the item containing it is NULL.Nicholas Marriott
2020-04-09Some more, and use of wp->window before wp NULL check in format.c.Nicholas Marriott
2020-04-09Some unnecessary assignments and unused variables.Nicholas Marriott
2020-04-09Pass correct flags to fnmatch.Nicholas Marriott
2020-04-09Wait until the initial command sequence is done before sending a deviceNicholas Marriott
attributes request and other bits that prompt a reply from the terminal. This means that stray relies are not left on the terminal if the command has attached and then immediately detached and tmux will not be around to receive them. Prompted by a problem report from espie@.
2020-04-09find -exec +: use sysconf to find the kernel's idea of ARG_MAXJeremie Courreges-Anglas
Using ARG_MAX directly doesn't fly when ARG_MAX gets bumped and the kernel and userland are not in sync, effectively breaking find -exec +. Use sysconf(3) as already done in xargs(1). Spotted by sthen@, ok deraadt@ millert@ sthen@
2020-04-09Assign and enable clocks; RK3328 has them.Mark Kettenis
2020-04-09Fix an automatic Tx rate control issue in iwn(4).Stefan Sperling
Same change as made for iwm(4) and iwx(4), but also accounts for block ack. Avoids Tx results being reported and evaluated even if they did not correspond to the most recently chosen rate, spoiling the data available to the rate control algorithm. tested by benno, jmc, and krw; no regressions seen
2020-04-09Mention paste at same place as copy, suggested by John Boyle.Nicholas Marriott
2020-04-09Update perl manpage listAndrew Fresh
Missed somehow in perl update
2020-04-09sync for perl-5.30.2Andrew Fresh
2020-04-09Update perl to 5.30.2Andrew Fresh
https://metacpan.org/pod/release/SHAY/perl-5.30.2/pod/perldelta.pod Incompatible Changes There are no changes intentionally incompatible with 5.30.0. Updated Modules and Pragmata * Compress::Raw::Bzip2 has been upgraded from version 2.084 to 2.089. * Module::CoreList has been upgraded from version 5.20191110 to 5.20200314. Selected Bug Fixes * printf() or sprintf() with the %n format no longer cause a panic on debugging builds, or report an incorrectly cached length value when producing SVfUTF8 flagged strings. * A memory leak in regular expression patterns has been fixed. * A read beyond buffer in grok_infnan has been fixed. * An assertion failure in the regular expression engine has been fixed. * (?{...}) eval groups in regular expressions no longer unintentionally trigger "EVAL without pos change exceeded limit in regex". Proceed when you feel comfortable. deraadt@
2020-04-08Add RK3328 Crypto/RNG clocks.Mark Kettenis
2006-03-28perl 5.8.8 importTodd C. Miller
2002-10-27stock perl 5.8.0 from CPANTodd C. Miller
2020-04-08Prevent multiple ibuf leaks. Clean up on proccess shutdown.tobhe
ok markus@
2020-04-08Ensure legacy session ID is persistent during client TLS session.Joel Sing
Generate an unpredictable 32-byte legacy session ID during client initialisation, rather than when the ClientHello message is being created. Otherwise in the case of a HelloRetryRequest the legacy session ID values will differ between the first and second ClientHello messages, which is not permitted by the RFC. Fixes an issue talking TLSv1.3 to smtp.mail.yahoo.com. ok beck@
2020-04-08Use a separate node->tag attribute rather than abusing the node->stringIngo Schwarze
attribute for the purpose. No functional change intended. The purpose is to make it possible to later attach tags to text nodes.
2020-04-08Add glass console support.Mark Kettenis
ok patrick@, jsg@
2020-04-08Restore pane_current_path format from portable tmux, it is no longerNicholas Marriott
used by default and is very useful.
2020-04-08Pass the cmd item to format expansion so that mouse formats work.Nicholas Marriott
2020-04-08Set correct pixel format. Fix limits on number of characters in theMark Kettenis
rasops_init() call. ok patrick@, jsg@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 03:35:43 +0000