summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-09-07Copy IPv6 fragment test cases to IPv4 and adapt to the different Alexander Bluhm
behavior. All tests are run once with pf fragment reassembly and once with pf disabled and IP input reassembly. Three sub tests are currently disabled as the IP stack behaves differently than pf.
2017-09-15vmd: improve a debug message with more informationMike Larkin
2017-09-15vmd: emulate UART scratch register, seems to be required by GRUB andMike Larkin
doesn't seem to cause any side effects with other guest types.
2017-09-15wrap a long lineMike Larkin
2017-09-14fix accounting for received prefixes per neighborPeter Hessler
noticed by deraadt@ and job@ OK benno@ deraadt@ job@
2017-09-14clarify what inet6 autoconf does, mention and link to slaacd(8)Sebastian Benoit
ok/feedback sthen@ jmc@
2017-09-14clarify that slaacd is a client; Xr to rtadvd. feedback/ok benno jmcStuart Henderson
2017-09-14spacingReyk Floeter
2017-09-14Differentiate between a style string not being specified and an emptyJonathan Gray
style string by including NUL in imsg and set the pointer in the struct passed over imsg to NULL in the receiving process to be sure nothing tries to use it. Avoids a crash when specifying an empty style string reported by Karl-Andre' Skevik. ok bluhm@
2017-09-14Revert commitid: gJtIN6rRTS3CHy9b.Damien Miller
------------- identify the case where SSHFP records are missing but other DNS RR types are present and display a more useful error message for this case; patch by Thordur Bjornsson; bz#2501; ok dtucker@ ------------- This caused unexpected failures when VerifyHostKeyDNS=yes, SSHFP results are missing but the user already has the key in known_hosts Spotted by dtucker@
2017-09-14Strive to rationalize fatal[x]() usage andKenneth R Westerback
verbiage.
2017-09-13Add missing pipe in sxitwi(4)'s match code to actually makePatrick Wildt
it a logical OR intead of a binary OR. From Artturi Alm
2017-09-13Check that pending "message repeated" is printed at exit and restart.Alexander Bluhm
2017-09-13Print SKIPPED if sudo and doas configuration is missing. PreventsAlexander Bluhm
that running the regression test with wrong environment is reported as failure. Keep the fatal there to avoid interfering with other setups for portable ssh. OK dtucker@
2017-09-13Fix typo; ok benno@ jmc@ sthen@ tb@anton
2017-09-13Remove unused (always 1) arguments from some functions, from DanielNicholas Marriott
Mueller in GitHub issue 1073.
2017-09-13Check that the hostname added by syslogd -h in file and server logAlexander Bluhm
is correct. Use generic redo functions. Do syntax check for all Perl files.
2017-09-12- sprinkle variable name and printf tweaksJasper Lievisse Adriaanse
- save product type for future use
2017-09-12mapalign returns MAP_FAILED for failuer; from George KoehlerOtto Moerbeek
2017-09-12Do not segfault when there are two .Dt macros, the first withoutIngo Schwarze
an architecture argument and the second with an invalid one. Bug found by jsg@ with afl(1).
2017-09-12there is no offical way to get the max value of time_t, but this one worksOtto Moerbeek
on any sensible posix system (in which time_t must be an integer type) ok deraadt@ millert@
2017-09-12Syslogd does no longer keep the *:514 UDP sockets open by default.Alexander Bluhm
Adapt tests.
2017-09-12In the default configuration syslogd(8) kept two *:514 UDP socketsAlexander Bluhm
open. These sockets are used for sending UDP packets if there is a UDP loghost in syslog.conf(5). If syslogd is started with -u, they can receive packets, otherwise they are disabled with shutdown(SHUT_RD). In case syslogd does neither send nor receive, close the sockets after reading the configuration file. This gives us a cleaner netstat output, and the ports are not reported by port scanners. This has no security implication. OK benno@ jca@ sthen@ deraadt@
2017-09-12use .Dv for ioctl(2) request names;Ingo Schwarze
from <ScottCheloha at gmail dot com>
2017-09-12use the standard .Fa idiom for ioctl(2) args, and kill .TnIngo Schwarze
2017-09-12use the standard .Fa idiom for ioctl(2) argsIngo Schwarze
2017-09-12minor markup corrections: Cd for options(4), Vt for data typesIngo Schwarze
2017-09-12standard .Fa markup for ioctl(2) args, and add one missing .Dv;Ingo Schwarze
from <ScottCheloha at gmail dot com>
2017-09-12Sleep for some time to avoid race reporting a different number of referenceMartin Pieuchot
count. Iterating over the routing table implies using SRP which bump the refcount of routes for a short period of time. Depending on how work is schedule the second ifconfig(8) command might run before the timer dereference the route. Should fix races on bluhm@'s test setup.
2017-09-12Include room for NUL-termination when calculating the length of archiveMartin Pieuchot
member name. Fix an of by one found by sthen@ with MALLOC_OPTIONS=C. From Matthew Martin, ok deraadt@
2017-09-12option DDB_STRUCT is gone, 'show struct' now work in GENERIC.Martin Pieuchot
2017-09-12Remove option DDB_STRUCTINFO. Now that ddb(4) is CTF aware, similarMartin Pieuchot
functionnalities are available in GENERIC. ok jasper@, deraadt@, guenther@, dlg@
2017-09-12Skip forward declarations until ctfconv(1) properly merge them withMartin Pieuchot
the corresponding struct definitions. ok dlg@
2017-09-12Fix cross-compiling GCC toolchains on Clang archs.Martin Pieuchot
ok patrick@
2017-09-12unused variableDamien Miller
2017-09-12fix tun/tap forwarding case in previousDamien Miller
2017-09-12Make remote channel ID a u_intDamien Miller
Previously we tracked the remote channel IDs in an int, but this is strictly incorrect: the wire protocol uses uint32 and there is nothing in-principle stopping a SSH implementation from sending, say, 0xffff0000. In practice everyone numbers their channels sequentially, so this has never been a problem. ok markus@
2017-09-12refactor channels.cDamien Miller
Move static state to a "struct ssh_channels" that is allocated at runtime and tracked as a member of struct ssh. Explicitly pass "struct ssh" to all channels functions. Replace use of the legacy packet APIs in channels.c. Rework sshd_config PermitOpen handling: previously the configuration parser would call directly into the channels layer. After the refactor this is not possible, as the channels structures are allocated at connection time and aren't available when the configuration is parsed. The server config parser now tracks PermitOpen itself and explicitly configures the channels code later. ok markus@
2017-09-12rename setredzone to setguardpage.David Gwynne
a redzone means something else on amd64, so im renaming this to avoid confusion.
2017-09-12add a guard page on the end of each threads kernel stack.David Gwynne
this protects the process control block. it also makes the kernel fault hard when the guard page gets hit by the stack, allowing debugging of the problem set of function calls at the time the problem occurs. without this, a big stack can overwrite the pcb, which makes the thread generate a fault when it is switched back onto a cpu, which is way too late. discussed with guenther@ ok deraadt@
2017-09-12Update the documentation regarding /dev/mem and /dev/kmem;Ingo Schwarze
Theo already clamped down on these devices last year. Triggered by a question from Nan Xiao <xiaonan830818 at gmail dot com>. OK deraadt@
2017-09-11add functions to provide direct access to guest memory as vmd addressesDavid Gwynne
iovec_mem() populates an iovec array based on guest physical addresses. this allows the use of things like readv and writev for moving data between the guest and a disk image file without having to bounce the memory. vaddr_mem() provides a vmd usable pointer based on a guests physical address. this makes it possible to directly reference things like virtio rings without having to bounce that memory either. however, it assumes that a contiguous range of guest physical memory will sit in a single vm memory range. mlarkin@ says this is right. ok mlarkin@
2017-09-11bring SET, CLR, and ISSET macros inDavid Gwynne
they make bit fiddling easier to read in later diffs. ok mlarkin@
2017-09-11Check event is initialized before delete; fixes crash reported byNicholas Marriott
Michael Nickerson in GitHub issue 1068.
2017-09-11check double free before canary for chunks; ok millert@Otto Moerbeek
2017-09-11Use signed ssize_t to make read(2) error check actually work.Alexander Bluhm
found by clang warning
2017-09-11remove dead code.Eric Faurot
ok gilles@
2017-09-11Use getrusage(2) for the built-in time trial instead of getttimeofday(2).Todd C. Miller
This makes it possible to measure just the ellapsed user time, which is what we really care about when benchmarking an algorithm. OK deraadt@
2017-09-11Coverty complains that the return value of sblock() is not checkedAlexander Bluhm
in sorflush(), but in other places it is. See CID 1453099. The flags SB_NOINTR and M_WAITOK should avoid failure. Put an assert there to be sure. OK visa@ mpi@
2017-09-11missing parts for arm64, dependencies needed.Marc Espie
spotted by deraadt@, fix turns out to be identical to more recent binutils.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-29 16:26:19 +0000