summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-07-22add a regression testSebastian Benoit
2016-07-22"wpath" is needed in the parent pledge when using the /dev/switch0 device.Reyk Floeter
2016-07-22fix some cases where we relay_abort_http() the connection too soon.Sebastian Benoit
instead, pass a more specific error back and handle the errors in relay_test() instead. reported by Arto Jonsson and Hiltjo Posthuma, thanks! ok bluhm@ reyk@
2016-07-22Fix generated Perl headers.Reyk Floeter
With input from bluhm@
2016-07-22Fix a double rtfree(9) triggered when IPSEC inserts a more specificMartin Pieuchot
route because of PMTU. otto@ reported the issue and helped me tracking it down during more than one month, he is the man! mikeb@ figured out the bug was in the forwarding path. ok mikeb@, deraadt@, claudio@
2016-07-22improve wording; suggested by jmc@Damien Miller
2016-07-22Lower loglevel for "Authenticated with partial success" message similar toDarren Tucker
other similar level. bz#2599, patch from cgallek at gmail.com, ok markus@
2016-07-22constify a few functions' arguments; patch from Jakub Jelen bz#2581Damien Miller
2016-07-22move debug("%p", key) to before key is free'd; probable undefinedDamien Miller
behaviour on strict compilers; reported by Jakub Jelen bz#2581
2016-07-22reverse the order in which -J/JumpHost proxies are visited to beDamien Miller
more intuitive and document reported by and manpage bits naddy@
2016-07-21rework DESCRIPTION a little: no-command seems clearer than no-XXX;Jason McIntyre
2016-07-21rename NOTES to COMMON SYNTAX (explains itself better); rework theJason McIntyre
passphrase section a little; move the DER|PEM stuff in there to help avoid text repetition, and prefer the lowercase (less keys to press); adjust ENVIRONMENT to format a little more nicely;
2016-07-21strip back openssl crl somewhat: remove the examplesJason McIntyre
and move any relevant text into the main body;
2016-07-21Add basic support for OpenFlow 1.3 PACKET_IN+PACKET_OUT,Reyk Floeter
no FLOW_MOD yet.
2016-07-21zap trailing whitespace;Jason McIntyre
2016-07-21Remove a few debugging leftoversMike Belopuhov
2016-07-21Remove a fatal() in peer_up when the local addrs of a peer can't be figured out.Claudio Jeker
Instead bring the session down and wait for admin help. OK henning@, benno@, phessler@
2016-07-21Add AF_UNIX support to tcpbench and also make it possible to randomize theClaudio Jeker
write size in the client. pledge setup can be made tighter but that will be done in a second step. OK benno@, henning@, markus@ and some man page input by jmc@
2016-07-21Use explicit idiom when testing the result of strcmp() and strncmp().Kenneth R Westerback
i.e. == 0 and != 0 as appropriate. No intentional functional change. Suggested by & ok tom@
2016-07-21long to uint32_t portReyk Floeter
2016-07-21With uint32_t ports, we cannot sneak the port into an int anymoreReyk Floeter
2016-07-21Make rtwn(4) and urtwn(4) respect the RTS threshold set by net80211.Stefan Sperling
ok mpi@
2016-07-21Turn ofp*_debug functions into ofp*_validate functions to follow aReyk Floeter
similar approach like iked: first validate the packet, then parse it, and execute actions. debug logging is a side effect of validation.
2016-07-212004 privsep caused "tcpdump -r" to became a priviledged operation becauseTheo de Raadt
we felt chroot-containment was also necessary for off-line analysis. Today use of pledge "stdio" for the packet parser acts as an even better sandbox. We can therefore silently ignore chroot setup failure, and regain tcpdump -r support. Result of a discussion with tedu -- which probably happened because we became aware of the laughable retarded -Z option in upstream tcpdump. ok tedu sthen guenther stsp
2016-07-21set and clear the 10baseT bit in statchgJonathan Gray
ok patrick@
2016-07-21Skip passwords longer than 1k in length so clients can't easily DoS sshdDarren Tucker
by sending very long passwords, causing it to spend CPU hashing them. feedback djm@, ok markus@. Brought to our attention by tomas.kuthan at oracle.com, shilei-c at 360.cn and coredump at autistici.org
2016-07-20fix typos in commentsReyk Floeter
2016-07-20pledge switchctlReyk Floeter
2016-07-20pledge(2) all the switchd processes.Reyk Floeter
2016-07-20Plug potential leak of device list.Kenneth R Westerback
Problem found by Michael McConville. Tested & ok stsp@
2016-07-20s/sudo/doas/Sebastian Benoit
2016-07-20Handle ports as uint32_t instead of in_port_t: OpenFlow 1.0 used 16bitReyk Floeter
ports, but later versions switched to 32bit ports (for the case that a virtual switch has more than 65535 switch ports, of course).
2016-07-20Parse and print OpenFlow 1.3 PACKET_IN and OXM (Openflow eXtended Match) -Reyk Floeter
no action yet.
2016-07-20To tune the TCP SYN cache we need more information. Print theAlexander Bluhm
relevant counters with netstat -s -p tcp. OK henning@
2016-07-20Use more compact idiom to select architecture dependent files to compile. NoKenneth R Westerback
intentional functional change. Diff from Miod. ok millert@ deraadt@
2016-07-20Shrink priv_write_file() API so that it does less, and the callers askTheo de Raadt
it to do less. Discussion with guenther. ok krw
2016-07-20As a general rule, fchown before fchmod is a safer order (because manyTheo de Raadt
systems throw away bits upon chown). Not in this case, but code gets copied.. ok krw
2016-07-20Split in6_selectsrc() into a low-level part and a pcb-level part, andVincent Gross
convert in_selectsrc() prototype to match. Ok bluhm@ mpi@.
2016-07-20Disable the beacon filter in iwm(4). This allows beacons to pass through toStefan Sperling
the stack while associated, which in turn makes it possible to keep track of HT protection changes. ok mpi@
2016-07-20Make the iwn(4) LED flash 10 times slower in monitor mode.Stefan Sperling
Makes running monitor mode over extended periods of time much less annoying. ok benno@
2016-07-20In net80211, enable RTS for frames above a particular size (currently 512Stefan Sperling
bytes). This is what other OS have been doing for years. In our stack this feature was present but disabled at compile-time by an #ifdef. This is a low risk change because drivers were already required to use RTS whenever the AP set the USE_PROTECTION flag in ERP elements of its beacons. This change allows for reasonable throughput on loaded 11g networks whereas before they were practically unusable. tests and ok phessler@
2016-07-20strip back openssl ciphers:Jason McIntyre
- rearrange the descriptions of -V and -v to read more logically - move the cipherlist text into the cipherlist description - zap examples
2016-07-20Update OpenFlow 1.3 stub based on the 1.0 code.Reyk Floeter
2016-07-20Fix dependencies of generated map files.Reyk Floeter
2016-07-20tag_signal() is dead; from LLVM via Christos ZoulasIngo Schwarze
2016-07-20When parsing the configuration. initialize the auth structureReyk Floeter
correctly, as parse.y's $$ is not zero-initialized. Found by Rene Ammerlaan OK markus@ florian@
2016-07-20Add a -n flag to check the configuration and exit. Matches what almostJonathan Gray
all the other daemons do. ok reyk@
2016-07-20Do not clobber the global jump_host variables when parsing an inactiveChristian Weisgerber
configuration. ok djm@
2016-07-20Bring iwn_update_htprot() back, so iwn(4) will properly keep trackStefan Sperling
of HT protection changes while associated. HT protection affects behaviour on Tx but is configured along with Rx settings (because Intel likes it that way). And our previous iwn_update_htprot() implementation had a bug where it would accidentally clear bits which enable CCK rates for Rx. The Intel Wireless-N 2200 chip accordingly stopped receiving some frames (most notably broadcast frames) and the link broke down. Also, restore the power-saving level after updating the Rx config (like Linux does), and add some DELAYs for good measure to ensure the firmware has time to process asynchronous commands we send. tested by myself and mlarkin@ ok mlarkin@
2016-07-20Unbreak ural(4), which had been dropping frames on Tx whileStefan Sperling
the IFF_RUNNING flag was set since last November (r1.138). Apparently nobody is using this driver, except for martijn@. Fix tested by martijn@ and myself. ok dlg@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-05 02:51:59 +0000