summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-06-21If the kernel generates a deadly trap signal (SEGV, BUS, etc) forPhilip Guenther
an untraced process but finds it blocking or ignoring it, just kill the process instead of looping. It's undefined behavor in POSIX but quite annoying when encountered in practice. improvements from kettenis@ ok matthew@
2014-06-21always compare memcmp against 0, for clarity.Ted Unangst
2014-06-21you've had 12+ years to update your kernel config.Daniel Dickman
ok deraadt@
2014-06-21Pull the code that builds a DTLS sequence number out into its own functionJoel Sing
to avoid duplication. Also use fewer magic numbers. ok miod@
2014-06-21Specify the correct strength bits for 3DES cipher suites.Joel Sing
From OpenSSL. ok miod@
2014-06-21Add DTLS support to ssltest and wire up some regress tests.Joel Sing
ok miod@
2014-06-21Prefix messages about bad command line options and argumentsIngo Schwarze
with "mandoc: " or "makewhatis: ", respectively, similar to what we already do for other messages.
2014-06-21Switch to the ISC licensed versions of these files, which Google has madeJoel Sing
available via boringssl. ok deraadt@
2014-06-21Pull out the sequence number selection and handle this up front. Also, theJoel Sing
correct record is already known, so avoid reassignment.
2014-06-21More KNF and clean up.Joel Sing
2014-06-21More KNF.Joel Sing
2014-06-21More KNF.Joel Sing
2014-06-21KNFMiod Vallat
2014-06-21KNFMiod Vallat
2014-06-21Fix memory leak in error path.Loganaden Velvindron
OK from miod@
2014-06-21Move to a non-zeroing _dl_malloc, a _dl_calloc and _dl_reallocarry andOtto Moerbeek
fix _dl_strdup to return NULL instead of crash; ok deraadt@
2014-06-21add moxa c168h;Jason McIntyre
From: "Craig R. Skinner"
2014-06-21drm/i915: Break encoder->crtc link separately in intel_sanitize_crtc()Jonathan Gray
From Egbert Eich 9e68a1156da093385f057b9e4576652203f1248e in ubuntu 3.8 7f1950fbb989e8fc5463b307e062b4529d51c862 in mainline linux
2014-06-21drm/radeon/si: make sure mc ucode is loaded before checking the sizeJonathan Gray
From Alex Deucher eed35bff1fe05f3a32989ace86107a1402f18537 in ubuntu 3.8 8c79bae6a30f606b7a4e17c994bc5f72f8fdaf11 in mainline linux
2014-06-21drm/radeon: memory leak on bo reservation failure. v2Jonathan Gray
From Quentin Casasnovas 2b9149f17e7135c31c9df1c80ab6d912c4265126 in ubuntu 3.8 74073c9dd29905645feb6dee03c144657a9844cd in mainline linux
2014-06-21Protect explicit_bzero() from link-time optimizationMatthew Dempsky
Modern compiler toolchains are capable of optimizing even across translation unit boundaries, so simply moving the memory clearing into a separate function is not guaranteed to clear memory. To avoid this, we take advantage of ELF weak symbol semantics, and insert a call to an empty, weakly named function. The semantics of calling this function aren't determinable until load time, so the compiler and linker need to keep the memset() call. There are still ways a toolchain might defeat this trick (e.g., optimistically expecting the weak symbol to not be overloaded, and only calling memset() if it is; promoting weak symbols to strong symbols at link-time when emitting a static binary because they won't be interposed; implementing load-time optimizations). But at least for the foreseeable future, these seem unlikely. ok deraadt
2014-06-21remove useless brace block; from dhillTheo de Raadt
2014-06-20As suggested by jmc@, only include line and column numbers into messagesIngo Schwarze
when they are meaningful, to avoid confusing stuff like this: $ mandoc /dev/null mandoc: /dev/null:0:1: FATAL: not a manual Instead, just say: mandoc: /dev/null: FATAL: not a manual Another example this applies to is documents having a prologue, but lacking a body. Do not throw a FATAL error for these; instead, issue a warning and show the empty document, in the man(7) case with the same amount of blank lines as groff does. Also downgrade mdoc(7) documents having content before the first .Sh from FATAL to WARNING.
2014-06-20Remove the OPENSSL_*cap getenv's. A program should not be able toTheo de Raadt
change the behaviour of the library in such a complicated fashion. ok miod
2014-06-20wrap getenv OPENSSL_ALLOW_PROXY_CERTS in an issetugid check, to protectTheo de Raadt
setuid applications from being fooled. ok miod
2014-06-20Work in progress on how to deal with the inherit unreliability ofBob Beck
/dev/urandom. Does well in the fallback case. Get it in tree so it can be worked on. ok otto@ deraadt@
2014-06-20regression tests for prologue warningsIngo Schwarze
2014-06-20Infrastructure for regression tests of mandoc messages.Ingo Schwarze
Even though messages are not going to be as stable as formatted output, that is, even though the *.out_lint files are expected to change now and then, from now on, i want to be able to catch unintended changes in messages.
2014-06-20Start systematic improvements of error reporting.Ingo Schwarze
So far, this covers all WARNINGs related to the prologue. 1) hierarchical naming of MANDOCERR_* constants 2) mention the macro name in messages where that adds clarity 3) add one missing MANDOCERR_DATE_MISSING msg 4) fix the wording of one message related to the man(7) prologue Started on the plane back from Ottawa.
2014-06-20Prefix error messages from mandoc(1) with "mandoc: "Ingo Schwarze
just like almost all other utility programs do. Suggested by nick@ who wondered where messages came from when calling mandoc(1) from inside a Perl script. ok jmc@ nick@
2014-06-20Remove OPENSSL_instrument_halt and OPENSSL_far_spin, which both mightMiod Vallat
have been used under DJGPP in the previous century (if at all).
2014-06-20Fix a wrong comparison in the interrupt handler.Raphael Graf
ok syl@
2014-06-20Comment style nits.Nicholas Marriott
2014-06-20Make -S- and -E- mean the start and end to capture-pane to avoid havingNicholas Marriott
to faff around with huge numbers to get everything.
2014-06-20Fix incorrect bounds check in amd64 assembly version of bn_mul_mont();Miod Vallat
noticed and fix by Fedor Indutny of Joyent ( https://github.com/joyent/node/issues/7704 )
2014-06-20Simple regress test for the amd64 bn_mul_mont bug found by JoyentMiod Vallat
( https://github.com/joyent/node/issues/7704 ), about to be fixed in libcrypto.
2014-06-20Move the crypto/bn regression test one directory deeper in preparation forMiod Vallat
it getting siblings.
2014-06-20sf@ pointed out that atom.c defines a DEBUG macro that takes arguments,Jonathan Gray
this breaks when compiling a kernel with DEBUG defined for additional printfs elsewhere. Instead of renaming the macro, undefine DEBUG before the new definition to minimise the diff the linux.
2014-04-15Import the OpenSSL libcrypto tests in a form suitable for our rergressMiod Vallat
infrastructure. The following tests have not been imported, for their code lacks a licence: asn1, rsa, sha256, sha512, wp.
2012-10-13import OpenSSL-1.0.1cDamien Miller
2014-06-20Instead of showing the difference between a bad checksum and a goodLawrence Teo
checksum, make tcpdump (with the -v flag) show the actual bad checksum within the IP/protocol header itself and what the good checksum should be, e.g. "[bad tcp cksum abcd! -> d1e6]" This change applies to IP, TCP (over IPv4 and IPv6), UDP (over IPv4 and IPv6), ICMP, and ICMPv6. This commit also fixes several inconsistencies in the way bad checksums were displayed for these protocols. Tested on amd64, i386, and macppc. ok henning@
2014-06-20Import in_cksum_shouldbe() from mainline tcpdump; this is needed by myLawrence Teo
upcoming commit which will fix and improve the display of bad checksums for the major protocols. ok henning@
2014-06-20More tweaking of set_basedir().Ingo Schwarze
1) Do not error out when getcwd(3) fails, only fail when inaccessibility of the cwd prevents processing of relative paths given on the command line. 2) Do not uselessly call set_basedir() twice in a row. While fts_read(3) in treescan() does cause the cwd to jump around, fts_close(3) is always called at the end, putting us back where we came from. The -d/-u fallback code already relied on this. 3) Fix the man-root-dir indicator in say().
2014-06-20arc4random: hard fail with raise(SIGKILL) if getentropy() returns -1Matthew Dempsky
Allow other non-zero return values in case we change our mind to return an ssize_t byte count instead of simple success/fail. ok deraadt, djm
2014-06-19convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoringTed Unangst
libc interfaces over libcrypto interfaces. for now we also prefer timingsafe_memcmp over timingsafe_bcmp, even when the latter is acceptable. ok beck deraadt matthew miod
2014-06-19check stack push return and make some effort to clean up. ok beck miodTed Unangst
2014-06-19improve error checking. set error code on error, and check malloc return.Ted Unangst
add missing unlock in one case. ok lteo miod
2014-06-19Add a basic regress test for __MAP_NOREPLACE.Matthew Dempsky
2014-06-19Fix memory leak in digest_file() on ferror(). OK tedu@ lteo@Todd C. Miller
2014-06-19Implement the membar(9) API for powerpc.Mark Kettenis
ok miod@, dlg@