summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-11-16Add a helper to extrct the CRL Number from a crlTheo Buehler
ok claudio
2023-11-16consider an MX of "localhost" as it were a "Null MX"Omar Polo
diff from Philipp (philipp+openbsd [at] bureaucracy [dot] de), thanks! ok sthen@
2023-11-16Add expected output files, missed in previous commit. I hope our grep isAnton Lindqvist
producing the wanted output at this point.
2023-11-16avoid reading data when enumerating kstats.David Gwynne
this means we can reliably read the provider/instance/name/unit tuple, which should avoid "duplicate kstat entry" when multiple kstat read handlers have issues. found on a box with multiple rge interfaces, which have hardware backed kstats that can only be read when the interface is up.
2023-11-16handle printing cpu freq and volt kstat_kv typesDavid Gwynne
2023-11-16cpu frequency and volt types for kstat_kvsDavid Gwynne
2023-11-15use a random number as the cookie in bio ioctls.David Gwynne
ok kn@ krw@
2023-11-15when connecting via socket (the default case), filter addresses byDamien Miller
AddressFamily if one was specified. Fixes the case where, if CanonicalizeHostname is enabled, ssh may ignore AddressFamily. bz5326; ok dtucker
2023-11-15when deciding whether to enable keystroke timing obfuscation,Damien Miller
only consider enabling it when a channel with a tty is open. Avoids turning on the obfucation when X11 forwarding only is in use, which slows it right down. Reported by Roger Marsh
2023-11-15Constify disk_map()'s path argumentKlemens Nanni
The disklabel UID passed in is not modified, reflect that and allow callers using 'const char *'. OK miod
2023-11-15fnematch: fix a bug that could result in extra chars being pushed back.Todd C. Miller
From Arnold Robbins. https://github.com/onetrueawk/awk/pull/213
2023-11-15fnematch: fix out-of-bounds access on EOFTodd C. Miller
fnematch() expects to store a NUL byte when EOF is encountered. However, the rewrite broke this assumption because r.len from getrune() is zero on EOF. This results in j becoming negative on EOF, causing an out-of-bounds access. It is simplest to just force r.len to 1 on EOF to copy a single NUL byte--the rune is initialized to zero even for EOF. This also fixes the call to adjbuf(). We cannot use 'k' to determine when we need to expand the buffer now that we are potentially reading more than a single byte at a time. https://github.com/onetrueawk/awk/pull/211
2023-11-15Correct denominators when converting NTP fixed point values to doubleOtto Moerbeek
and vice-versa; ok tb@
2023-11-15Make sure we allocate the correct size for an appl_agentcap.Martijn van Duren
OK claudio@ miod@
2023-11-15Don't let signify mess up our status lineAndrew Fresh
While not verbose the status line is built as we go, so save errors from signify until after we've finished the status line. This should exit and print the error immediately, since this happens when fetching the SHA256.sig and fw_update exits early in that case.
2023-11-15Improve output after waiting for package db lockAndrew Fresh
OpenBSD::PackageInfo::lock_db will send messages to STDERR if we ended up waiting for a lock, if that happens, it stomped over the "fw_update:" prefix on the status line so tidy up and print it out again.
2023-11-15Better handle ftp errors in fw_updateAndrew Fresh
Trap STDERR to post-process it looking for 404 errors to handle them differently. The fetch method now also returns different error codes for errors that can continue on. Currently only 404 is special and everything else should cause fw_update to exit early without trying all the files. Exit early if the SHA256.sig gets a 404 because that is required to figure out what valid firmware are.
2023-11-15Improve fw_update output on errorsAndrew Fresh
Mostly some setup for the future, by separating out the filehandles we use for the status and errors more specifically, we can trap the things we know about without hiding surprises.
2023-11-15Drop some unnecessary parenthesesTheo Buehler
2023-11-15Shuffle getters and adders down a bitTheo Buehler
These use static helper functions which don't need prototypes this way.
2023-11-15Add regress test for "grep -m" behavior. From Crystal Kolipe.Todd C. Miller
2023-11-15procline: only reduce mcount once per line, not once per match.Todd C. Miller
This makes "grep -m" behave like GNU grep (where the -m option originated). From Crystal Kolipe.
2023-11-14Bump powerpc64 default datasize to 1536MGeorge Koehler
This is for llvm 16; powerpc64 (like some other platforms) needs a higher datasize limit to build base-clang 16. ok jca@
2023-11-14Don't strdup NULL filename.Nicholas Marriott
2023-11-14Add missing .PATHJeremie Courreges-Anglas
Reported and suggested by jsing@
2023-11-14Handle NULL client (in config file) when showing a status message; alsoNicholas Marriott
copy the file when processing if-shell since it may be freed. GitHub issue 3746.
2023-11-14Use SM 2026 for Sync which is more widely supported now.Nicholas Marriott
2023-11-14increase datasize to 1536M for the default login classJonathan Gray
needed to build llvm-16 gnu/usr.bin/clang/include/llvm/AMDGPU ok jca@
2023-11-14This code depends on internals from net/art.h so include it explicitly.Claudio Jeker
OK bluhm@
2023-11-14Fix typo in comment.Claudio Jeker
2023-11-14Add break to error out on weird characters in gethostbyname().Florian Obser
Missed in previous some time ago; while here remove confusing else. Input & OK eric
2023-11-14regenJonathan Gray
2023-11-14add another Navi 32 device idJonathan Gray
7470 rev 00 is Radeon Pro W7700 found in AMD Software: PRO Edition for AMD Radeon PRO W7700
2023-11-13reduce the man(7) global indentation from 7n to 5n, see man_term.c rev. 1.197Ingo Schwarze
2023-11-13raise i386's datasize for 'daemon' class so that relinking libc at bootStuart Henderson
doesn't fail - new clang is even greedier than the old one. I picked the value 1500M out of the air, it works for me but could perhaps be finessed downwards a bit. (I'm also using 1500M for make build / mkr+mkrx on i386; make -j8 build is no longer a good idea on i386 ;)
2023-11-13fix i386 setsStuart Henderson
2023-11-13include function name in warning printf in vmx_handle_np_fault() and ↵Jasper Lievisse Adriaanse
svm_handle_np_fault() more clearer output ok mlarkin@
2023-11-13Reduce the man(7) default global indentation from 7n, which was an oddityIngo Schwarze
in groff-1.01 to groff-1.22.4, to 5n for compatibility with Version 7 AT&T UNIX, 4.3BSD-Reno, groff-1.23.0, and all versions of mdoc(7). OK jmc@ millert@
2023-11-13Fix rt_setgate() error handling.Alexander Bluhm
In revision 1.424 the logic in rt_setgate() has changed. The old code entered a value into rt_gateway also if rt_setgwroute() returned an error. Now if rt_setgwroute() fails, rt_gateway is NULL and ROUNDUP(rt->rt_gateway->sa_len) crashes. Put back the old logic in rt_setgate(). Setting rt_gateway and rt_gwroute are actually independent. If malloc(9) in rt_setgate() fails, rt_gateway can still be NULL. The subsequent crash in free(rt->rt_gateway, M_RTABLE, ROUNDUP(rt->rt_gateway->sa_len)) was just never observed. Add a NULL check around these free(9). Reported-by: syzbot+2e79dd9db712d3c5ade9@syzkaller.appspotmail.com OK mvs@
2023-11-13Make X509_certificate_type() less badTheo Buehler
This converts to proper single exit and undoes a number of unnecessarily silly muppet antics. ok beck
2023-11-13Garbage collect an incoherent export crypto checkTheo Buehler
Contrast "#define EVP_PKT_EXP 0x1000 /* <= 512 bit key */" with the diff: - /* /8 because it's 1024 bits we look for, not bytes */ - if (EVP_PKEY_size(pk) <= 1024 / 8) - ret |= EVP_PKT_EXP; EVP_PKT_EXP will be nuked at the next opportunity. discussed with jsing
2023-11-13Use a sensible variable name (i.e. nid) instead of i for a NIDTheo Buehler
2023-11-13Use X509_get_signature_nid() instead of inlining itTheo Buehler
ok beck jsing
2023-11-13X509_certificate_type() needs to know about RSA-PSSTheo Buehler
This doesn't do much right now, but is part of the tangle that is adding RSA-PSS support. ok beck jsing
2023-11-13Apparently base-gcc doesn't like having OID() inside MIBDECL(). HandrollMartijn van Duren
the OID() logic into MIBDECL(). Found, tested, and OK jca@ OK tb@
2023-11-13Bye bye libcsiTheo Buehler
This is sad, but unfortunately, we never had time to grow it to its intended use. It's been in maintenance mode for too long, and there currently aren't concrete projects to pursue this direction further. It can be revived when the time is ripe. Until then, let it not get in the way of more urgent work. discussed with jsing
2023-11-13Retire the libcsi regressTheo Buehler
2023-11-13sync Symbols.list with reality; ok tb@Robert Nagy
2023-11-13enable UDF on arm64 install mediaJonathan Gray
ok deraadt@ kn@
2023-11-13Prepare to expose OPENSSL_gmtime and OPENSSL_timegm as publicBob Beck
This matches when BoringSSL has done, and allows for getting rid of the dependency on system timegm() and gmtime() in libtls. which will make life easier for portable, and remove our dependency on the potentially very slow system versions. ok tb@ - tb will handle the minor bump bits and expose on the next minor bump CVS :----------------------------------------------------------------------