summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-07-09Fixes a hibernate issue wherein we locked the kernel lock while hatchingMike Larkin
but then parked ourselves in real mode without completing acquisition of said lock. Also removes the park routine from i386 since we don't need it (the APs are already parked at the time we start unpack). discussed with and ok kettenis@, also ok deraadt@
2014-07-09Oops. Forgot makefile ...Kenneth R Westerback
Enable specifying the filesystem of interest by the duid. Original diff from halex@ a while ago. ok halex@ jsing@ (with comments for future tweaking)
2014-07-09mark defos as const; nobody needs to change it,Ingo Schwarze
and it is occasionally useful to be able to pass literal strings
2014-07-09delete forgotten, obsolete rew_warn() prototypeIngo Schwarze
2014-07-09tedu the SSL export cipher handling - since we do not have enabled exportJoel Sing
ciphers we no longer need the flags or code to support it. ok beck@ miod@
2014-07-09now that mclgeti doesnt do the rx ring accounting, cluster allocationDavid Gwynne
doesnt need to know which ifp an mbuf was allocated on so it can uncount it on free. while here, remove the ext_backend field which identifies the pool the cluster came from and use ext_arg instead. ok henning@ mpi@
2014-07-09Enable specifying the filesystem of interest by the duid.Kenneth R Westerback
Original diff from halex@ a while ago. ok halex@ jsing@ (with comments for future tweaking)
2014-07-09Resync _dl_opendir() with libc: use O_CLOEXEC and O_DIRECTORY insteadPhilip Guenther
of post-open tests and fixups. Also, reorder _dl_dirdesc to save 8 bytes on LP64. ok otto@ miod@
2014-07-09cast ASN1_STRING (unsigned char *) to match strlcat's argument (char *)bcook
ok beck@
2014-07-09remove unused, private version strings except SSL_version_strbcook
Also remove unused des_ver.h, which exports some of these strings, but is not installed. ok miod@ tedu@
2014-07-09Make use of this wonderful modern C construct known as a `switch', instead ofMiod Vallat
8-line if() tests.
2014-07-09tedu bpf_mtap_pflog().Henning Brauer
now that it is a trivial wrapper around the extended bpf_mtap_hdr, we can use bpf_mtap_hdr directly. added benefit: pflog_bpfcopy doesn't need to be exported any more and can stay private to if_pflog.c ok benno bluhm reyk
2014-07-09White spaces.Antoine Jacoutot
2014-07-09KNFMiod Vallat
2014-07-09config parser improvements:Eric Faurot
- fail if the same option is specified multiple times on a listener - prompt for queue encryption key after config parsing, not during. - add ip addresses to localnames table - prepare for filters
2014-07-09Hopefully we are calculating the pkg size correctly by now;Florian Obser
no obj change. OK benno@
2014-07-09We do have ICMP6_FILTER; no obj change.Florian Obser
OK benno@
2014-07-09We do have SO_SNDBUF & SO_RCVBUF; no obj change.Florian Obser
OK benno@
2014-07-09We do have NI_NODEADDR_FLAG_ANYCAST, no obj change.Florian Obser
OK benno@
2014-07-09We do have SIGINFO; no obj change.Florian Obser
OK benno@
2014-07-09We don't have IPV6_REACHCONF, no obj change after unifdef(1).Florian Obser
Further cleanup by hand lead to a obj change though. OK benno@
2014-07-09Kill code commented since forever; no obj change.Florian Obser
OK benno@
2014-07-09bpf code surgery / shuffling / simplification.Henning Brauer
the various bpf_mtap_* are very similiar, they differ in what (and to some extent how) they prepend something, and what copy function they pass to bpf_catchpacket. use an internal _bpf_mtap as "backend" for bpf_mtap and friends. extend bpf_mtap_hdr so that it covers all common cases: if dlen is 0, nothing gets prepended. copy function can be given, if NULL the default bpf_mcopy is used. adjust the existing bpf_mtap_hdr users to pass a NULL ptr for the copy fn. re-implement bpf_mtap_af as simple wrapper for bpf_mtap_hdr. re-implement bpf_mtap_ether using bpf_map_hdr re-implement bpf_mtap_pflog as trivial bpf_mtap_hdr wrapper ok bluhm benno
2014-07-09Kill more FIPS tentacles by removing the private_AES_set_{enc,dec}rypt_key()Miod Vallat
internal interfaces, and promoting them to being the public AES_set_{enc,dec}rypt_key() interfaces. In non-FIPS mode, these public interfaces were directly calling the private ones. ok guenther@ jsing@
2014-07-09Be more strict in RSA_padding_check_X931(), and thus avoid a possibleMiod Vallat
memcpy() with a negative size. ok tedu@
2014-07-09Remove typecasts on password_callback.bcook
Rather than casting password_callback to the correct function pointer signature at every call site, change it to match the signature instead. ok miod@ deraadt@ tedu@
2014-07-09In the old days (not in this century), SSLeay 0.4.5 would create X.509 RSAMiod Vallat
signatures using the wrong oid for the signature type. The signature verification code has thus been modified to allow these signatures to be accepted, with a printf to stderr to notify the user something was fishy. Remove this chunk; these signatures will no longer get accepted. ok deraadt@ guenther@ jsing@ tedu@
2014-07-09syncTheo de Raadt
2014-07-09Remove RSA_memory_lock(). This undocumented function sort-of serializes yourMiod Vallat
RSA components to memory and clears them, but there is no unserializing function, so its usefulness is close to zero. A grep through the ports tree sources show that it is only present in ports embedding their own openssl copy, and never used otherwise. ok jsing@
2014-07-09remove unused dynamic_cmd_defns_empty structure.bcook
ok miod@ deraadt@ guenther@
2014-07-09need uvm/uvm_extern.h since no longer supplied below user.hTheo de Raadt
2014-07-09RSA_NULL used to be a compile option allowing the RSA interfaces to beMiod Vallat
compiled-in, with nonfunctional code, to be able to cope with the RSA patent. However, we don't use this option, and the RSA patent has expired more than 10 years ago, so just drop this piece.
2014-07-09various fixes in experimental ldap backend and add support for mailaddr service.Eric Faurot
2014-07-09obvious need for systm.h, which no longer comes in from something user.h ↵Theo de Raadt
includes
2014-07-09if you use sysctl, you need sysctl.hTheo de Raadt
2014-07-09pull in uvm/uvm_extern.h (before and) and instead pmap.h, and do not assumeTheo de Raadt
that user.h's tentacles fetched it even earlier.
2014-07-09KNFMiod Vallat
2014-07-09Set default of net.inet6.icmp6.nodeinfo to 0,Sebastian Benoit
disables responses to RFC4620 IPv6 Node Information Queries. ok florian henning bluhm
2014-07-09instead of printf() use tbprintf() like elsewhere in systat.Jasper Lievisse Adriaanse
ok deraadt@ mpi@
2014-07-09Fix boot -d. refreshcreds() should be called when trapping from userspace,Philip Guenther
but I flipped the test on i386/amd64, thus breaking kernel traps before enough proc0 bits were set up. In theory, this could have resulted in a NFS read for a page fault being done with a process's old credentials. pointed out by Patrick Wildt of bitrig
2014-07-09Fix backtraces through _dl_bind_start by adding dwarf annotations forPhilip Guenther
the stack adjustments/handling in the asm. Based on FreeBSD. ok kettenis@ matthew@
2014-07-09format string should be a string literal.bcook
ok beck@ jsing@
2012-10-13import OpenSSL-1.0.1cDamien Miller
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2014-07-09update to lynx 2.8.8rel2, keeping local changes. primarily to get theseDaniel Dickman
changes from 2.8.8dev.16: * fix most issues found by clang 3.2 analyze * fix most issues found by Coverity scan tested on i386, sparc64, and macppc by myself. tested on vax by miod@ (including https) helpful discussion with avsm@, sthen@ ok deraadt@
2014-07-09downgrade more error() to debug() to better match what old authfile.cDamien Miller
did; suppresses spurious errors with hostbased authentication enabled
2014-07-09more useful error message when GLOB_NOSPACE occurs;Damien Miller
bz#2254, patch from Orion Poplawski
2014-07-09avoid being too smart when filling the rx ring.David Gwynne
2014-07-09dont try to be smart about avoiding the use of too many descriptorsDavid Gwynne
when filling the rx ring. trust the hwm. problem found by sthen@
2014-07-08sys/user.h can now be substantially gutted.Theo de Raadt
ok guenther
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-24 14:02:45 +0000