Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-07-31 | delay bailout for invalid authenticating user until after the packet | Damien Miller | |
containing the request has been fully parsed. Reported by Dariusz Tytko and MichaÅ Sajdak; ok deraadt | |||
2018-07-31 | fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366 | Damien Miller | |
feedback and ok dtucker@ | |||
2018-07-31 | KNF | Theo de Raadt | |
2018-07-30 | Declare then assign local variable, no binary change. | anton | |
2018-07-30 | If we keep the BIOS framebuffer, stick to the desired framebuffer size | Mark Kettenis | |
instead of using the actual framebuffer size. This fixes a problem seen on various Apple machines where the BIOS framebuffer is bigger than the actual display. ok jcs@, mpi@ | |||
2018-07-30 | regen | Martin Pieuchot | |
2018-07-30 | Unlock sendmsg(2), sendto(2), recvfrom(2) and recvmsg(2). | Martin Pieuchot | |
ok kettenis@, sthen@, deraadt@, visa@, krw@ | |||
2018-07-30 | Replace fork with sniffer thread in Python. Clear the BPF list | Alexander Bluhm | |
before sniffing, Scapy 2.4.0 remembers old packets that confuse the test. | |||
2018-07-30 | Add regress covering the recently fixed NULL pointer deref in open(). | anton | |
2018-07-30 | catch up with the symlink removal of /dev/{audio,mixer}; | Jason McIntyre | |
ok ratchov | |||
2018-07-30 | Fix a NULL-pointer dereference when calling open() on a cloned device with write | anton | |
permissions and the flags include O_TRUNC|O_SHLOCK. ok deraadt@ | |||
2018-07-30 | improve consistency of markup for some variables, still far from perfect | Ingo Schwarze | |
2018-07-30 | recognize WSMOUSE_TYPE_TOUCHPAD devices | Joshua Stein | |
ok bru | |||
2018-07-30 | define WSMOUSE_TYPE_TOUCHPAD so non-elantech drivers can stop | Joshua Stein | |
claiming to be elantech devices | |||
2018-07-30 | Some cleanups and clarification, especially regarding locking (observed by rob) | Theo de Raadt | |
ok beck jmc | |||
2018-07-30 | sync | Theo de Raadt | |
2018-07-30 | rename 2nd argument of unveil from vague "flags" to "permissions"; | Theo de Raadt | |
man page change will follow | |||
2018-07-30 | Use the MI interrupt enable/distable API instead of the MD one on i386 and | Mark Kettenis | |
remove the MD API. ok deraadt@ | |||
2018-07-30 | Tweak history | Marc Espie | |
Document that LOCALBASE changes may not work. Be less dramatic about it, as it doesn't appear to be *that* bad. | |||
2018-07-30 | byebye fake.mtree | Marc Espie | |
2018-07-30 | Use FNONBLOCK instead of SS_NBIO to check/indicate that the I/O mode | Martin Pieuchot | |
for sockets is non-blocking. This allows us to G/C SS_NBIO. Having to keep the two flags in sync in a mp-safe way is complicated. This change introduce a behavior change in sosplice(), it can now always block. However this should not matter much due to the socket lock being taken beforhand. ok bluhm@, benno@, visa@ | |||
2018-07-30 | Inline trivial uaudio_id_name(). From Michael Bombardieri, thanks. | Alexandre Ratchov | |
"looks good" kn@ | |||
2018-07-30 | Remove a leftover unused struct. | Nicholas Marriott | |
2018-07-30 | Don't ask drivers to join a wifi network before an AP has been chosen. | Stefan Sperling | |
Should fix a panic with bwfm(4) reported by mlarkin@ ok phessler@ | |||
2018-07-30 | Add support for the GIC v3 ITS and use it to implement MSI support for | Mark Kettenis | |
rkpcie(4). ok patrick@ | |||
2018-07-30 | cleanup initialization of chngdir. inspired by Ross L Richardson. | Sebastian Benoit | |
ok tb@ | |||
2018-07-30 | replace exit() with return(), from Ross L Richardson. | Sebastian Benoit | |
ok tb@ (previous 3 commits to main.c as well) | |||
2018-07-30 | replace warn() + exit() with err() | Sebastian Benoit | |
From Ross L Richardson. | |||
2018-07-30 | line too long and whitespace. From Ross L Richardson. | Sebastian Benoit | |
2018-07-30 | reorder option parsing to be alphabetical/same order as usage and | Sebastian Benoit | |
manpage. From Ross L Richardson. | |||
2018-07-30 | When converting the bios memory map to memory clusters, clip segments at | Jonathan Matthew | |
the 512GB mark as the direct map cannot address memory past that point. ok kettenis@ (quite a while ago) | |||
2018-07-30 | update to nsd 4.1.23, from the release notes: | Florian Obser | |
------------------------------------------------------------------------ NSD versions 4.1.22 and before are vulnerable in comparing TSIG information and this can be used to discover a TSIG secret. NSD uses TSIG to protect zone transfers. The TSIG code uses a secret key to protect the data. The secret key is shared with both sides of the zone transfer connection. The comparison code in NSD was not time insensitive, causing the potential for an attacker to use timing information to discover data about the key contents. NSD versions from 2.2.0 to 4.1.22 are vulnerable. Upgrade to 4.1.23 or newer to get the fix. It was reported by Ondrej Sury (ISC). ------------------------------------------------------------------------ OK tb, sthen | |||
2018-07-30 | Simplify host() | kn | |
Get rid of the `cont' flag, zap obvious comments, add error label. OK benno sashan | |||
2018-07-30 | Add ssdfb(4), a driver for the SSD1309 controller that drives an | Patrick Wildt | |
128x64 OLED display. With the typical 8x16 font we get 4 rows with 16 characters each on it. The controller can be driven using I2C, 3-wire and 4-wire SPI. This commit includes support for the 4-wire protocol. ok deraadt@ | |||
2018-07-30 | Add colon for clarity. | Antoine Jacoutot | |
ok espie@ | |||
2018-07-30 | apply the loop settle delay to handling of loop up and loop reset events, | Jonathan Matthew | |
so hotplug can be more reliable too. | |||
2018-07-30 | extend the loop settle time to 200ms, and adjust the check so that we'll | Jonathan Matthew | |
actually break out once the loop has been up for that long. | |||
2018-07-30 | tweak previous; | Jason McIntyre | |
2018-07-30 | KNF | Theo de Raadt | |
2018-07-30 | document the current limitation (we don't yet find an above covering | Bob Beck | |
unveil for relative operations) that I am working on in BUGS | |||
2018-07-30 | Allow for us to do a CREATE style lookup on a read only filesystem | Bob Beck | |
if and only if we are unveil doing it. Fixes an issue noticed by kn@ where unveil would fail with EROFS on a read only filesystem | |||
2018-07-30 | activate unveil for testing | Theo de Raadt | |
ok kibbles and bits | |||
2018-07-29 | revert accidentally changed prototype | Bob Beck | |
2018-07-29 | Don't exceed UNVEIL_MAX_VNODES with a long path now that we save | Bob Beck | |
the traversed vnodes - noticed and fixed by semarie@ | |||
2018-07-29 | Make sure we don't count looking at .. as a component | Bob Beck | |
as a descending match. Noticed by Stuart Cassoff <3d0g@bell.net> | |||
2018-07-29 | Add regress for ensuring .. is appropriately *not* used as a | Bob Beck | |
descending match | |||
2018-07-29 | Document that X509_{NAME,REQ,REQ_INFO}_free() are all NULL safe. | Theo Buehler | |
From Ross L. Richardson | |||
2018-07-29 | Remove NULL checks before X509_{REQ,NAME}_free() and zap an unnecessary | Theo Buehler | |
pair of parens. From Ross L. Richardson | |||
2018-07-29 | replace hand-rolled tmp files with mkstemp() | Sebastian Benoit | |
ok florian@ back in april, reminded by theo. | |||
2018-07-29 | Add _PATH_AUTHPROGDIR = "/usr/libexec/auth", this path will be used | Theo de Raadt | |
to unveil. Unfortunately the auth subsystem uses _PATH_AUTHPROG = "/usr/libexec/auth/login_", which it auth-program is appended to -- a rather gross idea which now shows lack of wisdom. |