summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-01-26get rid of lib/isc/nothreadsFlorian Obser
OK tedu
2020-01-26Remove now unused unix/file.c and unix/fsaccess.cFlorian Obser
OK jca, tedu
2020-01-26get rid of lib/isc/nothreadsFlorian Obser
OK tedu
2020-01-26Switch once to isc_boolean_t in preparation of nothreads removalFlorian Obser
OK tedu, jca
2020-01-26Remove now unused unix/file.c and unix/fsaccess.cFlorian Obser
OK jca, tedu
2020-01-26We are not going to write keys to disk.Florian Obser
OK jca, tedu
2020-01-26Remove unused logging to file.Florian Obser
OK jca, tedu
2020-01-26Fix incorrect file type tests.Ingo Schwarze
This bug caused sockets and character special devices to be accepted as manual pages if they appeared inside manpaths, and it caused incorrect file names to be entered into the database when the manpath or one of its parent directories was a symbolic link. This fixes the issues reported by <Andreas dot Kahari at abc dot se> on ports@, but additional issues remain when symbolic links are contained in a manpath that involves another symbolic link.
2020-01-26- sprinkle some Fn for function names and Pa for pathsJasper Lievisse Adriaanse
- reword MODKDE4_FIX_GETTEXT text to make it easier to read with and ok schwarze@
2020-01-26No need to specify "initial-interval 1;" in the dhclient.conf usedKenneth R Westerback
during installation. This is the default value.
2020-01-26Don't validate '-c' with S_ISREG(). The install script uses /dev/stdin.Kenneth R Westerback
Noticed by sebastia@
2020-01-26add define for IPTOS_DSCP_LE; "low effort" DSCP codepoint standardisedDamien Miller
in RFC8622; ok job@
2020-01-26Pull in drm_bridge.c from linux 4.19.y.Patrick Wildt
ok jsg@
2020-01-26tweak previous; ok tbJason McIntyre
2020-01-26typoTheo Buehler
2020-01-26Document the change in EVP_chacha20(3).Theo Buehler
Discussed with jsing
2020-01-26Improve the comment explaining why the previous change matches OpenSSL'sTheo Buehler
behavior. ok jsing
2020-01-26When an SSL method is set, bump the max version back to that of theJoel Sing
incoming method if it is a client. This addresses the case where TLS_method() is used to initialise a SSL_CTX, then a TLS_client_method() is then set, resulting in TLSv1.2 being used instead of TLSv1.3. This is observable in smtpd. ok beck@
2020-01-26When switching back to a legacy client or server, ensure we reset theJoel Sing
handshake function pointer. Fixes an isssue found by jca@ with OpenVPN. ok beck@ tb@
2020-01-26Fix basement bug where record layer would not correctly deal withBob Beck
traffic retries when not yet encrypting. ok jsing@
2020-01-26Add simplepanel(4), a driver for simple display panels. This onePatrick Wildt
is good enough to enable the Pinebook Pro's panel. It would be nice to make use of the DRM's BSD-licensed panel code, which has an extensive list of panels and its settings. ok kettenis@
2020-01-26regenTed Unangst
2020-01-26add a new __tmpfd system call that creates a new unnamed file in /tmp.Ted Unangst
intended for shm/fd passing, but for programs that may otherwise like filesystem access. ok beck deraadt kettenis
2020-01-26try disconnecting old world boot.mac bootloader for a bitTed Unangst
2020-01-26vsdk -> vdsk in a panic messageTed Unangst
2020-01-26invert some if logic to shortcircuit some loops and reduce nesting.Ted Unangst
no function change.
2020-01-26Add server side support for requesting client certificates in tls 1.3Bob Beck
ok jsing@
2020-01-26Add client certificate support for tls 1.3Bob Beck
ok jsing@
2020-01-26Add back the tests that were deleted in previous but not containedTheo Buehler
in OpenSSL's test suite.
2020-01-26Add sigalgs for server side to enable client certificate processingBob Beck
in tls 1.3 Will be used in a follow on commit to enable tls1.3 client certificates ok jsing@
2020-01-26server sigalgs test is now bogus, disable for nowBob Beck
2020-01-26Adjust tests to match the change in EVP_chacha20().Theo Buehler
Test vectors taken from OpenSSL 1.1.1d (under OpenSSL's old license).
2020-01-26Move pad and verify context into tls13_lib.cBob Beck
ok jsing@
2020-01-26Adjust EVP_chacha20()'s behavior to match OpenSSL's semantics:Theo Buehler
The new IV is 128 bit long and is actually the 64 bit counter followed by 64 the bit initialization vector. This is needed by an upcoming change in OpenSSH and is a breaking change for all current callers. There are language bindings for Node.js, Rust and Erlang, but none of our ports use them. Note that EVP_chacha20() was first introduced in LibreSSL on May 1, 2014 while the entirely incompatible version in OpenSSL was committed on Dec 9, 2015. Initial diff from djm and myself, further refinements by djm. Ports grepping by sthen ok jsing
2020-01-26Insert two nop instructions after each svc #0 instruction in userland.Mark Kettenis
The will be replaced by a speculation barrier as soon as we teach the kernel to skip over these two instructions when returning from a system call. ok patrick@, deraadt@
2020-01-26Fix comment.Mark Kettenis
2020-01-26Fix spacing issue.Mark Kettenis
2020-01-26Also test maxprefix out. Based on maxprefix test added a few days ago.Claudio Jeker
2020-01-26Shuffle some names around to make reading the code less headacheKenneth R Westerback
inducing. Rename scsi_adapter member 'scsi_minphys' to 'dev_minphys' to reflect what it is supposed to do. Use consistent naming convention (<dev>_minphys) for the actual device functions. No functional change.
2020-01-26for UpdateHostKeys, don't report errors for unsupported key types -Damien Miller
just ignore them. spotted by and ok dtucker@
2020-01-26downgrade error() for missing subsequent known_hosts files to debug()Damien Miller
as it was intended to be; spotted by dtucker@
2020-01-26In amdgpio_pin_intr() disable pins a pending interrupt is seen for whichJonathan Gray
have no interrupt handler registered. Avoids interrupt storm on Matebook D reported by brynet@ From James Hastings. ok kettenis@ brynet@
2020-01-26unbreak unittests for recent API / source file changesDamien Miller
2020-01-25In nexthop_update() only add a nexthop to the nexthop_runners queue ifClaudio Jeker
there is actual work to do (nh->next_prefix != NULL). If next_prefix is NULL there is a possibility that nexthop_unref() is called before the nexthop is removed from the nexthop_runners queue resulting in a use-after-free access in nexthop_runner(). For consistency add a debug message in nexthop_unlink() if the nexthop is removed from the nexthop_runners queue because the last prefix is gone. OK procter@
2020-01-25clarify that BatchMode applies to all interactive prompts (e.g. host keyDamien Miller
confirmation) and not just password prompts.
2020-01-25tidy headers; some junk snuck into sshbuf-misc.c and sshbuf-io.cDamien Miller
doesn't need SSHBUF_INTERNAL set
2020-01-25improve the error message for u2f enrollment errors by makingDamien Miller
ssh-keygen be solely responsible for printing the error message and convertint some more common error responses from the middleware to a useful ssherr.h status code. more detail remains visible via -v of course. also remove indepedent copy of sk-api.h declarations in sk-usbhid.c and just include it. feedback & ok markus@
2020-01-25factor out reading/writing sshbufs to dedicated functions;Damien Miller
feedback and ok markus@
2020-01-25Minor cleanup, no functional change:Ingo Schwarze
Do not abuse strstr(3) to check whether one long string starts with another long string. Instead, use strncmp(3) with the proper length. In set_basedir(), also reset *basedir in the error brances for extra safety. While here, invert some more Yoda conditions in the neighbourhood.
2020-01-25add a comment describing the ranges of channel IDs that we use;Damien Miller
requested by markus@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 21:37:02 +0000