summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-07-31delay bailout for invalid authenticating user until after the packetDamien Miller
containing the request has been fully parsed. Reported by Dariusz Tytko and Michał Sajdak; ok deraadt
2018-07-31fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366Damien Miller
feedback and ok dtucker@
2018-07-31KNFTheo de Raadt
2018-07-30Declare then assign local variable, no binary change.anton
2018-07-30If we keep the BIOS framebuffer, stick to the desired framebuffer sizeMark Kettenis
instead of using the actual framebuffer size. This fixes a problem seen on various Apple machines where the BIOS framebuffer is bigger than the actual display. ok jcs@, mpi@
2018-07-30regenMartin Pieuchot
2018-07-30Unlock sendmsg(2), sendto(2), recvfrom(2) and recvmsg(2).Martin Pieuchot
ok kettenis@, sthen@, deraadt@, visa@, krw@
2018-07-30Replace fork with sniffer thread in Python. Clear the BPF listAlexander Bluhm
before sniffing, Scapy 2.4.0 remembers old packets that confuse the test.
2018-07-30Add regress covering the recently fixed NULL pointer deref in open().anton
2018-07-30catch up with the symlink removal of /dev/{audio,mixer};Jason McIntyre
ok ratchov
2018-07-30Fix a NULL-pointer dereference when calling open() on a cloned device with writeanton
permissions and the flags include O_TRUNC|O_SHLOCK. ok deraadt@
2018-07-30improve consistency of markup for some variables, still far from perfectIngo Schwarze
2018-07-30recognize WSMOUSE_TYPE_TOUCHPAD devicesJoshua Stein
ok bru
2018-07-30define WSMOUSE_TYPE_TOUCHPAD so non-elantech drivers can stopJoshua Stein
claiming to be elantech devices
2018-07-30Some cleanups and clarification, especially regarding locking (observed by rob)Theo de Raadt
ok beck jmc
2018-07-30syncTheo de Raadt
2018-07-30rename 2nd argument of unveil from vague "flags" to "permissions";Theo de Raadt
man page change will follow
2018-07-30Use the MI interrupt enable/distable API instead of the MD one on i386 andMark Kettenis
remove the MD API. ok deraadt@
2018-07-30Tweak historyMarc Espie
Document that LOCALBASE changes may not work. Be less dramatic about it, as it doesn't appear to be *that* bad.
2018-07-30byebye fake.mtreeMarc Espie
2018-07-30Use FNONBLOCK instead of SS_NBIO to check/indicate that the I/O modeMartin Pieuchot
for sockets is non-blocking. This allows us to G/C SS_NBIO. Having to keep the two flags in sync in a mp-safe way is complicated. This change introduce a behavior change in sosplice(), it can now always block. However this should not matter much due to the socket lock being taken beforhand. ok bluhm@, benno@, visa@
2018-07-30Inline trivial uaudio_id_name(). From Michael Bombardieri, thanks.Alexandre Ratchov
"looks good" kn@
2018-07-30Remove a leftover unused struct.Nicholas Marriott
2018-07-30Don't ask drivers to join a wifi network before an AP has been chosen.Stefan Sperling
Should fix a panic with bwfm(4) reported by mlarkin@ ok phessler@
2018-07-30Add support for the GIC v3 ITS and use it to implement MSI support forMark Kettenis
rkpcie(4). ok patrick@
2018-07-30cleanup initialization of chngdir. inspired by Ross L Richardson.Sebastian Benoit
ok tb@
2018-07-30replace exit() with return(), from Ross L Richardson.Sebastian Benoit
ok tb@ (previous 3 commits to main.c as well)
2018-07-30replace warn() + exit() with err()Sebastian Benoit
From Ross L Richardson.
2018-07-30line too long and whitespace. From Ross L Richardson.Sebastian Benoit
2018-07-30reorder option parsing to be alphabetical/same order as usage andSebastian Benoit
manpage. From Ross L Richardson.
2018-07-30When converting the bios memory map to memory clusters, clip segments atJonathan Matthew
the 512GB mark as the direct map cannot address memory past that point. ok kettenis@ (quite a while ago)
2018-07-30update to nsd 4.1.23, from the release notes:Florian Obser
------------------------------------------------------------------------ NSD versions 4.1.22 and before are vulnerable in comparing TSIG information and this can be used to discover a TSIG secret. NSD uses TSIG to protect zone transfers. The TSIG code uses a secret key to protect the data. The secret key is shared with both sides of the zone transfer connection. The comparison code in NSD was not time insensitive, causing the potential for an attacker to use timing information to discover data about the key contents. NSD versions from 2.2.0 to 4.1.22 are vulnerable. Upgrade to 4.1.23 or newer to get the fix. It was reported by Ondrej Sury (ISC). ------------------------------------------------------------------------ OK tb, sthen
2018-07-30Simplify host()kn
Get rid of the `cont' flag, zap obvious comments, add error label. OK benno sashan
2018-07-30Add ssdfb(4), a driver for the SSD1309 controller that drives anPatrick Wildt
128x64 OLED display. With the typical 8x16 font we get 4 rows with 16 characters each on it. The controller can be driven using I2C, 3-wire and 4-wire SPI. This commit includes support for the 4-wire protocol. ok deraadt@
2018-07-30Add colon for clarity.Antoine Jacoutot
ok espie@
2018-07-30apply the loop settle delay to handling of loop up and loop reset events,Jonathan Matthew
so hotplug can be more reliable too.
2018-07-30extend the loop settle time to 200ms, and adjust the check so that we'llJonathan Matthew
actually break out once the loop has been up for that long.
2018-07-30tweak previous;Jason McIntyre
2018-07-30KNFTheo de Raadt
2018-07-30document the current limitation (we don't yet find an above coveringBob Beck
unveil for relative operations) that I am working on in BUGS
2018-07-30Allow for us to do a CREATE style lookup on a read only filesystemBob Beck
if and only if we are unveil doing it. Fixes an issue noticed by kn@ where unveil would fail with EROFS on a read only filesystem
2018-07-30activate unveil for testingTheo de Raadt
ok kibbles and bits
2018-07-29revert accidentally changed prototypeBob Beck
2018-07-29Don't exceed UNVEIL_MAX_VNODES with a long path now that we saveBob Beck
the traversed vnodes - noticed and fixed by semarie@
2018-07-29Make sure we don't count looking at .. as a componentBob Beck
as a descending match. Noticed by Stuart Cassoff <3d0g@bell.net>
2018-07-29Add regress for ensuring .. is appropriately *not* used as aBob Beck
descending match
2018-07-29Document that X509_{NAME,REQ,REQ_INFO}_free() are all NULL safe.Theo Buehler
From Ross L. Richardson
2018-07-29Remove NULL checks before X509_{REQ,NAME}_free() and zap an unnecessaryTheo Buehler
pair of parens. From Ross L. Richardson
2018-07-29replace hand-rolled tmp files with mkstemp()Sebastian Benoit
ok florian@ back in april, reminded by theo.
2018-07-29Add _PATH_AUTHPROGDIR = "/usr/libexec/auth", this path will be usedTheo de Raadt
to unveil. Unfortunately the auth subsystem uses _PATH_AUTHPROG = "/usr/libexec/auth/login_", which it auth-program is appended to -- a rather gross idea which now shows lack of wisdom.