summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-05-29Only require 4 byte alignment on ILP32 archsPhilip Guenther
2016-05-29Stop building u-boot kernel and ramdisk images. The kernel make targetsJonathan Gray
are left for now but umg files are no longer built when building releases.
2016-05-29Use .balign instead of .align; only need 8 byte alignment not 2^8Philip Guenther
2016-05-29Prefer AF_* over PF_* and 'address family' over 'protocol family'Philip Guenther
ok jung@
2016-05-29Delete blocking/unblocking of signals, as the handlers now just set flagsPhilip Guenther
that are tested by the main loop. ok jca@ deraadt@
2016-05-29Eat all blanks between the VARIABLE keywords and the definition,Todd C. Miller
not just the first one. Otherwise we end up storing the blanks. Now the file generated by mklocale(1) is the same regardless of whether or not the input is sent through the C preprocessor. OK deraadt@ jca@ schwarze@
2016-05-29define PT_OPENBSD_WXNEEDEDTheo de Raadt
2016-05-28Don't pledge before opendev() and ioctl DIOCGDINFO were called.Theo Buehler
Avoids a pledge crash with 'ncheck_ffs /dev/tty'. deraadt agrees
2016-05-28Don't pledge before opendev. Just leave pledge "stdio" rightTheo Buehler
afterwards. deraadt agrees
2016-05-28back out previous; -wAT template vnd0 failsTheo de Raadt
2016-05-28-z wxneeded creates a PHDR PT_OPENBSD_WXNEEDED. This annotation is placedTheo de Raadt
on a binary by a software builder (ie. packager) to indicate to the kernel that this software performs W^X violations. ok kettenis guenther millert
2016-05-28Remove all the pledge "disklabel" before ioctl DIOCGPDINFO isTheo Buehler
called in order to avoid a pledge crash with 'pdisk /dev/tty'. Only the pledge "stdio" right after the ioctl remains. ok krw
2016-05-28Implement the fork+exec pattern in smtpd.Eric Faurot
The parent process forks child processes and re-exec each of them with an additional "-x <proc>" argument. During the early setup phase, the parent process sends ipc socket pairs to interconnect the child processes as needed, and it passes the queue encryption key to the queue if necessary. When this is done, all processes have their environment set as in the fork-only case, and they can start doing their work as before. ok gilles@ jung@
2016-05-28Give growfs a chance to error out with ENOTTY before pledging disklabel.Theo Buehler
Fixes pledge crash due to ioctl DIOCGDINFO with an inappropriate file. looks good to deraadt
2016-05-28Fix pledge violation with -P s used and we need to supply a passwordBob Beck
for an http proxy - we need tty in this case. Found and fixed by Anthony Coulter <bsd@anthonycoulter.name>. ok tb@
2016-05-28comment typosStuart Henderson
2016-05-28Fix nc -verbose mode when used on a unix domain socket.Bob Beck
Noticed by and a modified version of fix from <attila@stalphonsos.com>
2016-05-28The synopsis rendered very poorly because of a "Quite Ugly butTheo Buehler
syntactically correct" roff mess. Follow the mdoc style guide on function pointers to improve this a little. Neglect and remove a comment that advises against trying to fix this. guidance and ok schwarze@
2016-05-28Mention 3165 device support in iwm(4) man page.Stefan Sperling
Patch by Imre Vadasz.
2016-05-28Test if stdin is a terminal before resetting the tty state.Martijn van Duren
Diff supplied by Kai Antweiler. OK semarie@ and deraadt@
2016-05-28Add support for Intel Wireless 3165 devices to iwm(4).Stefan Sperling
Patch by Imre Vadasz.
2016-05-28Another misplaced pledge disklabel that needs to be removed because ofTheo Buehler
a DIOCGPDINFO that could be applied to a non-disk and thus cause a crash. After that ioctl, the program continues with pledge "stdio". ok beck semarie
2016-05-28Fix a pledge abort that can be triggered by using DIOCGDINFO on a fileTheo Buehler
that is not a disk device (e.g. fsirand -p /altroot) by removing the first of the two pledges. The program then runs with pledge "stdio" right after the ioctl. ok deraadt
2016-05-28host readlabel() above the pledge so we can avoid pledge violationsBob Beck
when the provided device is not a disk ok tb@
2016-05-28repair braces. from ilya.kaliman/gsoares/natanoTed Unangst
2016-05-28fix crash if filename not providedBob Beck
2016-05-28crank version numbers of those bootloaders that have been changed byStuart Henderson
the com_init fix. ok beck deraadt
2016-05-28rcmd(3) and rcmdsh(3) use getaddrinfo(3) not gethostbyname(3).Todd C. Miller
2016-05-28Hoist the opendev() call before the pledge because it can ioctl() whenBob Beck
the provided path is bogus or not a device. ok deraadt
2016-05-28Use getaddrinfo() instead of the non-standard gethostbyname2().Todd C. Miller
OK deraadt@ jca@ jung@ florian@
2016-05-28Simplify search form: minus two visible control elements, minusIngo Schwarze
one table, minus twenty lines of code, no loss of functionality. No idea why i didn't do this earlier...
2016-05-28Backout pf.c r1.972, pf_norm.c r1.184, ok claudioStuart Henderson
pf_test calls pf_refragment6 with dst=NULL, which is passed down to rtable_match which attempts to dereference it.
2016-05-28Assume sabrelite/nitrogen has a bootefi enabled u-boot in flash and justJonathan Gray
install dtbs and efiboot on the fat fs.
2016-05-28use efiboot in armv7 miniroot imagesJonathan Gray
2016-05-28In iwm(4), don't parse nvram antenna data for 7k devices, they don't have it.Stefan Sperling
And don't complain if no data is provided in nvram, needed for 3165 devices. Patch by Imre Vadasz.
2016-05-28iwm(4) man page updates (new firmware version 16, 8260 device support)Stefan Sperling
2016-05-28Add support for Intel Wireless 8260 devices to iwm(4).Stefan Sperling
Firmware has been available in fw_update(1) for some time (thanks sthen!). Tested by robert, reyk, Imre Vadasz, Bryan Vyhmeister. Thank you, Emmanuel Grumbach, for helping me diagnose issues during development. ok kettenis
2016-05-28Fix file block size rounding and ensure it's large enough to store aAlexandre Ratchov
full audio block.
2016-05-28Replace the /dev/bpf* open loop with a plain open("/dev/bpf0", ...).Martin Natano
ok deraadt jca
2016-05-28Do the endpoint verification before opening the pipe on the selectedMarcus Glocker
alternate interface endpoint instead statically on interface 0. Fix duplicate DPRINTF output while there. Initial diff from Patrick Keshishian, thanks!
2016-05-28add sizes to free() calls for descrip tablesTed Unangst
2016-05-28no need to open key disk for writing, from bytevolcano. ok jungTed Unangst
2016-05-27Padding cell is always the same so use a static.Nicholas Marriott
2016-05-27Break the save-last-cell code into a separate function (so it can beNicholas Marriott
called conditionally later).
2016-05-27Most of the utf8_data is fixed so simplify utf8_set to use a memcpy.Nicholas Marriott
2016-05-27whitespaces grow bsd.rd, you knowTheo de Raadt
2016-05-27tweak wording to avoid "firmware which are installed"T.J. Townsend
2016-05-27During install, set new 'wxallowed' mount option for the filesystemRobert Peichaer
/usr/local resides on. idea from and ok deraadt with feedback from halex
2016-05-27W^X violations are no longer permitted by default. A kernel log messageTheo de Raadt
is generated, and mprotect/mmap return ENOTSUP. If the sysctl(8) flag kern.wxabort is set then a SIGABRT occurs instead, for gdb use or coredump creation. W^X violating programs can be permitted on a ffs/nfs filesystem-basis, using the "wxallowed" mount option. One day far in the future upstream software developers will understand that W^X violations are a tremendously risky practice and that style of programming will be banished outright. Until then, we recommend most users need to use the wxallowed option on their /usr/local filesystem. At least your other filesystems don't permit such programs. ok jca kettenis mlarkin natano
2016-05-27Use getprogname() instead of __progname to make portability easier.Nicholas Marriott
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-13 14:15:56 +0000