summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-06-03Fix zyd(4)'s frame length adjustment in RX path. Instead of snipping offStefan Sperling
HW-specific data and CRC trailer as intended, the driver was telling the net80211 layer frames were longer than they actually are. Math is hard. ok krw@ kettenis@ mpi@
2014-06-03no support for TZ;Jason McIntyre
2014-06-03Do not include <sys/malloc.h> where it is not needed.Martin Pieuchot
2014-06-03Use a proper compiler barrier; just having the inline asm for the "sync"Mark Kettenis
instruction depend on ci->ci_cpl makes the compiler generate strange code and might not be enough to stop the compiler moving instructions around. ok jsing@
2014-06-03as miod found out, mandocdb is slightly intrusive and wants to know whereMarc Espie
you live (e.g., it expects to be able to get back to the directory it started from, even when this one wasn't readable in the first place). Do an extra chdir('/') to try to sidestep the issue.
2014-06-03Better comment for `faulty address'.Kenji Aoyama
2014-06-03add a comma.Brad Smith
2014-06-03Handle the event parameter of libevent callback function as a bitYASUOKA Masahiko
mask. Also remove redundant imsg_event_add calls. Fixes come from usr.sbin/ospfd/control.c ok reyk
2014-06-03Fix memory leak.Loganaden Velvindron
(From Martin Brejcha) OK from tedu@, miod@ and deraadt@
2014-06-03Expand the IP checksum offload subsection to mention the same issue withLawrence Teo
protocol checksum offload, where tcpdump might see bad checksums on valid packets. ok henning@ jmc@
2014-06-02Apply the ``make sure sigcontext does not overlap pending DAE addresses''Miod Vallat
logic in the dedicated signal stack case, too. Also, every time the sigcontext position is recomputed by the above logic, recheck the DAE addresses from the beginning, in case a formerly avoided address now risks being overwritten.
2014-06-02Bump DFLSSIZ to 2MB to match most of the other platforms.Brad Smith
ok miod@
2014-06-02Make sure STRICT_ASSIGN handles double as well. From FreeBSD, where theMark Kettenis
commit messages that fixes this says: "it was intentionally left broken as an optimization". right! ok martynas@, daniel@
2014-06-02merge ohash into 1 source file, then we can revisit next roadmap items.Theo de Raadt
ok espie
2014-06-02Remove references to RANDFILE.Joel Sing
2014-06-02Remove RANDFILE remnants.Joel Sing
2014-06-02Remove details regarding -rand from the openssl man page.Joel Sing
2014-06-02Stop pretending that openssl(1) applications support the -rand option.Joel Sing
The underlying code has long been removed, making this a no-op. If your random subsystem actually requires that you seed it from a file, then you really should go and buy a new random subsystem that was built after 1990. Diff from Brent Cook. ok deraadt@
2014-06-02A few months back there was a big community fuss regarding direct-useTheo de Raadt
of the intel RDRAND instruction. Consensus was RDRAND should probably only be used as an additional source of entropy in a mixer. Guess which library bends over backwards to provide easy access to RDRAND? Yep. Guess which applications are using this support? Not even one... but still, this is being placed as a trap for someone. Send this support straight to the abyss. ok kettenis
2014-06-02Rename more variables for readability and consistency.Joel Sing
2014-06-02Simply use ifa_ifwithaddr() to check if the binding address is on theMartin Pieuchot
system. This function checks for unicast and broadcast addresses, so there is no need to do two lookups instead of one. Inputs & ok jca@, ok mikeb@
2014-06-02move random bytes buffer to be part of mmaped pages; ok tedu@Otto Moerbeek
2014-06-02fix uninitialized sock->port variable, causing crashes in certainAlexandre Ratchov
error handling code paths (ex. wrong/unsupported mode).
2014-06-02log attach position only if log_level >= 0,Alexandre Ratchov
remove empty dev_mon_snoop() function
2014-06-02- document SIGINT, because of its zero return valueJason McIntyre
- \*Gt -> >, as recommended by schwarze ok guenther
2014-06-02Since pqueue is a private interface and the header defining the structPhilip Guenther
isn't even exported, there's no (sane) way for someone else to use the typedef. Eliminate the typedef and just use "struct _pqueue *". duplicate typedef pointed out by Brent Cook (busterb (at) gmail.com) ok miod@
2014-06-01Clean up some of the nightmare of string and pointer arithmatic inBob Beck
this nasty function. This gets rid of the nasty tmp variables used to hold temporary strings and the DECIMAL_SIZE hack. it gets rid of the rather pointless null checks for buf (since the original code dereferences it before checking). It also gets rid of the insane possibility this could return -1 when stuff is using the return values to compute lengths All the failure cases now return 0 and an empty string like the first error case in the original code. ok miod@ tedu@
2014-06-01realloc with NULL is same as mallocTheo de Raadt
ok guenther
2014-06-01Make usage for -quiet match the manpage and fix a misspellingPhilip Guenther
2014-06-01Correct version for disabling getserbyname_r to reduce diff with upstreamAndrew Fresh
OK sthen@ miod@
2014-06-01Overhaul the key block handling in tls1_change_cipher_state() - useJoel Sing
meaningful variable names with pointer arithmitic, rather than n, i, j and p with array indexing. Based on Adam Langley's chromium diffs. ok miod@
2014-06-01In tls1_setup_key_block(), use the correct IV length for GCM mode, whichJoel Sing
results in the key block length calculation also being correct. Rename a number of variables so that their purpose becomes clear and simplify some of the code. Inspired by Adam Langley's chromium diffs. ok miod@
2014-06-01Remove mention of the old __P practice.Theo de Raadt
2014-06-01There is no need for is{upper,lower}() tests before to{lower,uppper}(),Theo de Raadt
since all other characters are mapped through transparently. ok jsing
2014-06-01Commit this before the head-scratching leads to premature baldness:Theo de Raadt
memset(a->data, 0, (unsigned int)a->max); but the decl is: size_t max; size_t could be larger than int, especially in some of the systems OpenSSL purports to support. How do _intentionally truncating_ casts like enter into a codebase? Lack of understanding of C, at a minimum. Generally the objects are small, but this code is _intentionally unready_ for large objects. ok miod
2014-06-01Build with WARNINGS=Yes and Werror.Miod Vallat
2014-06-01Remove __bio_h__attr__ wrapper around __attribute__, since earlier statementsMiod Vallat
in this file directly use __attribute__. ok deraadt@
2014-06-01Add a deprecated attribute to all CRYPTO_dbg_ functions.Miod Vallat
ok deraadt@
2014-06-01Build these tests with WARNINGS=Yes and -Werror, and do the necessaryMiod Vallat
fixes to keep building.
2014-04-15Import the OpenSSL libcrypto tests in a form suitable for our rergressMiod Vallat
infrastructure. The following tests have not been imported, for their code lacks a licence: asn1, rsa, sha256, sha512, wp.
2014-06-01Take subsequent stack alignment into account in local_stack_frame() whenMiod Vallat
making sure the sigcontext will not overlap pending DAE accesses. Fixes sporadic sys/kern/signal/earlysig regress failure.
2014-06-01update currency exchange rates;Jason McIntyre
2014-06-01Avoid the use of an uninitialised variable. In reality, this is a non-issueJoel Sing
since the calculated value is not actually used in the uninitialised case. Change the code so that we only do the calculation if we actually need it. Issue detected by clang and reported by both brad@ and Brent Cook.
2014-06-01EBCDIC support died a while ago, except in a comment.Theo de Raadt
2014-06-01Clean up the tls1_change_cipher_state() key length handling and use aJoel Sing
single variable with a descriptive name, instead of two poorly named variables. Largely based on Adam Langley's chromium patches. ok miod@
2014-06-01Use C99 initialisers for cipher_aliases. This improves readability,Joel Sing
removes the need for zero values to be specified (meaning that we usually specify two fields instead of 12), makes the field names grepable and protects from future field reordering/removal. ok beck@ miod@
2014-06-01Remove real mode VGA repost option. It was used by nobody, and even if itMike Larkin
were to be enabled, it had a bug that prevented it from working anyway. ok deraadt@, kettenis@
2014-05-31Get the public headers from the official place with <openssl/ >Theo de Raadt
from Brent Cook
2014-05-31Remove now unnecessary local patch to disable usemallocwrap on m68kAndrew Fresh
Sure miod@
2014-05-31tweak previous;Jason McIntyre