summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-01-13Get rid of "forever" loop in the interrupt handler such that we drop out of theMark Kettenis
interrupt handler if the "no rx buffer available" bit is set and no new mbufs are available to populate descriptors. While it doesn't make livelock mitigation work for everybody, it does resolve some lockup issues. ok sthen@
2011-01-13Clarify alternate-screen description a little.Nicholas Marriott
2011-01-13Remove forward declarations of non-existant functions.Martin Hedenfal
ok pyr@
2011-01-13Remove double 'to' in comment, ok pyr@Martin Hedenfal
2011-01-13Log match requests at debug level.Martin Hedenfal
ok pyr@
2011-01-13Extract common preparation of key in ypmatch handling, and check theMartin Hedenfal
argument length. ok pyr@
2011-01-13Add new file for upcoming change. ok dlg@ deraadt@Dale Rahn
2011-01-13Er, fix next and previous session functions to actually work, part 2.Nicholas Marriott
2011-01-13Fix next and previous session functions to actually work.Nicholas Marriott
2011-01-13Log termios backspace for each client since it is used to recogniseNicholas Marriott
backspace input.
2011-01-12Only init the nameidata parts that are strictly needed insteadThordur I. Bjornsson
of using NDINIT as vn_open overwrites and sets things up directly it self. the NDINIT usage here was actually wrong and would cause leaks if vn_open would totally honor the nameidata it gets passed, also there is one less place that triggers on my nameidata flag greps... ok jsing@
2011-01-12Use TMPDIR if set, from Han Boetes.Nicholas Marriott
2011-01-12Add crypto(4) and hifn(4).Mark Kettenis
2011-01-12Backport fix from sudo 1.7.4p5; if -g specified w/o -u the targetTodd C. Miller
user is considered to be different from the invoking user unless the user's gid is the same as the target gid.
2011-01-12Provide a specific rw_cas() function for MP kernels; stolen from m88k.Mark Kettenis
ok jsing@, deraadt@
2011-01-12Make __cpu_simple_lock implementation actually work.Mark Kettenis
ok deraadt@, jsing@
2011-01-12Reset the state member of the ata_xfer to ATA_S_SETUP before reusing itMark Kettenis
to issue another command, since sili(4) actually checks. Fix a small inaccuracy in a comment while I'm there. ok dlg@
2011-01-12Implement the roff .rm request (remove macro).Ingo Schwarze
Using the new roff_getname() function, this is really simple. Breaks mandoc of the habit of reporting an error in each pod2man(1) preamble. Reminded by a report from brad@.
2011-01-12A bunch more explicit_bzero calls for key materialTheo de Raadt
ubsec tested by mikeb, hifn tested by kettenis ok mikeb
2011-01-12stray tabMarco Peereboom
2011-01-12explicit zeroing of key information in the softraid ioctl codeTheo de Raadt
ok marco
2011-01-12more explicit_bzero to delete keys.Marco Peereboom
prodded and ok deraadt
2011-01-12Add SATA capability. Use nitems() to decide if a capability is known or not.Mark Kettenis
ok krw@, deraadt@, dlg@, jsg@
2011-01-12lots of explicit_bzero for things which contain parts of keysTheo de Raadt
ok marco
2011-01-12Never include SADB_X_EXT_REMOTE_AUTH (which is either aMike Belopuhov
passphrase or an RSA key) in the reply message. There's nothing that justifies this behavior and PF_KEY RFC prefers to exclude keys and other sensitive material from replies. Discussed with reyk, no objections from deraadt.
2011-01-12use explicit_bzero() for key materials, including that in the session.Theo de Raadt
there was also a local buffer which was left around
2011-01-12use explicit_bzero() for the session, in drivers where struct sessionTheo de Raadt
contains key material (note, that is not true in all drivers... hence not always neccessary) discussed with mikeb
2011-01-12explicit_bzero() of key material in drivers few people useTheo de Raadt
2011-01-12cleanup aes-ctr keystream after use; ok deraadtMike Belopuhov
2011-01-12Kill struct rroute and move the metric to struct kroute. ThisClaudio Jeker
disturbed me for a long time and makes upcomming work a bit easier. OK sthen@, phessler@
2011-01-12postpone processing of pfkey messages received in pfkey_reply instead ofMike Belopuhov
just dropping them; ok reyk
2011-01-12decouple flow deletion from the ikev2_childsa_delete; ok reykMike Belopuhov
2011-01-12fixup bogus check; ok reykMike Belopuhov
2011-01-12don't forget to specify spi sizes; ok reykMike Belopuhov
2011-01-12avoid some integer overflows mostly with GLOB_APPEND and GLOB_DOOFFSDamien Miller
and sanity check arguments (these will be unnecessary when we switch struct glob members from being type into to size_t in the future); "looks ok" tedu@ feedback guenther@
2011-01-11fix encryption for uio_iovcnt > 1 by passing the absolute offset 'count'Markus Friedl
to cuio_copydata() and make sure we don't loop forever if the end of an iov matches the cipher block boundary. ok mikeb, deraadt
2011-01-11use ic->ic_ibss_chan instead of ic->ic_bss->ni_chan for Rx radiotapDamien Bergamini
since the latter is not initialized in monitor mode. should fix a panic reported by Benjamin Nadland with kismet.
2011-01-11oops! missing macro in previous;Jason McIntyre
2011-01-11 Add Wake on Lan support to arp(8). This is partly based on the originalJasper Lievisse Adriaanse
wake(8) program. One can specify an interface to send on, or simply broadcast on all available interfaces. Initial input from stsp@, further help from claudio@ and deraadt@. ok claudio@ deraadt@ manpage bits ok jmc@
2011-01-11key lengths are counted in bitsTheo de Raadt
2011-01-11add explicit_bzero() calls before free()ing key materialTheo de Raadt
ok mikeb
2011-01-11in SHA1Final(), explicitly clear the local bufferTheo de Raadt
ok mikeb
2011-01-11accidental commit of a pending diff relating to something elseTheo de Raadt
2011-01-11in AES_GMAC_Final(), explicitly clear the local bufferTheo de Raadt
ok mikeb
2011-01-11for key material that is being being discarded, convert bzero() toTheo de Raadt
explicit_bzero() where required ok markus mikeb
2011-01-11all the devices output same types of dataTheo de Raadt
2011-01-11sync from mirrors.datStuart Henderson
2011-01-11Perform IP options check in pf_test_rule(), before creating state.Ryan Thomas McBride
ok claudio henning dlg miod
2011-01-11Fix compiler warning in regression test.Alexander Bluhm
2011-01-11sync from mirrors.datStuart Henderson