summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-10-15Indicate that a process has stopped by setting PS_STOPPED flagClaudio Jeker
The checks in dowait6 and orphanpg using ps_mainproc are flawed and fail if the mainproc called pthread_exit before the other threads. Adding the flag in proc_stop_sweep is racy but the best we have right now. This fixes regress/sys/kern/signal/sig-stop3. OK mpi@
2024-10-15Fix runtime calculation. Assiging ts to spc_runtime does not work if tsClaudio Jeker
is modified. OK tb@ jca@
2024-10-15Use pr instead of p->p_p like everywhere else in exit1.Claudio Jeker
2024-10-15remove unneeded pte.h includeJonathan Gray
2024-10-15Switch ec_asn1_group2parameters() to get0_{order,cofactor}()Theo Buehler
These are more ergonomic, result in more readable code, avoid a copy and we no longer ignore a possible memory allocation error due to API misdesign and bad code. ok jsing
2024-10-15Provide EC_GROUP_get0_cofactor() for internal useTheo Buehler
While this is public API in OpenSSL, there are no plans to expose it. ok jsing
2024-10-15remove struct arpreq from net/if_arp.hJonathan Gray
unused since "rewrite to merge arp and routing tables" in CSRG if_ether.c 7.14 (Berkeley) 06/25/91 used by SIOCSARP, SIOCGARP, SIOCDARP, OSIOCGARP ioctls in Net/2 which were removed before 4.4BSD-Lite ok sthen@ who tested this with a ports build
2024-10-15grow i386 media a bitTheo de Raadt
2024-10-14mention SshdAuthPath option; ok djm@Christian Weisgerber
2024-10-14Set ACS flag for REP. Reported by Romain Francoise, GitHub issue 4182.Nicholas Marriott
2024-10-14Make NULL checks in ec_asn1_group2curve() explicitTheo Buehler
2024-10-14Extend ec_asn1_test to check for correct curve coefficient encodingTheo Buehler
2024-10-14Fix field element encoding for elliptic curve coefficientsTheo Buehler
SEC 1, section 2.3.5, is explicit that the encoding of an element of the field of definition for an elliptic curve needs to be a zero-padded octet string whose length matches the byte size of the field's degree. So use BN_bn2binpad() to fix this. Factor things into a simple helper to avoid copy-pasting. This gets rid of some of the most grotesque code in this file. ok jsing
2024-10-14Drop an obvious comment and fix indent for setting the seedTheo Buehler
Also remove a pointless cast. ok jsing
2024-10-14In ec_asn1_group2curve() rename ok to ret, per usualTheo Buehler
ok jsing
2024-10-14remove unneeded vmparam.h include from pte.hJonathan Gray
include vmparam.h in process_machdep for USER_SPACE_BITS
2024-10-14Fix build w/o SUSPEND optionJan Klemkow
with tweaks from miod@ ok miod@
2024-10-14remove unneeded device.h includeJonathan Gray
2024-10-14remove unused struct sigstate; ok miod@Jonathan Gray
2024-10-14remove duplicate includes and license; feedback and ok miod@Jonathan Gray
2024-10-14remove notes about unsupported modifiers; from nir lichtmanJason McIntyre
confirmed by miod
2024-10-14regress support for split sshd-auth binaryDamien Miller
2024-10-14sshd-auth also has a relink kitTheo de Raadt
2024-10-14syncTheo de Raadt
2024-10-14change mutex.h include to rwlock.hJonathan Gray
missed when dh_mtx changed from mutex to rwlock in rev 1.6
2024-10-14Split per-connection sshd-session binaryDamien Miller
This splits the user authentication code from the sshd-session binary into a separate sshd-auth binary. This will be executed by sshd-session to complete the user authentication phase of the protocol only. Splitting this code into a separate binary ensures that the crucial pre-authentication attack surface has an entirely disjoint address space from the code used for the rest of the connection. It also yields a small runtime memory saving as the authentication code will be unloaded after thhe authentication phase completes. Joint work with markus@ feedback deraadt@ Tested in snaps since last week
2024-10-14remove unneeded proc.h includeJonathan Gray
2024-10-13don't start the ObscureKeystrokeTiming mitigations if there has beenDamien Miller
traffic on a X11 forwarding channel recently. Should fix X11 forwarding performance problems when this setting is enabled. Patch from Antonio Larrosa via bz3655
2024-10-13byt -> but; ok tb@Jonathan Gray
2024-10-13include stdio.h for sscanf() snprintf()Jonathan Gray
2024-10-13remove unneeded timeout.h includeJonathan Gray
2024-10-13remove unneeded limits.h and errno.h includesJonathan Gray
2024-10-13Be more eager to install qcpas firmware (more pattern matches)Theo de Raadt
2024-10-12Make fw_update -a mean allAndrew Fresh
When downloading or installing, not just deleting. Noticed by Paul de Weerd Help with manual wording from jmc@ Just fix -a, deraadt@
2024-10-12remove unneeded rwlock.h includeJonathan Gray
2024-10-12remove unneeded time.h includeJonathan Gray
2024-10-12remove unneeded percpu.h includeJonathan Gray
2024-10-12Exercise the EC parameters code a bit moreTheo Buehler
Ensure all builtin curves can be roundtripped through DER as named curves, via explicit parameterization, using uncompressed, compressed and hybrid point formats.
2024-10-12remove blank line;Jason McIntyre
2024-10-12remove duplicate misc.h includeJonathan Gray
ok dtucker@
2024-10-12Call realpath on the source file to match -f on the command line, GitHubNicholas Marriott
issue 4180.
2024-10-12Do not rename a buffer to itself, GitHub issue 4181.Nicholas Marriott
2024-10-12remove duplicate unistd.h includeJonathan Gray
2024-10-12introduce a new build class to be used by the build userRobert Nagy
this class will be required for the upcoming llvm update that requires bumped datasize because of llvm-tblgen ok deraadt@
2024-10-12remove vmparam.h includeJonathan Gray
not required since VM_PHYSSEG_MAX changed to HIB_PHYSSEG_MAX in rev 1.45
2024-10-12Remove unnecessary str variable in ssl_stat.cTheo Buehler
Drop about 1/4 of the lines in here by avoiding the use of a variable. For some reason the API in this file made me go listen to Pow R. Toc H. All of a sudden the lyrics made sense. I should probably be worried. ok beck jsing
2024-10-11Use a and b for the curve coefficientsTheo Buehler
No idea how anyone would think that tmp_1 and tmp_2 are better suited for this. ok jsing
2024-10-11Clean up ec_asn1_group2fieldid()Theo Buehler
This drops some unnecessary freeing that was turned into a double free reachable via public API in OpenSSL 1.1. Other than that it unindents code and uses better variable names. ok jsing
2024-10-11Fix a long-standing bug in ec_asn1_group2pkparameters()Theo Buehler
Only check for the OPENSSL_EC_NAMED_CURVE being set to treat the curve parameters as named curve parameters. ok jsing
2024-10-11Use defines for the CHOICE variants of ECPKPARAMETERSTheo Buehler
ok jsing