summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-01-31LibreSSL : regress for carry bug in mulx4x_mont and sqr8x_montKinichiro Inoguchi
This regress bntest.c patch is originally from master branch of OpenSSL. - dca2e0e test/bntest.c: regression test for CVE-2016-7055. - 3e7a496 test/bntest.c: regression test for carry bug in bn_sqr8x_internal. These tests were added for these commit. - 2fac86d bn/asm/x86_64-mont.pl: fix for CVE-2016-7055 (Low severity). - 3f4bcf5 bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal. ok beck@
2017-01-31LibreSSL : Truncated packet could crash via OOB readKinichiro Inoguchi
This patch is originally from master branch of OpenSSL. - 2198b3a crypto/evp: harden AEAD ciphers. - 8e20499 crypto/evp: harden RC4_MD5 cipher. ok tom@
2017-01-31The variable clt_done is used in too many places.Reyk Floeter
Introduce a new variable clt_headersdone in the async HTTP parser. OK sunil@ benno@
2017-01-31Do not set EVBUFFER_EOF on read/write errors and handle EOF correctly.Reyk Floeter
Either libevent or the TLS callback can trigger an EOF when the connection is closed. OK sunil@ jung@ benno@
2017-01-31Issue a pause instruction in the busy-wait loop on SP kernels as wellMike Belopuhov
2017-01-31Remove the inifioctl hack, checking for an unheld NET_LOCK() inMartin Pieuchot
tsleep(9) & friends seem to only produce false positives and cannot be easily disabled.
2017-01-31In a comment inside ieee80211_up_to_ac(), update a reference sectionStefan Sperling
number from the 802.11-2007 standard to the 802.11-2012 standard.
2017-01-31Use CTASSERT instead of KASSERT for a few sysctl that use the counters APIJeremie Courreges-Anglas
ok dlg@ mpi@
2017-01-31Update the struct iwm_scan_results_notif to FW Api version 3, and removeStefan Sperling
the unused enum iwm_scan_complete_status status codes. This corresponds to parts of the Linux iwlwifi commits 1083fd7391e989be52022f0f338e9dadc048b063 and 75118fdb63496e4611ab50380499ddd62b9de69f. No functional change, since struct iwm_scan_results_notif isn't accessed in iwm at the moment. Patch by Imre Vadasz.
2017-01-31Fix creation of the library name, as assigning a string to a StringRefPatrick Wildt
seems to cause bad behaviour. Instead call toStringRef() and use its return value. ok tom@
2017-01-31When telling clients which EDCA parameters to use, copy these parametersStefan Sperling
from the client parameter set, rather than from the AP parameter set. ok mpi@
2017-01-31Clean up code in rtwn(4)/urtwn(4) which handles EDCA parameters:Stefan Sperling
Get EDCA params from net80211 instead of hardcoding them. Enable hardware management of EDCA AC queues. Handling of frame collisions with EDCA involves random backoffs. I found a register that looks like a seed for the pseudo-RNG involved in computing backoffs. Feed it with arc4random() during initialization. Add a comment to hint at the meaning of numbers written to SIFS registers, and rename some SIFS registers to better names found in Linux. ok mpi@
2017-01-31Protect <sys/atomic.h> with #ifdef _KERNEL. This unbreaks userlandVisa Hankala
build on m88k, where the compiler has no notion of atomic built-ins. Suggested by miod@ OK mpi@
2017-01-31Use the sizeof operator on a struct not a pointer to one.Jonathan Gray
ok rzalamena@
2017-01-31Document functions returning standard moduli for DH key exchange.Ingo Schwarze
jsing@ confirmed that these are public and worth documenting.
2017-01-30Small correction to the known_hosts section on when it is updated.Darren Tucker
Patch from lkppo at free.fr some time ago, pointed out by smallm at sdf.org
2017-01-30Make urtwn(4) run slot time updates from a USB task.Stefan Sperling
Fixes 'usbd_do_request: not in process context' warnings introduced recently. Fix reported and confirmed by Mikhail aka mp39590 aka misha
2017-01-30When a flag option is used in a format, it should use the number formNicholas Marriott
not string.
2017-01-30Fix TLS tests. Keys and log files are now in obj, not in obj/htdocsReyk Floeter
2017-01-30Rework fill mode handling for -man -Thtml.Ingo Schwarze
Basically, open <pre> whenever printing text in no-fill mode and it is not already open, and close it whenever printing something that cannot be inside <pre>. This fixes a crash reported by Michael <Stapelberg at debian dot org> in the French Linux chroot(2) manual and also improves rendering for OpenBSD pages like DPMSGetTimeouts(3) and GLwDrawingArea(3). These changes also permitted retiring struct mhtml.
2017-01-30Adjust CLEANFILES for new httpd rootReyk Floeter
2017-01-30Enable ieee80211_edca_table, which was under #if 0. This table can be usedStefan Sperling
by drivers to pass default EDCA parameters to firmware instead of passing local hardcoded values. ok millert@
2017-01-30unbreak httpd regress tests after wobj changeReyk Floeter
Previously, the tests used the obj dir as the httpd chroot/root. But the www user cannot access any files since we switched obj to 0750. The fix is to create another 0755 subdirectory obj/htdocs as the root.
2017-01-30whitespace, from bluhm@Sebastian Benoit
2017-01-30Make rtwn(4) and urtwn(4) tell the hardware about short preamble andStefan Sperling
short slot time settings. ok mpi@
2017-01-30removes the pf_consistency_lock and protects the users withSebastian Benoit
NET_LOCK(). pfioctl() will need the NET_LOCK() anyway. So better keep things simple until we're going to redesign PF for a MP world. fixes the crash reported by Kaya Saman. ok mpi@, bluhm@
2017-01-30Mention MODGO_LDFLAGS.Antoine Jacoutot
2017-01-30Fix size passed to free(9)Jeremie Courreges-Anglas
ok tb@ stsp@
2017-01-30Drop empty line.Antoine Jacoutot
2017-01-30syncTheo Buehler
2017-01-30Stop athn(4) 11n hostap from applying HT protection to non-11n clients.Stefan Sperling
The driver was checking the wrong flag by mistake. ok phessler@ mpi@
2017-01-30Fix error path of range requests, found while reviewing byte range support.Reyk Floeter
OK jsg@
2017-01-30Prevent athn(4) from using RTS for non-data frames.Stefan Sperling
ok mpi@
2017-01-30tweak previous;Jason McIntyre
2017-01-30Sync md sets for arm64, continuing to omit the parts that need to moveJonathan Gray
out of mi for now.
2017-01-30build mkuboot on arm64Jonathan Gray
2017-01-30fully unbreak: some $SSH invocations did not have -F specified andDamien Miller
could pick up the ~/.ssh/config of the user running the tests
2017-01-30Fix ELF64_R_TYPE(reloc->r_info) to have the same type on mips64lePhilip Guenther
as on other LP64 archs, __uint64_t, so that printf-like functions don't require extra casting...then eliminate the extra cast in ld.so/mips64/rtld_machine.c discussed with miod ok visa@
2017-01-30partially unbreak: was not specifying hostname on some $SSH invocationsDamien Miller
2017-01-30Document BN_set_flags(3) and BN_get_flags(3).Ingo Schwarze
jsing@ confirmed that these macros are public and worth documenting.
2017-01-30revise keys/principals command hang fix (bz#2655) to consume entireDamien Miller
output, avoiding sending SIGPIPE to subprocesses early; ok dtucker@
2017-01-30small cleanup post SSHv1 removal:Damien Miller
remove SSHv1-isms in commented examples reorder token table to group deprecated and compile-time conditional tokens better fix config dumping code for some compile-time conditional options that weren't being correctly skipped (SSHv1 and PKCS#11)
2017-01-30some explicit NULL tests when dumping configured forwardings;Damien Miller
from Karsten Weiss
2017-01-30misplaced braces in test; from Karsten WeissDamien Miller
2017-01-30don't dereference authctxt before testing != NULL, it causes compilersDamien Miller
to make assumptions; from Karsten Weiss
2017-01-29Seriously warn against calling BN_init(3), BN_MONT_CTX_init(3),Ingo Schwarze
and BN_RECP_CTX_init(3). They are not only deprecated but so dangerous that they are almost unusable. I found these scary traps while reading the code in order to document BN_set_flags(3). While here, delete ERR_get_error(3) from SEE ALSO.
2017-01-29remove unused variablesCharles Longeau
ok krw@ guenther@
2017-01-29Add -n to break-pane.Nicholas Marriott
2017-01-29remove pesky blank line: sorry for not spotting this in previous;Jason McIntyre
2017-01-29Fix typo in ~C error message for bad port forward cancellation.Darren Tucker
bz#2672, from Brad Marshall via Colin Watson and Ubuntu's bugtracker.