summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-01-06syncTheo de Raadt
2017-01-06show a useful error message when included config files can't beDamien Miller
opened; bz#2653, ok dtucker@
2017-01-06Delete a cross reference to the non-existent manual page BIO_set_flags(3),Ingo Schwarze
reported by jmc@. Documenting that function would be a bad idea. All other flags are used internally and should better not be tampered with. It looks like an internal function that was made public by mistake, then abused for an unrelated user interface purpose: a classic case of botched user interface design. Instead, only show how to use this function for this one specific purpose. While here, delete a sentence from the DESCRIPTION that merely duplicated content from the BUGS section.
2017-01-06sshd_config is documented to set GSSAPIStrictAcceptorCheck=yes byDamien Miller
default, so actually make it do this. bz#2637 ok dtucker
2017-01-06Avoid confusing error message when attempting to use ssh-keyscan builtDamien Miller
without SSH protocol v.1 to scan for v.1 keys; bz#2583
2017-01-06Delete a sentence that attempted to explain an implementation detailIngo Schwarze
by referencing a non-existent manual page. Broken .Xr reported by jmc@.
2017-01-06use correct ssh-add program; bz#2654, from Colin WatsonDamien Miller
2017-01-06fix typos in cross references reported by jmc@Ingo Schwarze
2017-01-06Delete bogus cross reference reported by jmc@.Ingo Schwarze
Documenting these trivial PKCS7_type_is_*() macros does not seem useful, at least not right now.
2017-01-06Re-add '%k' token for AuthorizedKeysCommand which was lost during theDarren Tucker
re-org in rev 1.235. bz#2656, from jboning at gmail.com.
2017-01-06delete bogus cross references reported by jmc@Ingo Schwarze
and add some missing escaping of backslashes while here
2017-01-06Account for timeouts in the integrity tests as failures.Darren Tucker
If the first test in a series for a given MAC happens to modify the low bytes of a packet length, then ssh will time out and this will be interpreted as a test failure. Patch from cjwatson at debian.org via bz#2658.
2017-01-06Make forwarding test less racy by using unix domain sockets instead ofDarren Tucker
TCP ports where possible. Patch from cjwatson at debian.org via bz#2659.
2017-01-06sort options list; the same as jmc@ did in man.1 rev. 1.18Ingo Schwarze
2017-01-06there is no longer a need to ifdef __armv7__ armv6 rev instructionsJonathan Gray
2017-01-06tweak previous;Jason McIntyre
2017-01-06unifdef CPU_ARMv7 and ARM_ARCH_7Jonathan Gray
ok kettenis@ patrick@
2017-01-05Also document the weird d2i_ASN1_UINTEGER(3), listed in <openssl/asn1.h>Ingo Schwarze
and in OpenSSL doc/man3/d2i_X509.pod (with wrong prototype).
2017-01-05Write new d2i_ASN1_OCTET_STRING(3) manual page from scratch.Ingo Schwarze
All 36 functions listed in <openssl/asn1.h> and in OpenSSL doc/man3/d2i_X509.pod, six of them with wrong prototypes.
2017-01-05Pass value as input instead of output register, otherwise we writePatrick Wildt
garbage into the control register. While there remove positional argument leftover from the 32-bit version.
2017-01-05Build with -fno-builtin to keep clang from optimizing the _dl_memset()Christian Weisgerber
and _dl_bcopy() functions into calls to memset() and memcpy(). ok kettenis@
2017-01-05Document cargo module.Daniel Jakots
Joint work with semarie, rewording from sthen@, tweaks from jmc@. ok sthen@, jmc@, semarie (cargo maintainer)
2017-01-05Now that all non-ARMv7 platforms are gone, tedu the legacy atomicPatrick Wildt
locking code. ok kettenis@
2017-01-05Complete idle PCB allocation for secondary processors so that it makesPatrick Wildt
sense and builds as part of an MP kernel. ok kettenis@ mpi@
2017-01-05Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with moreKenneth R Westerback
modern TAILQ_FOREACH_SAFE(). No intentional functional change. ok millert@ bluhm@ gilles@
2017-01-05Avoid a side-channel cache-timing attack that can leak the ECDSA privateJoel Sing
keys when signing. This is due to BN_mod_inverse() being used without the constant time flag being set. This issue was reported by Cesar Pereida Garcia and Billy Brumley (Tampere University of Technology). The fix was developed by Cesar Pereida Garcia.
2017-01-05Checking whether mbuf list is empty is done by the if_input nowMike Belopuhov
2017-01-05Microsoft has allocated us a SubID that we can use to identify OpenBSDMike Belopuhov
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
with more modern TAILQ_FOREACH(). This what symget() was already doing. Add paranoia '{}' around body of symget()'s TAILQ_FOREACH(). No intentional functional change. ok bluhm@ otto@
2017-01-05Remove some unnecessary code abstractions and while here remove aRafael Zalamena
splsoftnet. ok mikeb@
2017-01-05Don't let producer index become equal with the consumer when writingMike Belopuhov
A nod to the re.c commit by dlg@, perhaps pure paranoia, but works nevertheless. While here replace a more expensive modulo operation with a subtraction.
2017-01-05Fix boot(8) crashing on some amd64 machines when booting from softraid crypto.Stefan Sperling
Allocate a 4k temp buffer on the heap instead of the stack. Problem was introduced in arch/amd64/stand/libsa/softraid_amd64.c r1.3. Reported by Andreas Bartelt on bugs@ ok krw@ kettenis@ yasuoka@
2017-01-05syncStuart Henderson
2017-01-05sort options list;Jason McIntyre
2017-01-05Highlight all occurrences of search string after searching in copy mode.Nicholas Marriott
2017-01-05minor tweaks;Jason McIntyre
2017-01-05Complete rewrite, documenting 16 additional constructor/destructor pairs.Ingo Schwarze
While OpenSSL does not document them, they are public in <openssl/asn1.h>, and OpenSSL does document the related decoders and encoders. It makes no sense to me to document object methods without documenting the public constructors as well. While here: Bugfix: The type assigned by ASN1_STRING_new() was wrong. Remove implementation details. Add small amounts of useful auxiliary information.
2017-01-05syncTheo de Raadt
2017-01-04Convert ARM assembly to unified syntax. Clang demands it, binutilsPatrick Wildt
supports it as long as it's marked as unified syntax. ok bcook@ kettenis@
2017-01-04Write new d2i_ASN1_SEQUENCE_ANY(3) manual page from scratch.Ingo Schwarze
All four functions are listed in <openssl/asn1.h> and in OpenSSL doc/man3/d2i_X509.pod. Note that in the OpenSSL documentation, three of the four prototypes are incorrect.
2017-01-04With clang as cross-compiler we need to tell it where our crossPatrick Wildt
directory is so that the correct include and library paths are used. For this we create a simple wrapper that calls clang in the correct mode and also passes the sysroot. ok kettenis@
2017-01-04With clang as cross-compiler we need to make it pass the library pathPatrick Wildt
to our linker. Additionally, we need to make sure the library path is prefixed with the cross directory, which is sysroot. ok kettenis@
2012-10-13import OpenSSL-1.0.1cDamien Miller
2017-01-04Remove superfluous datatype that is 32 by default. Clang complainsPatrick Wildt
about it and it's ok to remove it. This only came up as our clang is targeted at armv7 which enables the NEON instructions. ok kettenis@
2017-01-04Avoid an out of bounds read when the environment variable LESSBINFMTTodd C. Miller
is set to "*". Patch from Tobias Stoeckmann. OK tb@
2017-01-04Fix a crash when "sort -m" is given no files. From Julien Ramseier.Todd C. Miller
2017-01-04Remove unnecessary casts of 'a' to char * since 'a' is already char *.Todd C. Miller
This is a remnant from the original 4.4BSD code that had 'a' as void * in the function args. No binary change. OK bluhm@
2017-01-04Support https for the url to the autopartitioning template forRobert Peichaer
disklabel on platforms that have tls enabled ftp(1) including error handling in case ftp(1) doesn't have it. OK tb@ halex@
2017-01-04Enforce https for connections to ftplist.cgi and ftpinstall.cgi onRobert Peichaer
platforms that have tls enabled ftp(1). OK tb@
2017-01-04As noticed by bluhm@ the netlock is required for the multicast cleanupMike Belopuhov
While here, remove unnecessary splnet's. ok mpi