summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-09-07Fix function name in error messages by using __func__kn
2018-09-07fix badly broken reload of filter rules that use prefix-sets. debuggedSebastian Benoit
and fixed with/by claudio@
2018-09-07Not adding ::1 on non-default lo(4) broke regress/sbin/route.Alexander Bluhm
Adjust test's expected output files. OK mpi@
2018-09-07Regress test for rde_trie should cover some basics for now.Claudio Jeker
2018-09-07fgetln(3) -> getline(3); from Lauri Tirkkonen; ok millert@cheloha
2018-09-07Remove wildcard address on loopack remnantskn
henning@ removed this functionality years ago, see the share/man/man4/lo.4 revision 1.27. OK jca claudio
2018-09-07tests all available TLSv1.2 ciphersKinichiro Inoguchi
2018-09-07Revert earlier revert.Martijn van Duren
It turned out the issue was a badly applied diff on stsp@'s machine. OK stsp@
2018-09-07Add missing htonl() else matching does not really work.Claudio Jeker
2018-09-07remove some unused variables and otherwise tidy up a bit.Jonathan Matthew
2018-09-07Fragment one large 64k IP ping packet into 155 fragments, each withAlexander Bluhm
424 bytes payload. Send them in random order. Expect a fragment with matching echo reply header.
2018-09-07Document the spin CPU state columnsolene
ok yasuoka@ jca@
2018-09-07Remove unnused af argument from unmask(), sync with pfctlkn
Noted by jca, thanks. OK jca claudio
2018-09-07remove unused function find_prefixsetitem(), ok claudio@Sebastian Benoit
2018-09-07Backout recent cp(1) changes; they broke texlive's mktexlsr(1)Stefan Sperling
2018-09-07Some space fixes mentioned by benno@Claudio Jeker
2018-09-07Explain the special case for redirect to localhost in a comment.Alexander Bluhm
input and OK claudio@
2018-09-07Implement a fast presix-set lookup. This magic trie is able to match aClaudio Jeker
prefix addr/plen to a prefix-set spec addr/plen prefixlen min - max (a prefix including prefixlen range). Every addr/plen pair is a node in the trie and the prefixlen is added as a bitmask to those nodes. For the lookup the any match is OK, there is no need to do longest or best prefix matching. Inspiration for this solution comes from the way bird implements this which was done by Ondrej Zajicek santiago (at) crfreenet.org OK benno@
2018-09-07Make print_hostname() less AF-specifickn
Reduce differences address families and replace strlcpy() with simpler if/else logic as done in print_addr_str(). OK sashan
2018-09-07Declare strings passed to local_listen() as const. This makes itAlexander Bluhm
consistent to remote_connect() and getaddrinfo(3). from Nan Xiao
2018-09-07allow as4number_any in as-sets. Otherwise you cant filter bogon as'es.Sebastian Benoit
ok claudio@
2018-09-07Refactor a bit and add another testClaudio Jeker
2018-09-07Do not send a Content-Length header for 1xx and 204 status codes sinceFlorian Obser
RFC 7230 states that a server MUST NOT do so. At least relayd chokes on this. Pointed out & diff by Carlin Bingham (cb AT walcyrge.org), thanks! OK benno
2018-09-07Add a basic unittest for the as_set_* functionsClaudio Jeker
2018-09-07Move the config regress tests into own directory making space for additionalClaudio Jeker
unittests and maybe more. bgpd needs more test coverage. Discussed with bluhm@
2018-09-07Fix the build after removing an unused af argument from unmask().Kevin Lo
ok claudio@
2018-09-07Rename dne in copy_file to exists to be more consistent with the otherMartijn van Duren
copy_* functions. OK stsp@
2018-09-07replace malloc()+strlcpy() with strndup() in cmdline_symset().miko
"looks good" gilles@ halex@
2018-09-07Fix "_nfiles" reference for crash dump.YASUOKA Masahiko
Diff from fukaumi at soum.co.jp ok mpi
2018-09-07Also verify a overwrite for the copy of a fifo, link and device node.Martijn van Duren
OK stsp@
2018-09-07Move the question to allow a copy to its own function.Martijn van Duren
OK stsp@
2018-09-07The combination of -v and -i and the deny of a copy would cause the copyMartijn van Duren
still to be printed. This fixes that edge-case. OK stsp@
2018-09-07tweak previous;Jason McIntyre
2018-09-07Remove some newlines that have gone with last commit.Claudio Jeker
2018-09-07When parsing AS numbers set both as_min and as_max to the parsed value.Claudio Jeker
Not strictly needed but better to have both initialized.
2018-09-07Add a dummy as_set_match() function since it is needed to link util.c now.Claudio Jeker
2018-09-07Implement as-set a fast lookup table to be used instead of long list ofClaudio Jeker
AS numbers in source-as, AS and transit-as filterstatements. These table use bsearch to quickly verify if an AS is in the set or not. The filter syntax is not fully set in stone yet. OK denis@ benno@ and previously OK deraadt@
2018-09-07Add FALLTHROUGH comments where appropriate. Patch from jjelen at redhatDarren Tucker
via bz#2687.
2018-09-07clarify that goto error in alloc_all_endpoints_fixed_ep() always returnsmiko
USBD_INVAL. ok mpi@
2018-09-07move initial jack count to alloc_all_endpoints(), and reset count to zeromiko
in free_all_jacks(). ok stsp@ ratchov@
2018-09-07ssh -MM requires confirmation for all operations that change theDamien Miller
multiplexing state, not just new sessions. mention that confirmation is checked via ssh-askpass
2018-09-07Add retguard macros to cpu_switchto, setjmp, longjmp.mortimer
ok kettenis@
2018-09-06Use getline() for the network bulk code. Also make the parser better byClaudio Jeker
doing tokenizing on spaces and correctly ignore comments. This should make this feature in general more robust. OK benno@
2018-09-06Drop SSL_CIPHER_ALGORITHM2_AEAD flag.Joel Sing
All of our algorithm_mac == SSL_AEAD cipher suites use EVP_AEAD, so we can condition on that rather than having a separate redundant flag. ok tb@
2018-09-06get rid of a temp file, noted by claudio@Sebastian Benoit
2018-09-06If we cannot stop the endpoint when aborting a transfer assume thatMartin Pieuchot
the device is gone and give back the descriptor to the stack. Without this usbd_abort_pipe() could end up in an infinite loop. Issue reported by Tom Murphy.
2018-09-06when people update /etc/example/bgpd.conf, the forget to update theSebastian Benoit
regression test. - make bgpd-example just check the config file we ship, to make sure the config is not broken - make bgpd-printconf checks a config file, writes the parsed output to a file and checks if that file is parsable config, i.e. this check makes sure that the config printer produces parsable configuration. This way we still have to update the regression tests when the syntax changes, and we fail if the commited example is bad, but we do not fail just because someone forgot to update a file here. ok claudio
2018-09-06Remove unused af argument from unmask()kn
This has been unused for years. While here, zap the duplicate function signature from pfctl.h (already present in pfctl_parser.h); spotted by sashan, thanks. OK sashan
2018-09-06Fill netmask AF-independently in print_host()kn
Instead of masking the host address in two different ways, just fill it no matter the address family. In case of AF_INET, setting the extra 96 bit does not hurt. While here, stop resetting `af' for no reason and move up the variable declaration. OK benno sashan
2018-09-06Do not close the socket twice in netcat.Alexander Bluhm
from Nan Xiao; OK tb@