src - OpenBSD base system

Age	Commit message (Collapse)	Author
2014-04-20	Style improvement based on espie@'s feedback: provide and use	Vadim Zhukov
	LT::UList->new() instead of calling tie() manually. As a bonus, few extra lines in actual code go away. okay espie@ who still thinks that I test things _before_ commit
2014-04-20	Restore beck's rev 1.9: snprintf() was reviewed	Philip Guenther

2014-04-20	Move session params initialization to when we start a session and not	Claudio Jeker
	when it is created. That way the config params from the config file have a chance to stick.
2014-04-20	Fix conn_gen_kvp and its caller to fill the kvp array properly (including	Claudio Jeker
	the NULL terminator at the end). Now iscsid does proper LoginOperational negotiation (which will bump the MaxRecvDataSegmentLength to 64k)
2010-10-01	import OpenSSL-1.0.0a	Damien Miller

2005-04-29	import of openssl-0.9.7g; tested on platforms from alpha to zaurus, ok deraadt@	Damien Miller

2003-05-11	import 0.9.7b (without idea and rc5)	Markus Friedl

2014-04-20	move in6_cksum_phdr from in6.h to ip6_output.c to mirror in_cksum_phdr	Christian Weisgerber
	ok henning@
2014-04-20	KNF: case (FOO): -> case FOO, remove /* LINTED / and / ARGSUSED */,	Ingo Schwarze
	remove trailing whitespace and blanks before tabs, improve some indenting; no functional change
2014-04-20	KNF.	Joel Sing

2014-04-20	Check another strlcpy overflow that is very unlikely to happen.	Reyk Floeter

2014-04-20	Check for strlcpy overflow when expanding the HTTP input value.	Reyk Floeter

2014-04-20	Restore beck's rev 1.3: snprintf() was reviewed	Philip Guenther

2014-04-20	More KNF.	Joel Sing

2014-04-20	Check strlcpy of the script path names for overflow and use the size of the	Reyk Floeter
	destination buffer instead of the source buffer as the argument.
2014-04-20	KNF.	Joel Sing

2014-04-20	Just to be pedantic, fail if strlcpy managed to overflow the socket path.	Reyk Floeter

2014-04-20	Only issue a single dhcp requests per interface with the host-name	Robert Peichaer
	option set. Remove the second request, which does not provide the host-name option. The client supplied hostname is used in certain setups by DHCP servers to update DNS records on behalf of clients and ensures that the hostname information is in the lease db. discussed with deraadt ok krw@ halex@
2014-04-20	KNF.	Joel Sing

2014-04-20	factor our ether_addheader for readability; there's more to come there	Henning Brauer
	ok claudio reyk
2014-04-20	KNF.	Joel Sing

2014-04-20	ether_output: instead of assembling the ethernet header and then calling	Henning Brauer
	carp_rewrite_lladdr to overwrite the src lladdr, get the intended src lladdr before assembling the ethernet header. carp_rewrite_lladdr -> carp_get_srclladdr ok reyk claudio
2014-04-20	ether_output: instead of using an esrc buffer in which we copy the intended	Henning Brauer
	src lladdr just to copy it from the esrc buffer into the ethernet header a few lines later, use an esrc pointer to figure out where to copy the src lladdr from. ok claudio reyk
2014-04-20	Reimplement the multi-dimensional arrays that are used to set up the	Reyk Floeter
	process to process imsg communication. It became a maze after we added support for multiple relay processes and even worse with the ca processes. This change makes it easier to understand. Now it only opens socketpairs that are needed - the code previously wasted lots of fds. ok blambert@
2014-04-20	More KNF.	Joel Sing

2014-04-20	More KNF.	Joel Sing

2014-04-20	gettimeofday() is portable enough and does not need a wrapper	Theo de Raadt

2014-04-20	calloc() rather than malloc+memset	Theo de Raadt

2014-04-20	Fix indentation, adding braces and combining a nested if to reduce depth	Philip Guenther

2014-04-20	More dead stores removal in subr_hibernate.c	Mike Larkin

2014-04-20	KNF.	Joel Sing

2014-04-20	KNF.	Joel Sing

2014-04-20	sync	Theo de Raadt

2014-04-20	Chop off more SSLv2 tentacles and start fixing and noting y2038 issues.	Philip Guenther
	APIs that pass times as longs will have to change at some point... Bump major on both libcrypto and libssl. ok tedu@
2014-04-20	return after error instead of plowing ahead. noticed by mancha1 at zoho	Ted Unangst

2014-04-20	Cleanup a bit, switch on bcopy to memcpy and move a function a bit up	Claudio Jeker

2014-04-20	When switching rdomains the sadl needs to be removed and re-added from the	Claudio Jeker
	RB lookup tree because the rdomain id is part of the lookup key. Without this the RB tree gets corrupted and in the worst case a use after free can happen when the interface is destroyed. Why the sadl addresses are added to the tree in the first place is something to reconsider. OK henning@, mpi@, sthen@
2014-04-20	Simplify shell pattern.	Robert Peichaer
	OK krw@
2014-04-20	Partially revert the previous: snmp_agentx_ping() didn't leak the pdu	Reyk Floeter
	because it is added to a list on the handle and eventually released later with the handle itself. This confuses leak detection tools like clang, so at least add a comment that it is not a leak. ok blambert@
2014-04-20	sync	Theo de Raadt

2014-04-20	Use calloc(a,b) instead of malloc(ab) + memset(ab). I don't know if	Theo de Raadt
	this instance is integer-overflowable, but we cannot keep hand-auditing every instance (or apathetically ignoring these issues) when the simple calloc idiom is better in the presence of a good calloc(). It is simply unfeasible to always enter correct range checks before the aggregate size calculation, just go find some 4000 lines of code, REPAIR THEM ALL, then come back and tell me I am wrong. This only works on systems where calloc() does the integer overflow check, but if your system doesn't do this, you need to ask your vendor WHY THEY ARE 10 YEARS BEHIND IN BEST PRACTICE? This is the kind of problem that needs to be solved at the right layer. malloc integer-overflow was implicated in the 2002 OpenSSH hole. OpenSSH and much other code is now written to use calloc(), for instance OpenSSH has 103 calls to it. We feel safer with our use of calloc(). It is a natural approach for us to use calloc(). How safe do you feel on systems which lack that range check in their calloc()? Good writeup from 2006: http://undeadly.org/cgi?action=article&sid=20060330071917
2014-04-20	Update hotplug. Add qle_get_port_name_list, use it to discover local	Jonathan Matthew
	loop ports and other fabric ports that have logged in to us, and check that we're still logged in to other fabric ports. Rearrange the update processing loop so we attach and detach targets last, since we need to get all the way through before we've identified what's gone missing. Handle fabric port login errors a bit more usefully too.
2014-04-20	Undo a calloc() replacement. It lacks the integer overflow check that	Theo de Raadt
	the system one has.
2014-04-20	move in_cksum_phdr from in.h (under #ifdef _KERNEL, at least) to ip_output.c	Henning Brauer
	nothing except in_proto_cksum_out() uses it any more, and that's a good thing. was on tech for 3 months, discussed with many
2014-04-20	nuke in_cksum_addword()	Henning Brauer
	don't we all love functions implemented in header files? was under #ifdef _KERNEL at least. incremental checksum updates don't really make sense any more, this is incredibly hard to get right, and doesn't fit the way our kernel deals with the checksums these days. consequently, nothing uses in_cksum_addword any more. was on tech for 3 months, tested by & discussed with many.
2014-04-20	Remove more commentary about recently removed des support	Theo de Raadt
	from Daniel Dickman
2014-04-20	Fix a small leak in the error path.	Reyk Floeter

2014-04-20	Add support for SSHFP DNS records for ED25519 key types.	logan
	OK from djm@
2014-04-20	KNF.	Joel Sing

2014-04-20	reset imprint to NULL to avoid double free. from mancha1 at zoho	Ted Unangst