summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2001-08-22oops, forgot to up pflog0; mbing@nfr.netTheo de Raadt
2001-08-22Need an extra sa_release() when de-allocating exchange-associated SAs;Angelos D. Keromytis
thus, failed exchanges/negotiations don't leak SAs and transports. ok niklas@
2001-08-22Bypass IPCOMP too.Niklas Hallqvist
2001-08-22Add IPCOMP setsockopt policy controls. While here fix the other policies tooNiklas Hallqvist
2001-08-22Make this work a bit better.Artur Grabowski
2001-08-22Duh.Bob Beck
2001-08-22snprintf() return audit. sync with kameJun-ichiro itojun Hagino
2001-08-22-Functionify some of the main loop, so it isn't so horrificly deep and isBob Beck
a bit easier to look at, for small values of easier. -Add two options for -u user and -g group to optionally make the proxy drop privs after doing it's pf ioctl's to find out where to go. Running as non root does mean that the PORT and EPRT backchannels do not come from port 20, but this isn't a problem for most sensible ftp clients and sets of packet filter rules that aren't written by a knuckle dragging ape living in the 90's. I would make it drop privs by default, but technically this breaks the ftp specs, and for the upcoming stuff to deal with EPRT, we will need root privs to manipulate rdr rules).
2001-08-22iobase is a bus_addr_tJason Wright
simplify 'alive' handling check for IRQUNK later
2001-08-22Better error catching (badly aligned iov's are EINVAL not ENOMEM)Jason Wright
2001-08-22setup the 'machine' commands for ddbJason Wright
2001-08-22default kernel is 'bsd' around hereJason Wright
2001-08-22Correct the setup of the intial TCP state window and pre-validate th_ackMike Frantzen
on an FIN|ACK close if the client has never responded.
2001-08-22ether_hton(3) -> ether_hostton(3)Brad Smith
2001-08-22Fix panic in pf (was my fault) caused by a bad key compare optimizationMike Frantzen
Add debug output to track loose state matches
2001-08-21my initial guess at pflog rollover configTheo de Raadt
2001-08-21start pflogd at the right place, I thinkTheo de Raadt
2001-08-21pflogd; work by canacar@eee.metu.edu.tr and myselfTheo de Raadt
2001-08-21Was lacking a cast.Miod Vallat
2001-08-21minor typos and cleanupKevin Steves
2001-08-21zs and all it's associated stuff (all from NetBSD).. Works on my ultra1,Jason Wright
but still needs tweaks (wedging this into OpenBSD is worse than square peg in round hole).
2001-08-21syncTheo de Raadt
2001-08-21more; openbsd@davidkrause.comTheo de Raadt
2001-08-21adjust dummy salt: normal users have 6 blowfish roundsCamiel Dobbelaar
2001-08-21small cleanup, OpenBSD -> .Ox, NetBSD -> .NxDale Rahn
2001-08-21use FLOCKCamiel Dobbelaar
from Solar; ran it by millert@
2001-08-21Add manpages for more powerpc devices, files donated.Dale Rahn
These could use flushed out and cleaned up. com is deleted, as it does not exist on apple systems.
2001-08-21Start syncing with FreeBSD:Federico G. Schwindt
o Implement _get_curthread() and _set_curthread(). Use it where possible. o Add missing _thread_[enter|leave]_cancellation_point(). o Add a couple of not yet used vars to pthread_private.h. o Remove return's from void functions. This is by no means complete, but instead of doing a big commit, i'll split it in small ones, minimizing diffs.
2001-08-21Typo: 'a architecture' -> 'an architectureKenneth R Westerback
2001-08-21syncTheo de Raadt
2001-08-21Remove /usr/bin/mkfifo link -- mkfifo has lived in /sbin for severalTodd C. Miller
releases now.
2001-08-21No need to explicitely link with libgcc.aMiod Vallat
2001-08-21Recurse in mvmeppcMiod Vallat
2001-08-21Dumb Makefile to recurse in stand/ for mvmeppc land.Miod Vallat
2001-08-21KNFTheo de Raadt
2001-08-21MLINK to config file man pageTheo de Raadt
2001-08-21Update to sendmail 8.11.6, from the release notes:Todd C. Miller
SECURITY: Fix a possible memory access violation when specifying out-of-bounds debug parameters. Problem detected by Cade Cairns of SecurityFocus. Avoid leaking recipient information in unrelated DSNs. This could happen if a connection is aborted, several mails had been scheduled for delivery via that connection, and the timeout is reached such that several DSNs are sent next. Problem noted by Dileepan Moorkanat of Hewlett-Packard. Fix a possible segmentation violation when specifying too many wildcard operators in a rule. Problem detected by Werner Wiethege. Avoid a segmentation fault on non-matching Hesiod lookups. Problem noted by Russell McOrmond of flora.ca
2001-08-21add hme at sbusJason Wright
2001-08-21put bus independent part of hme in here so we don't conflict with the sparcJason Wright
driver (this is wrong and will need to be fixed eventually)
2001-08-21sbus specific driver for hme (from netbsd)Jason Wright
2001-08-21bus independent part of hme driver from netbsdJason Wright
2001-08-212nd rule of comitting fixMichael Shalayeff
2001-08-21syncTheo de Raadt
2001-08-21cut/pasto in rule flushing code (using wrong list); base on patch from Henk ↵Jason Wright
van Lingen <henk@vanlingen.net>
2001-08-21rcsidJason Wright
2001-08-21pretty and add ss* and st* (I knew I was forgetting something)Jason Wright
2001-08-21esp/scsibus/sd/cd/uk goopJason Wright
2001-08-21esp driver from NetBSD (compiles and even probes disks =)Jason Wright
2001-08-21From NetBSD:Jason Wright
#define's for FAS366 (needed for compile of esp_sbus)
2001-08-21Art says it's ok for pmap_enter to effect no mapping change,Hugh Graham
so just return success if this happens.