Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-01-19 | revamp .init call code to be saner: | Marc Espie | |
- build a tree of modules inter-dependencies. - make sure dependent modules are .init'ed before depending modules. - flag initialization so that cycles don't bork ld.so. okay deraadt@, drahn@. | |||
2003-01-19 | In error message from dependent libraries, mention which dependent library | Marc Espie | |
is trying to load another library. | |||
2003-01-19 | programs that chroot must use LOG_NDELAY; deraadt@ OK | Todd C. Miller | |
2003-01-19 | repository move libc_r to libpthread | Theo de Raadt | |
2003-01-19 | repository move to libpthread | Theo de Raadt | |
2003-01-19 | add test to ensure select can be cancelled. | Marco S Hyman | |
2003-01-19 | return (func(...)) not needed when the current function and func | Marco S Hyman | |
are both void. The select call is a cancellation point per IEEE Std 1003.1-2001. This should fix a problem espie@ found in kde. | |||
2003-01-19 | typos; jmc@prioris.mini.pw.edu.pl | Theo de Raadt | |
2003-01-19 | shut up, dn(4). There's really no need to printf junk nobody wants to read | Henning Brauer | |
for every collision. ok theo | |||
2003-01-19 | Simplify and KNF anchoropt processing. | Camiel Dobbelaar | |
ok dhartmei henning | |||
2003-01-19 | Temporary fix for PR#3069 (thanks for the report, Alex Cichowski), until | Thierry Deval | |
I find time to really follow all cases. At least it works here, and doesn't add new problems, it seems. | |||
2003-01-19 | Wording. | Thierry Deval | |
2003-01-19 | format string fixes | Henning Brauer | |
inspired by Thorsten Glaser via fries@ ok theo | |||
2003-01-19 | The -s option to show anchors is 'A' or 'Anchors', not 'a' (which is used | Daniel Hartmeier | |
to show 'all' information). | |||
2003-01-19 | Spin off label string expansion into a separate function. Clarifies | Camiel Dobbelaar | |
and tightens all expand_label functions. ok dhartmei henning | |||
2003-01-19 | Test label expansion functions. | Camiel Dobbelaar | |
ok dhartmei henning | |||
2003-01-19 | Labels are quoted in rule output now. | Camiel Dobbelaar | |
2003-01-19 | Quote label in rule output. | Camiel Dobbelaar | |
ok henning dhartmei | |||
2003-01-19 | sync | Theo de Raadt | |
2003-01-18 | inet6 fixes from jmc@prioris.mini.pw.edu.pl | Theo de Raadt | |
2003-01-18 | protoize(1) man page, cobbled from various places by jmc@prioris.mini.pw.edu.pl | Theo de Raadt | |
2003-01-18 | merge; by tedu@Stanford.EDU | Theo de Raadt | |
2003-01-18 | more typos; jmc@prioris.mini.pw.edu.pl | Theo de Raadt | |
2003-01-18 | minor tweaking; andrushock@korovino.net | Theo de Raadt | |
2003-01-18 | Move freeaddrinfo() so it doesn't get called with an uninitialized | Daniel Hartmeier | |
pointer (which segfaults). From Julien Bordet. | |||
2003-01-18 | va_end() missing. Thanks to Andrey Matveev. | Cedric Berger | |
2003-01-18 | slepping | Theo de Raadt | |
2003-01-18 | sync | Theo de Raadt | |
2003-01-18 | quite some KNF for the older parts | Henning Brauer | |
2003-01-18 | adjust; err msgs changed | Henning Brauer | |
2003-01-18 | host() overhaul: | Henning Brauer | |
-split off host_if, host_v4, host_v6, host_dns -kill the return-everywhere nightmare -bit better error messages makes the code more read-, understand- and maintainable; no fucntional changes. ok cedric@ dhartmei@ mcbride@ | |||
2003-01-18 | KNF after ryan... | Henning Brauer | |
2003-01-18 | Cleanup PF_OPT_NOACTION with tables. No changes on current behaviour, | Cedric Berger | |
but do something useful when the user has no access to /dev/pf. Tested on i386, sparc64. ok henning@ | |||
2003-01-18 | Little cleanup from Andrey Matveev <andrushock@korovino.net> | Cedric Berger | |
Thanks! | |||
2003-01-18 | Argh! KNF. | Ryan Thomas McBride | |
pointed out in advance by dhartmei@ | |||
2003-01-18 | Add "static-port" to some of the nat rule tests. | Ryan Thomas McBride | |
2003-01-18 | Make nat behave the way it used to by copying back the random source port | Ryan Thomas McBride | |
correctly. Also remove some extra cruft in pf_get_sport related to the "static-port" behaviour. bug report from mpech@ and form@ testing cedric@ "looks sane to me" henning@ ok dhartmei@ | |||
2003-01-18 | Add missing token string and assignment to make static-port work for real. | Ryan Thomas McBride | |
Diff and report courtesy of mpech@ and form@ ok dhartmei@ | |||
2003-01-18 | set stack size for threads, the default is too small for this test. | Marco S Hyman | |
2003-01-17 | allow setting com baudrate up to 115200; req and testing by Sourabh Ladha ↵ | Michael Shalayeff | |
<ladha@mail.eecis.udel.edu> | |||
2003-01-17 | Update comment for linker change which just committed. | Dale Rahn | |
2003-01-17 | This is a project to modify executables so that they do not have any | Dale Rahn | |
executable regions which are writable. If a section of an executable is writable and executable, it is much easier for errant code to modify the executable's behavior. Two current areas in shared library environments which have this critical problem are the GOT (Global Offset Table) and PLT (Procedure Linkage Table). The PLT is required to be executable and both GOT and PLT are writable on most architectures. On most ELF architecture machines this would cause shared libraries to have data and BSS marked as executable. Padding to the linker script for programs and shared libraries/objects to isolate the GOT and PLT into their own load sections in the executables. This allows only the text(readonly) region and the PLT region to be marked executable with the normal data and BSS not marked as executable. The PLT region is still marked executable on most architectures because the PLT lives in the "data" or "BSS" regions and the dynamic loader will need to modify it. Since the GOT and PLT should only ever be written by the dynamic linker, it will be modified to mprotect those regions so that they are not writable during normal execution. If the dynamic linker needs to modify the regions later, (eg for lazy binding), it will mprotect the region, make the necessary changes, and mprotect it back. Since it is possible to receive a signal which would interrupt the program flow and perhaps cause the dynamic linker to modify the same (or nearby) PLT references, it is now necessary for signals to be blocked for the duration of the mprotect. | |||
2003-01-17 | Build sparc64 kernels with the same options as other architectures. | Dale Rahn | |
Doesn't change how the kernel layout occurs, and is required for upcoming binutils/ld change. | |||
2003-01-17 | Change the GOT initialization so that it is done in a function which | Dale Rahn | |
initialized just the correct addresses instead of assuming that the GOT extends from _GLOBAL_OFFSET_TABLE_ to _DYNAMIC. Mostly from NetBSD. ok nate@ | |||
2003-01-17 | seperate[d][ly] -> separate[d][ly]; alan@alanday.com | Theo de Raadt | |
2003-01-17 | Add a new option, -f, that allows the user to specify a custom output | Todd C. Miller | |
format. Currently only supports printing the inode number and path (along with any arbitrary text) but other escapes may be added later. A useful invocation is: ncheck -s -f '\P\0' | xargs -0 ls -ldgT deraadt@ OK | |||
2003-01-17 | Typos, two from Michael Knudsen <e at molioner.dk> | Camiel Dobbelaar | |
ok pjanzen | |||
2003-01-17 | Make table tests less sensitive to environmental conditions. | Cedric Berger | |
ok dhartmei@ | |||
2003-01-17 | Don't report setugid directories in "ncheck -s" output since those | Todd C. Miller | |
bits have no meaning on OpenBSD. deraadt@ OK | |||
2003-01-17 | Improve wording a bit; elf(5) was obviously written by a non-native | Todd C. Miller | |
speaker of English and needs more help. |