summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-07-19abort when ENGINE_remove fails, fix Coverity 21656Brent Cook
ok doug@, beck@
2015-07-19set usb vendor string to 'Octeon' instead of ''Jasper Lievisse Adriaanse
ok pirofti@
2015-07-19remove pointless castJasper Lievisse Adriaanse
ok pirofti@
2015-07-19If we aren't on a tty, clear the pager flag up front.Ingo Schwarze
Just to clean up code structure, no functional change.
2015-07-18Make tcpdump show HTOP elements in 11n management frames; ok sthen@Stefan Sperling
2015-07-18remove the restriction to disallow the use of a passphrase file duringAlexander Hall
initial creation of a crypto volume ok phessler
2015-07-18pf_send_tcp() should also use unhandled_af()sashan
ok jsg@, ok mpi@
2015-07-18Convert dtls1_get_message_header to CBS and change to int.Doug Hogan
Changed return value from void to int. It should never return an error given that the input length is not checked yet. ok miod@
2015-07-18give bgpd's fatal() varargs and use it to instrument bgpd fatal()Sebastian Benoit
calls to aid in debugging henning@ "makes sense to me", sthen@ "yes please", ok phessler@
2012-10-13import OpenSSL-1.0.1cDamien Miller
2015-07-18Convert dtls1_get_message_header to CBS and change to int.Doug Hogan
Changed return value from void to int. It should never return an error given that the input length is not checked yet. ok miod@
2015-07-18rand_err doesn't exist anymore, coverity 78808Bob Beck
ok doug@
2015-07-18Now tls_write() behaves like write(2), so the TLS tests produce theAlexander Bluhm
same results as the TCP tests.
2015-07-18remove XXX and handle error return from evbuffer_add()Bret Lambert
ok florian@
2015-07-18Coverity 21651Bob Beck
ok doug@
2015-07-18Convert dtls1_get_record to CBS.Doug Hogan
ok miod@, input + ok jsing@
2015-07-18As libtls previously did not set SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER,Alexander Bluhm
syslogd had to drop messages after tls_write() returned TLS_{READ,WRITE}_AGAIN. Now after libtls has been fixed, remove the workaround. Messages are stored in the libevent write buffer as we can safely do a realloc(3) now. OK reyk@
2015-07-18Remove repeated code in dtls1_get_record.Doug Hogan
The "if" is a bit ugly, but this does remove a lot of repetitive code. This will be converted to CBS later as well. ok miod@ jsing@ roughly ok with it after seeing the CBS version
2015-07-18libtls has been changed to set SSL_MODE_ENABLE_PARTIAL_WRITE andReyk Floeter
SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER by default. This gives tls_write() a similar short write semantics as write(2) and a workaround in httpd to cope with the previous differences can be removed. Specifically, httpd can stop copying data into a local buffer that was used to keep it around for repeated writes. OK bluhm@
2015-07-18Raise SPL to SPL_NET before calling if_input() in vxlan_lookup().Kazuya Goda
ok reyk@ mpi@
2015-07-18Set SSL_MODE_ENABLE_PARTIAL_WRITE and SSL_MODE_ACCEPT_MOVING_WRITE_BUFFERAlexander Bluhm
in libtls. This gives tls_write() a similar short write semantics as write(2). So implementing daemons with libevent buffers will be easier and workarounds in syslogd and httpd can be removed. OK tedu@ beck@ reyk@
2015-07-18add relayd regression test args-http-slow-consumer.plSebastian Benoit
ok reyk@, bluhm@
2015-07-18Dead code, Coverity 78798Bob Beck
ok bcook@ doug@
2015-07-18NET_RT_DUMP is dumb and tries to iterates over all possible AF tablesMartin Pieuchot
of a given rtable if none is specified. In this case do not return an error if a table is missing for one of the ~30 funky AF defines we have in <sys/socket.h> Breakage found by and fix discussed with claudio@
2015-07-18simplify length checking in do_indefinite_convertBrent Cook
Fixes Coverity 117506, 117507, 117508 ok doug@
2015-07-18Handle short writes and TLS_{READ,WRITE}_AGAIN around tls_write().Alexander Bluhm
input doug@; OK beck@
2015-07-18Make all commands accepting the "-priority" switch recognize aliasesMartin Pieuchot
for common priorities. ok deraadt@, claudio@
2015-07-18Coverity ID 78910 - Yet another stupid API designed to not show failures. do theBob Beck
lease worst alternative and do nothing rather than dereference NULL, but having a function with fundamentally broken API to simply make a list of strings, sort them, and call a function with each string as an argument is really quite silly.... and of course it was exposed API that the ecosystem uses that we can't delete.. yet. ok miod@ doug@
2015-07-18Put the opening curley brackets on the same line as the function name.Robert Peichaer
OK krw@ halex@
2015-07-18fix typo.Yojiro Uo
2015-07-18prevent the tls constraint state machine from getting hung on STATE_INVALIDBrent Cook
patch from Mikolaj Kucharski ok deraadt@
2015-07-18Add groups before users.Antoine Jacoutot
2015-07-18Remove SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER workaround.Doug Hogan
This was a hack to work around problems on IE 6 with SSLv3. ok miod@ bcook@
2015-07-18Make {x86,i82489,x2apic,i386}_ipi return voidStefan Fritsch
They always returned 0 ok mlarkin@ kettenis@
2015-07-18Make *_ipi_init return void on i386/amd64Stefan Fritsch
They always returned 0 ok mlarkin@ kettenis@
2015-07-18msg.mpisashan
2015-07-18whitespace, no functional changeSebastian Benoit
2015-07-18follow up changes on unknown AF handlingsashan
- PF should always use unhandled_af() - 0 is lame, AF_UNSPEC is profi ok bluhm@
2015-07-18rearrange variable decls a littleTed Unangst
2015-07-18add following registers from IEEE 802.3-2009 Clause 22.Yojiro Uo
- PSE control register (0x0b) - PSE status register (0x0c) - MMD access control register (0x0d) - MMD access address data register (0x0e) from netbsd ok deraadt@, miod@
2015-07-18remove mysterious, decorative comment blockletsBrent Cook
2015-07-18Explicitly mark ignored BN_* return vals in tests.Brent Cook
The tests will fail all the same. Fixes Coverity 78811 21659 21658 21657. Discussed with beck@
2015-07-18unexpand spaces to tabsStefan Fritsch
2015-07-18check sscanf conversion, fixes Coverity 21666Brent Cook
ok doug@, miod@, guenther@
2015-07-18Add an example about showing wireless frames with tcpdump(8).Stefan Sperling
Apparently sniffing wifi frames isn't a very popular addiction?!? Requested by David Hill. ok aja phessler mpi
2015-07-18Fix malformed packets when returning 'no such object/entry' errorsBret Lambert
for snmp requests ok reyk@
2015-07-18treat asprintf failure in REQUEST_URI case as a fatal errorBret Lambert
ok florian@
2015-07-18virtio_pci: Do the ISR read without kernel lockStefan Fritsch
The ISR read is relatively expensive because it causes a vmexit. Grab the kernel lock only after it is done.
2015-07-18Use better names as examples for snmpv3 users. As explained to blambert@Reyk Floeter
2015-07-18Tag dynamic routes with a D so I do not get confused when seeing dynamicClaudio Jeker
routes because of PMTU in the show fib output.