summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-05-17remove prototypes with no matching function; ok djm@Jonathan Gray
2024-05-17remove externs for removed vars; ok djm@Jonathan Gray
2024-05-17use SIGKILL instead of 9; ok guentherTheo de Raadt
2024-05-17-Werror was turned on (probably just for development), and this is aTheo de Raadt
simple way to satisfy older gcc.
2024-05-17g/c unused variableDamien Miller
2024-05-17asn1_str2tag(): no need for tntmp to be staticTheo Buehler
2024-05-17The long primitive function table can be constTheo Buehler
2024-05-17The bignum primitive function table (bignum_pf) can be constTheo Buehler
2024-05-17spelling; ok djm@Jonathan Gray
2024-05-17allow overriding the sshd-session binary pathDamien Miller
2024-05-17fix incorrect debug option name introduce in previous commitDamien Miller
2024-05-17syncTheo de Raadt
2024-05-17run the sshd-session link kit alsoTheo de Raadt
2024-05-17construct and install a relink-kit for sshd-sessionTheo de Raadt
ok djm
2024-05-17missing files from previousDamien Miller
2024-05-17Start the process of splitting sshd into separate binaries. This stepDamien Miller
splits sshd into a listener and a session binary. More splits are planned. After this changes, the listener binary will validate the configuration, load the hostkeys, listen on port 22 and manage MaxStartups only. All session handling will be performed by a new sshd-session binary that the listener fork+execs. This reduces the listener process to the minimum necessary and sets us up for future work on the sshd-session binary. feedback/ok markus@ deraadt@ NB. if you're updating via source, please restart sshd after installing, otherwise you run the risk of locking yourself out.
2024-05-16Check that lower-case variants of UTF-16 surrogate escape sequencesIngo Schwarze
are rejected with the correct error message.
2024-05-16Fix UTF-16 surrogate detection:Ingo Schwarze
lower case variants have to be rejected, too.
2024-05-16Improve coverage of edge cases for 3-byte UTF-8 sequences.Ingo Schwarze
Coverage for 2-byte and 4-byte sequences was already reasonable.
2024-05-16Add a complete suite of tests covering ASCII characters in UTF-8 spelling.Ingo Schwarze
Most of this goes to nogroff.in rather than ascii.in for now because groff-1.23.0 is buggy as hell in this respect and i'm too lazy to debug the horrific function make_glyph_node() in the file groff/src/roff/troff/node.cpp right now.
2024-05-16x509_v3.c: remove superfluous parenthesesTheo Buehler
No change in the generated assembly
2024-05-16Fix IPsec in use with IP forwarding 2 logic.Alexander Bluhm
If sysctl net.inet.ip.forwarding is 2, only packets processed by IPsec are forwarded. Variable ipsec_in_use is a shortcut to avoid IPsec processing if no policy has been configured. With ipsec_in_use unset and ipforwarding set to IPsec only, the packet must be dropped. OK claudio@
2024-05-16Make daily(8) reporting services that are runningSolene Rapenne
but not enabled in rc.conf.local(8) wording by jmc@ ok schwarze@ florian@
2024-05-16As of the documentation, the value of the Command UPIU expected_xfer_lenMarcus Glocker
field shall be the product of the Logical Block Size and the transfer length field of the CDB.
2024-05-1640GB WRKOBJDIR is too tight if you end up with two chromium-based portsStuart Henderson
built on the same machine, suggest 50 min on archs with chromium and that 100 wouldn't be unreasonable
2024-05-16distfiles consume more like 100GB these days, so recommend 120GBTheo Buehler
2024-05-16add LUAJIT_ARCHSStuart Henderson
2024-05-16Simplify the code to clamp the TCP send and recv buffer to 64k.Claudio Jeker
We don't really care if it works or not and we don't want to clamp it down further then 64k. So just call setsockopt() once and ignore the error. OK tb@ sthen@
2024-05-16Stop treating IPL_NONE mutexes special in MULTIPROCESSOR kernels. WhileMark Kettenis
in theory these are safe to use in code that runs under the kernel lock they are nasty trips when converting code to run without the kernel lock. ok mpi@, claudio@
2024-05-16SSL_CTX_set_keylog_callback: copy-paste error _set_ -> _get_Theo Buehler
2024-05-15Recent OpenSBI versions implement shutdown and reboot through the DA9063Mark Kettenis
PMIC, but expect the I2C controller to remain enabled. Adjust ociic(4) such that this is the case. ok jca@
2024-05-15Improve X509V3_get0_uids() documentationTheo Buehler
Use less horrcble variable names and make it explicit that both output arguments are allowed to be NULL.
2024-05-15Remove unused variable.Marcus Glocker
2024-05-15Fix multi-slot support.Marcus Glocker
We also add an timeout while waiting for command completion.
2024-05-15Add a complete set of tests for all C0 and C1 control characters.Ingo Schwarze
This is particularly useful to make sure that man(1) does not let control characters sneak through to the output side, no matter how hard an input file tries to deceive it.
2024-05-15X509_check_akid: zap stray spaceTheo Buehler
2024-05-15Also free CCBs in the error case. Fixes an intermittent panic seen onMarcus Glocker
arm64.
2024-05-15syncTheo de Raadt
2024-05-15Add missing spaceClaudio Jeker
2024-05-15ansi style function declJonathan Gray
2024-05-15bump sizes a bit moreStuart Henderson
2024-05-15the approximate storage requirements for bulk builds with dpb were a bitStuart Henderson
on the low side; bump them
2024-05-15Use default-shell for command prompt #() and popups as wellNicholas Marriott
2024-05-15rpki-client: plug leak of the crl pathTheo Buehler
also, drop an unnecessary NULL check and make freeing have the same order as the struct field so auditing for leaks is easier. ok claudio
2024-05-15Mark RTR and IPv6 BGP packets with DSCP CS6 (network control)Job Snijders
Additionally, set TCP_NODELAY on the RTR socket, there is no need to queue up messages towards the RTR server. OK claudio@
2024-05-15rpki-client: don't leak sia from struct tak.Theo Buehler
ok claudio
2024-05-15Mark network control packets with DSCP CS6 (parity with ospfd)Job Snijders
OK claudio@
2024-05-15Fix memory leaks reported by Lu Ming Yin.Nicholas Marriott
2024-05-15remove unused headerJonathan Gray
opti functions were removed in pciide.c rev 1.360
2024-05-15remove extra snprintf arguments to fix buildJonathan Gray
usps(4) is not included in any kernel config