summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-04-01match on Intel 300 Series audio (0xa348)Jonathan Gray
on a Dell G3 3590 the audio device is subclass audio not hd audio so azalia does not match should fix azalia not attaching reported by Adriano Barbosa
2022-04-01Change x509_get_aki(), x509_get_ski(), x509_get_aia(), and x509_get_crl()Claudio Jeker
to work more like x509_get_expire(). They will return an error if the extension extraction failed but not if it was not present. The callers must now do that check but most did already. With this cert_parse_inner() no longer cares about TA vs non-TA certs. Feedback and OK tb@
2022-04-01Move the TA specific checks from cert_parse_inner() to ta_parse() andClaudio Jeker
the regular cert checks from cert_parse_inner() to cert_parse(). OK tb@
2022-04-01Don't print "You may wish to update your font path" at pkg_add timeStuart Henderson
for paths which are under /usr/local/share/fonts. In most cases only fontconfig is relevant and this automatically searches subdirectories, so user changes are not often needed any more. The case where they might be needed is for server-side bit-map fonts (managed via 'xset fp' or 'fontpath' in /etc/X11/xorg.conf) but this is not common any more (most fonts in ports are not bit-map anyway) and this gets rid of some cases of pkg_add messages which the user does not need to act upon. ok landry@ matthieu@ and I think there were some others
2022-04-01Add missing command in description.Antoine Jacoutot
from Matthew Martin
2022-04-01Preserve CRLF flag when respawning.Nicholas Marriott
2022-04-01Fix error message from d2i_X509_bio() to d2i_X509()Theo Buehler
ok claudio
2022-03-31missing full stop;Jason McIntyre
2022-03-31If we've created multiple queues, set up an RSS key and indirection tableJonathan Matthew
to distribute received packets across the queues. ok dlg@
2022-03-31Implement support for multiple dies. This should make OpenBSD work on theMark Kettenis
M1 Ultra. ok patrick@
2022-03-31ssh: document sntrup761x25519-sha512@openssh.com as default KEXChristian Weisgerber
2022-03-31man pages: fix some typos found while looking for other issuesChristian Weisgerber
2022-03-31man pages: add missing commas between subordinate and main clausesChristian Weisgerber
jmc@ dislikes a comma before "then" in a conditional, so leave those untouched. ok jmc@
2022-03-31on-ramdisk firmware extraction can overflow the install-media directoryTheo de Raadt
because of the the tar+mv combination. Purge both path variations better, so that an interrupted install can be restarted. ok miod abieber kettenis
2022-03-31Remove duplicate scsi devices.Kenneth R Westerback
ok miod@ deraadt@
2022-03-31Fix leak in ASN1_TIME_adj_internal()Theo Buehler
p is allocated by asprintf() in one of the *_from_tm() functions, so it needs to be freed as in the other error path below. CID 346194 ok jsing
2022-03-31Simplify priv_key handling in d2i_ECPrivateKey()Theo Buehler
d2i_EC_PRIVATEKEY() can handle the allocation of priv_key internally, no need to do this up front and reach it through the dangerous reuse mechanism. There's also no point in freeing a variable we know to be NULL. ok jsing
2022-03-31Sync & permit ASPA objects to appear on ManifestsJob Snijders
OK tb@ claudio@
2022-03-31Check EVPDigest* return values.Theo Buehler
CID 351293
2022-03-31'e' is no longer an optional element for ober_scanf_elements.Martijn van Duren
This caused the last attribute to be dropped. Reported by Allan Streib (astreib <at> fastmail <dot> fm) Reminded by Raf Czlonka (rczlonka <at> gmail <dot> com) OK tb@ claudio@
2022-03-31'e' is no longer an optional element for ober_scanf_elements.Martijn van Duren
This caused the last attribute to be dropped. Reported by Allan Streib (astreib <at> fastmail <dot> fm) Reminded by Raf Czlonka (rczlonka <at> gmail <dot> com) OK tb@ claudio@
2022-03-31'e' is no longer an optional element for ober_scanf_elements.Martijn van Duren
This caused the last attribute to be dropped. Reported by Allan Streib (astreib <at> fastmail <dot> fm) Reminded by Raf Czlonka (rczlonka <at> gmail <dot> com) OK tb@ claudio@
2022-03-31regression test for sftp cp commandDamien Miller
2022-03-31add a sftp client "cp" command that supports server-side copyingDamien Miller
of files. Useful for this task and for testing the copy-data extension. Patch from Mike Frysinger; ok dtucker@
2022-03-31add support for the "corp-data" protocol extension to allowDamien Miller
server-side copies to be performed without having to go via the client. Patch by Mike Frysinger, ok dtucker@
2022-03-31Move knote_processexit() call from exit1() to the reaper().Todd C. Miller
This fixes a problem where NOTE_EXIT could be received before the process was officially a zombie and thus not immediately waitable. OK deraadt@ visa@
2022-03-30select post-quantum KEX sntrup761x25519-sha512@openssh.com as theDamien Miller
default; ok markus@
2022-03-30fix poll() spin when a channel's output fd closes without data in theDamien Miller
channel buffer. Introduce more exact packing of channel fds into the pollfd array. fixes bz3405 and bz3411; ok deraadt@ markus@
2022-03-30Mention constification of *_hw_if (files forgotten during constificationMiod Vallat
commit)
2022-03-30Simplify up_generate_updates()Theo Buehler
Instead of using new == NULL or new != NULL in combination with an again label to steer the control flow of this function, switch to using a while loop and break/continue/return. Simplified version of a diff by claudio. ok claudio
2022-03-30Add a simple test to ensure that pmeth->cleanup() can cope with NULLTheo Buehler
pkey_ctx->data.
2022-03-30Avoid segfaults in EVP_PKEY_CTX_free()Theo Buehler
It is possible to call pmeth->cleanup() with an EVP_PKEY_CTX whose data is NULL. If pmeth->init() in int_ctx_new() fails, EVP_PKEY_CTX_free() is called with such a context. This in turn calls pmeth->cleanup(), and thus these cleanup functions must be careful not to use NULL data. Most of them are, but one of GOST's functions and HMAC's aren't. Reported for HMAC by Masaru Masada https://github.com/libressl-portable/openbsd/issues/129 ok bcook jsing
2022-03-30pkey_hmac_init(): use calloc()Theo Buehler
Instead of using malloc() and setting most struct members to 0, simply use calloc(). ok bcook jsing
2022-03-30Capture up to used size not available size for each line.Nicholas Marriott
2022-03-30Remove double slash in path to test program.Anton Lindqvist
2022-03-30Flag the kq-tun regress test as skipped as opposed of only mentioning itAnton Lindqvist
in a comment. Allows my own regress runner (and bluhm's) to highlight kqueue as having skipped tests. While here, get rid of redundant usage of phony.
2022-03-30ssh is almost out of getopt() characters; note the remainingDamien Miller
remaining available ones in a comment
2022-03-30avoid NULL deref via ssh-keygen -Y find-principals. bz3409, reportedDamien Miller
by Mateusz Adamowski
2022-03-30If enough MSI-X vectors are available, set up multiple tx and rx queues.Jonathan Matthew
In multi-vector mode, the MSI-X vector number is the same as the irq number on the nic, so use vector/irq 0 for link interrupts, then assign one to each pair of rx and tx queues. We don't configure RSS yet, so packets will only be received on the first queue, but they can be transmitted on any queue. ok dlg@
2022-03-29Add Eric Biggers's reproducer for the memory corruption withTheo Buehler
the Z_DEFAULT_STRATEGY.
2022-03-29Of the enabled tests only kq-pty-1 needs root, so reduceTheo Buehler
REGRESS_ROOT_TARGTES and remove ${SUDO} from kq-pty-2. kq-tun also needs root, but it isn't run. discussed with and ok millert
2022-03-29Regression test for NOTE_EXIT being delivered before child is waitable.Todd C. Miller
2022-03-29Update list ofarchitecturesJeremie Courreges-Anglas
Retire sparc (32 bits) and vax, add riscv64. From Raf Czlonka
2022-03-29man pages: add missing word, The foo() ... -> The foo() function ...Christian Weisgerber
ok jmc@ schwarze@
2022-03-29Given asn1/a_object.c rev. 1.45 by jsing@, stop talking about BUGSIngo Schwarze
we no longer have, focus on what our implementation now does, but keep short warnings in how far other implementations might be more fragile. Some improvements to wordings and clarity while here. OK tb@
2022-03-29Add Google Chromium tests for libz bugs. Write a minimal wrapperAlexander Bluhm
to avoid importing GoogleTest, Google's C++ test framework.
2022-03-29Disable the recently introduced logic used to associate ucc and audioAnton Lindqvist
devices. Caspar Schutijser reported on bugs@ that pressing the volume keys on his headset causes a usb host controller interrupt storm. I'm trying to figure out what's going on but since we're approaching release keep it disabled.
2022-03-29man pages: add missing commas in enumerationsChristian Weisgerber
2022-03-29Bound cofactor in EC_GROUP_set_generator()Theo Buehler
Instead of bounding only bounding the group order, also bound the cofactor using Hasse's theorem. This could probably be made a lot tighter since all curves of cryptographic interest have small cofactors, but for now this is good enough. A timeout found by oss-fuzz creates a "group" with insane parameters over a 40-bit field: the order is 14464, and the cofactor has 4196223 bits (which is obviously impossible by Hasse's theorem). These led to running an expensive loop in ec_GFp_simple_mul_ct() millions of times. Fixes oss-fuzz #46056 Diagnosed and fix joint with jsing ok inoguchi jsing (previous version)
2022-03-29off-by-one check didn't recognize partition 'a' section on specifiedTheo de Raadt
disk, and would fall through to the active partition selection from crystal kolipe, ok miod krw