summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2015-10-13allow getsockopt IP_RECVDSTPORT & IPV6_RECVDSTPORT for an "inet" pledgeTheo de Raadt
2015-10-13semarie points out i am already forgetting the rules are very tight aroundTheo de Raadt
2015-10-13Reduce the amount of code by moving the three copies of the ohashIngo Schwarze
2015-10-13oops, a chown appears late on the code. to satisfy this pledgeTheo de Raadt
2015-10-13Convert ECParameters_dup() from a macro that uses ASN1_dup_of() into anJoel Sing
2015-10-13can pledge "stdio" after opening device.Theo de Raadt
2015-10-13pledge "stdio rpath wpath cpath fattr"; fattr due to locking code borrowedTheo de Raadt
2015-10-13pledge "stdio rpath wpath cpath", full path handling to satisfy dbopen()Theo de Raadt
2015-10-13pledge "stdio rpath wpath cpath proc exec". creates files throughoutTheo de Raadt
2015-10-13pledge "stdio rpath wpath cpath"Theo de Raadt
2015-10-13Don't use exp2f(), it breaks build on vax. Use a shift instead.Stefan Sperling
2015-10-13Convert a number of the old ASN1_{d2i,i2d}_{bio,fp}_of() macros toJoel Sing
2015-10-13Single byte read/write tests.Joel Sing
2015-10-13Add test coverage for peer certificate info and connection info.Joel Sing
2015-10-13Make regress work again post hackathon tls_handshake/tls_read/tls_writeJoel Sing
2015-10-13Group d2i/i2d function prototypes by type and add missing externs for theJoel Sing
2015-10-13Sync printf family return value with ISO C which specifies thatTodd C. Miller
2015-10-13Add a helper for writing the message to simplify the code.Eric Faurot
2015-10-13pledge() queue processGilles Chehade
2015-10-13pledge() control processGilles Chehade
2015-10-13Make use of rtisvalid(9) to check if local route entries match existingMartin Pieuchot
2015-10-13Simplify arptfree() to no longer look at the route entry's refcounter.Martin Pieuchot
2015-10-13Use rtisivalid(9) to check if the given (cached) route can be used.Martin Pieuchot
2015-10-13Make sure RTF_LOCAL route entries are UP when added to the tree.Martin Pieuchot
2015-10-13Initialize va_filerev in vattr_null() to avoid leaking stack garbage;Philip Guenther
2015-10-13ctype functions isxdigit() expect an unsigned char value; add missing castsPhilip Guenther
2015-10-13To alter just the atime of the mailspool, use utimensat()+UTIME_OMIT insteadPhilip Guenther
2015-10-13Plug a leak.Sunil Nimmagadda
2015-10-13pledge("stdio") the scheduler processGilles Chehade
2015-10-13pledge("stdio") the RSA-privsep processGilles Chehade
2015-10-13let the enqueuer pledge() in both online and offline modesGilles Chehade
2015-10-13Pass unsigned chars to ctype functions.Reyk Floeter
2015-10-13new sentence, new line;Jason McIntyre
2015-10-13offline queue is no longer user-writable, do not attempt resetting fchflagsGilles Chehade
2015-10-13Pledge "stdio rpath" requests for nologin.Doug Hogan
2015-10-13Obvious pledge "stdio" for yes.Doug Hogan
2015-10-13revert previous. changes the behaviour of:Daniel Dickman
2015-10-13Add some newer DT_* and DF_* constantsPhilip Guenther
2015-10-13Tighten the ranges in wcrtomb(3).Anthony J. Bentley
2015-10-13free the correct IV length, don't assume it's always the cipherDamien Miller
2015-10-13Pledge "fattr" request should allow fchflags().Doug Hogan
2015-10-12satisfy jmc!Theo de Raadt
2015-10-12pledge "proc" request should allow setsid()Theo de Raadt
2015-10-12plegde(2) for apropos(1), help(1), man(1), mandoc(1), and whatis(1):Ingo Schwarze
2015-10-12pledge(2) for makewhatis(8):Ingo Schwarze
2015-10-12do not call sync() when committing a message, it's not helping in any wayGilles Chehade
2015-10-12surprisingly, this can pledge "stdio rpath exec" right at start. onceTheo de Raadt
2015-10-12Remove the "cmsg" attribute, as promised. Use "sendfd" or "recvfd",Theo de Raadt
2015-10-12Add details about a variety of semantics; going to keep adding and thenTheo de Raadt
2015-10-12Add missing checks for write errors; OK eric@Todd C. Miller