summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-07-30Fix typo in comment.YASUOKA Masahiko
2015-07-30switch references from sudo to doas;Jason McIntyre
ok deraadt
2015-07-30q_id didn't pass to radiusd_radius properly. It should be u_int not u_int.YASUOKA Masahiko
2015-07-30Allow ssh_config and sshd_config kex parameters options be prefixedDamien Miller
by a '+' to indicate that the specified items be appended to the default rather than replacing it. approach suggested by dtucker@, feedback dlg@, ok markus@
2015-07-29backout the previous: it broke wordpress somehow.Reyk Floeter
we need more care to find a proper fix for the fastcgi headers. acknowledged by deraadt@
2015-07-29Fix spacing and be more verbose in printfs under #ifdef AUDIO_DEBUG.Alexandre Ratchov
No binary change.
2015-07-29Use DMA pointer determine the number of times the audio(4) layer hasAlexandre Ratchov
to advance in time. This is needed to properly recover, when interrupts are blocked for too long. Fixes permanent distortion on MP systems. ok deraadt
2015-07-29fix bug where other than the last of multiple forward rules in httpSebastian Benoit
protocols would be ignored, reported and fixed by J. Fischer (lists -AT- mistrust -DOT- net) and reminded by (trondd -AT- kagu-tsuchi -DOT- com), thanks! ok deraadt@
2015-07-29Read fcgi response records until we have the whole http header and canFlorian Obser
parse it. Otherwise http headers can leak into the body. Pointed out by Jean-Philippe Ouellet on bugs@ Thanks! OK reyk, commit ASAP deraadt@
2015-07-29Add linker warnings in case SSLv3_{,client,server}_method are referenced.Miod Vallat
Use of this symbols proves the existence of a code path willingly using SSLv3, even with OPENSSL_NO_SSL3 being defined, which hints that it needs fixing. Discussed with the LibreSSL cabal during c2k15; ok deraadt@
2015-07-2917 years ago, setfault() was modified to save the status register in theMiod Vallat
faultbuf. But 1/ sr was only restored for machine check exceptions, and 2/ the way it was saved was unsafe if interrupts were enabled, and could cause %r2 to be lost. Discussing this with deraadt@ at the end of c2k15, this was probably needed for the old VI boards which were the target of the original powerpc port, came with a worse-than-Genesi openfirmware. Since then, machine check exceptions have been unheard of; or, if they happen, they do not need the status register to be restored. ok mpi@ deraadt@
2015-07-29Something subtle in previous revision is locking up suspend or bootingTheo de Raadt
on some laptops. Mailing lists threads mention x220 and Asus machines. Reverting for now.
2015-07-29Neuter tame(2) with ENOSYS for upcoming release cycle, in a fairlyTheo de Raadt
simple and gross fashion, but the least impact on other parts...
2015-07-29Acquire the kernel lock in pmap_remove(). The reasons for this can't beMiod Vallat
stated here as I have been asked to be polite in this commit message. ok deraadt@
2015-07-29Determine and print Xen hypervisor version.Mike Belopuhov
ok reyk, with deraadt@'s permission
2015-07-29Use named initialisers for X509V3_EXT_METHOD structs (for the usualJoel Sing
reasons) - only change in generated assembly is due to line numbering.
2015-07-29Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generatedJoel Sing
assembly. ok bcook@
2015-07-29Expand obsolete M_ASN1_STRING_* macros in asn1_lib.c, apply some style(9)Joel Sing
and drop an unnecessary return from a void function. ok bcook@ doug@
2015-07-29Zap a SLIST in a more obviously correct/safe way.Kenneth R Westerback
Originally from pelikan@, recent prodding from bluhm@ and jsg@. ok pelikan@ millert@ bluhm@
2015-07-29status_out and associated data structures are no longer used.Nicholas Marriott
2015-07-29gc macro that's no longer used since the move to reallocarrayMarc Espie
2015-07-29fix bug in previous; was printing incorrect string for failedDamien Miller
host key algorithms negotiation
2015-07-29Rework buffer position reporting code.Alexandre Ratchov
- use simpler data structures (makes the code shorter). - if multiple interrupts are missed, call audio(4) as many times as we missed interrupts (unless the pointer wrapped, which this is undetectable, but upper layer handles it) - fetch the link fifos size in the interrupt handler, as, according to the spec it may change dynamically. - certain devices expose the last offset of the link fifo size instead of the fifo size itself; workaround this by incrementing the reported link fifo size if it's odd. Fixes recovery after missed interrupts on asus eeepcs, maybe others. ok deraadt, help from armani@
2015-07-29add a FILES section to make clear where RADIUS configuration fileIgor Sobrado
is placed by default. ok yasuoka@
2015-07-29include the peer's offer when logging a failure to negotiate aDamien Miller
mutual set of algorithms (kex, pubkey, ciphers, etc.) ok markus@
2015-07-29Zap a couple of extra blank lines that keep showing up in diffs I'mKenneth R Westerback
trying to build.
2015-07-29Don't use mpls_input() as input handler anymore and instead call itRafael Zalamena
directly. Also protect non mp-safe functions while at it. ok mpi@.
2015-07-29refine a commentTed Unangst
2015-07-28add Cisco to the list of clients that choke on the hostkeys updateDamien Miller
extension. Pointed out by Howard Kash
2015-07-28Convert sectors to DEV_BSIZE block values were necessary to find,Kenneth R Westerback
read and validate disklabels on GPT partitioned disks. Makes it much more likely GPT partitioned disks with non-512-byte sectors will work. Part of the larger reverted GPT work. ok deraadt@
2015-07-28ARG_MAX is the standard name (not NCARGS); probab[l]y guentherTheo de Raadt
2015-07-28wrap some exceedingly long linesTheo de Raadt
2015-07-28add missing space, from Donovan Watteau <tsoomi at gmail.com>Alexandre Ratchov
thanks!
2015-07-28In case the system misses enough audio interrupts for DMAAlexandre Ratchov
pointers to wrap, recover by detecting and compensating for the missed interrupts. Fixes certain audio hangs on MP machines. with help from armani@, typos fixed by Alexey Suslikov
2015-07-28Use new AUDIO_GETPOS ioctl() to ensure "bytes" and "errors" countersAlexandre Ratchov
are consistent.
2015-07-28Use new AUDIO_GETPOS ioctl instead of AUDIO_GETxOFFS andAlexandre Ratchov
AUDIO_xERROR. It returns a snapshot of the counters we need and avoids inconsistencies.
2015-07-28Add the AUDIO_GETPOS ioctl() to fetch a snapshot of the 4 countersAlexandre Ratchov
returned by AUDIO_GETxOFFS and AUDIO_xERROR ioctls. ok deraadt
2015-07-28Rename some variables and add few comments in keepenv handling code.Vadim Zhukov
Makes the code more readable. okay tedu@
2015-07-28kv_executable was removedMike Belopuhov
2015-07-28Remove the hack of scrolling forward and backward with +G1G thatIngo Schwarze
many (jmc@, millert@, espie@, deraadt@) considered revolting. Instead, when using a pager, since we are using a temporary file for tags anyway, use another temporary file for the formatted page(s), as suggested by millert@ and similar to what the traditional BSD man(1) did, except that we use only one single temporary output file rather than one for each formatted manual page, such that searching (both with / and :t) works across all the displayed files.
2015-07-28describe CPATH before TMPPATHTheo de Raadt
2015-07-28unsort: requested by deraadtJason McIntyre
2015-07-28remove gratuitous castsTheo de Raadt
2015-07-28Tweak a couple of [SLIST|TAILQ]_REMOVE() usages in loops to a moreKenneth R Westerback
obvious idiom. ok bluhm@ jsing@
2015-07-28normalize disclaimer to license.template; noted by reykTheo de Raadt
2015-07-28Tidy up the way terminals are described and move some structs out of tmux.h.Nicholas Marriott
2015-07-28Add a note to ppp(4)'s BUGS section where it talks about lack of IPv6Stuart Henderson
support to make it clear that pppoe(4) does work with IPv6. Problem noted by Simon Farnsworth. Add xrefs to pppoe(4) and pppx(4) to show that this isn't the only PPP implementation on OpenBSD. ok/tweak stsp@
2015-07-28let the hack that lets make kill jobs after sudo also work with doas.Marc Espie
okay tedu@, millert@, tweaks by millert@
2015-07-28For unix domain sequenced packet socket pairs the ruby regressionAlexander Bluhm
tests reported an EMSGSIZE error although the sent message was not too large. The way backpressure was implemented for unix domain sockets confused the check in sosend(). Unix domain sockets append data only to the recv buffer. To report the amount of content to the sender, the high watermark of the send buffer was reduced. This happend for SOCK_STREAM and SOCK_SEQPACKET. Sosend checks wether atomic chunks could ever fit into the send buffer which is limited by the high watermark. This happens for SOCK_DGRAM and SOCK_SEQPACKET. For SOCK_SEQPACKET the combination of these mechanisms resulted in an EMSGSIZE error when the buffer got filled. This also happened when space could be created by reading from the other end in contradiction to the semantics of EMSGSIZE. Do not emulate a send buffer that has no space. It is better to fill the buffer with fake data than to reduce its size. Thus the high watermark always contains the real value. When disconnecting, reset the counters. Otherwise the socket layer would try to flush non existing data in the send buffer. Tested by jeremy@ with a C program and the ruby tests. OK markus@ jeremy@
2015-07-28Fix keepenv handling. Initially reported by Ze Loff on misc@.Vadim Zhukov
tedu@ agrees.