Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-05-17 | remove prototypes with no matching function; ok djm@ | Jonathan Gray | |
2024-05-17 | remove externs for removed vars; ok djm@ | Jonathan Gray | |
2024-05-17 | use SIGKILL instead of 9; ok guenther | Theo de Raadt | |
2024-05-17 | -Werror was turned on (probably just for development), and this is a | Theo de Raadt | |
simple way to satisfy older gcc. | |||
2024-05-17 | g/c unused variable | Damien Miller | |
2024-05-17 | asn1_str2tag(): no need for tntmp to be static | Theo Buehler | |
2024-05-17 | The long primitive function table can be const | Theo Buehler | |
2024-05-17 | The bignum primitive function table (bignum_pf) can be const | Theo Buehler | |
2024-05-17 | spelling; ok djm@ | Jonathan Gray | |
2024-05-17 | allow overriding the sshd-session binary path | Damien Miller | |
2024-05-17 | fix incorrect debug option name introduce in previous commit | Damien Miller | |
2024-05-17 | sync | Theo de Raadt | |
2024-05-17 | run the sshd-session link kit also | Theo de Raadt | |
2024-05-17 | construct and install a relink-kit for sshd-session | Theo de Raadt | |
ok djm | |||
2024-05-17 | missing files from previous | Damien Miller | |
2024-05-17 | Start the process of splitting sshd into separate binaries. This step | Damien Miller | |
splits sshd into a listener and a session binary. More splits are planned. After this changes, the listener binary will validate the configuration, load the hostkeys, listen on port 22 and manage MaxStartups only. All session handling will be performed by a new sshd-session binary that the listener fork+execs. This reduces the listener process to the minimum necessary and sets us up for future work on the sshd-session binary. feedback/ok markus@ deraadt@ NB. if you're updating via source, please restart sshd after installing, otherwise you run the risk of locking yourself out. | |||
2024-05-16 | Check that lower-case variants of UTF-16 surrogate escape sequences | Ingo Schwarze | |
are rejected with the correct error message. | |||
2024-05-16 | Fix UTF-16 surrogate detection: | Ingo Schwarze | |
lower case variants have to be rejected, too. | |||
2024-05-16 | Improve coverage of edge cases for 3-byte UTF-8 sequences. | Ingo Schwarze | |
Coverage for 2-byte and 4-byte sequences was already reasonable. | |||
2024-05-16 | Add a complete suite of tests covering ASCII characters in UTF-8 spelling. | Ingo Schwarze | |
Most of this goes to nogroff.in rather than ascii.in for now because groff-1.23.0 is buggy as hell in this respect and i'm too lazy to debug the horrific function make_glyph_node() in the file groff/src/roff/troff/node.cpp right now. | |||
2024-05-16 | x509_v3.c: remove superfluous parentheses | Theo Buehler | |
No change in the generated assembly | |||
2024-05-16 | Fix IPsec in use with IP forwarding 2 logic. | Alexander Bluhm | |
If sysctl net.inet.ip.forwarding is 2, only packets processed by IPsec are forwarded. Variable ipsec_in_use is a shortcut to avoid IPsec processing if no policy has been configured. With ipsec_in_use unset and ipforwarding set to IPsec only, the packet must be dropped. OK claudio@ | |||
2024-05-16 | Make daily(8) reporting services that are running | Solene Rapenne | |
but not enabled in rc.conf.local(8) wording by jmc@ ok schwarze@ florian@ | |||
2024-05-16 | As of the documentation, the value of the Command UPIU expected_xfer_len | Marcus Glocker | |
field shall be the product of the Logical Block Size and the transfer length field of the CDB. | |||
2024-05-16 | 40GB WRKOBJDIR is too tight if you end up with two chromium-based ports | Stuart Henderson | |
built on the same machine, suggest 50 min on archs with chromium and that 100 wouldn't be unreasonable | |||
2024-05-16 | distfiles consume more like 100GB these days, so recommend 120GB | Theo Buehler | |
2024-05-16 | add LUAJIT_ARCHS | Stuart Henderson | |
2024-05-16 | Simplify the code to clamp the TCP send and recv buffer to 64k. | Claudio Jeker | |
We don't really care if it works or not and we don't want to clamp it down further then 64k. So just call setsockopt() once and ignore the error. OK tb@ sthen@ | |||
2024-05-16 | Stop treating IPL_NONE mutexes special in MULTIPROCESSOR kernels. While | Mark Kettenis | |
in theory these are safe to use in code that runs under the kernel lock they are nasty trips when converting code to run without the kernel lock. ok mpi@, claudio@ | |||
2024-05-16 | SSL_CTX_set_keylog_callback: copy-paste error _set_ -> _get_ | Theo Buehler | |
2024-05-15 | Recent OpenSBI versions implement shutdown and reboot through the DA9063 | Mark Kettenis | |
PMIC, but expect the I2C controller to remain enabled. Adjust ociic(4) such that this is the case. ok jca@ | |||
2024-05-15 | Improve X509V3_get0_uids() documentation | Theo Buehler | |
Use less horrcble variable names and make it explicit that both output arguments are allowed to be NULL. | |||
2024-05-15 | Remove unused variable. | Marcus Glocker | |
2024-05-15 | Fix multi-slot support. | Marcus Glocker | |
We also add an timeout while waiting for command completion. | |||
2024-05-15 | Add a complete set of tests for all C0 and C1 control characters. | Ingo Schwarze | |
This is particularly useful to make sure that man(1) does not let control characters sneak through to the output side, no matter how hard an input file tries to deceive it. | |||
2024-05-15 | X509_check_akid: zap stray space | Theo Buehler | |
2024-05-15 | Also free CCBs in the error case. Fixes an intermittent panic seen on | Marcus Glocker | |
arm64. | |||
2024-05-15 | sync | Theo de Raadt | |
2024-05-15 | Add missing space | Claudio Jeker | |
2024-05-15 | ansi style function decl | Jonathan Gray | |
2024-05-15 | bump sizes a bit more | Stuart Henderson | |
2024-05-15 | the approximate storage requirements for bulk builds with dpb were a bit | Stuart Henderson | |
on the low side; bump them | |||
2024-05-15 | Use default-shell for command prompt #() and popups as well | Nicholas Marriott | |
2024-05-15 | rpki-client: plug leak of the crl path | Theo Buehler | |
also, drop an unnecessary NULL check and make freeing have the same order as the struct field so auditing for leaks is easier. ok claudio | |||
2024-05-15 | Mark RTR and IPv6 BGP packets with DSCP CS6 (network control) | Job Snijders | |
Additionally, set TCP_NODELAY on the RTR socket, there is no need to queue up messages towards the RTR server. OK claudio@ | |||
2024-05-15 | rpki-client: don't leak sia from struct tak. | Theo Buehler | |
ok claudio | |||
2024-05-15 | Mark network control packets with DSCP CS6 (parity with ospfd) | Job Snijders | |
OK claudio@ | |||
2024-05-15 | Fix memory leaks reported by Lu Ming Yin. | Nicholas Marriott | |
2024-05-15 | remove unused header | Jonathan Gray | |
opti functions were removed in pciide.c rev 1.360 | |||
2024-05-15 | remove extra snprintf arguments to fix build | Jonathan Gray | |
usps(4) is not included in any kernel config |