summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-12-11mention AuthorizedKeysCommandUser must be set forDamien Miller
AuthorizedKeysCommand to be run; bz#2287
2014-12-11show in debug output which hostkeys are being tried when attemptingDamien Miller
hostbased auth; patch from Iain Morgan
2014-12-11Make manual reflect reality:Damien Miller
sftp-server's -d option accepts a "%d" option, not a "%h" one. bz#2316; reported by Kirk Wolf
2014-12-10HISTORY correction: v7, not v6.Ingo Schwarze
Facts checked by Kaspars Bankovskis using tuhs.org archives. The commit introducing the claim that it was in v6 (by Keith Bostic on June 9, 1993) does not cite any sources: http://svnweb.freebsd.org/csrg?view=revision&revision=62961
2014-12-10add missing sentence to RETURN VALUES; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10syncTheo de Raadt
2014-12-10The macros endtoken and isgood aren't used anywhere... zap them andTobias Stoeckmann
their data structures. ok jsg, millert
2014-12-10If default file descriptors (0, 1, 2) have to be assigned to /dev/null,Tobias Stoeckmann
don't accidentally assign 3, too. ok millert, with input by and ok bluhm
2014-12-10File descriptors are of type int, not short. While at it, adjust remainingTobias Stoeckmann
short to int too -- there are no space savings anymore, as stated by millert. ok bluhm, millert
2014-12-10use .Rv and simplify wording; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10use .Rv; no change of meaning; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10ssl3_init_finished_mac() calls BIO_new() which can fail since it in turnJoel Sing
calls malloc(). Instead of silently continuing on failure, check the return value of BIO_new() and propagate failure back to the caller for appropriate handling. ok bcook@
2014-12-10Remove support for GOST R 34.10-94 signature authentication, along withJoel Sing
the two ciphersuites that use it. GOST94 public/private keys have been long obsoleted and libcrypto does not have support for them anyway. Discussed with Dmitry Eremin-Solenikov.
2014-12-10retire shutdown hooks; ok deraadt, krwMike Belopuhov
2014-12-10Add ALPN support to openssl(1).Joel Sing
Based on OpenSSL.
2014-12-10Add regress for ALPN.Joel Sing
Based on OpenSSL.
2014-12-10libssl major++Joel Sing
2014-12-10Add support for ALPN.Joel Sing
Based on OpenSSL and BoringSSL. ok bcook@
2014-12-10add stdint.h to ssl.h.Brent Cook
ok jsing@
2014-12-10Add an unmute quirk for HP machines with the IDT 92HD75B1/2 codec.Jonathan Gray
From Alessandro DE LAURENZIS, who requires this to get sound out of the speakers on a Compaq 610 laptop. Other machines such as the HP Mini 1000 and HP Mini 5102 will likely benefit from this as well.
2014-12-10If pfctl cannot set a limit in the kernel, print the name of theAlexander Bluhm
limit and the requested value. OK henning@
2014-12-10Convert watchdog(4) devices to use autoconf(9) framework.Mike Belopuhov
ok deraadt, tests on glxpcib and ok mpi
2014-12-10Time to murder some smtpd's related XXXGiovanni Bechis
ok rpe@ deraadt@
2014-12-10implementation no longer updates every 10 seconds; from william orrJason McIntyre
ok mlarkin
2014-12-10no support for isapnp or eisa;Jason McIntyre
from alexey suslikov
2014-12-10Prefer .In and .Rv -stdPhilip Guenther
2014-12-10Improve the description and layout of the RUSAGE_* values, and do somePhilip Guenther
general cleanup diff from Kaspars Bankovskis (kaspars (at) bankovskis.net) ok and tweaks schwarze@, jmc@
2014-12-10syncTheo de Raadt
2014-12-10enable skgpio(4)Jonathan Gray
2014-12-10Add skgpio(4) a driver for the Soekris net6501 GPIO and LEDsJonathan Gray
from Matt Dainty.
2014-12-10Fix a potential integer overflow in pppd options file parsing.Jonathan Gray
From Paul Mackerras in 7658e8257183f062dc01f87969c140707c7e52cb This issue is CVE-2014-3158.
2014-12-10Some sort regress test fixes. cksum no longer supports -o2.Daniel Dickman
2014-12-10fix previous.Daniel Dickman
2014-12-10convert bcopy to memcpy. ok millertTed Unangst
2014-12-10Reusing the same field for different things in different contexts mayKenneth R Westerback
be clever, but it is definitely confusing. Use a flag IFI_VALID_LLADDR to indicate that the ifi->hw_address field is valid, rather than assuming ifi->linkstat does that. Add startup_time to record client startup rather than using first_sending and hoping nobody else needs it until link is complete.
2014-12-10better error value for invalid signature lengthDamien Miller
2014-12-10The consensus is that RTM_IFINFO messages do not always carry theKenneth R Westerback
latest information. So back off to using interface_status() to directly query the interface when link status is in question. Partly from Nathanael Rensen's original diff. Also, while waiting for initial link, keep checking every second rather than backing off to checking every (default) 60 seconds after (default) 10 seconds.
2014-12-09Xr and Ox fixes;Jason McIntyre
2014-12-09Fix division by zero for files with long lines (> 1024) in Plan B modeTobias Stoeckmann
by supporting arbitrarily long lines just like Plan A does. ok tedu
2014-12-09random seed buffer must be unsignedTheo de Raadt
2014-12-09Add pane_dead_status for exit status of dead panes.Nicholas Marriott
2014-12-09syncTheo de Raadt
2014-12-09Check strlcpy(), strlcat(), and snprintf() return values in sparc64 ofwboot.Stefan Sperling
tweak and ok millert@ miod@
2014-12-09Use memmove() instead of strlcpy() for an overlapping string copyTodd C. Miller
so we don't rely on undefined behavior. OK deraadt@
2014-12-09Catch up with the BPF_ALIGNMENT switch to the uint32_t.Mike Belopuhov
bpf aligns data following the datalink header (e.g. ethernet) on the BPF_ALIGNMENT boundary. Since rev1.41 of bpf.h it's uint32_t instead of a long. And also since then almost all packets become "unaligned" from the tcpdump perspective and require costly copies into the internal buffer. Neither IP header (struct ip) nor IPv6 (struct ip6_hdr) have fields larger than 32 bits and therefore alignment requirements for them are at most 32 bit. ok millert, jsg, deraadt
2014-12-09init crmsg to something so it doesn't crash on invalid wtmp files.Ted Unangst
from david higgs
2014-12-09put back some information what the character classes actually mean;Ingo Schwarze
while here, remove the lie that regex(3) character classes would depend on the locale; ok jmc@
2014-12-09avoid void arithmetic. from david carlierTed Unangst
2014-12-09LC_CTYPE has no effect on ctype(3), but on wctype(3); ok jmc@Ingo Schwarze
2014-12-09Like libc, also for the kernel: Import new amd64 assembly versions ofReyk Floeter
strchr/index, strrchr/rindex, and strlen that provide a significantly faster performance than our previous .c or .S implementations. Based on NetBSD's code. Tested with different amd64 CPUs. ok deraadt@ mikeb@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-03 16:37:05 +0000