summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2014-05-06factor out the safepathTed Unangst
2014-05-06be more explicit about what's a stringTed Unangst
2014-05-06Introduce -fstack-shuffle, which randomizes local stack variables.Martynas Venckus
2014-05-06better alloc idiomTed Unangst
2014-05-06factor max message sizeTed Unangst
2014-05-06don't give people bad ideas about pool_debugTed Unangst
2014-05-06We don't really need uniform distribution for mktemp(3) so useTodd C. Miller
2014-05-06small fix from mancha1. currently unused file, but no harm fixing it.Ted Unangst
2014-05-06reallocarrayTed Unangst
2014-05-06spell NULL as NULLTed Unangst
2014-05-06Make sure the stdout output is check, to confirm proper sorting.Miod Vallat
2014-05-06Assorted cleanups:Miod Vallat
2014-05-06Add a fixed (read: non-SIGSEGV'ing) pq_test.Miod Vallat
2014-05-06Remove broken-by-design testMiod Vallat
2014-05-06Make sure PKCS7_get_octet_string() return values are checked for NULL.Miod Vallat
2014-05-06Remove the ``addressable'' argument to search_string_def(). Turned out to beMiod Vallat
2014-05-06Sort CFLAGS, SRC and SSLASM stanzas by the directories they apply to, to makeMiod Vallat
2014-05-06syncTheo de Raadt
2014-05-06Add brswphy(4) manual page.Paul Irofti
2014-05-06Enable brswphy(4) on the Octeon platform.Paul Irofti
2014-05-06Add support for the Broadcom PHY found on the Octeon-based DSR-500.Paul Irofti
2014-05-06Regen after Broadcom 53115 addition.Paul Irofti
2014-05-06Add an entry for the Broadcom 53115 model found on the DSR-500.Paul Irofti
2014-05-06missing NULL checks to see if init is needed. found hard way by deraadt.Ted Unangst
2014-05-06fix stupid commitTed Unangst
2014-05-06enh@google reported a warning in crufty y2k code. just delete it.Ted Unangst
2014-05-06reallocarray for things which are arrays. ok deraadtTed Unangst
2014-05-06use explicit_bzeroTed Unangst
2014-05-06clear a stack buffer with explicit_bzeroTed Unangst
2014-05-06remove cpsw_{read,write}_4 wrapper functions and just use the realJasper Lievisse Adriaanse
2014-05-06change the create-child-sa responder code, so it does not store anyMarkus Friedl
2014-05-06zap stray word; ok markusJason McIntyre
2014-05-06Include <sys/vmmeter.h> directly instead of relying on it beingMartin Pieuchot
2014-05-06Explicitly zero out the ibufs before releasing the memory to make sureReyk Floeter
2014-05-06Fix two memory leaks: EVP_PKEY_get1_RSA() returns a referenced keyReyk Floeter
2014-05-06initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkeyMarkus Friedl
2014-05-06Fix a memleak when lookup of SA fails during forwarding of encrypted IPv6Gerhard Roth
2014-05-06cleanup IKE-SA tree handling (fixes repeated-insert & double-remove)Markus Friedl
2014-05-06Plug two xfer leaks and a buffer one.Martin Pieuchot
2014-05-06don't sa_free() in the receive path (prevents use-after-free); ok mikeb@Markus Friedl
2014-05-06send the delete with the locally allocated SPI in ikev2_init_create_child_sa()Markus Friedl
2014-05-06make sure some notify payloads are encrypted; ok mikeb@Markus Friedl
2014-05-06initial support for PFS; ok reyk@Markus Friedl
2014-05-06retire IKED_REQ_DELETE and fix delete parsing; ok reyk@Markus Friedl
2014-05-06no need to include rand.h now the RAND_seed() calls are gone.Jonathan Gray
2014-05-06knf approximationTed Unangst
2014-05-06move chacha context and buffer out of bss and allow mmap to place themTed Unangst
2014-05-06"stay backwards-compatible with 0.9.5; this should go away soon"Ted Unangst
2014-05-06remove KerberosTed Unangst
2014-05-06move a comment to make unifdef happierTed Unangst