summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-10-26I broke base images with my previous commit by missing a line.Reyk Floeter
The disk path wasn't updated so vmd tried to open the derived disk image for each base over and over again. OK ori@ mlarkin@
2018-10-26Use proper type in sizeof()Claudio Jeker
OK phessler@
2018-10-26show what went wrong with a unix domain socket, rather than fail silentlyDavid Gwynne
handy if you type the path wrong or don't have permission... ok deraadt@
2018-10-26When walking the list of ribs use continue instead of break after theClaudio Jeker
rib_valid() check. The list of ribs can have holes. OK benno@
2018-10-26Unveil should work because this only opens the configuration file,Theo de Raadt
and re-exec's itself. That locks the pledge 'exec' nicely.
2018-10-26regenMike Larkin
2018-10-26Add VirtualBox NVMeMike Larkin
From Andrew Daugherity
2018-10-26syncKevin Lo
2018-10-26Fix entry for Realtek RTL8723BE, from Stuart Shillington.Kevin Lo
2018-10-26mention ssh-ed25519-cert-v01@openssh.com in list of cert key typeDamien Miller
at start of doc
2018-10-25New mesa uses the I915_MMAP_WC flag which we advertise but don't actuallyMark Kettenis
implement. Knock out the I915_PARAM_MMAP_VERSION parameter that advertises this flag until we actually implement it. Fixes GPU hangs on GM45 chipset graphics. ok deraadt@
2018-10-25The compilers already put static arrays in .rodata when not written to;Philip Guenther
marking them const will keep a source change from silently moving them back to .data ok deraadt@ kettenis@
2018-10-25Calculate ASPATH_HEADER_SIZE correctly by using offsetof() instead of theClaudio Jeker
sizeof calculation that did not respect possible padding bytes. OK sthen@ denis@
2018-10-25Fix a resource leak in doaccept().Visa Hankala
If a connection that is being accepted gets aborted early, or if the user-supplied buffer is invalid, doaccept() leaks a socket. This is a regression caused by r1.153 of uipc_syscalls.c. Correct the issue by associating the socket with the file early enough. In case soaccept() or copyaddrout() fails, the socket will be freed as a result of the file closing. This logic was used by the pre-r1.153 code. closef() may block, so it is hoisted outside the fdp lock. OK bluhm@ mpi@
2018-10-25Add a "terminal" colour which can be used instead of "default" in styleNicholas Marriott
options for the terminal default colour, bypassing any inheritance from other options. Prompted by a discussion with abieber@.
2018-10-25tweak description to conform to reality.Marc Espie
2018-10-25add target fix-permissionssolene
enhance PORTS_PRIVSEP documentation ok espie@
2018-10-25When spamd(8) runs in greylist mode in the parent process (which runsRicardo Mestre
greywatcher()) we know that the only files that it will ever access are PATH_SPAMD_DB in rw mode, alloweddomains_file in r and that it will need to execute PATH_PFCTL so we can unveil(2) them with those permissions. OK deraadt@ millert@ beck@
2018-10-25The only file that spamlogd(8) needs to access after calling pledge(2) isRicardo Mestre
PATH_SPAMD_DB, so unveil(2) it with O_RDWR permissions. OK millert@ beck@
2018-10-25unveil(2) the following files for passwd(1) with their correspondingRicardo Mestre
permissions: _PATH_MASTERPASSWD_LOCK - write/create permissions _PATH_MASTERPASSWD - read permission _PATH_BSHELL - execute permission (required since we might need to spawn an external passwordcheck program if defined in /etc/login.conf) _PATH_PWD_MKDB - execute permission OK millert@ deraadt@
2018-10-25Implement the \f(CW and \f(CR (constant width font) escape sequencesIngo Schwarze
for HTML output. Somewhat relevant because pod2man(1) relies on this. Missing feature reported by Pali dot Rohar at gmail dot com. Note that constant width font was already correctly selected before this when required by semantic markup. Only attempting physical markup with the low-level escape sequence was ineffective.
2018-10-25start both the sc_ka_send and sc_ka_hold timeout whenDavid Gwynne
the timeout gets configured instead of gre_up(). this avoids complex gre_ioctl() ordering rules and enables the sc_ka_hold timeout before the first packet is received. from markus@
2018-10-24Generate __data_start symbol that marks the start of .data when __data_startMark Kettenis
is referenced from code being linked. ok deraadt@, naddy@, guenther@
2018-10-24missing headerGilles Chehade
2017-01-14Import LLVM 3.9.1 including clang and lld.Patrick Wildt
2018-10-24replace EFTYPE with EINVAL which is a both a better errno AND more portableGilles Chehade
ok eric@
2018-10-24Sync with major bumps and header removal.Joel Sing
2018-10-24Bump libcrypto/libssl/libtls majors due to symbol removals (libcrypto)Joel Sing
and changes to struct visibility/sizes (libssl).
2018-10-24As per advice from claudio@, further restrict the pledge in switchctl(8).akoshibe
Only stdio is needed when running the 'show *' commands. Everything else is only needed while parsing args and opening sockets. OK claudio@ deraadt@ phessler@
2018-10-24Make more of libssl's record layer state internal.Joel Sing
In January 2017, we changed large amounts of libssl's data structures to be non-visible/internal, however intentionally left things that the software ecosystem was needing to use. The four or so applications that reached into libssl for record layer related state now implement alternative code. As such, make these data structures internal. ok tb@
2018-10-24Remove a GOST data symbol that should not be exported.Joel Sing
2018-10-24Remove a bunch of ancient and highly crufty ASN.1 related code fromJoel Sing
libcrypto (the "new" stuff replaced this back around 2000 or so...). ok tb@
2018-10-24Remove stack related macros that should have been nuked whenJoel Sing
{CMS,KRB5,SRP} were removed.
2018-10-24Size static array correctly for the numerically highest index used toChristian Weisgerber
access it. ok deraadt@ kettenis@
2018-10-24add 'show ip bgp ovs' and 'show ip bgp ext-community' commandsdenis
OK sthen@
2018-10-24fix show ip bgp out/indenis
Update usage message and add missing "neighbor" argument. OK benno@
2018-10-24Major refactoring of the RIB handling code. Mainly change how the RIB isClaudio Jeker
walked. rib_dump_r() is now an internal function and instead the code gets an additional callback for throttling the rib_dump code. This removes a lot of similar code used to make sure the RDE is not walking to fast and replaces it with simpler callbacks. The other big change is the removal of struct rib pointers in other data structures. The rib pointers are not stable because of a realloc() call happening when extending the array so instead use the RIB ID as a reference. Tested and OK denis@ and benno@
2018-10-24Pass down the right nexthop to rde_dump_rib_as() so that dumping theClaudio Jeker
Adj-RIB-Out prints the right (modified) nexthop. Found by Marko Cupac. OK benno@
2018-10-24Fix some minor issues found by coverity.Martijn van Duren
OK millert@ and miko@
2018-10-24Fix qcow2 disk images for data sizes greater than 4 gigs.ori
We used to truncate the disk end by anding it with a 32 bit value. The 32 bit value was not sign extended, which causes the disk size to wrap at 4 gigabytes: disk->end = (disk->end + disk->clustersz - 1) & ~(disk->clustersz - 1); This change converts the clustersz to an off_t in order to remove the class of errors by avoiding type conversions entirely.
2018-10-23The ctags(1) file format uses whitespace as a field delimiter, andIngo Schwarze
there is no escaping mechanism, so tags cannot contain whitespace. Consequently, we used to simply not tag macro arguments containing space characters. Instead, let's tag the first word, unless there is a proper match for that word somewhere else. For example, this makes ":tquery" work in ntpd.conf(5). Feature suggested by kn@, who also thinks the implementation looks reasonable and works in his testing.
2018-10-23Add support for -z initfirst.Mark Kettenis
From upstream r335090. ok guenther@
2018-10-23Comvert a few uvm_km_alloc(9) and uvm_km_valloc(9) calls to km_alloc(9).Mark Kettenis
ok deraadt@, mlarkin@, visa@
2018-10-23Input lines that are not blank but generate no output,Ingo Schwarze
for example lines containing nothing but "\&", are significant in no-fill mode and can be represented by blank lines inside <pre>. Fixing a bug that Pali dot Rohar at gmail dot com found in pod2man(1) output, for example Email::Address::XS(3p). While here, inside no-fill mode, there is no need to encode totally blank input lines by emulating .PP - just let them through as we are inside <pre> anyway.
2018-10-23Fix OFW GPIO regulator by breaking out of the loop once the correctPatrick Wildt
match has been found. Otherwise the error condition will always be true. ok kettenis@
2018-10-23Previous commit introduced typo in dependency. Create dummy fileAlexander Bluhm
before using it.
2018-10-23Make pf compile without DIAGNOSTIC againReyk Floeter
OK bluhm@ kn@
2018-10-23Add regression test for joining on NULL columns.Martijn van Duren
2018-10-23Allow us to join on NULL columns. This is similar to what the otherMartijn van Duren
implementations do and new behaviour was most likely added by accident in r1.4. OK otto@
2018-10-23*** empty log message ***Martijn van Duren