summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-03-18Retire the bn_mod_exp test.Theo Buehler
Its is fully covered by bn_mod_exp_zero now.
2023-03-18Reimplement a variant of the bn_mod_exp tests from scratchTheo Buehler
This exercises the same corner cases as bn_mod_exp and a few more. With input from jsing
2023-03-18fixes for mandoc -TlintJonathan Gray
ok tb@
2023-03-17remove -beta tagTheo de Raadt
2023-03-17Document M_LOG flag; from Peter J. Philipp.Todd C. Miller
2023-03-17Move annoying yet harmless diagnostic message into #ifdef DEBUG.Miod Vallat
2023-03-17Adjust sourceaddr argument parser.Claudio Jeker
Only print the sourceaddrs if no argument was passed. If arguemnts are set make sure that either and address is present or that an ifp was given. This make the command behave a more like other route commands. OK deraadt@
2023-03-17Fix rtr_parse_aspa(), the spas array is actually not copied over intoClaudio Jeker
the rtr_aspa struct so access them directly from the buf using offset as the address of the first element. OK tb@
2023-03-16after updating amdgpu-firmware from 20221214 to 20230310 a newJonathan Gray
warning appeared in dmesg on renoir: [drm] psp gfx command LOAD_TA(0x1) failed and response status is (0x7) [drm] psp gfx command INVOKE_CMD(0x3) failed and response status is (0x4) psp_securedisplay_parse_resp_status *ERROR* Secure display: Generic Failure. psp_securedisplay_initialize *ERROR* SECUREDISPLAY: query securedisplay TA failed. ret 0x0 This is likely related to not implementing all the HDCP paths. Return early in psp_securedisplay_initialize() to avoid this. I suspect the newer renoir firmware adds a TA_FW_TYPE_PSP_SECUREDISPLAY component the older one didn't have. reported by jmc@
2023-03-16Add code to bring up the PCIe controller on the RK356x.Mark Kettenis
ok dlg@
2023-03-16When syslogd is sending messages via UDP to a remote loghost, itAlexander Bluhm
stops if there is a permanent error. Add EACCES generated by pf to the list of transient errors. This restores pre-6.5 behavior and continues logging after pf.conf has been fixed. OK millert@ deraadt@ mvs@
2023-03-16Update for 7.3.Miod Vallat
2023-03-16Consistent phrasing: function -> function pointerJob Snijders
2023-03-16Add X509_STORE_{set,get}_check_issued and X509_STORE_CTX_get_check_issued to ↵Job Snijders
manpage with and OK tb@
2023-03-16syncTheo Buehler
2023-03-16Install EVP_CIPHER_meth_new.3Theo Buehler
2023-03-16Add EVP_CIPHER_meth_* documentation from OpenSSL 1.1Theo Buehler
This is essentially the original text with a few tweaks and fixes by me, removing parts inapplicable to LibreSSL. There are dangling references to EVP_CIPHER_CTX_copy(3) and EVP_CIPHER_CTX_get_cipher_data(3). This all isn't great, but it's better than nothing. Probably good enough for these rarely used functions.
2023-03-16Update manpage for X509_CRL_get0_tbs_sigalg()Job Snijders
OK tb@
2023-03-16Add missing dependecy for rkcomphy(4); pointed out by dlg@Mark Kettenis
2023-03-16Bump LibreSSL version to 3.7.2Theo Buehler
2023-03-16revert previous, stsp made WEP work on bwfm(4)Klemens Nanni
2023-03-15make WEP encryption work on bwfm(4)Stefan Sperling
based on an initial diff by jsg@ brokenness pointed out by kn@ ok jsg@
2023-03-15tweak sourceaddr:Jason McIntyre
- remove "-inet|-inet6" as it is not generally meaningful - remove the qualifier "if set": sourceaddr now works nicely in cases where no "address is given
2023-03-15Fix a number of out of bound reads in DNS response parsing.Todd C. Miller
Originally from djm@. OK deraadt@ florian@ bluhm@
2023-03-15state that binary updates are not available for all platforms/architectures.Sebastian Benoit
triggered by a bug report by 'kodcode', thanks. wording adjusted by jmc@, ok phessler@
2023-03-15openssh-9.3Damien Miller
2023-03-15slightly earlier, and tweak some datesTheo de Raadt
2023-03-15Do not leak screen in popups, GitHub issue 3492.Nicholas Marriott
2023-03-15Fix the length check when computing a fake challenge for users notTodd C. Miller
in the S/Key database. If the system hostname is longer than 126 characters this could result in NUL bytes being written past the end of a stack buffer. There is no impact on systems with a hostname 126 characters or less. Found by Qualys. OK deraadt@
2023-03-15Add missing nameref resolving for the _DEP() package elements that indicateMark Kettenis
dependencies between ACPI devices. ok dlg@, deraadt@
2023-03-15Show MFTs as part of the signature pathJob Snijders
no objection tb@
2023-03-15For now pass AF_UNSPEC to printsource() to ensure that both inet and inet6Claudio Jeker
addrs are fetched from the kernel. This needs more cleanup.
2023-03-15Make route sourceaddr always print the used addresses for inet and inet6.Claudio Jeker
Print 'default' if no sourceaddr is set and the default algorithm is used. With and OK kn@ deraadt@
2023-03-15drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSesJonathan Gray
From Guilherme G. Piccoli in amd-staging-drm-next https://gitlab.freedesktop.org/drm/amd/-/issues/2385 This fixes amdgpu failing to init on Steam Deck after the drm 6.1 update: [drm] failed to load ucode VCN0_RAM(0x3A) [drm] psp gfx command LOAD_IP_FW(0x6) failed and response status is (0xFFFF0000) [drm] *ERROR* ring vcn_dec_0 test failed (-60) [drm] *ERROR* hw_init of IP block <vcn_v3_0> failed -60 drm:pid0:amdgpu_device_init *ERROR* amdgpu_device_ip_init failed drm:pid0:amdgpu_attachhook *ERROR* Fatal error during GPU init reported and tested by bentley@ on: bios0: vendor Valve version "F7A0113" date 11/04/2022 bios0: Valve Jupiter
2023-03-15handle dmi_get_system_info(DMI_BIOS_VERSION)Jonathan Gray
2023-03-15store bios version, needed for amdgpu Steam Deck quirkJonathan Gray
2023-03-15Fix command prompt not to always append argument but only if there hasNicholas Marriott
actually been expansion. GitHub issue 3493.
2023-03-15Return the signature length after successful signing operationTheo Buehler
This is required behavior of the EVP_DigestSign() API, but seemingly almost nothing uses this. Well, turns out ldns does. Reported by Stephane. Helpful comments by sthen. ok jsing
2023-03-15Add comments that explain why things are done in this strange order.Theo Buehler
There's some method to this madness. ok jsing
2023-03-15Push calloc() of ndef_aux down as far as possible andTheo Buehler
pull the setting of the ex_arg up, so we can do error checking. ok jsing
2023-03-15Error check BIO_asn1_set_{prefix,suffix}() callsTheo Buehler
ok jsing
2023-03-15Streaming BIOs assume they can write to NULL BIOsTheo Buehler
At least SMIME_text() relies on this. Pushing an error on the stack trips PKCS7 regress in py-cryptography, so indicate nothing was written instead of throwing an error. Reported by Alex Gaynor a while back ok jsing
2023-03-15Ensure negative input to BN_mod_exp_mont_consttime() is correctly reduced.Joel Sing
A negative input to BN_mod_exp_mont_consttime() is not correctly reduced, remaining negative (when it should be in the range [0, m)). Fix this by unconditionally calling BN_nnmod() on the input. Fixes ossfuzz #55997. ok tb@
2023-03-15Include tests with negative values in BN_mod_exp* regress.Joel Sing
This currently fails.
2023-03-15bn_mod_exp_zero: rename result into gotTheo Buehler
2023-03-14Prep for rpki-client 8.3Claudio Jeker
2023-03-14WEP in bfwm(4) never worked, sync with realityKlemens Nanni
"ifconfig bwfm0 [-]nwkey ..." does not work and thus the installer no longer offers WEP, so unmention support while leaving the recommendation against it.
2023-03-14Free KRL itself in addition to its contents. From Coverity CID 291841,Darren Tucker
ok djm@
2023-03-14Check pointer for NULL before attempting to deref. None of the existingDarren Tucker
callers seem to do that, but it's worth checking. From Coverity CID 291834, ok djm@
2023-03-14rpki-client: disallow AIA in self-signed certsTheo Buehler
Per RFC 6487, 4.8.7, self-signed certificates must not have an Authority Info Access extension. In normal operation this is ensured by ta_parse() and cert_parse(), respectively. In filemode, only partial checks are performed, so this is not guaranteed. Issue flagged by and ok job
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 18:18:38 +0000