summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-09-02Remove the GF(2**n) math test since isakmpd has been switchedMike Belopuhov
to using D-H functions from libcrypto more than 6 years ago.
2016-09-02Remove the GF(2**n) math test since isakmpd has been switchedMike Belopuhov
to using D-H functions from libcrypto more than 6 years ago.
2016-09-02Remove the GF(2**n) math test since isakmpd has been switchedMike Belopuhov
to using D-H functions from libcrypto more than 6 years ago.
2016-09-02The policy field in struct iwm_time_event_cmd_v2 is just a 16bit integer,Stefan Sperling
so we should use htole16() when setting it, instead of htole32(). Patch by Imre Vadasz ok natano@
2016-09-02Fix off-by-one error in the IWM_NUM_UCODE_TLV_CAPA range check.Stefan Sperling
Patch by Imre Vadasz
2016-09-02Although this doesn't seem to cause any issue at the moment, using anStefan Sperling
enum type in a __packed struct should be avoided. Patch by Imre Vadasz
2016-09-02The iwm_poll_bit() function in iwm(4) returns 1 on success, and 0 on failure.Stefan Sperling
So instead of "if (ret < 0) {" we should check for "if (!ret) {". Patch by Imre Vadasz
2016-09-02The struct iwm_rbuf definition, and the wantresp field in structStefan Sperling
iwm_rx_data aren't used anywhere and can be removed. Patch by Imre Vadasz
2016-09-02Kill 'ifi' global.Martin Pieuchot
ok henning@, krw@
2016-09-02Fix the begin of word issue in vi(1).Martijn van Duren
Similar fix went in sed and ed. Feedback and OK schwarze@
2016-09-02Simplify shutdown process.Renato Westphal
On shutdown, there's no need to use kill(2) to kill the child processes. Just closing the IPC sockets will make the children receive an EOF, break out from the event loop and then exit. Tha advantages of this "pipe teardown" are: * simpler code; * no need to pledge "proc" in the parent process; * removal of a (hard to trigger) PID reuse race condition. "reads good" claudio@
2016-09-02warn on use of deprecated EVP functionsBrent Cook
This adds a linker warning for EVP_EncryptFinal(), EVP_DecryptFinal(), EVP_CipherFinal(), and documents the recent behavior updates. ok beck@
2016-09-02Close connections when msgbuf_write() returns 0.Renato Westphal
Pulled from ospfd. Original author: claudio@ ok rzalamena@ benno@ claudio@
2016-09-02missing space after commaTheo Buehler
ok bcook
2016-09-02Don't fatal if the imsg pipe is closed, this is often triggered in theRenato Westphal
parent and hides the real cause of the termination. Pulled from ospfd. Original author: claudio@ ok rzalamena@ benno@ claudio@
2016-09-02BN_mod_exp_mont_consttime: check for zero modulus.Brent Cook
Don't dereference d when top is zero. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03 ok jsing@
2016-09-02Wording improvment from jmc@ long time ago.Florian Obser
(When I tried to sync the -H flag to ping)
2016-09-02move more code into createsig. callers just pass seckey filename.Ted Unangst
2016-09-02Make it clear that printable characters of width 0 exist.Ingo Schwarze
While here, polish some wording. OK stsp@
2016-09-02Since we support only one non-ASCII LC_CTYPE locale, we don't needIngo Schwarze
a linked list to store it. No functional change. OK mpi@ guenther@, and stsp@ agrees too that the time is ripe to start such cleanup
2016-09-02split the sign() function into two, with a pure memory core madeTed Unangst
available as a separate function to make it easier to reuse in other code.
2016-09-02Remove old RSA key generation and verification test as it's done nowMike Belopuhov
by LibreSSL regress tests; checked with bcook@
2016-09-02Split "struct relayd" into two structs: "struct relayd" and "structReyk Floeter
relayd_config". This way we can send all the relevant global configuration to the children, not just the flags and the opts. With input from and OK claudio@ benno@
2016-09-02proc_id has been replaced by ps->ps_instance.Reyk Floeter
OK claudio@
2016-09-02style cleanup: sort headers; group and sort variables; no parens forTheo Buehler
return; sort getopt string and corresponding switch; and some more tedious stuff ok martijn
2016-09-02Bring over 1.117 from ping:Florian Obser
---------------------------------------------------------------- Only read time information from the received packet if it is big enough. OK deraadt@ ---------------------------------------------------------------- And with this summary() is in sync between ping and ping6.
2016-09-02timinginfo is a flag to track if the received icmp packet is bigFlorian Obser
enough to carry timing information. Do not treat it as a counter as it could overflow.
2016-09-02Reduce ping/ping6 difference in summary().Florian Obser
No functional change.
2016-09-02work on making log.c similar in all daemons:Sebastian Benoit
move daemon-local functions into new logmsg.c, and reduce the (mostly whitespace) differences so that log.c's can be diffed easily. ok claudio@, feedback from henning@, deraadt@, reyk@
2016-09-02work on making log.c similar in all daemons:Sebastian Benoit
move daemon-local functions into new logmsg.c, and reduce the (mostly whitespace) differences so that log.c's can be diffed easily. ok claudio@, feedback from henning@, deraadt@, reyk@
2016-09-02work on making log.c similar in all daemons:Sebastian Benoit
move daemon-local functions into new logmsg.c, and reduce the (mostly whitespace) differences so that log.c's can be diffed easily. ok claudio@, feedback from henning@, deraadt@, reyk@
2016-09-02When "makewhatis -d" tries to add to a database that doesn't (yet) exist,Ingo Schwarze
silently create it from scratch instead of printing a warning. The annoying warning message was reported by ajacoutot@, and espie@ convincingly argues that a non-existing database can be considered equivalent to an empty one.
2016-09-02work on making log.c similar in all daemons:Sebastian Benoit
move daemon-local functions into new logmsg.c, and reduce the (mostly whitespace) differences so that log.c's can be diffed easily. ok claudio@, feedback from henning@, deraadt@, reyk@
2016-09-02work on making log.c similar in all daemons:Sebastian Benoit
move daemon-local functions into new logmsg.c, and reduce the (mostly whitespace) differences so that log.c's can be diffed easily. ok claudio@, feedback from henning@, deraadt@, reyk@
2016-09-02Remove unused argument in aml_showvalue().Paul Irofti
The second argument of aml_showvalue() was probably supposed to set the verbosity level through dnprintf() but in fact it does nothing. OK deraadt@
2016-09-02in6_selectroute should never get a valid struct route * filled with somethingVincent Gross
else than AF_INET6. Ok florian@
2016-09-02use imsg_read_nofd() implementation from bgpd.Eric Faurot
let the caller handle EAGAIN. ok gilles@
2016-09-02Remove old pod docs that are not used or installedBob Beck
2016-09-02use imsg_read_nofd() implementation from bgpd.Eric Faurot
let the caller handle EAGAIN. ok reyk@ gilles@
2016-09-02After allocating a single 64 KB mbuf cluster in sosend(), the sendingAlexander Bluhm
socket buffer had no space anymore. The default mbuf space limit was only 32 KB. So no more data from user-land was accepted. As tcp_output() keeps the mbuf cluster for retransmits, it will be freed only after all ACKs have been received. That has killed our TCP send performance totally. To allow cycling through the mbufs periodically, we need space for at least 3 of them. Reported by Andreas Bartelt; testing with mikeb@; OK mikeb@ claudio@
2016-09-02As done in httpd, (re-)initialize ps_what in all processes. This isReyk Floeter
no functional change at this point.
2016-09-02Fix misleading 'No valid MBR or GPT' message when no OpenBSD area is found.Paul Irofti
The current code is too strict and checks for an OpenBSD area inside an MBR or GPT and if it fails to find one reports that there's no valid MBR or GPT (which is misleading because the MBR/GPT is valid). Instead, do two checks (similar to i386): first see if there's an MBR or GPT present on the disk and if there is then check for the OpenBSD area. OK krw@, halex@.
2016-09-02move links from http to https://www.openbsd.org/Theo Buehler
ok beck
2016-09-02style nit as done in httpdReyk Floeter
2016-09-02As done in httpd, remove ps_ninstances and p_instance.Reyk Floeter
OK benno@ rzalamena@
2016-09-02backout accidental commitTheo de Raadt
2016-09-02Make build deterministic by not randomizing the datfiles themselves,Theo Buehler
random lines are selected on output and that's enough. From daniel, ok tb
2016-09-02Terminate relayd using the socket status instead of watching SIGCHLDReyk Floeter
or killing child processes. - Based on rzalamena@'s diff for httpd. OK deraadt@ rzalamena@
2016-09-02Consider when a prefix expires when sending solicitations instead ofFlorian Obser
blindly always sending one every 60 seconds. repeated prodding & input naddy input & OK vgross
2016-09-02Make build deterministic by removing a line that records the date ofTheo Buehler
generation. From daniel, ok tb