summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-10-26Fix a possibly infinite recursion in Perl Data::Dumper.Alexander Bluhm
Derived from Perl git commit http://perl5.git.perl.org/perl.git 19be3be6968e2337bcdfe480693fff795ecd1304 Add a configuration variable/option to limit recursion when dumping deep data structures. Defaults the limit to 1000, which can be reduced or increase, or eliminated by setting it to 0. This patch addresses CVE-2014-4330. This bug was found and reported by: LSE Leading Security Experts GmbH employee Markus Vervier. From Maximilian Pascher; OK schwarze@ afresh1@
2014-10-26Prefer mkostemp(O_CLOEXEC) over mkstemp()+fcntl(F_SETFD)Philip Guenther
Prefer fopen("re") over fopen("r")+fcntl(F_SETFD) ok otto@ millert@
2014-10-26Add explicit braces to suppress compiler warnings.Brad Smith
iostat.c:214:3: warning: add explicit braces to avoid dangling else [-Wdangling-else] ok guenther@ millert@
2014-10-26Now that threads hold their own reference to their ucreds, sys_ktrace()Philip Guenther
doesn't need to hold an extra reference during the call ok deraadt@ millert@
2014-10-26uvm_km_valloc -> km_allocMark Kettenis
2014-10-26In -Tascii mode, provide approximations even for some Unicode escapeIngo Schwarze
sequences above codepoint 512 by doing a reverse lookup in the existing mandoc_char(7) character table. Again, groff isn't smart enough to do this and silently discards such escape sequences without printing anything.
2010-09-24Perl 5.12.2 from CPANTodd C. Miller
2014-10-26Improve -Tascii output for Unicode escape sequences: For the first 512Ingo Schwarze
code points, provide ASCII approximations. This is already much better than what groff does, which prints nothing for most code points. A few minor fixes while here: * Handle Unicode escape sequences in the ASCII range. * In case of errors, use the REPLACEMENT CHARACTER U+FFFD for -Tutf8 and the string "<?>" for -Tascii output. * Handle all one-character escape sequences in mchars_spec2{cp,str}() and remove the workarounds on the higher level.
2014-10-26Add resource tracking for PCI ROMs.Mark Kettenis
ok deraadt@
2014-10-26- add board type of edgerouter proJasper Lievisse Adriaanse
- don't attach octrtc on the edgerouter pro either openbsd boots fine on this system, but as there's no ethernet support yet there's no storage at all right now. ok pirofti@
2014-10-26define octeon model cn61xx pass 1.1Jasper Lievisse Adriaanse
ok pirofti@
2014-10-26fix use of uninitialized variable in error pathCharles Longeau
ok deraadt@
2014-10-26remove unused variablesCharles Longeau
ok schwarze@
2014-10-26POLLIN is not guaranteed to be set in revents for EOF so check forTodd C. Miller
POLLHUP too. OK deraadt@
2014-10-26The open flags param to mkostemps() should be "flags" not "oflags"Todd C. Miller
for consistency with the rest of the manual.
2014-10-26when using the local enqueuer, if the internal SMTP session fails, copy theGilles Chehade
original message to ~/dead.letter so it's not lost
2014-10-26Append 512 bytes of zero to the kernel image intended to be put into lif.fs,Miod Vallat
so that valid bytes exist at the end of the kernel image. Since the lif image stores files size in 256-byte unit, we can not report EOF while reading the kernel image until the remainder of the 256-byte sector has been read. But these zero bytes would cause the gzip readahead machinery in libsa to believe the kernel is followed by an uncompressed file, and switch to transparent mode, preventing backwards seeks into the kernel image from working. This fixes the ``read section header string table failed(0)'' errors when attempting to boot lif.fs since loadfile_elf.c 1.9.
2014-10-26Read the section header string table in the boot blocks' memory, not in theMiod Vallat
loaded image area.
2014-10-26Don't forget to free() the malloc()s.Miod Vallat
2014-10-26Add a format specifier for the printf.Brad Smith
2014-10-26Move the #define _KERNEL wrapping to only cover <sys/file.h>Philip Guenther
2014-10-26mknod(2) now supports creating FIFOs too. Fix description of device filePhilip Guenther
creation while here. ok jmc@ schwarze@ millert@
2014-10-26Add parentheses to suppress compiler warning.Brad Smith
sort.c:295:35: warning: '&&' within '||' [-Wlogical-op-parentheses] ok guenther@
2014-10-26Place additional parantheses around readdir() and check return does notBrad Smith
equal NULL. apprentice.c:645:13: warning: using the result of an assignment as a condition without parentheses [-Wparentheses] With input and ok guenther@
2014-10-26Add a format specifier for the printf.Brad Smith
ok guenther@
2014-10-26Remove a gazillion useless casts to void*Philip Guenther
Eliminate a couple function pointer casts, fixing the function to match in one case
2014-10-26Delete casts to void* of the argument to free(): only needed when lyingPhilip Guenther
about constness and none of these were
2014-10-26Update to the modern RPC style with different names for server and clientPhilip Guenther
stubs (they have different prototypes, after all). Fill in missing prototypes. Use void* arguments on closure-style callbacks, with local variables of the expected type. Keep deleting unnecessary casts.
2014-10-26clnt_sperrno() is declared nowadays in <rpc/clnt.h>Philip Guenther
2014-10-26Sort #includes; pull in <time.h> for ctime()Philip Guenther
2014-10-26When regcomp() fails, use regerror() to get a useful error messagePhilip Guenther
2014-10-26timeout_mp() is static nowPhilip Guenther
2014-10-26Declare a few functions staticPhilip Guenther
2014-10-26Lint is deadPhilip Guenther
2014-10-26Delete information about porting to and running on other platforms.Philip Guenther
prodded by deraadt@
2014-10-26Delete inscrutable examples; the docs cover thisPhilip Guenther
2014-10-26Use vsyslog() instead of manually expanding the string and calling syslog(%s)Philip Guenther
Now that newline stripping isn't needed, use vfprintf() instead of formatting and then writing it out. Delete bogus XXX comment that predated the switch to vsnprintf() Make the format string const char *
2014-10-26Remove trailing newlines from a couple log messagesPhilip Guenther
2014-10-26Consistently use the extra parens in 'if ((var = hasmntval(...)))' toPhilip Guenther
suppress compiler warnings. Noted with gcc -Wall, then prodded by brad@ and clang
2014-10-26Replace xrealloc() with xreallocarray(). Break-out the 'log and die'Philip Guenther
function as xmallocfailure() and use that in the locations where reallocarray's checks alone aren't sufficient. ok doug@ deraadt@
1995-10-18initial import of NetBSD treeTheo de Raadt
2014-10-25newaliases / makemap should parse multi-line aliases entriesGilles Chehade
2014-10-25Don't let qlw attach to non-sun4m yet, as this driver currently depends uponMiod Vallat
sun4m's iommu for bus_dma. (Guess what task just hit my todolist...)
2014-10-25Remove vmmap; it isn't used.Mark Kettenis
ok jsing@
2014-10-25uvm_km_valloc -> km_allocMark Kettenis
2014-10-25uvm_km_valloc -> km_allocMark Kettenis
ok mpi@
2014-10-25Add and enable qlw at sbus. Tested on QLGC,ispMiod Vallat
2014-10-25With the current architecture, we can't support inline equationsIngo Schwarze
inside tables, sorry. So don't even try to parse tbl(7) blocks for eqn(7) delimiters. Broken table layout found in glPixelMap(3) while investigating a bug report by Theo Buehler <theo at math dot ethz dot ch>.
2014-10-25Fix a NULL pointer dereference reportedIngo Schwarze
by Theo Buehler <theo at math dot ethz dot ch> on tech@: Do not attempt to parse empty equations.
2014-10-25Report arguments to .EQ as an error, and simplify the code:Ingo Schwarze
* drop trivial wrapper function roff_openeqn() * drop unused first arg of function eqn_alloc() * drop usused member "name" of struct eqn_node