summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-05-23Canonicalize all devices to DUIDs in order to make -w and -W output consistent.Philip Guenther
Based on diff from Manuel Giraud (manuel (at) ledu-giraud.fr) Thanks!
2015-05-23define BYTEORDER so the endian tests will workJonathan Gray
ok deraadt@ miod@
2015-05-22Add tests for relayd TLS inspection with plain SSL and HTTPS.Alexander Bluhm
2015-05-22syncTheo de Raadt
2015-05-22Cut down on if statements around pf_icmp_state_lookupMike Belopuhov
Checked with blambert@, OK millert, henning
2015-05-22Cleanup leftover PF_ICMP_MULTI_* code that is not needed anymore.Mike Belopuhov
ok henning
2015-05-22be pedantic with sizeof useJonathan Gray
no change in behaviour as sizeof(char **) is the same as sizeof(char *) ok otto@ guenther@
2015-05-22Don't use an uninitialised softc pointer in midiread/midiwrite.Jonathan Gray
ok ratchov@
2015-05-22LITTE_ENDIAN -> LITTLE_ENDIANJonathan Gray
ok ratchov@
2015-05-22Limit the number of dma segments used for transmitting packets toMark Kettenis
IWM_NUM_OF_TBS - 2. We have IWM_NUM_OF_TBS slots, but use two of those for sending commands to the firmware. Hopefully fixes the iwm0: hardware error, stopping device errors I've seen somewhat regularly. ok claudio@, deraadt@
2015-05-22mention ssh-keygen -E for comparing legacy MD5 fingerprints; bz#2332Damien Miller
2015-05-22Reorder EscapeChar option parsing to avoid a single-byte out-Damien Miller
of-bounds read. bz#2396 from Jaak Ristioja; ok dtucker@
2015-05-22add knob to relax GSSAPI host credential check for multihomed hostsDamien Miller
bz#928, patch by Simon Wilkinson; ok dtucker (kerberos/GSSAPI is not compiled by default on OpenBSD)
2015-05-22Update DH groupsDarren Tucker
2015-05-22Remove 6k and 8k bit moduli fragments since they are now kept inDarren Tucker
usr.bin/ssh/moduli-gen.
2015-05-22Update DH groupsDarren Tucker
2015-05-22syncTheo de Raadt
2015-05-22syncTheo de Raadt
2015-05-22fix a non safe use of TAILQ_FOREACH with TAILQ_REMOVEJonathan Gray
ok reyk@
2015-05-22fix a non safe use of LIST_FOREACH with LIST_REMOVEJonathan Gray
ok claudio@ kettenis@ reyk@
2015-05-21Use m_defrag(9) instead of rolling our own version of it.Mark Kettenis
ok jca@
2015-05-21syncTheo de Raadt
2015-05-21Establish interrupts for both keyboard and mouse slots at pckbc attach time,Miod Vallat
rather than lazily from pckbc when slots are discovered. This is consistent with what other isa devices (and pckbc on non-isa busses) do, and as a side effect, this makes the dmesg output shorter. This will also let us get rid of pckbc's intr_establish() callback in a later diff. Prompted by krw@ noticing ugly kernel output in a configuration with the mouse slot left empty. ok krw@ mpi@
2015-05-21Report all valid interrupt locators in isaprint() - although config(8) stanzasMiod Vallat
only allow one irq for isa devices, there is actually support for more since we got isapnp(4) support, and upcoming changes will actually have regular isa(4) devices claim more than one irq in their indirect match function.
2015-05-21no such thing as mips64leMiod Vallat
2015-05-21Switch amd64, hppa, mips64, mips64le and powerpc to binutils 2.17.Mark Kettenis
ok deraadt@
2015-05-21No need to call tzset() and log_init() in the forked constraintReyk Floeter
handler. It is run in a chroot, so tzset() wouldn't even succeed to open the zone file. Found with tame. OK deraadt@
2015-05-21Rename caddr_t p to cp in an inner block to avoid aliasing the outerNicholas Marriott
struct proc *p, ok deraadt
2015-05-21Support "ssh-keygen -lF hostname" to find search known_hosts andDamien Miller
print key hashes. Already advertised by ssh-keygen(1), but not delivered by code; ok dtucker@
2015-05-21some fixes from pjanzen;Jason McIntyre
2015-05-21No need for ifp since we do not set "rcvif".Martin Pieuchot
2015-05-21No need to set "rcvif", if_input() does it for you.Martin Pieuchot
2015-05-21tedu commented out xl_testpacket(), remove one of the IFQ_ENQUEUE()Martin Pieuchot
in the tree.
2015-05-21Convert to if_output().Martin Pieuchot
2015-05-21Correctly state the link state to INVALID when creating a carp interface.Martin Pieuchot
Since vhe are allocated with M_ZERO and INIT is also defined to be 0, carp_set_state() would result in a no-op because of the state check. So explicitly initialize the state of a vhe to INIT and move the state check in carp_set_state_all() to prevent similar issues in the future. Problem and initial diff from Johan Ymerson, thanks! ok henning@
2015-05-21Access to uninitialized variable fixed.Gerhard Roth
ok mikeb@
2015-05-21regress test for AuthorizedPrincipalsCommandDamien Miller
2015-05-21add AuthorizedPrincipalsCommand that allows getting authorized_principalsDamien Miller
from a subprocess rather than a file, which is quite useful in deployments with large userbases feedback and ok markus@
2015-05-21regress test for AuthorizedKeysCommand argumentsDamien Miller
2015-05-21support arguments to AuthorizedKeysCommandDamien Miller
bz#2081 loosely based on patch by Sami Hartikainen feedback and ok markus@
2015-05-21refactor: split base64 encoding of pubkey into its ownDamien Miller
sshkey_to_base64() function and out of sshkey_write(); ok markus@
2015-05-21Re-remove extra perl utils, patch lost in 5.20.2 updateAndrew Fresh
pointed out by miod@
2015-05-20Remove clauses 3 and 4 from Christos Zoulas' BSD license.Ingo Schwarze
This is safe because Christos did that himself in NetBSD in 2008. No code change.
2015-05-20Remove function argument name from posix_spawnattr_getsigmask()Todd C. Miller
prototype to match other prototypes in the file. OK guenther@ deraadt@
2015-05-20Fix sign compare bug introduced when rnum() was redefined to useTodd C. Miller
arc4random_uniform(). From pjanzen@, OK deraadt@
2015-05-20Merge the get_drive() function with install_disk(), which is theRobert Peichaer
only remaining consumer. OK krw@
2015-05-20Signed types are bad array indicies - let it panic instead.Martin Pelikan
ok deraadt krw millert
2015-05-20scrap unused ixgbe_get_link_capabilities_X540Mike Belopuhov
2015-05-20Remove hotplug(4) sensor support: the code has been disabled byReyk Floeter
henning@ 9 years ago because of an issue with the /dev/hotplug device - it does not support multiple readers opening it. Nobody ever cared enough to fix it so it is time to sent the dead code to the Attic. OK henning@ (feeling sad about it), mpi@ and others
2015-05-20Use off_t instead of size_t to pass file size and print it using %lld whenMark Kettenis
constructing the Content-Length header field. Should fix some, but probably not all, problems with serving files bigger than 2G on 32-bit architectures. ok reyk@, florian@