summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-01-11Simplify SSL_get_peer_certificate()Joel Sing
ok inoguchi@ tb@
2022-01-11Rename 'peer' to 'peer_cert' in SSL_SESSION.Joel Sing
The 'peer' member of SSL_SESSION is the leaf/end-entity certificate provided by our peer. Rename it since 'peer' on its own is unhelpful. ok inoguchi@ tb@
2022-01-11Revise for changes to tls_key_share_peer_public()Joel Sing
2022-01-11Plumb decode errors through key share parsing code.Joel Sing
Distinguish between decode errors and other errors, so that we can send a SSL_AD_DECODE_ERROR alert when appropriate. Fixes a tlsfuzzer failure, due to it expecting a decode error alert and not receiving one. Prompted by anton@ ok tb@
2022-01-11Use SSL_AD_INTERNAL_ERROR for non-decoding alerts when parsing keyshares.Joel Sing
ok tb@
2022-01-11Simplify tlsext_keyshare_server_parse()Joel Sing
SSL_AD_DECODE_ERROR is the default alert for a TLS extension parsing failure - remove the various gotos and simply return 0 instead. ok tb@
2022-01-11Bump KVA space up to 512MB (and a bit).Mark Kettenis
ok phessler@, deraadt@, miod@
2022-01-11Wrap long linesKinichiro Inoguchi
2022-01-11Check function return valueKinichiro Inoguchi
2022-01-11Suppress warningKinichiro Inoguchi
2022-01-11Compare pointer variable with NULLKinichiro Inoguchi
2022-01-11Remove space between '*' and pointer variable.Kinichiro Inoguchi
2022-01-11Convert openssl(1) smime option handlingKinichiro Inoguchi
Apply new option handling to openssl(1) smime and no functional changes. input and ok jsing@
2022-01-11Change the way the parser accesses files. It now builds the file pathClaudio Jeker
based on information from the repository, a local path and the filename. This simplifies some code both in the main process and the parser. For this to work repositories are passed to the parser before any other entity of this repository is passed. Struct entity is extended to include the repoid and the path along the file(name). Input and OK tb@ & job@
2022-01-11Garbage collect historical setting of dsa->write_params = 1.Theo Buehler
This is always 1 with modern libs and write_params will soon go away.
2022-01-11add Synopsys Degisnware UART (dw-apb-uart) supportSASANO Takayoshi
To fix Allwinner H6's UART problem, need to add dw-apb-uart special code. ok kettenis@
2022-01-11Remove KASSERT(0) and default switch case. No other sc_ncm_formatClaudio Jeker
switch has a default case and umb_ncm_setup_format() ensures that only 16 and 32bit formats are accepted. Fixes build error without DIAGNOSTIC set. Found by and OK robert@
2022-01-11fix RSB_DMCR_DEVICE_MODE_DATA value to enter RSB mode correctlySASANO Takayoshi
ok kettenis@ patrick@
2022-01-11spellingJonathan Gray
2022-01-11move allocations in DIOCSADDRULE and DIOCHANGERULE outside of locks.Alexandr Nedvedicky
this diff lets pf_rule_copyin() to be called outside of PF_LOCK()/NET_LOCK(). OK bluhm@
2022-01-11regenVitaliy Makkoveev
2022-01-11Unlock getpeername(2). For inet and unix sockets it follows the codeVitaliy Makkoveev
which was unlocked with accept(2) unlocking. For key management and route domain sockets it just copies the read-only data. ok bluhm@
2022-01-11Produce alive in-flight sockets with positive "f_count == unp_msgcount"Vitaliy Makkoveev
equation. Such sockets should not be killed by unp_gc() otherwise system will panic. tested by anton@; ok bluhm@
2022-01-11move kern_unveil.c to use DPRINTF()Sebastien Marie
Changes the way printf debug is done in kern_unveil.c Currently, each printf() is enclosed in #ifdef DEBUG_UNVEIL. It moves to using DPRINTF(), and reduces the number of #ifdef inside the file. Also changes some strings to use __func__ instead of using the function name verbatim. ok visa@
2022-01-11Remove dead store to f and avoid use of unvalidated fd.Visa Hankala
Found by LLVM scan-build. OK millert@ deraadt@
2022-01-11Add temporary verbose logging when remote coverage fails to attach.Anton Lindqvist
In the hopes of tracking down a rare bug seen on syzkaller.
2022-01-11no need to inspect the coverage for the dying test caseAnton Lindqvist
2022-01-11In revision 1.43 of kcov.c, the redundant conditional of checking forAnton Lindqvist
an exising kcov descriptor with the given device minor was removed since kcov is a cloning device; i.e. the device minor should always be unique. However, there's one edge case to still consider in which one thread have tracing enabled while another thread closes the same kcov descriptor. The kcov descriptor is kept alive until thread with tracing enabled exits to prevent usage after free. This does however cause the spec file layer above to flag the device minor as unused. Any subsequent open of /dev/kcov would trip on the assertion in kcovopen() until the thread with tracing enabled exits. Therefore unconditionally remove the kcov descriptor from the global list of active descriptors which is fine since the same kcov descriptor will later be freed in kcov_exit(). I have never seen this in the wild but realized while hunting another bug.
2022-01-11spellingJonathan Gray
2022-01-11Tidy up some commentsAndrew Fresh
requested by deraadt@
2022-01-11spellingJonathan Gray
ok jmc@
2022-01-11"void" functions should not return anything. From Tim Rice via -portable.Darren Tucker
2022-01-11suppress "Connection to xxx closed" messages at LogLevel >= errorDamien Miller
bz3378; ok dtucker@
2022-01-11If the install media contains non-free /*firmware*.tgz files, use fw_updateTheo de Raadt
to install them. This lets users usb-lift firmware on a preloaded install70.img image like this: # vnconfig install70.img vnd0 # (mount /dev/vnd0a /mnt && cd /mnt && fw_update -F iwm iwx iwn intel) # umount /mnt && vnconfig -u vnd0 The firmwares are installed after the sets, then all network drivers are re-configured in the hope that new firmwares have showed up. The install script continues to attempt a network firmware install, which might pull/update additional firmwares. work done with afresh1
2022-01-11Split 2nd half of enable_network() into a sub-function enable_ifs().Theo de Raadt
This is the piece which loops over hostname.* files and runs ifconfig like the inner loop of base /etc/netstart
2022-01-11match on Intel Jasper LakeJonathan Gray
cavs/hda is pci class multimedia subclass audio so not automatically matched by azalia but confirmed to work after matched tested by Sven Wolf on Acer Swift 1 SF114-34 with Pentium Silver N6000
2022-01-10regenJonathan Gray
2022-01-10add Intel Jasper Lake devicesJonathan Gray
from Intel Pentium Silver and Intel Celeron Processors Datasheet 633935
2022-01-10Convert tls_bio_cb for opaque BIOTheo Buehler
joint with jsing
2022-01-10Mechanical conversion of libcsi for opaque DH.Theo Buehler
ok jsing
2022-01-10Document EVP_AEAD_CTX_{new,free}() and adjust example code.Theo Buehler
looks good to jsing
2022-01-10fix SEE ALSO;Jason McIntyre
2022-01-10Unbreak tree. Sorry about that.Theo Buehler
2022-01-10Return ENOMEM on malloc errors to prevent use of uninitialized stackTobias Heider
memory. Cleanup error handling while here. ok stsp@ visa@
2022-01-10When rendering the \h (horizontal motion) low-level roff(7) escapeIngo Schwarze
sequence in -T ps and -T pdf output mode, use an appropriate horizontal distance by correctly using the term_len() utility function. Output from the -T ascii, -T utf8, and -T html modes was already correct and remains unchanged. Lennart Jablonka <hummsmith42 at gmail dot com> found and reported this unit conversion bug (misinterpreting AFM units as if they were en units) when rendering scdoc-generated manuals (which is a low quality generator, but that's no excuse for mandoc misformatting \h) on Alpine Linux. Lennart also tested this patch.
2022-01-10syncTheo de Raadt
2022-01-10Initialize variables that are touched in the error path.Visa Hankala
Reminded by LLVM scan-build.
2022-01-10NULL out pointers after transferring them to the DSA object.Theo Buehler
2022-01-10syncTheo de Raadt
2022-01-10Dedup get_dsa*() code.Theo Buehler
Pointed out by jsing