summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-01-08Avoid a crash (free of bogus pointer) when there is a syntax errorTodd C. Miller
reading the config socket by clearing the entire blacklist struct instead of just the tag string. Also avoid holes in the blacklist array on error since the code can't cope with them. OK beck@
2015-01-08Use the field f_file also for the forwarding file descriptor. RemoveAlexander Bluhm
the special f_fd field. Also remove an useless F_FORWUDP case. test and OK jasper@
2015-01-08increase namecache size to follow maxvnodes. seems better than desiredvnodes.Ted Unangst
(accuracy of variable names, aside) ok kettenis
2015-01-08Clear autoconf6 flag after autoconf6 cleanup happened, not before.Florian Obser
Otherwise clean up code will never run. OK mpi@, benno@, henning@
2015-01-08Include the Routing Table ID in "struct rtentry" and reorder the fieldsMartin Pieuchot
such that there's no size change on, at least, amd64. This will allow us to simplify some APIs and deprecate the remaining flavors of "struct route". ok claudio@, phessler@
2015-01-08Factorize various duplicated chunks of (old and horrible) code, checkingMartin Pieuchot
for the validity of a given outgoing route entry into a single function. This change is inspired from FreeBSD r111767. The function introduced here, rt_checkgate(), should hopefully die in a near future. Why should it die? Well, it is way too late to do such validity checks: if your kernel can ends up in ether_output() with an invalid route, please do not let it try to find a new one that might do the job. Go read this function if you're wondering why you're getting messages like: "arpresolve: X.X.X.X: route without link local address" Since this horrible logic has survived 20 years of copy & past and small modifications for workarounds without a single clear commit message, let's assume it is full of dragons and try to play safe. This factorization is not intended to change any behavior. With much inputs from bluhm@, tested by weerd@ and florian@ on setups with p2p IPv6 interfaces. ok bluhm@, benno@, florian@
2015-01-08fix ssh_config FingerprintHash evaluation order; from Petr LautrbachDamien Miller
2015-01-08"default" is gone.Antoine Jacoutot
2015-01-08adjust for sshkey_load_file() API changeDamien Miller
2015-01-08Convert spkac.c to the new option handling code.Doug Hogan
input + ok jsing@
2015-01-08Convert pkcs8.c to the new option handling code.Doug Hogan
Minor KNF in a few places too. input + ok jsing@
2015-01-08Convert asn1pars.c to the new option handling.Doug Hogan
Also, removed a few useless if null checks. input from bcook@ input + ok jsing@
2015-01-08Do not unconditionally set a link-local address.Martin Pieuchot
carp(4) has a hack to update its Ethernet address which was also generating the corresponding IPv6 link-local address. Since the removal of the NOINET6 flag, this link-local address was generated even if no IPv6 address has been configured on the interface. This unbreak carp setup without v6 addresses, found the hard way by sebastia@. ok sebastia@, benno@, stsp@, @phessler
2015-01-08reorder hostbased key attempts to better match the defaultDamien Miller
hostkey algorithms order in myproposal.h; ok markus@
2015-01-08deprecate key_load_private_pem() and sshkey_load_private_pem()Damien Miller
interfaces. Refactor the generic key loading API to not require pathnames to be specified (they weren't really used). Fixes a few other things en passant: Makes ed25519 keys work for hostbased authentication (ssh-keysign previously used the PEM-only routines). Fixes key comment regression bz#2306: key pathnames were being lost as comment fields. ok markus@
2015-01-08Clarify and simplify.Antoine Jacoutot
2015-01-08Count number of sessions correctly.YASUOKA Masahiko
2015-01-08log as LOG_DAEMON in log_init again.Brent Cook
I mirrored from smtpd a little too literally.
2015-01-08missing , found by Dongsheng SongTheo de Raadt
2015-01-08Avoid a double-free in an error path.Doug Hogan
ok jsing@ beck@
2015-01-08declare a local version of MIN(), call it MINIMUM()Theo de Raadt
(sorry, my other changes were accidentally premature)
2015-01-08Use the correct config registers for the RTL8139 family. Unlike the RTL8169Brad Smith
and RTL8168 family, the RTL8139 has different register map for config registers. From FreeBSD WoL bits reviewed and tested by stsp@
2015-01-08sync log.c from smtpd.Brent Cook
Reduces the number of log.c snowflakes by a little, and gives ntpd a variadic fatal() function to be used later. ok deraadt@
2015-01-08declare a local version of MIN(), call it MINIMUM()Theo de Raadt
2015-01-08use the correct format string for refidBrent Cook
ok deraadt@
2015-01-07Do not need sys/param.hTheo de Raadt
2015-01-07bcallah noticed the ifndef guard for headers was wrong. don't fix, justTed Unangst
remove it, and put these includes up with their friends.
2015-01-07Cleanup network config after fetching the responsefile. This enablesRobert Peichaer
automatic upgrades on systems with trunk interfaces. OK krw@
2015-01-07Fix get_ifdevs() - don't filter vlan interfaces.Robert Peichaer
OK krw@
2015-01-07fix ctype casting bug spotted by Jonas 'Sortie' TermansenGilles Chehade
2015-01-07workaround for the Meyer, et al, Bleichenbacher Side Channel Attack.Ted Unangst
fake up a bignum key before RSA decryption. discussed/ok djm markus
2015-01-07Tweaks from jmc@Antoine Jacoutot
2015-01-07It is the copy command that is abbreviated as 'c', not chdir.Todd C. Miller
Also document that cd is an alias for chdir. From Kaspars Bankovskis.
2015-01-07Document the '=' command; from trondd at gmailTodd C. Miller
2015-01-07SVG is common enough to add it to the default types.Reyk Floeter
2015-01-07Sync rxvt-unicode's terminfo entry with rxvt-unicode-9.21:David Coppa
- Updated: Marc Lehmann <schmorp@schmorp.de>, 24 Nov 2014: implement cvvis as blinking cursor - Updated: Marc Lehmann <schmorp@schmorp.de>, 13 Dec 2014: removed superfluous 0 from sgr ok nicm@
2015-01-07updates for Serbia and Montenegro, from Zeljko JovanovicChristian Weisgerber
2015-01-07stupid me. need errno.hTed Unangst
2015-01-07set errno = EINVAL for invalid salts and hashes in most functions.Ted Unangst
remember to set EACCES in bcrypt_checkpass for hash differences. the higher level crypt_checkpass function will reset errno to EACCES in all cases, which is probably the right behavior, but this change gives code working with the lower level functions the correct errno if they care.
2015-01-07syncTheo de Raadt
2015-01-075.8 packages keyChristian Weisgerber
2015-01-07Bugfix: When the invocation of a user-defined macro follows a roffIngo Schwarze
conditional request on the same input line, don't skip the first few bytes of its content.
2015-01-07Relax configuration list parsing to allow multi-line blocks for tls,Reyk Floeter
root, tcp etc. Based on a diff from Nathanael Rensen. OK florian@
2015-01-07Start tweaking a bit.Antoine Jacoutot
2015-01-07Only MS IntelliMouse have a Z axis, prevent a false positive triggeredMartin Pieuchot
by -Wuninitialized reported by jsg@. ok stsp@
2015-01-07Bump example pubkey filenames for 5.7Florian Obser
OK benno@
2015-01-07use the same trick as mpii for posting the request descriptor withDavid Gwynne
a single 64bit write on lp64 archs, instead of two sequenced 32bit writes. cos the 64bit store is atomic, we dont need the mutex around it either.
2015-01-07Fix impi(4) to make watchdog work and not to panic.YASUOKA Masahiko
diff from uebayasi jsg ok uebayasi
2015-01-07replace bcopy with memcpy. still cant see the bug im looking for.David Gwynne
2015-01-07i may as well turn bzero into memset while i am busy not havingDavid Gwynne
luck finding my bug.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 02:35:13 +0000