summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2003-01-19revamp .init call code to be saner:Marc Espie
- build a tree of modules inter-dependencies. - make sure dependent modules are .init'ed before depending modules. - flag initialization so that cycles don't bork ld.so. okay deraadt@, drahn@.
2003-01-19In error message from dependent libraries, mention which dependent libraryMarc Espie
is trying to load another library.
2003-01-19programs that chroot must use LOG_NDELAY; deraadt@ OKTodd C. Miller
2003-01-19repository move libc_r to libpthreadTheo de Raadt
2003-01-19repository move to libpthreadTheo de Raadt
2003-01-19add test to ensure select can be cancelled.Marco S Hyman
2003-01-19return (func(...)) not needed when the current function and funcMarco S Hyman
are both void. The select call is a cancellation point per IEEE Std 1003.1-2001. This should fix a problem espie@ found in kde.
2003-01-19typos; jmc@prioris.mini.pw.edu.plTheo de Raadt
2003-01-19shut up, dn(4). There's really no need to printf junk nobody wants to readHenning Brauer
for every collision. ok theo
2003-01-19Simplify and KNF anchoropt processing.Camiel Dobbelaar
ok dhartmei henning
2003-01-19Temporary fix for PR#3069 (thanks for the report, Alex Cichowski), untilThierry Deval
I find time to really follow all cases. At least it works here, and doesn't add new problems, it seems.
2003-01-19Wording.Thierry Deval
2003-01-19format string fixesHenning Brauer
inspired by Thorsten Glaser via fries@ ok theo
2003-01-19The -s option to show anchors is 'A' or 'Anchors', not 'a' (which is usedDaniel Hartmeier
to show 'all' information).
2003-01-19Spin off label string expansion into a separate function. ClarifiesCamiel Dobbelaar
and tightens all expand_label functions. ok dhartmei henning
2003-01-19Test label expansion functions.Camiel Dobbelaar
ok dhartmei henning
2003-01-19Labels are quoted in rule output now.Camiel Dobbelaar
2003-01-19Quote label in rule output.Camiel Dobbelaar
ok henning dhartmei
2003-01-19syncTheo de Raadt
2003-01-18inet6 fixes from jmc@prioris.mini.pw.edu.plTheo de Raadt
2003-01-18protoize(1) man page, cobbled from various places by jmc@prioris.mini.pw.edu.plTheo de Raadt
2003-01-18merge; by tedu@Stanford.EDUTheo de Raadt
2003-01-18more typos; jmc@prioris.mini.pw.edu.plTheo de Raadt
2003-01-18minor tweaking; andrushock@korovino.netTheo de Raadt
2003-01-18Move freeaddrinfo() so it doesn't get called with an uninitializedDaniel Hartmeier
pointer (which segfaults). From Julien Bordet.
2003-01-18va_end() missing. Thanks to Andrey Matveev.Cedric Berger
2003-01-18sleppingTheo de Raadt
2003-01-18syncTheo de Raadt
2003-01-18quite some KNF for the older partsHenning Brauer
2003-01-18adjust; err msgs changedHenning Brauer
2003-01-18host() overhaul:Henning Brauer
-split off host_if, host_v4, host_v6, host_dns -kill the return-everywhere nightmare -bit better error messages makes the code more read-, understand- and maintainable; no fucntional changes. ok cedric@ dhartmei@ mcbride@
2003-01-18KNF after ryan...Henning Brauer
2003-01-18Cleanup PF_OPT_NOACTION with tables. No changes on current behaviour,Cedric Berger
but do something useful when the user has no access to /dev/pf. Tested on i386, sparc64. ok henning@
2003-01-18Little cleanup from Andrey Matveev <andrushock@korovino.net>Cedric Berger
Thanks!
2003-01-18Argh! KNF.Ryan Thomas McBride
pointed out in advance by dhartmei@
2003-01-18Add "static-port" to some of the nat rule tests.Ryan Thomas McBride
2003-01-18Make nat behave the way it used to by copying back the random source portRyan Thomas McBride
correctly. Also remove some extra cruft in pf_get_sport related to the "static-port" behaviour. bug report from mpech@ and form@ testing cedric@ "looks sane to me" henning@ ok dhartmei@
2003-01-18Add missing token string and assignment to make static-port work for real.Ryan Thomas McBride
Diff and report courtesy of mpech@ and form@ ok dhartmei@
2003-01-18set stack size for threads, the default is too small for this test.Marco S Hyman
2003-01-17allow setting com baudrate up to 115200; req and testing by Sourabh Ladha ↵Michael Shalayeff
<ladha@mail.eecis.udel.edu>
2003-01-17Update comment for linker change which just committed.Dale Rahn
2003-01-17This is a project to modify executables so that they do not have anyDale Rahn
executable regions which are writable. If a section of an executable is writable and executable, it is much easier for errant code to modify the executable's behavior. Two current areas in shared library environments which have this critical problem are the GOT (Global Offset Table) and PLT (Procedure Linkage Table). The PLT is required to be executable and both GOT and PLT are writable on most architectures. On most ELF architecture machines this would cause shared libraries to have data and BSS marked as executable. Padding to the linker script for programs and shared libraries/objects to isolate the GOT and PLT into their own load sections in the executables. This allows only the text(readonly) region and the PLT region to be marked executable with the normal data and BSS not marked as executable. The PLT region is still marked executable on most architectures because the PLT lives in the "data" or "BSS" regions and the dynamic loader will need to modify it. Since the GOT and PLT should only ever be written by the dynamic linker, it will be modified to mprotect those regions so that they are not writable during normal execution. If the dynamic linker needs to modify the regions later, (eg for lazy binding), it will mprotect the region, make the necessary changes, and mprotect it back. Since it is possible to receive a signal which would interrupt the program flow and perhaps cause the dynamic linker to modify the same (or nearby) PLT references, it is now necessary for signals to be blocked for the duration of the mprotect.
2003-01-17Build sparc64 kernels with the same options as other architectures.Dale Rahn
Doesn't change how the kernel layout occurs, and is required for upcoming binutils/ld change.
2003-01-17Change the GOT initialization so that it is done in a function whichDale Rahn
initialized just the correct addresses instead of assuming that the GOT extends from _GLOBAL_OFFSET_TABLE_ to _DYNAMIC. Mostly from NetBSD. ok nate@
2003-01-17seperate[d][ly] -> separate[d][ly]; alan@alanday.comTheo de Raadt
2003-01-17Add a new option, -f, that allows the user to specify a custom outputTodd C. Miller
format. Currently only supports printing the inode number and path (along with any arbitrary text) but other escapes may be added later. A useful invocation is: ncheck -s -f '\P\0' | xargs -0 ls -ldgT deraadt@ OK
2003-01-17Typos, two from Michael Knudsen <e at molioner.dk>Camiel Dobbelaar
ok pjanzen
2003-01-17Make table tests less sensitive to environmental conditions.Cedric Berger
ok dhartmei@
2003-01-17Don't report setugid directories in "ncheck -s" output since thoseTodd C. Miller
bits have no meaning on OpenBSD. deraadt@ OK
2003-01-17Improve wording a bit; elf(5) was obviously written by a non-nativeTodd C. Miller
speaker of English and needs more help.