summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-03-02Allow escaped quotes \" and \' in ssh_config and sshd_config quotesDamien Miller
option strings. bz#1596 ok markus@
2018-03-02fix testing of pty option, include positive test and testing ofDamien Miller
restrict keyword
2018-03-02better testing for port-forwarding and restrict flags inDamien Miller
authorized_keys
2018-03-02Refactor the countdown loop() to simplify it.cheloha
If we insert our offset into tlist[] and then process tlist[] like an array we can eliminate many of the special cases and duplicate calls in loop(). While we're at it, change struct interval and timewarn() to use time_t to eliminate the need for some of the casting and add explicit long-long suffixes to the constants in tlist[] to head off overflow if the code wanders off. With type-related input from tb@ and a style tweak from anton@. ok tb@
2018-03-02refactor sshkey_read() to make it a little more, err, readable.Damien Miller
ok markus
2018-03-02syncTheo de Raadt
2018-03-02Add a manual page for lld from lld svn rev 326463 with options notJonathan Gray
present in lld 5.0.1 removed (--build-id=fast, -z muldefs, -z retpolineplt). This includes a bunch of mdoc changes suggested by schwarze@ that were recently committed upstream. ok jmc@ schwarze@ kettenis@ deraadt@
2018-03-01AAPCS requires 8-byte alignment for 64-bit types. We missed this when weMark Kettenis
did the big EABI switch. Do it now before we get into trouble with using floating-point and vector instructions that actually require things to be properly aligned. This breaks the ABI. In particular, file descriptor passing will be broken if kernel and userland are not in sync. Upgrading from a snap is highly recommended. ok otto@, patrick@, jsg@, phessler@, deraadt@
2018-03-01consistently spell "IPsec"; from raf czlonkaJason McIntyre
note that this is only part of raf's original diff: the rest is for code. although i'm sure the diff itself is correct, i don;t judge myself qualified to decide whether those changes are warranted. still, i'd appreciate at least a reply to raf's diff from another developer (yay! nay!)
2018-03-01missing #ifdef for _PATH_HOST_XMSS_KEY_FILE; report by jmc@Markus Friedl
2018-03-01Check for a negative value and overflow in getuint64() when performingTodd C. Miller
multiplication and division. Based on a diff from otto@. OK otto@ krw@
2018-03-01syncTheo de Raadt
2018-03-01Two new manual pages OPENSSL_sk_new(3) and STACK_OF(3), written fromIngo Schwarze
scratch, tweaks and OK jsing@ and jmc@.
2018-03-01OpenBSD 6.4 packages keyChristian Weisgerber
2018-03-01openbsd 6.4 base keyTheo de Raadt
2018-03-01Don't overflow or underflow value when [+-] operatorsKenneth R Westerback
applied during getuint64()'s input parsing. ok otto@
2018-03-01Avoid underflow under SUN_CYLCHECK when rounding partition size toKenneth R Westerback
multiple of cylinder size. Eliminate various compiler warnings by shuffling unused variables under !SUN_CYLCHECK. Consolidate two SUN_CYLCHECK blocks into one. Add D_VENDOR check inside SUN_CYLCHECK block. Tweak & ok otto@
2018-03-01Check return value of getuint64() for ULLONG_MAX, andKenneth R Westerback
ULLONG_MAX - 1, not <= 0. This fixes the detection of ^D and invalid values during the 'R'esize command. ok otto@
2018-03-01When socket splicing is involved, delay the pool_put() after theAlexander Bluhm
splicing thread has finished sotask() with the socket to be freed. Use after free reported and fix successfully tested by Rivo Nurges. discussed with mpi@
2018-03-01Protect the calls to trapsignal() and psignal() with a kernel lockAlexander Bluhm
when processing an npx interrupt. This fixes a kernel locked assertion in postsig_done() during the libc ieeefp/except regression test. OK visa@
2018-03-01Expand formats in window and session names.Nicholas Marriott
2018-03-01add 6.4 firmware keyStuart Henderson
2018-03-01update currency exchange rates;Jason McIntyre
2018-03-01accidentally did two ALIGN's before kudutaTheo de Raadt
ok guenther
2018-03-01copy p2p_rtrequest to mgre_rtrequest, so it can be tweakedDavid Gwynne
2018-02-28fix up matching of incoming traffic to interfaces.David Gwynne
i was assigning to ip dst to both the key src and dst, which meant no traffic matched and it fell through the network stacks ipip processing. based on some excellent investigation by andreas bartelt.
2018-02-28update the programming stuff to include mgreDavid Gwynne
2018-02-28Now that log_debug() has been decyphered, replace DPRINTF() instancesKenneth R Westerback
with log_debug() so -v unleashes all debug output without having to compile a custom dhclient.
2018-02-28ca start/enddates require all 4 yyyy from 2050 on; first twoJason McIntyre
are otherwise optional diff from holger mikolon, tweaked a bit by me
2018-02-28Better documentation of the classless-static-routes option.Matthieu Herrb
ok krw@, tweaks by jmc@
2018-02-28Revert the change that postpones CPUs until after mounthook activities.Patrick Wildt
This was needed to be able to use loadfirmware() to load the microcode before letting the cores go. Now that the microcode is loaded earlier we can restore the previous behaviour. ok deraadt@
2018-02-28Remove CFLAGS+=-mfloat-abi=softfp that I accidentally committed.Mark Kettenis
2018-02-28syncTheo de Raadt
2018-02-28oops, skipped a step cranking to 6.3-betaTheo de Raadt
2018-02-28move to 6.3-betaTheo de Raadt
2018-02-28Ignore 'fseq version mismatch' notifications from 8265 iwm(4) firmware.Stefan Sperling
Kills "iwm0: unhandled firmware response 0xff/0xb8000010 rx ring" dmesg spam. Patch by jes@posteo via tech@, who found the corresponding change in Linux: https://patchwork.kernel.org/patch/9869017/
2018-02-28Explicitly align svcstack and esym. Finally fixes the problem whereMark Kettenis
kernels wouldn't boot because the random order in which we happened to link it would cause these symbols to be misaligned. Thanks to Brandon Bergren for figuring out the problem.
2018-02-28Change floating-point mode/environment control functions to operate onMark Kettenis
both the hardfloat (FPU registers) and softfloat (software) state. This makes these functions work correctly when mixing hardfloat and softfloat code. Disable trapping for softfloat since most (if not all) ARMv7 and ARMv8 hardware that is on the market doesn't support trapping of floating-point exceptions. ok patrick@
2018-02-28Add -Z flag to choose-tree, choose-client, choose-buffer toNicholas Marriott
automatically zoom the pane when the mode is entered and unzoom when it exits, assuming the pane is not already zoomed. Add -Z to the default key bindings.
2018-02-28vmd: Fix 100% vmd cpu usage on linux receive / unpausepd
Use rtc_reschedule_per in mc146818_start instead of re arming the periodic interrupt without checking if it's enabled in REGB. reported by Dave Voutila ok phessler@
2018-02-28It helps to spell 'GSBASE' with a 'G'. With the thinko the NMI andPhilip Guenther
double-fault handlers only worked when the GS.base was already the kernel value (i.e., from inside the kernel). Retested in qemu for both positive and negative cases ("if I put a bogus GS.base value there, does it crash on NMI?")
2018-02-28syncTheo de Raadt
2018-02-28Correct a pointless longstanding difference in ioctl numbering betweenJonathan Gray
linux and add back struct members. Avoids diffs in inteldrm, libdrm and Mesa >= 17.2. ok kettenis@
2018-02-27Typo: 'tftp-server' -> 'tftp-server-name'.Kenneth R Westerback
Spotted by Pontus Lundkvis. Thanks!
2018-02-27sanitize say/print output furtherMarc Espie
- have confirm go thru f() every time (adding confirm_defaults_to_no/confirm_defaults_to_yes apis... verbose but effective) - check DESCR in pkg_create, as suggested by sthen@ - don't do the whole safe dance when not needed (optimization) - misnamed allowed -> forbidden (schwarze@) This effectively prevents DESCR from using diacritics. Sorry! Ingo makes a compelling argument that using UTF8 while installing a new box is currently fairly dangerous, considering tty setups. This affects about 10 ports at the moment, all of which were fixed before this commit.
2018-02-27change mgre tunnel configuration to only accept a single local address.David Gwynne
this relies on ifconfig tunneladdr
2018-02-27handle "tunnels" without a destination addressDavid Gwynne
this is used for mgre, which has a local address but dynamically addresses other endpoints based on routing information. "tunneladdr" takes a single address (where "tunnel" takes two) and sets the destination address in the ioctl to an AF_UNSPEC destination. tunnel status is changed so it recognises this and only outputs the local address if the destination is AF_UNSPEC. the tunnel status is also changed so it can tell the difference between tunnels being unsupported on the interface (ie, ENOTTY comes back) or if there's just no address configured yet (EADDRNOTAVAIL), which allows the other tunnel params like ttl and df to be shown. tested with and without -DSMALL
2018-02-27Garbage collect RC5 documentation.Ingo Schwarze
We have no code implementing it, tedu@ took care of the rc5/ directory in 2014, the related files are commented out in arch/*/Makefile.inc, and opensslfeatures.h contains an explicit #define OPENSSL_NO_RC5.
2018-02-27Garbage collect MD2 documentation.Ingo Schwarze
We have no code implementing those functions.
2018-02-27Add RTL8211F support. Loosely based on the FreeBSD driver.Mark Kettenis
ok jsg@