summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-05-01In ssl.h rev. 1.158 2018/05/01 13:30:24, tb@ changed BIO_f_ssl(3)Ingo Schwarze
to return const. Update the documentation.
2018-05-01Fix whitespace on a few lines to reduce noise in an upcoming diff.Theo Buehler
2018-05-01The argument to TIOCSETVERAUTH must be a pointer; ok tedu@anton
2018-05-01Remove extraneous new line from error message.anton
2018-05-01The length field of a DNS packet must be network byte order encoded; ok tedu@anton
2018-05-01vmmci(4) depends on pvbus(4) being available, unbreakPeter Hessler
from mlarkin@
2018-05-01const for BIO_f_ssl(), the last const difference to OpenSSL in ourTheo Buehler
public API in libssl. ok beck, jsing
2018-05-01const for BIO_{new,set}() and most of the BIO_{f,s}_*() family ofTheo Buehler
functions. ok beck, jsing
2018-05-01Update documentation of UVM_FLAG_* valuesStefan Kempf
ok schwarze
2018-05-01Add an explanation to relink.log what a failed checksum of /bsdRobert Peichaer
means and show how to re-enable KARL. Prodded by and OK deraadt Feedback and OK tb
2018-05-01update currency exchange rates;Jason McIntyre
2018-05-01regress changes for new stuff. - allow walking .., return EPERMBob Beck
on flag mismatch, ENOENT for files with no unveil flags at all
2018-04-30Reduce the scope of the NET_LOCK() in in_control(). Two functions wereTheo Buehler
protected: mrt_ioctl() and in_ioctl(). The former has no other callers and only needs a read lock. The latter will need refactoring to reduce the lock's scope further. In a first step, establish a single exit point and protect most of the function body with the NET_LOCK() while removing the NET_LOCK() from a handful of callers. suggested by & ok mpi, ok visa
2018-04-30Use acpi_register_gpio() to register gpio space like we do for chvgpio(4).Mark Kettenis
ok mpi@
2018-04-30The trapframe layout is no longer exactly the same as the sigcontextPhilip Guenther
layout. Simplify how we identify which frames have trapframes while here. ok kettenis@
2018-04-30No, you cannot use "10.257" as a shorthand for "10.0.1.1" in 2018.Ingo Schwarze
OK guenther@
2018-04-30allow limited setting of permanent A records. like unbound local-data.Ted Unangst
some code and help from anton
2018-04-30* simplify code by no longer calling getnetbyname(3)Ingo Schwarze
* avoid double lookups for unresolvable names without -net * more fitting error message for unresolvable names after -net OK florian@
2018-04-30Treat all negative values of witness_watch equally for robustness.Visa Hankala
2018-04-30tableid is either initialized to the current routing table or to theFlorian Obser
one specified by the T flag. No need to pass a flag around if the tableid is valid. It always is. This code is now in sync between flushroutes() and p_rttables(). OK benno, no objection claudio
2018-04-30No need to get the whole routing table from the kernel if we areFlorian Obser
filtering by address family and / or priority; similar to what p_rttables() is doing. (At the time of writing we need to copy about 150MB for the whole table on a router that is in the default free zone). OK benno
2018-04-30Fix route monitor -AF filter.Florian Obser
While here make and to see that this is correct and not touching any global state make af a local variable and pass it around. Input & OK benno
2018-04-30vmd(8): unbreak i386Mike Larkin
2018-04-30Add a missing header when compiling with -DDEBUGdenis
With advice from jca@ OK jca@ millert@
2018-04-29syncTheo Buehler
2018-04-29if we create fragments, we must know which files they come fromMarc Espie
2018-04-29In hash{free,init}(), there's no need to calculate the size of the hash table ifanton
the given number of elements already is a power of 2. ok visa@, "seems like a good plan" deraadt@
2018-04-29In view of the recent BN_FLG_CONSTTIME vulnerabilities in OpenSSL,Ingo Schwarze
carefully document constant time vs. non-constant time operation of BN_div(3), BN_mod_exp(3), and BN_mod_inverse(3). Until the work that is required on the ill-designed BN_exp(3) and BN_gcd(3) interfaces can be undertaken, also document the imperfections in their behaviour, for now. Finally, mention BN_mod_exp(3) behaviour for even moduli. Delete the vague statement about some functions automatically setting BN_FLG_CONSTTIME. It created a false sense of security. Do not rely on it: not all relevant functions do that. Topic brought up by beck@, significant feedback and OK jsing@.
2018-04-29Simpler description of output formats, shortening the manual page by 15 lines.Ingo Schwarze
Avoid the double redirection from -Tutf8 via -Tlocale to -Tascii. Add LC_CTYPE to the ENVIRONMENT section. While here, also correct a few inaccuracies and tweak some wordings. Triggered by a question from Laura Morales <lauretas at mail dot com>.
2018-04-29Don't bother with background scans while the desired BSSID is fixed.Stefan Sperling
Patch by Jesper Wallin
2018-04-29Manpage tweaks:Anthony J. Bentley
- expand "rcpt" to "recipient" - "recipient" should be Ar, "://" should not be Ar - use Dq for double quotes ok eric@
2018-04-29delete four sentences that have nothing to do with reality;Ingo Schwarze
reported by Gabriel Guzman on misc@; OK claudio@
2018-04-29stop installing /etc/networks, it is now unused; OK deraadt@ tb@Ingo Schwarze
2018-04-29remove useless indirectionsEric Faurot
2018-04-29Unsigned values are always >= 0, fix Coverity 1468443.Martin Pieuchot
2018-04-29move "mail from" and "rcpt to" code into their own function.Eric Faurot
ok gilles@
2018-04-29Fail early when transfers aren't completed in order.Martin Pieuchot
ok pirofti@, visa@
2018-04-29'juming' -> 'jumping' in comment.Kenneth R Westerback
Pointed out by Ryan Lennox via tech@
2018-04-29em: Add magic delay for HP elitebook 820 G3Stefan Fritsch
Add another magic 1ms delay that seems to help with some remaining "Hardware Initialization Failed" issues on an HP elitebook 820 G3 with i219LM. A printf() at the same place helps, too. ok mikeb@
2018-04-29em: Make em_get_software_flag() recursiveStefan Fritsch
The em driver calls em_get_software_flag() recursively, which causes the semaphore to be unlocked too early. Make em_get_software_flag and em_release_software_flag handle this correctly. Freebsd does not do this, but they have a mutex that probably allows them to detect recursive calls to e1000_acquire_swflag_ich8lan(). Reworking the openbsd driver to not recursively get the semaphore would be very invasive. ok mikeb@
2018-04-29em: Improve access logic for software flagStefan Fritsch
Some em chips have a semaphore ("software flag") to synchronize access to certain registers between OS and firmware (ME/AMT). Make the logic to get the flag match the logic in freebsd. This includes higher timeouts and waiting for a previous unlock to complete before trying a lock again. ok mikeb@
2018-04-29INIT->RUN transitions are valid in monitor mode, so don'tStefan Sperling
debug print "invalid transition" to dmesg in this case.
2018-04-29Correct direction of SSL_ERROR_ZERO_RETURN casePhilip Guenther
ok schwarze@
2018-04-29Mention the X86FixupGadgets pass in clang-local.mortimer
ok tj@ schwarze@
2018-04-28Add a clang pass that identifies potential ROP gadgets and replaces ROPmortimer
friendly instructions with safe alternatives. This initial commit fixes 3 instruction forms that will lower to include a c3 (return) byte. Additional problematic instructions can be fixed incrementally using this framework. ok deraadt@
2018-04-28Add a proper usage() function.Robert Peichaer
Suggested by and OK jmc. OK tb
2018-04-28remove references to /etc/networks; reminded by jmc@Ingo Schwarze
2018-04-28regress for unveilBob Beck
2018-04-28bye bye pledgepathBob Beck
2018-04-28reference hosts(5) instead of networks(5)Ingo Schwarze