summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-11-26The IORT table usually only contains single mappings. While on the LX2K therePatrick Wildt
is a non-single mapping for the networking subsystem, we don't yet have support for it and apparently Linux has trouble with it as well. So for now we can remove the code, because it uses an uninitialized variable and there's no easy way to fix it without re-thinking the concept. The code got there in the first place because it's a copy of the same pattern in our other IOMMU code. ok jsg@
2021-11-26avoid clang -Wsometimes-uninitialized warning when DDB is not definedJonathan Gray
ok kettenis@ visa@
2021-11-26avoid clang -Wsometimes-uninitialized warning when MULTIPROCESSOR is notJonathan Gray
defined feedback from millert@, ok kettenis@, mips64 diff from and ok visa@
2021-11-26Fix ikev2_child_sa_rekey() warnings. The SPI can't be printed without aTobias Heider
parent SA.
2021-11-26spellingJonathan Gray
ok schwarze@
2021-11-26after the bugfix in x509_vfy.c rev. 1.100,Ingo Schwarze
replace the BUGS section with a shorter CAVEATS section
2021-11-26Bugfix in X509_get_pubkey_parameters(3):Ingo Schwarze
If EVP_PKEY_copy_parameters(3) fails - among other reasons, this may happen when out of memory - the pkey argument and/or the chain argument will not contain all the desired parameters after returning. Consequently, report the failure to the caller rather than silently ignoring it. OK tb@
2021-11-26Simplify the code in X509_get_pubkey_parameters(3)Ingo Schwarze
by using X509_get0_pubkey(3) instead of X509_get_pubkey(3); no functional change. OK tb@ This is similar to the relevant part of the follwoing commit from the OpenSSL 1.1.1 branch, which is still under a free licence, but without the bug that commit introduced into this function in OpenSSL: commit c01ff880d47392b82cce2f93ac4a9bb8c68f8cc7 Author: Dr. Stephen Henson <steve@openssl.org> Date: Mon Dec 14 13:13:32 2015 +0000
2021-11-26use the keywords instead of vague english so that it's indexed better byMarc Espie
mandocdb
2021-11-26document annotation interactions with pkg_mklocatedbMarc Espie
2021-11-26Add interfaces to enable all power domains for a node.Mark Kettenis
ok patrick@, visa@
2021-11-26Mark exit1() and sigexit() as non-returningVisa Hankala
The late 1990s reasons for avoiding __dead with exit1() should not apply with the current compilers. This fixes compiler warnings about uninitialized variables in trap.c on mips64. Discussed with guenther@ and miod@
2021-11-26followng -> followingJonathan Gray
2021-11-26definiton -> definitionJonathan Gray
2021-11-26Transmiter -> TransmitterJonathan Gray
2021-11-26addresss -> addressJonathan Gray
2021-11-26remaing -> remainingJonathan Gray
2021-11-25move label to fix RAMDISKTheo de Raadt
2021-11-25debug("func: ...") -> debug_f("...")Damien Miller
2021-11-25LibreSSL error message has changed again, make test more tolerant.Alexander Bluhm
2021-11-25revert recent change, breakage reported by dv@Anton Lindqvist
2021-11-25Remove unused variable fd.Tobias Heider
2021-11-25Silence unitialized variable warnings.Tobias Heider
2021-11-25forgot the case about find... oopsMarc Espie
fixes GraphicsMagick updates
2021-11-25We know how to print a size_t now. Drop a comment and a cast.Theo Buehler
ok bluhm inoguchi
2021-11-25Rework this test to compile with opaque RSATheo Buehler
2021-11-25Honour /usr/mdec/mbr or -f partition 0 information even outsideKenneth R Westerback
of _powerpc__ and __mips__, preventing the possible creation of MBRs with overlapping partitions 0 and 3. Don't set bootprt DOSACTIVE flag if no partition 0 information was provided via /usr/mdec/mbr or -f. Lets octeon fdisk(8) set DOSACTIVE on the OpenBSD partition in the default MBR like every other fdisk(8) does.
2021-11-25Initialize the repo_timeout to timeout / 4 at start of main().Claudio Jeker
OK job@
2021-11-25Prepare iwx(4) for using new firmware (API version -67) in the future.Stefan Sperling
Bump command versions array size as required for -67 firmware. Ignore new TLVs found in -67 images. Add room for another ucode section needed for -67 on AX201 devices.
2021-11-25Replace MAX_REPO_TIMEOUT with repo_timeout, which is set to 1/4th ofJob Snijders
timeout, or if timeout is disabled set to 24 hours. OK claudio@
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
covered yet, more ref counts to come. The timeouts are protected, so the racy tdb_reaper() gets retired. The tdb_policy_head, onext and inext lists are protected. All gettdb...() functions return a tdb that is ref counted and has to be unrefed later. A flag ensures that tdb_delete() is called only once. Tested by Hrvoje Popovski; OK sthen@ mvs@ tobhe@
2021-11-25Check for possible negative diff timeout. Clamp it to 0 in that case.Claudio Jeker
poll with negative timeout noticed by job@ OK job@
2021-11-25Document BIO_method_name(3).Ingo Schwarze
While here, also improve the rest of the page: * add missing BIO_TYPE_* constants * describe BIO_TYPE_START * better function argument names * more precision in the descriptions and regarding the RETURN VALUES * lots of wording improvements * improve the coding style below EXAMPLES * delete a BUGS section describing cretaceous behaviour
2021-11-25Resolve last issue with opaque BIGNUM in this test.Theo Buehler
2021-11-25Assert that at least one report id is claimed during multiple report idsAnton Lindqvist
attachment. Should prevent uhidev drivers from doing the wrong thing in their corresponding match routine.
2021-11-25sync with arm64.htmlJonathan Gray
2021-11-24Spacing and remove an unused macro.Marcus Glocker
2021-11-24SpacingMarcus Glocker
2021-11-24Fix panic when running utvfu(4) on xhci(4).Marcus Glocker
tested and ok ian@
2021-11-24Unregister event on pfkey socket during pfkey_reply(). Using eventsTobias Heider
and poll() at the same time may lead to a race that locks up the process in recv(). ok bluhm@
2021-11-24Pass env to pfkey API. Consistently call pfkey file descriptor fd.Tobias Heider
ok bluhm@
2021-11-24Describe what RES_USE_DNSSEC does and how it's affected by trust-adJeremie Courreges-Anglas
ok florian@
2021-11-24Fix OCSP_basic_verify() cert chain construction in case theTheo Buehler
OCSP_BASICRESP bs contains no certificates. From David von Oheimb (OpenSSL 121738d1) ok beck
2021-11-24Simplify slightly by using X509_get0_pubkey() thus eliminating theTheo Buehler
need for EVP_PKEY_free(). ok beck
2021-11-24Fix a whitespace error that has annoyed me for way too longTheo Buehler
2021-11-24Fix timestamp printing in Signed Certificate TimestampsTheo Buehler
Our ASN1_GENERALIZEDTIME_set() doesn't accept time strings with fractional seconds, so don't feed it milliseconds, but only seconds. Ensures that openssl x509 -text prints timestamps instead of skipping them. ok beck jsing
2021-11-24Add certificate transparency methods to the standard extensions.Theo Buehler
This way, CT extensions in certs will be parsed by the new CT code when they are encountered. This gets rid of a lot of gibberish when looking at a cert with 'openssl x509 -text -noout -in server.pem' ok beck jsing
2021-11-24When sending ICMP packets for IPsec path MTU discovery, the firstAlexander Bluhm
ICMP packet could be wrong. The mtu was taken from the loopback interface as the tdb mtu was copied to the route too late. Without crypto task, ipsp_process_packet() returns the EMSGSIZE error earlier. Immediately update tdb and route mtu. IPv4 part from markus@; OK tobhe@
2021-11-24preliminary work: have the compiled_stemlist be case independent.Marc Espie
This has not useful repercussions so far, as the actual package name comparison is done with case dependent regexps, but this will allow searching for "user specs" as case independent in the future, allowing stuff like pkg_add graphicsmagick to work.
2021-11-24Move some functions from rrdp.c to rrdp_util.c and hex_decode to encoding.c.Claudio Jeker
This will make it easier to write a RRDP regress test. OK job@ deraadt@