summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-04-05- -Z before -z in options listJason McIntyre
- add -Z to help and usage()
2017-04-05an annoying whitespace glitchTheo de Raadt
2017-04-05timeval has trailing padding on powerpc and m88k, so memset it beforePhilip Guenther
copyout to avoid leaking kernel stack ok deraadt@
2017-04-05Here at OpenBSD we change ABIs at the fling of a hat. Just in case aTheo de Raadt
future disk info sysctl has pads in the structures, use M_ZERO when allocating the storage to avoid leaking kernel memory.
2017-04-05clear structure on the stack before copying out for sysctl. At presentTheo de Raadt
it has no pads, but a future ABI change could add something and leak kernel memory.
2017-04-05syncTheo de Raadt
2017-04-05Allow nc to save the peer certificate and chain in a pem file specifiedBob Beck
with -Z ok jsing@
2017-04-05Add tls_peer_cert_chain_pem - To retreive the peer certificate and chainBob Beck
as PEM format. This allows for it to be used or examined with tools external to libtls bump minor ok jsing@
2017-04-05Internal changes to allow for relayd engine privsep. sends the hash of theBob Beck
public key as an identifier to RSA, and adds an function for relayd to use to disable private key checking when doing engine privsep. ok jsing@
2017-04-05Do not print a warning if closing the control socket fails. ItAlexander Bluhm
cannot happen and there is nothing that could be done about it. OK deraadt@
2017-04-04add a config test flag to sasyncdJonathan Gray
ok reyk@ deraadt@ jmc@
2017-04-04Also remove non syspatch hidden files/dirs.Antoine Jacoutot
2017-04-04Do not purge the CONFIG_SERVERS config in the parent. The ticket code usesClaudio Jeker
the servers config for its rekeying handling. Without this no rekeying happens and httpd stops working. Learned the hard way by me and beck@ OK reyk@
2017-04-04struct vfsconf is tightly packed, but let's M_ZERO it in case that everTheo de Raadt
changes to avoid exposing userland memory.
2017-04-04Ensure, that during upgrades, the default for the "Location of sets"Robert Peichaer
question is set to http if /etc/installurl exists and override the install method information from the cgi server. 'makes sense' deraadt@
2017-04-04The unsigned result cannot be -1, turn it into a signed variable.Reyk Floeter
OK rzalamena@
2017-04-04constify pc_remote and pc_circuitReyk Floeter
OK rzalamena@
2017-04-04Send a RTM_PROPOSAL to clear out other dhclient instances on startup.Kenneth R Westerback
Replaces forcing interface link state down and up to generate RTM_IFINFO messages.
2017-04-04document comments in table files; help/ok gillesJason McIntyre
2017-04-04tweak previous;Jason McIntyre
2017-04-04Add missing newline in fprintf error message.Reyk Floeter
OK jsg@
2017-04-04Treat SSID's like the 0 to 32 bytes of uint8_t data that they reallyKenneth R Westerback
are. Track and use the actual lengths and use memcpy()/memcmp() instead of strcmp()/strdup().
2017-04-04Cleanup the code further. Get rid of the remaining C++-style comments,Mark Kettenis
remove some debug printfs, get rid of STATIC and __inline defines and remove a bit more unused code. ok drahn@, visa@
2017-04-04Issue memory barrier before lock release, not after. This ensuresVisa Hankala
the release write becomes globally visible only after any writes of the critical section are globally visible. In practice, the reordering has not happened because the kernel runs in the total store order mode. Tested by and OK kettenis@
2017-04-04add a free() size near microcode loadingTheo de Raadt
2017-04-04Rewrite tohexstr() to use the common idiom of converting a byteTodd C. Miller
string to hex nybble by nybble. This avoids using the return value of snprintf() unchecked. OK deraadt@
2017-04-04Add 8265 and 3168 support. Both cards need new firmware files which currentlyClaudio Jeker
need to be installed by hand until the iwm-firmware package has been updated. This includes handling (by ignoring) of IWM_UCODE_TLV_FW_MEM_SEG and IWM_DEBUG_LOG_MSG firmware commands. Mostly stolen from dragonflybsd. With this in the X270 has working ethernet and wifi. Commit! deraadt@
2017-04-04disallow creation (of empty files) in read-only mode; reported byDamien Miller
Michal Zalewski, feedback & ok deraadt@
2017-04-04cp -p the bootblocks to RELEASEDIR; ok tbTheo de Raadt
2017-04-03warn format string should be literal.Frederic Cambus
OK deraadt@, millert@
2017-04-03Change parse_string() to take an optional integer pointer that canKenneth R Westerback
be used to return the final size of the parsed (i.e. un-vis'ed) string. Use same, plus memcpy() to ensure entire final string is copied to intended destination even if there are embedded NULs.
2017-04-03Add caveat telling it's better to always read a data byte when passingOtto Moerbeek
control messages. Problem noted by Luke Small; ok deraadt@
2017-04-03Send and receive 1 byte of data in addition to the control message. This isOtto Moerbeek
needed to make the code work in more cases. Sending actually is not really needed, but do it anyway, to avoid confusing mismatch between producer and consumer. Problem noted by Luke Small; ok deraadt@
2017-04-03WSDISPLAY_MAXFONTCOUNT macro was introduced in sys/dev/wscons/wsconsio.hFrederic Cambus
(revision 1.75) to limit the number of fonts that can be loaded. Reflect that in the man page as well. OK jcs@
2017-04-03Simplify read_string() to just read the characters between the '"'s.Kenneth R Westerback
Push the un-vising up to parse_string(). This allows both the actual string and the un-vised version to be available as desired. Use memcpy() instead of strdup() to copy un-vised string since it may legitimately contain NUL.
2017-04-03check return from pread, don't divide -1 for countTed Unangst
2017-04-03use recallocarray() because the array contains data that can be observedTheo de Raadt
2017-04-03initialize regmatch_t always, fixes grep -o ""Ted Unangst
from Michael Santos
2017-04-03provide size to free(9)Theo de Raadt
2017-04-03Fix silly code that printfs NULL when there are no fractional secondsBob Beck
on a GENREALIZEDTIME (which there should really never be for anything remotely standards compliant) ok jsing@
2017-04-03Tweak parse_string() to not consume the ';'. Simplifies/shortensKenneth R Westerback
some logic.
2017-04-03Tweak 'expecting' parse_warn() messages to be more consistent.Kenneth R Westerback
2017-04-03Compute address for ll/sc only once.Visa Hankala
2017-04-02Less convoluted code in soshutdown()Theo de Raadt
ok guenther
2017-04-02The character buffer should be resized using recallocarray()Theo de Raadt
ok millert and nicm a while ago
2017-04-02Always use return value of asprintf to determine success/failure,Theo de Raadt
don't rely upon *ret becoming NULL ok millert, tom
2017-04-02Check return value of asprintf(), and don't use 0 as a char *Tom Cosgrove
Started by, and ok, deraadt@
2017-04-02Change parse_string() warning from "filename must be a string" toKenneth R Westerback
"expecting a string". Things other than filenames are parsed here.
2017-04-02Filter out RDTSCP, needed to handle solaris guests. We set the VMX controlMike Larkin
to enable RDTSCP to 0, so when solaris attempted to use the instruction (since it wasn't filtered out of CPUID information), the CPU issued an #UD exception.
2017-04-02note that some hosts never generate tuples and are ignored;Jason McIntyre
ok beck