Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-12-18 | The code is already careful to not add items to lists that were | Ingo Schwarze | |
already closed. In this respect, also consider lists closed that have broken another block, their closure pending until the end of the broken block. This avoids syntax tree corruption leading to a NULL pointer access found by jsg@ with afl. | |||
2014-12-17 | the easier way to put a buffer on the stack is to put it on the stack, | Ted Unangst | |
not with alloca(). found by dickman; ok kettenis | |||
2014-12-17 | unroll loops. much faster on amd64. ok deraadt millert | Ted Unangst | |
2014-12-17 | remove lock.h from uvm_extern.h. another holdover from the simpletonlock | Ted Unangst | |
era. fix uvm including c files to include lock.h or atomic.h as necessary. ok deraadt | |||
2014-12-17 | unroll loops for sha2. quite a bit faster for amd64. | Ted Unangst | |
ok deraadt millert | |||
2014-12-17 | minimal removal of simplelock to eliminate lock.h dependency | Ted Unangst | |
2014-12-17 | fix/reduce header dependencies. clock.c doesn't need any of this uvm. | Ted Unangst | |
ok deraadt kettenis | |||
2014-12-17 | Be a bit more lenient in what to accept for section names given | Ingo Schwarze | |
as the first man(1) command line argument without -s: Accept digits like "1", "2"; digit+letter like "3p", "1X"; and "n". Issue reported by Svyatoslav Mishyn <juef at openmailbox dot org> (Crux Linux). | |||
2014-12-17 | Add size_t to int checks for SSL functions. | Doug Hogan | |
libtls accepts size_t for lengths but libssl accepts int. This verifies that the input does not exceed INT_MAX. It also avoids truncating size_t when comparing with int and adds printf-style attributes for tls_set_error(). with input from deraadt@ and tedu@ ok tedu@ | |||
2014-12-17 | Use log_warnx() not log_warn() for mail loop warning since errno | Todd C. Miller | |
is not set. OK gilles@ | |||
2014-12-17 | Avoid premature masking in the interrupt handler code that checks for removed | Mark Kettenis | |
hardware. ok mpi@, deraadt@ | |||
2014-12-17 | remove simplelocks (trivial) | Theo de Raadt | |
2014-12-17 | delete simplelocks | Theo de Raadt | |
2014-12-17 | remove simplelocks | Theo de Raadt | |
ok tedu | |||
2014-12-17 | pretty easy removal of simplelocks | Theo de Raadt | |
ok miod (a while back) | |||
2014-12-17 | remove simplelocks | Theo de Raadt | |
ok kettenis | |||
2014-12-17 | remove simplelocks use | Theo de Raadt | |
ok kettenis mpi | |||
2014-12-17 | Add missing flag in the description field. | Reyk Floeter | |
2014-12-17 | add umcs(4) | Jonathan Gray | |
2014-12-17 | Remove the "multicast_" prefix from the fields a multicast-only struct. | Martin Pieuchot | |
Prodded by claudio@ and mikeb@ | |||
2014-12-17 | Use an interface index instead of a pointer for multicast options. | Martin Pieuchot | |
Output interface (port) selection for multicast traffic is not done via route lookups. Instead the output ifp is registred when setsockopt(2) is called with the IP{V6,}_MULTICAST_IF option. But since there is no mechanism to invalidate such pointer stored in a pcb when an interface is destroyed/removed, it might lead your kernel to fault. Prevent a fault upon resume reported by frantisek holop, thanks! ok mikeb@, claudio@ | |||
2014-12-17 | Prefer MADV_* over POSIX_MADV_* in kernel for consistency: the latter | Philip Guenther | |
doesn't have all the values and therefore can't be used everywhere. ok deraadt@ kettenis@ | |||
2014-12-17 | delete archaic simplelock use. | Theo de Raadt | |
ok miod | |||
2014-12-17 | Do as the datasheet recommends and disable the RX filter before adjusting | Brad Smith | |
the RX filter. From FreeBSD | |||
2014-12-17 | increase to 2048 to prevent failure. ok deraadt@ | Daniel Dickman | |
2014-12-16 | install both ld.so with mode 444 | Theo de Raadt | |
2014-12-16 | Ignore mdoc(7) and man(7) macros inside tbl(7) code because they | Ingo Schwarze | |
would abort the table in an unclean way, causing assertion failures found by jsg@. | |||
2014-12-16 | Temporarily expand the pci memory range to suit Dell 13G servers. | Jonathan Matthew | |
They have devices outside the 36 bit range that their firmware needs to talk to, and they get constant acpi interrupts if it can't. We should get the necessary ranges via ACPI, but for now just make the allowed range bigger. ok kettenis@ deraadt@ | |||
2014-12-16 | sync | Theo de Raadt | |
2014-12-16 | don't include lock.h by default. poisons namespace. ok deraadt | Ted Unangst | |
2014-12-16 | sync | Miod Vallat | |
2014-12-16 | Do not grab the kernel lock for clock interrupts, hardclock() will behave | Miod Vallat | |
correctly without. Modeled after sparc64 logic. | |||
2014-12-16 | must include lock.h to play with locks | Ted Unangst | |
2014-12-16 | these headers do not need to (and should not) include lock.h poisoning | Ted Unangst | |
the namespace. ok deraadt | |||
2014-12-16 | include atomic.h to get atomic operations (virtio_membar). ok sf | Ted Unangst | |
2014-12-16 | Define and print HV cpuid flag. | Stefan Fritsch | |
This is set by many hypervisors, including kvm, vmware, hyper-v. | |||
2014-12-16 | Install a copy of ld.so into /sbin. Soon to be used in order to make "static" | Pascal Stumpf | |
PIE possible. ok deraadt@ tedu@ | |||
2014-12-16 | typo; ok deraadt | Stuart Henderson | |
2014-12-16 | warn for correct symbol | Theo de Raadt | |
2014-12-16 | must include lock.h if you want to play with locks | Ted Unangst | |
2014-12-16 | only need lock.h here, not all of uvm_extern.h | Ted Unangst | |
2014-12-16 | correct -Tutf8 and -Thtml rendering of \(~= | Ingo Schwarze | |
and change the name of \(-~ to \(|= to agree with groff; difference found by Carsten dot Kunze at arcor dot de | |||
2014-12-16 | Don't pass options after the to address to sendmail. The only | Todd C. Miller | |
legitiate use of this is to set the sender name which should be handled specifically by a different option. | |||
2014-12-16 | Add new "expandaddr" flag (disabled by default) to enable recipient | Todd C. Miller | |
address expansion and document it. Previously, this behavior was always enabled. Also document how address expansion is performed, which used to only be described in the (no longer installed) Mail Reference Manual. CVE-2014-7844 | |||
2014-12-16 | Use glob() to expand filenames instead of passing it to the shell's | Todd C. Miller | |
echo command for expansion which could result in arbitrary command execution. CVE-2004-2771 | |||
2014-12-16 | primary change: move uvm_vnode out of vnode, keeping only a pointer. | Ted Unangst | |
objective: vnode.h doesn't include uvm_extern.h anymore. followup changes: include uvm_extern.h or lock.h where necessary. ok and help from deraadt | |||
2014-12-16 | Protect memory allocation and disposal with splvm(); gets rid of splassert | Miod Vallat | |
complaints during boot on i386. ok stsp@ | |||
2014-12-16 | Explicit block closure macros clobber next-line block head scope, | Ingo Schwarze | |
just like explicit block macros themselves. Fixing an assertion failure jsg@ found with afl. | |||
2014-12-16 | Now that we have Camellia support in libcrypto, bring in the SHA256 flavour of | Miod Vallat | |
the Camellia ciphersuites for TLS 1.2 introduced in RFC 5932. From OpenSSL HEAD. | |||
2014-12-16 | When a string comparison condition contains no mismatching character | Ingo Schwarze | |
but ends without the final delimiter, the parse point was advanced one character too far and the invalid pointer returned to the caller of roff_parseln(). Later use could potentially advance the pointer even further and maybe even write to it. Fixing a buffer overrun found by jsg@ with afl (the most severe so far). |