Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-07-19 | abort when ENGINE_remove fails, fix Coverity 21656 | Brent Cook | |
ok doug@, beck@ | |||
2015-07-19 | set usb vendor string to 'Octeon' instead of '' | Jasper Lievisse Adriaanse | |
ok pirofti@ | |||
2015-07-19 | remove pointless cast | Jasper Lievisse Adriaanse | |
ok pirofti@ | |||
2015-07-19 | If we aren't on a tty, clear the pager flag up front. | Ingo Schwarze | |
Just to clean up code structure, no functional change. | |||
2015-07-18 | Make tcpdump show HTOP elements in 11n management frames; ok sthen@ | Stefan Sperling | |
2015-07-18 | remove the restriction to disallow the use of a passphrase file during | Alexander Hall | |
initial creation of a crypto volume ok phessler | |||
2015-07-18 | pf_send_tcp() should also use unhandled_af() | sashan | |
ok jsg@, ok mpi@ | |||
2015-07-18 | Convert dtls1_get_message_header to CBS and change to int. | Doug Hogan | |
Changed return value from void to int. It should never return an error given that the input length is not checked yet. ok miod@ | |||
2015-07-18 | give bgpd's fatal() varargs and use it to instrument bgpd fatal() | Sebastian Benoit | |
calls to aid in debugging henning@ "makes sense to me", sthen@ "yes please", ok phessler@ | |||
2012-10-13 | import OpenSSL-1.0.1c | Damien Miller | |
2015-07-18 | Convert dtls1_get_message_header to CBS and change to int. | Doug Hogan | |
Changed return value from void to int. It should never return an error given that the input length is not checked yet. ok miod@ | |||
2015-07-18 | rand_err doesn't exist anymore, coverity 78808 | Bob Beck | |
ok doug@ | |||
2015-07-18 | Now tls_write() behaves like write(2), so the TLS tests produce the | Alexander Bluhm | |
same results as the TCP tests. | |||
2015-07-18 | remove XXX and handle error return from evbuffer_add() | Bret Lambert | |
ok florian@ | |||
2015-07-18 | Coverity 21651 | Bob Beck | |
ok doug@ | |||
2015-07-18 | Convert dtls1_get_record to CBS. | Doug Hogan | |
ok miod@, input + ok jsing@ | |||
2015-07-18 | As libtls previously did not set SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER, | Alexander Bluhm | |
syslogd had to drop messages after tls_write() returned TLS_{READ,WRITE}_AGAIN. Now after libtls has been fixed, remove the workaround. Messages are stored in the libevent write buffer as we can safely do a realloc(3) now. OK reyk@ | |||
2015-07-18 | Remove repeated code in dtls1_get_record. | Doug Hogan | |
The "if" is a bit ugly, but this does remove a lot of repetitive code. This will be converted to CBS later as well. ok miod@ jsing@ roughly ok with it after seeing the CBS version | |||
2015-07-18 | libtls has been changed to set SSL_MODE_ENABLE_PARTIAL_WRITE and | Reyk Floeter | |
SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER by default. This gives tls_write() a similar short write semantics as write(2) and a workaround in httpd to cope with the previous differences can be removed. Specifically, httpd can stop copying data into a local buffer that was used to keep it around for repeated writes. OK bluhm@ | |||
2015-07-18 | Raise SPL to SPL_NET before calling if_input() in vxlan_lookup(). | Kazuya Goda | |
ok reyk@ mpi@ | |||
2015-07-18 | Set SSL_MODE_ENABLE_PARTIAL_WRITE and SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER | Alexander Bluhm | |
in libtls. This gives tls_write() a similar short write semantics as write(2). So implementing daemons with libevent buffers will be easier and workarounds in syslogd and httpd can be removed. OK tedu@ beck@ reyk@ | |||
2015-07-18 | add relayd regression test args-http-slow-consumer.pl | Sebastian Benoit | |
ok reyk@, bluhm@ | |||
2015-07-18 | Dead code, Coverity 78798 | Bob Beck | |
ok bcook@ doug@ | |||
2015-07-18 | NET_RT_DUMP is dumb and tries to iterates over all possible AF tables | Martin Pieuchot | |
of a given rtable if none is specified. In this case do not return an error if a table is missing for one of the ~30 funky AF defines we have in <sys/socket.h> Breakage found by and fix discussed with claudio@ | |||
2015-07-18 | simplify length checking in do_indefinite_convert | Brent Cook | |
Fixes Coverity 117506, 117507, 117508 ok doug@ | |||
2015-07-18 | Handle short writes and TLS_{READ,WRITE}_AGAIN around tls_write(). | Alexander Bluhm | |
input doug@; OK beck@ | |||
2015-07-18 | Make all commands accepting the "-priority" switch recognize aliases | Martin Pieuchot | |
for common priorities. ok deraadt@, claudio@ | |||
2015-07-18 | Coverity ID 78910 - Yet another stupid API designed to not show failures. do the | Bob Beck | |
lease worst alternative and do nothing rather than dereference NULL, but having a function with fundamentally broken API to simply make a list of strings, sort them, and call a function with each string as an argument is really quite silly.... and of course it was exposed API that the ecosystem uses that we can't delete.. yet. ok miod@ doug@ | |||
2015-07-18 | Put the opening curley brackets on the same line as the function name. | Robert Peichaer | |
OK krw@ halex@ | |||
2015-07-18 | fix typo. | Yojiro Uo | |
2015-07-18 | prevent the tls constraint state machine from getting hung on STATE_INVALID | Brent Cook | |
patch from Mikolaj Kucharski ok deraadt@ | |||
2015-07-18 | Add groups before users. | Antoine Jacoutot | |
2015-07-18 | Remove SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER workaround. | Doug Hogan | |
This was a hack to work around problems on IE 6 with SSLv3. ok miod@ bcook@ | |||
2015-07-18 | Make {x86,i82489,x2apic,i386}_ipi return void | Stefan Fritsch | |
They always returned 0 ok mlarkin@ kettenis@ | |||
2015-07-18 | Make *_ipi_init return void on i386/amd64 | Stefan Fritsch | |
They always returned 0 ok mlarkin@ kettenis@ | |||
2015-07-18 | msg.mpi | sashan | |
2015-07-18 | whitespace, no functional change | Sebastian Benoit | |
2015-07-18 | follow up changes on unknown AF handling | sashan | |
- PF should always use unhandled_af() - 0 is lame, AF_UNSPEC is profi ok bluhm@ | |||
2015-07-18 | rearrange variable decls a little | Ted Unangst | |
2015-07-18 | add following registers from IEEE 802.3-2009 Clause 22. | Yojiro Uo | |
- PSE control register (0x0b) - PSE status register (0x0c) - MMD access control register (0x0d) - MMD access address data register (0x0e) from netbsd ok deraadt@, miod@ | |||
2015-07-18 | remove mysterious, decorative comment blocklets | Brent Cook | |
2015-07-18 | Explicitly mark ignored BN_* return vals in tests. | Brent Cook | |
The tests will fail all the same. Fixes Coverity 78811 21659 21658 21657. Discussed with beck@ | |||
2015-07-18 | unexpand spaces to tabs | Stefan Fritsch | |
2015-07-18 | check sscanf conversion, fixes Coverity 21666 | Brent Cook | |
ok doug@, miod@, guenther@ | |||
2015-07-18 | Add an example about showing wireless frames with tcpdump(8). | Stefan Sperling | |
Apparently sniffing wifi frames isn't a very popular addiction?!? Requested by David Hill. ok aja phessler mpi | |||
2015-07-18 | Fix malformed packets when returning 'no such object/entry' errors | Bret Lambert | |
for snmp requests ok reyk@ | |||
2015-07-18 | treat asprintf failure in REQUEST_URI case as a fatal error | Bret Lambert | |
ok florian@ | |||
2015-07-18 | virtio_pci: Do the ISR read without kernel lock | Stefan Fritsch | |
The ISR read is relatively expensive because it causes a vmexit. Grab the kernel lock only after it is done. | |||
2015-07-18 | Use better names as examples for snmpv3 users. As explained to blambert@ | Reyk Floeter | |
2015-07-18 | Tag dynamic routes with a D so I do not get confused when seeing dynamic | Claudio Jeker | |
routes because of PMTU in the show fib output. |