| Age | Commit message (Collapse) | Author |
|---|
|
if we didn't attach a device driver to avoid enumerating them again in
the acpi device tree walk.
ok deraadt@
|
|
- pledge(2) "stdio" after managing arguments (opening files)
- add $OpenBSD$ markers on elfrd_size.c and elfrdsetroot.h
- add a check for NULL on malloc(3) call in elfrd_size.c
from semarie, ok deraadt
|
|
for a custom res_hnok(), so just use the libc version of res_hnok().
Requested by deraadt@
|
|
ok visa@, kettenis@, deraadt@
|
|
Requires U-Boot >= 2017.11 and dtb >= 4.15-rc1.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
in particular, disable future PORTS_PRIVSEP mechanisms under
pkg_create, because we should already be running as _pbuild
by this point.
|
|
correctly take into account the segment p_align. Previously, anything
with a size belong the natural alignment or with alignment larger than
the natural one would either not be intialized correctly, be misaligned,
or result in the TIB being misaligned.
Problems reported by Charles Collicutt (charles (at) collicutt.co.uk)
ok kettenis@
|
|
starting with number 1. Subsequent proposals must be one more than the
previous proposal.
ok sthen@
|
|
do PFS and is assumed to be secured using the DH exchange in the first
handshake. Thus there is no KE/N payload in the IKE_AUTH exchange and
we must not include a DH group other than None, which essentially means
we must not supply any DH transforms in the IKE_AUTH messages. So now
we skip adding the DH transforms for initiating and responding to
IKE_AUTH messages.
ok sthen@
|
|
from kshe with a twist from myself; ok tb@
|
|
|
|
table question from "HFS" to "MBR". Most people will want to run
OpenBSD exclusively on such machines these days.
ok kettenis@
|
|
iic(4) controllers.
ok jcs@
|
|
Found by gcc.
OK jca@
|
|
|
|
string-handling <stdio.h> functions, like we already do it for <string.h>.
Includes a smaller patch from <kshe59 at zoho dot eu>, OK jmc@.
|
|
while here, consistently use .Fo to cure execessive line lengths
|
|
security check prevents that the user accidentally configures
redirect where a divert-to would be appropriate. Instead of spreading
the logic into tcp and udp input, check the flag during PCB listen
lookup. This also reduces parameters of in_pcblookup_listen().
OK visa@
|
|
|
|
from lucas gabriel vuotto
|
|
|
|
|
|
is passed to the mutex implementation, and the queue actually runs
without the kernel lock.
Tested by dhill@
OK mikeb@, dhill@, kettenis@
|
|
|
|
|
|
to use than the latter.
|
|
OK florian@
|
|
|
|
From Rafael Neves
|
|
ok deraadt@, mlarkin@
|
|
to IKE SA INIT messages with no proposal chosen, as we already do for
Child SAs. For that the error "adding" is done in a new function shared
by both send error handlers. We need two "send error" functions because
the init error is unencrypted, while all later ones are not. Now we can
add more cases, like Child SA not found or that the DH group is not what
we expect.
Save the IKE SA INIT responses, even if it's an error message, so we can
retransmit it if the response is lost on the way back to the initiator
and he tries again. This also helps mitigate DoS attacks as specified
in the RFC. Only if it is indeed a new attempt, like after an INVALID
KE PAYLOAD response, we can drop the old SA so that iked(8) can attempt
to create a new SA.
ok sthen@
|
|
support FBT_CREATE. Fall back to FBT_MKNOD + FBT_OPEN so that a valid
sequence of FUSE messages is sent to the file system when creating files.
input from mpi@, otto@
|
|
This makes more sense and matches what the latest "other" file(1) now does.
ok nicm@
|
|
|
|
|
|
exit with an EALREADY vs EPERM.
ok mlarkin@
|
|
that is attempted.
Minor cleanups:
- Eliminate some always false and always true tests against MAP_ANON
- We treat anon mappings with neither MAP_{SHARED,PRIVATE} as MAP_PRIVATE
so explicitly indicate that
ok kettenis@ beck@
|
|
mwait info against CPUID is wrong; loosen the test per Intel's suggestion.
While here, fix the wrapping of dmesg lines when reporting bogus C-state
info.
ok mlarkin@ kettenis@ (who pointed out the email from Intel)
|
|
|
|
instead of trying to work and then triggering a double-free().
problem noted by trondd (trondd (at) kagu-tsuchi.com)
ok beck@
|
|
ok mlarkin@
|
|
when he tried to make a vm with 4 network interfaces.
ok claudio
|
|
|
|
ok beck
|
