summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-01-16increasing the size of the namecache suddenly made the commentTed Unangst
"This makes the algorithm O(n^2), but do you think I care?" a lot more meaningful, as discovered by krw. fix the loop so it doesn't restart all the time, as it's not necessary. (this was also tried years ago in rev 1.20 and reverted, but that change also introduced pool_put before the namecache was ready to free things. we have been freeing cache entries with pool_put for some time now, so that's been made safe.) ok deraadt krw
2015-01-16Parse and ignore .IX (generate index entry) macros because pod2man(1)Ingo Schwarze
emits them, by default without defining them, relying on the roff(7) quirk that undefined macros have no effect. This cures 1996 mandoc ERRORs in src/gnu.
2015-01-16Move to the <limits.h> universe.Theo de Raadt
review by millert, binary checking process with doug, concept with guenther
2015-01-16More evil bootstrap code. #ifndef ALIGNBYTES #define ALIGNBYTES 3.Theo de Raadt
Which makes this code go all wrong depending on where a system has put their things like ALIGNBYTES. Delete with prejudice. When someone needs to compile this in another environment, they need to face this hurdle, and maybe change the embedded memory allocator...
2015-01-16garbage collect empty .No macros mandoc warns aboutIngo Schwarze
2015-01-16<sys/param.h> to <limits.h> conversion. Verified binariesTheo de Raadt
ok millert, thanks to doug for process advice
2015-01-16add missing .An macrosIngo Schwarze
2015-01-16change to <limits.h> universe. The only changes in the binary are dueTheo de Raadt
to the heavy use of assert. ok millert
2015-01-16manage spacing in a simpler way, removing some useless macros mandoc warns aboutIngo Schwarze
2015-01-16move to <limits.h> where possible, annotate <sys/param.h> otherwiseTheo de Raadt
2015-01-16regression: incorrect error message on otherwise-successfulDamien Miller
ssh-keygen -A. Reported by Dmitry Orlov, via deraadt@
2015-01-16fix placement of opening parentheses, and drop some .Xo while hereIngo Schwarze
2015-01-16Move from <sys/param.h>. (The binary change is due to a line numberTheo de Raadt
passed to assert, found by doug) ok millert
2015-01-16Arguments are just ".Ar", not ".Brq Ar" or even ".Ns { Ns Ar ... Ns }".Ingo Schwarze
The .Ar macro already causes distinctive formatting in a standard way, so there is no need for additional braces. This also fixes the only mandoc warning in src/sbin.
2015-01-16switch to <limits.h>; ok millertTheo de Raadt
2015-01-16remove useless escaping; mandoc warned about some of thisIngo Schwarze
2015-01-16Properly escape punctuation when given as an argument to a macro;Ingo Schwarze
this was the only mandoc warning in src/bin.
2015-01-16Less code, more better. No longer need to worry about what mysteriousTed Unangst
things will happen when machines have 8 byte longs.
2015-01-16The make code has "bootstrap", to allow it to be brought up on otherTheo de Raadt
systems. Rarely used & tested -- perhaps once a decade. Perhaps not even once this decade? Anyways, #define PATH_MAX (MAXPATHLEN+1) is quite wrong. Delete the chunk, assuming any system this is ported to has PATH_MAX.
2015-01-16SSL_CTX_use_certificate_chain() has been added to LibreSSL and thereReyk Floeter
is no need to keep a local copy in ssl_privsep.c. This adds a little burden on OpenSMTPD-portable because it will have to put it in openbsd-compat for compatibility with legacy OpenSSL. OK gilles@
2015-01-16Adapt to <limits.h> universe.Theo de Raadt
ok millert
2015-01-16Replace <sys/param.h> with <limits.h>Theo de Raadt
millert spotted the accidental <ctype.h> removal that caused binary change.
2015-01-16The SSL/TLS session Id context is limited to 32 bytes. Instead ofReyk Floeter
using the name of relayd relay or smtpd pki, use a 32 byte arc4random buffer that should be unique for the context. This fixes an issue in OpenSMTPD when a long pki name could break the configuration. OK gilles@ benno@
2015-01-16Tweak previous: Do not put punctuation on its own line, put it at the endIngo Schwarze
of the preceding macro line; no output change with mandoc, fixes output with groff. Also, if you want spacing back after .Sm off, do not add an argument containing a blank character, simply rely on .Sm on.
2015-01-16Add regression tests for syslog over TLS.Alexander Bluhm
2014-07-11Add a test framework for the ospfd routing daemon. For each testAlexander Bluhm
one fresh daemon is started with an individual config. It is talking OSPF via a tun interface. At the process side of the tun device a client is running. This test programm is parsing the OSPF packets and generates new ones. It simulates other OSPF daemons. For now only hello packets are tested. Each test has a task list which drives the ospfd through its interface state machine. The plan is to extend the framework for the other OSPF packet types and state machines. Eventualy the generated kernel routing messages could also be checked. I have developed this test suite together with Florian Riehm.
2015-01-16Binary code patching on amd64Stefan Fritsch
This commit adds generic infrastructure to do binary code patching on amd64. The existing code patching for SMAP is converted to the new infrastruture. More consumers and support for i386 will follow later. This version of the diff has some simplifications in codepatch_fill_nop() compared to a version that was: OK @kettenis @mlarkin @jsg
2015-01-16Clean up macros in isakmpd(8).Anthony J. Bentley
- Fix mandoc warnings ("WARNING: skipping empty macro: No") - Mark up arguments with Ar, not Aq Ic - Mark up pathnames with Pa ok jmc@
2015-01-16Replace <sys/param.h> with <limits.h>Doug Hogan
This patch is from Theo. I helped verify that removing <sys/param.h> doesn't change anything. This produces the same binaries before and after with clang 3.5 and gcc 4.9.4 on amd64. There is a slight difference in the way it is generated by our old gcc 4.2.1 despite the fact that the preprocessed input is almost identical. ok deraadt@
2015-01-16when hostname canonicalisation is enabled, try to parse hostnamesDamien Miller
as addresses before looking them up for canonicalisation. fixes bz#2074 and avoids needless DNS lookups in some cases; ok markus
2015-01-16<sys/param.h> is not needed here either.Theo de Raadt
ok guenther millert doug
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
2015-01-16improve checksum parsing slightly. now handles filenames with spaces.Ted Unangst
(though not names with ')'; sorry.)
2015-01-16just to be careful, add a cpp guard that the sscanf sizes are okTed Unangst
2015-01-16adjust to HOST_NAME_MAX+1 & LOGIN_NAME_MAXTheo de Raadt
2015-01-16If MAXPATHLEN is undefined, do not set it to 512. Dangerous.Theo de Raadt
2015-01-16Complete the list of functions in the paragraph that mentions thatLawrence Teo
errbuf needs to hold at least PCAP_ERRBUF_SIZE chars.
2015-01-16Rename pcap_create()'s ebuf argument to errbuf to match the rest of theLawrence Teo
public pcap_* functions that use errbuf. Mainline libpcap also uses "errbuf" for pcap_create(). No object file change.
2015-01-16Add more missing argument names.Lawrence Teo
2015-01-16Remove pointless casts for several malloc/calloc/free calls. No objectLawrence Teo
file change.
2015-01-16The BPF paper referenced in the SEE ALSO section was most likely an unpublishedLawrence Teo
draft. Replace it with the authors' 1993 Winter USENIX paper, which is a more authoritative reference on BPF. ok deraadt@ jmc@ millert@
2015-01-16Fix a use after free, where the already freed p->opt.source was used byLawrence Teo
pcap_cleanup_bpf() to disable monitor mode on 802.11 devices. feedback blambert@ ok deraadt@ mikeb@ millert@
2015-01-16Delete the MANLINT variable and the related SUFFIXES rules becauseIngo Schwarze
since yesterday, "mandoc -Tlint -Wfatal" can no longer fail. Instead, as suggested by deraadt@, provide a manlint target that is *not* run during make build, but can be run whenever you want to check syntax of manuals. "nice stuff" deraadt@
2015-01-16syncTheo de Raadt
2015-01-16Merge in a commit from upstream..Brad Smith
- Fix bug#637: fix that nsd.db grows limitlessly, an off by one on one megabyte free chunks, created during AXFRs of large zones, that caused the one megabyte chunk to be leaked. ok sthen@
2015-01-16Since <netdb.h> soon won't include <sys/param.h>, MAXHOSTNAMELEN mayTheo de Raadt
not be in scope, so hardcode as 256. Other options have more downside.
2015-01-16move to PATH_MAX, etc; normalize includes for life in the <limits.h> universeTheo de Raadt
ok guenther millert
2015-01-16Move to using PATH_MAXTheo de Raadt
ok millert guenther
2015-01-16first batch of cleanup to programs based upon the namespace cleanupsTheo de Raadt
in net/pfvar.h sys/proc.h sys/ucred.h arpa/nameser.h change to PATH_MAX, reduce use of MIN() and MAX(), HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc etc ok millert guenther, some review by doug
2015-01-16first batch of programs adapting to the namespace cleanupTheo de Raadt
(pfvar.h nameser.h proc.h ucred.h) ok guenther millert, and some review from doug as well.