summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-12-18The code is already careful to not add items to lists that wereIngo Schwarze
already closed. In this respect, also consider lists closed that have broken another block, their closure pending until the end of the broken block. This avoids syntax tree corruption leading to a NULL pointer access found by jsg@ with afl.
2014-12-17the easier way to put a buffer on the stack is to put it on the stack,Ted Unangst
not with alloca(). found by dickman; ok kettenis
2014-12-17unroll loops. much faster on amd64. ok deraadt millertTed Unangst
2014-12-17remove lock.h from uvm_extern.h. another holdover from the simpletonlockTed Unangst
era. fix uvm including c files to include lock.h or atomic.h as necessary. ok deraadt
2014-12-17unroll loops for sha2. quite a bit faster for amd64.Ted Unangst
ok deraadt millert
2014-12-17minimal removal of simplelock to eliminate lock.h dependencyTed Unangst
2014-12-17fix/reduce header dependencies. clock.c doesn't need any of this uvm.Ted Unangst
ok deraadt kettenis
2014-12-17Be a bit more lenient in what to accept for section names givenIngo Schwarze
as the first man(1) command line argument without -s: Accept digits like "1", "2"; digit+letter like "3p", "1X"; and "n". Issue reported by Svyatoslav Mishyn <juef at openmailbox dot org> (Crux Linux).
2014-12-17Add size_t to int checks for SSL functions.Doug Hogan
libtls accepts size_t for lengths but libssl accepts int. This verifies that the input does not exceed INT_MAX. It also avoids truncating size_t when comparing with int and adds printf-style attributes for tls_set_error(). with input from deraadt@ and tedu@ ok tedu@
2014-12-17Use log_warnx() not log_warn() for mail loop warning since errnoTodd C. Miller
is not set. OK gilles@
2014-12-17Avoid premature masking in the interrupt handler code that checks for removedMark Kettenis
hardware. ok mpi@, deraadt@
2014-12-17remove simplelocks (trivial)Theo de Raadt
2014-12-17delete simplelocksTheo de Raadt
2014-12-17remove simplelocksTheo de Raadt
ok tedu
2014-12-17pretty easy removal of simplelocksTheo de Raadt
ok miod (a while back)
2014-12-17remove simplelocksTheo de Raadt
ok kettenis
2014-12-17remove simplelocks useTheo de Raadt
ok kettenis mpi
2014-12-17Add missing flag in the description field.Reyk Floeter
2014-12-17add umcs(4)Jonathan Gray
2014-12-17Remove the "multicast_" prefix from the fields a multicast-only struct.Martin Pieuchot
Prodded by claudio@ and mikeb@
2014-12-17Use an interface index instead of a pointer for multicast options.Martin Pieuchot
Output interface (port) selection for multicast traffic is not done via route lookups. Instead the output ifp is registred when setsockopt(2) is called with the IP{V6,}_MULTICAST_IF option. But since there is no mechanism to invalidate such pointer stored in a pcb when an interface is destroyed/removed, it might lead your kernel to fault. Prevent a fault upon resume reported by frantisek holop, thanks! ok mikeb@, claudio@
2014-12-17Prefer MADV_* over POSIX_MADV_* in kernel for consistency: the latterPhilip Guenther
doesn't have all the values and therefore can't be used everywhere. ok deraadt@ kettenis@
2014-12-17delete archaic simplelock use.Theo de Raadt
ok miod
2014-12-17Do as the datasheet recommends and disable the RX filter before adjustingBrad Smith
the RX filter. From FreeBSD
2014-12-17increase to 2048 to prevent failure. ok deraadt@Daniel Dickman
2014-12-16install both ld.so with mode 444Theo de Raadt
2014-12-16Ignore mdoc(7) and man(7) macros inside tbl(7) code because theyIngo Schwarze
would abort the table in an unclean way, causing assertion failures found by jsg@.
2014-12-16Temporarily expand the pci memory range to suit Dell 13G servers.Jonathan Matthew
They have devices outside the 36 bit range that their firmware needs to talk to, and they get constant acpi interrupts if it can't. We should get the necessary ranges via ACPI, but for now just make the allowed range bigger. ok kettenis@ deraadt@
2014-12-16syncTheo de Raadt
2014-12-16don't include lock.h by default. poisons namespace. ok deraadtTed Unangst
2014-12-16syncMiod Vallat
2014-12-16Do not grab the kernel lock for clock interrupts, hardclock() will behaveMiod Vallat
correctly without. Modeled after sparc64 logic.
2014-12-16must include lock.h to play with locksTed Unangst
2014-12-16these headers do not need to (and should not) include lock.h poisoningTed Unangst
the namespace. ok deraadt
2014-12-16include atomic.h to get atomic operations (virtio_membar). ok sfTed Unangst
2014-12-16Define and print HV cpuid flag.Stefan Fritsch
This is set by many hypervisors, including kvm, vmware, hyper-v.
2014-12-16Install a copy of ld.so into /sbin. Soon to be used in order to make "static"Pascal Stumpf
PIE possible. ok deraadt@ tedu@
2014-12-16typo; ok deraadtStuart Henderson
2014-12-16warn for correct symbolTheo de Raadt
2014-12-16must include lock.h if you want to play with locksTed Unangst
2014-12-16only need lock.h here, not all of uvm_extern.hTed Unangst
2014-12-16correct -Tutf8 and -Thtml rendering of \(~=Ingo Schwarze
and change the name of \(-~ to \(|= to agree with groff; difference found by Carsten dot Kunze at arcor dot de
2014-12-16Don't pass options after the to address to sendmail. The onlyTodd C. Miller
legitiate use of this is to set the sender name which should be handled specifically by a different option.
2014-12-16Add new "expandaddr" flag (disabled by default) to enable recipientTodd C. Miller
address expansion and document it. Previously, this behavior was always enabled. Also document how address expansion is performed, which used to only be described in the (no longer installed) Mail Reference Manual. CVE-2014-7844
2014-12-16Use glob() to expand filenames instead of passing it to the shell'sTodd C. Miller
echo command for expansion which could result in arbitrary command execution. CVE-2004-2771
2014-12-16primary change: move uvm_vnode out of vnode, keeping only a pointer.Ted Unangst
objective: vnode.h doesn't include uvm_extern.h anymore. followup changes: include uvm_extern.h or lock.h where necessary. ok and help from deraadt
2014-12-16Protect memory allocation and disposal with splvm(); gets rid of splassertMiod Vallat
complaints during boot on i386. ok stsp@
2014-12-16Explicit block closure macros clobber next-line block head scope,Ingo Schwarze
just like explicit block macros themselves. Fixing an assertion failure jsg@ found with afl.
2014-12-16Now that we have Camellia support in libcrypto, bring in the SHA256 flavour ofMiod Vallat
the Camellia ciphersuites for TLS 1.2 introduced in RFC 5932. From OpenSSL HEAD.
2014-12-16When a string comparison condition contains no mismatching characterIngo Schwarze
but ends without the final delimiter, the parse point was advanced one character too far and the invalid pointer returned to the caller of roff_parseln(). Later use could potentially advance the pointer even further and maybe even write to it. Fixing a buffer overrun found by jsg@ with afl (the most severe so far).