summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-10-02When redirect is used with sticky-address and a matching pass rule usesJoel Sing
reply-to, the sticky-address in the source tracking pool is overwritten with the reply-to address, resulting in new connections being incorrectly redirected to the reply-to host (instead of the sticky-address host). Prevent this by passing a NULL source node reference to pf_map_addr() when looking up the reply-to host, thus preventing the NAT source node from being overwritten. ok mcbride@ henning@
2008-10-02A closed, disconnected, or otherwise failed socket is still a socketTheo de Raadt
and should return stat information instead of EINVAL from deep in the guts of tcp_usrreq. While there, put some more information into struct stat, inspired by FreeBSD. EINVAL problem reported in PR 5943
2008-10-02Convert an unchecked strdup to xstrdup. OK deraadt@Todd C. Miller
2008-10-02Fix PF state key mismatches that occur when callers of icmp6_reflect()Joel Sing
recycle mbufs. Based on an initial diff by henning@, also tested by todd@. ok henning@
2008-10-02in priv_settime(), we must not adjust the 'next' timestamps on their forHenning Brauer
the offset since we use monotime for these for some time now, and monotime is not affected by system time changes (like, duh, that was the reason for the change). PR5927
2008-10-02correct path for isakmpd/local.pub; from Matthew DempskyJason McIntyre
2008-10-02document state-defaults optionHenning Brauer
2008-10-02implement "set state-defaults X", where X is a list of state options asHenning Brauer
permitted keep state(X). applies to all rules which do not have keep state explicitely. e. g. "set state-defaults pflow, no-sync" ok phessler deraadt
2008-10-02Hook up fnmatch and glob regress.Todd C. Miller
2008-10-02syncTheo de Raadt
2008-10-02Monitor various named files for changes (root.hint and the standard zones).Stuart Henderson
Closes PR 5625 ok ajacoutot@, jakob@
2008-10-01Regress driver for fnmatch(3). Needs more tests.Todd C. Miller
2008-10-01Regress driver for glob(3). Needs more tests.Todd C. Miller
2008-10-01POSIX character class support for fnmatch(3) and glob(3). OK deraadt@Todd C. Miller
2008-10-01If a neighbor solictation isn't from the unspecified address, make sureClaudio Jeker
that the source address matches one of the interfaces address prefixes. From NetBSD, tested by todd@ and naddy@
2008-10-01Revert last commit. It didn't really help and we fixed X11 instead.Mark Kettenis
ok miod@
2008-10-01Mention how lockspool is expected to be used.Todd C. Miller
2008-10-01Use poll() to determine when stdin is readable and throw away inputTodd C. Miller
until we hit EOF. OK deraadt@
2008-10-01Use the real uid instead of getlogin() to determine the identityTodd C. Miller
of the invoking user. OK deraadt@
2008-10-01Simplify the loop used for bp overflow detection to match what I'mTodd C. Miller
using on the list server.
2008-10-01In uvm_pglistalloc(), do not fall through the success code if we could not findMiod Vallat
a suitable range and ran out of memory segments. Oops.
2008-10-01Fix for sequential retrieval failure when using large key/data pairs.Todd C. Miller
Closes PR 2764. Has been running on the list server for years. OK deraadt@
2008-10-01Fix synopsis of "commit" command.Mark Kettenis
ok sthen@, xsa@, deraadt@
2008-10-01When things get tight, sis(4) loses firstTheo de Raadt
2008-10-01The display cycle key generates two ACPI events, so catch bothRobert Nagy
from jsign@ Change the camel capitalized key defines to full capitals, and add some keys found on the eeepc 1000H ok marco@
2008-10-01Be more agressive in flusing the cache. In addition to flushing theMark Kettenis
instruction cache, also purge TLB entries. The PA-RISC 2.0 architecture says that cache lines may be moved in when a translation exists even if no access is done. This might have been hurting us badly since we create illegal aliases in pmap_zero_page() and pmap_copy_page(). Probably not perfect yet, and perhaps a bit of a sledgehammer, but it makes PA-RISC 2.0 machines stable again.
2008-10-01Don't timeout_del() if we're going to do a timeout_add() right away.Michael Knudsen
ok claudio
2008-10-01Assert my copyright on files I gave to d@ back in 1998.Dale Rahn
2008-10-01Add another change that got dropped in the merge of perl 5.10.0.Todd C. Miller
This time, add a comment describing why it is there.
2008-10-01re-apply change from rev 1.18Todd C. Miller
2008-10-01for the `g' and `G' commands, document that if no lines matchJason McIntyre
the regular expression then the current line number remains unchanged;
2008-10-01give a less confusing error message on bindresvport() failure; okOtto Moerbeek
matthieu@ millert@
2008-10-01-s not specified by posix; from Daniel DickmanJason McIntyre
2008-10-01typo; Daniel DickmanTheo de Raadt
2008-10-01in getrusage(), use RUSAGE_SELF for the current process rather than 0Kevin Lo
ok millert@
2008-09-30check all luns on sas boards to see if the device is atapi instead of justDavid Gwynne
the first one.
2008-09-30syncTheo de Raadt
2008-09-30provide a scsi probe hook that checks if an atapi device is plugged intoDavid Gwynne
sas mpi variants. this lets the midlayer know it should send the right sized commands to the device. this will make the cd drive work on the sun enterprise m4000 and related machines. reported by James Hsieh at sun.
2008-09-30add support for handling extended configuration page requests. the sasDavid Gwynne
pages are all extended, which is annoying.
2008-09-30describe the extended configuration header and the sas device config pageDavid Gwynne
0.
2008-09-30Fix a problem in the last commit. Upon closer reading of POSIX, inTodd C. Miller
-p mode we only want to change the mode on directories we actually created.
2008-09-30Properly count memory on machines where Open Firmware reports zero sizedMark Kettenis
entries in between filled banks. ok drahn@
2008-09-30Properly display files with embedded colons being xferred via ftd.Todd C. Miller
Closes PR 5119. OK miod@
2008-09-30Fix various pmap_extract() buglets:Miod Vallat
- for kernel space addresses, check the page number fits in Sysmap before accessing the array. - for user space addresses, return the right (in-page) address bits.
2008-09-30Do not perform cache operations in vmapbuf(), pmap is supposed to do themMiod Vallat
for us if needed. ok art@ kettenis@
2008-09-30style nits.Brad Smith
2008-09-30fix ugly comments.Pierre-Yves Ritschard
2008-09-30add missing copyright.Pierre-Yves Ritschard
2008-09-30aldap library -- Replacement for openldap used in ypldap. aldap is an ↵aschrijver
semi-asynchronous client interface to connect to LDAP servers.
2008-09-30Always say "User %s access denied", in all cases, to avoid some stupidTheo de Raadt
spinny things which parse those messages. Do not close the connection as requested by Josh Grosse, since a 530 is not supposed to do that. ok millert