summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-06-05Minimize changes against the ber.c in snmpd and ypldap. This also fixes anMartin Hedenfal
erroneous protocol error return in ldap_extended(), which prevented StartTLS from working.
2010-06-05usage line and error out if pkg foo.Marc Espie
2010-06-05don't send clock ticks while buffers are being primedAlexandre Ratchov
2010-06-05there is no need to copy the full 802.11 header in ieee80211_decap()Damien Bergamini
as we do not use any field after i_addr4. slightly modified version of a diff from Matthew Dempsky (matthew at dempsky dot org), used MIN instead of min.
2010-06-05'operational' takes a single 'n'Damien Bergamini
2010-06-05Don't send the initial position as a clock tick with a negative delta.Alexandre Ratchov
Add a new ``initial position'' message which is simpler. No bahaviour change, except effects of the protocol version crank.
2010-06-05use lock_db(unshared), since we may tweak thingsMarc Espie
2010-06-05new command pkg_fsck, very incomplete for now. Runs only very basic checks.Marc Espie
2010-06-05add working cartwheelMarc Espie
2010-06-05be more specific as to what we keep. Less flicker in workingMarc Espie
2010-06-05interface tweaks:Marc Espie
- allow mtree to create more diverse data structures. - new "working" method, for when progressmeter should show that something is going on, but doesn't actually have an actual % to show, so show cartwheels. e.g., progress->working(1024); (actual counter will be /= argument, so that it does move a bit slower).
2010-06-05move use to common partMarc Espie
2010-06-05have subst return a handle to written fileMarc Espie
2010-06-05Switch fsck_ffs(8) and fsdb(8) to opendev(3) so that they will soon be ableJoel Sing
to operate with disklabel UIDs. ok marco@ krw@ otto@
2010-06-05Move ask_list() method to $state object like it's done for confirm(), soLandry Breuil
that it can be overriden. Change callers accordingly. ok espie@
2010-06-05+diffMarc Espie
2010-06-05document front-end changesMarc Espie
2010-06-05Pass signal handlers a more clean FPU state (ie. the right modes) andTheo de Raadt
properly restore it in sigreturn. Lots of deep digging by matthieu, otto, guenther, kettenis and I.. and I am certain I forgot some other people. ok kettenis otto matthieu
2010-06-05syncTheo de Raadt
2010-06-04centralize checking of packagenames. Avoid grabbing pkgnames that won'tMarc Espie
have a version number. This gets rid of: Can't call method "v" on an undefined value at /usr/libdata/perl5/OpenBSD/PackageName.pm line 310.
2010-06-04add ->spec to Conflict and use the same check as for depend during pkg_create.Marc Espie
2010-06-04Don't warn about not knowing what the bus clock is on core i7/i5/i3Jonathan Gray
as the high/low guessing won't be done on these processors due to MSR differences.
2010-06-04Install the cert as well as the keys and make certs worldJonathan Gray
readable as suggested by reyk@
2010-06-04move code around, so that commands can be used as modules.Marc Espie
pkg becomes the start hub, which does nothing except require the correct module. Saner code wrt Add/Delete, and more sharing.
2010-06-04Missed this file in previous commit; previous commit message was:Bret Lambert
rt_timer_queue_destroy() did not actually destroy, leading to a potential memory leak due to misleading nomenclature. Change it to actually destroy, not just clean, the the rt_timer_queue passed to it and adjust the correct caller accordingly (i.e., no need to free the mem on our own now). As a bonus, this gets rid of one of the ridiculous R_Malloc/Bzero/Free cycles, and lets us sneak another bzero -> M_ZERO conversion in. ok claudio@
2010-06-04Use correct imsg type in error reply.Jacek Masiulaniec
2010-06-04rt_timer_queue_destroy() did not actually destroy, leading to a potentialBret Lambert
memory leak due to misleading nomenclature. Change it to actually destroy, not just clean, the the rt_timer_queue passed to it and adjust the correct caller accordingly (i.e., no need to free the mem on our own now). As a bonus, this gets rid of one of the ridiculous R_Malloc/Bzero/Free cycles, and lets us sneak another bzero -> M_ZERO conversion in. ok claudio@
2010-06-04It is actually possible to dump IPv6 tables with "dump table" and notClaudio Jeker
"dump table-mp" but this is only possible if the session and the prefixes are from the same address family. Evil little hackery (especially the IPv6 nexthop encoding) but seems to work according to libbgpdump.
2010-06-04Fix NAT-T detection to enable UDP encapsulation. It was done before,Reyk Floeter
but not in the right order to run the IKEv2 NAT detection and check the source port of the last IKE message which should be the NAT-T port 4500. Tested with iked running on sparc64 and a NAT'ed windows box.
2010-06-04Merge interface flags and xflags before printing them. So it is possible toClaudio Jeker
see if a interface is using the INET6_PRIVACY or is MPLS enabled. If xflags uses more then 16 flags something else must be figured out. OK stsp@ deraadt@
2010-06-04when attaching files to play or record to the device, check thatAlexandre Ratchov
the device supports play or record modes respectively. spotted by jakemsr
2010-06-04midi control aproc structure is can be destroyed before any streamAlexandre Ratchov
referencing it (for instance while a recording stream drains buffers of a closed device). So, don't abort() if this happen.
2010-06-04gc unused variableDavid Gwynne
2010-06-04Allow the audio device to be opened only while it's actually used.Alexandre Ratchov
This is necessary for uaudio devices, for instance to start aucat before the device is plugged. Or to unplug a device whithout having to restart aucat when another device is plugged. This is controlled with the new -a option. Allow multiple audio devices to be used concurently, i.e. multiple ``-f devname'' options to be used; -f options must follow per-device options, which is what we do for other options.
2010-06-03manpage tweaksReyk Floeter
2010-06-03Stop requiring the 'inet6' keyword when the 'autoconfprivacy' option is used.Stefan Sperling
Simplifies enabling autoconf privacy from hostname.if files. A line such as 'rtsol autoconfprivacy' will now work, as documented in ifconfig(8). Pointed out by steven@. ok deraadt@ steven@ todd@
2010-06-03Instead of doing a poor mans offsetof() implementation change the codeClaudio Jeker
to use an end pointer to compare against. Looks less scary and makes gcc4 happy. OK henning@
2010-06-03syncTheo de Raadt
2010-06-03add _ikedReyk Floeter
pointed out by jsg@
2010-06-03Add a new _iked user with uid 101 instead of (ab)using the _isakmpd user.Reyk Floeter
ok deraadt@
2010-06-03enable async fifo for >=AR9287 1.3 only.Damien Bergamini
from ath9k.
2010-06-03new iwn-firmware-5.4 package that includes the firmware imageDamien Bergamini
for Intel Centrino Advanced-N + WiMAX 6250 adapters. firmware images for other adapters do not change.
2010-06-03enable ldapd and ldapctl in the buildMartin Hedenfal
ok deraadt@
2010-06-03take care of some half-baked CPU temperature readings seen in wildTheo de Raadt
from Mikko Tolmunen
2010-06-03Fix compilation on gcc2. Check a return value from malloc while at it.Martin Hedenfal
"that compiles!" deraadt@
2010-06-03Open database files before chrooting, and use an absolute path toMartin Hedenfal
the database files, instead of relying on the chrooted-to path. This breaks compaction as the ldape process can't re-open the database files. This is being worked on. ok gilles@
2010-06-03remove my BINDIR override, pointed out by deraadt@Reyk Floeter
2010-06-03update the manpages for isakmpd(8) and ipsec.conf(5) to point to iked(8)Reyk Floeter
for IKEv2 and to clarify that a) isakmpd is IKEv1/ISAKMP only and b) iked(8) is IKEv2 only. ISAKMP/IKEv1 support is currently not supported by iked(8) and not worked on, but maybe in the future - I want to get IKEv2 support first done right. So keep on using isakmpd(8) for IKEv1 for now... ok deraadt@
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter
iked(8) is an automatic keying daemon for IPsec, like isakmpd(8), that IPsec creates flows and SAs automatically. Unlike isakmpd, iked(8) implements the newer IKEv2 protocol instead of IKEv1/ISAKMP. The daemon is still work-in-progress and not enabled in the builds, but is already able to establish IKEv2 sessions with some other IKEv2 implementations as a responder. with lots of help and debugging by jsg@ ok deraadt@
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter
iked(8) is an automatic keying daemon for IPsec, like isakmpd(8), that IPsec creates flows and SAs automatically. Unlike isakmpd, iked(8) implements the newer IKEv2 protocol instead of IKEv1/ISAKMP. The daemon is still work-in-progress and not enabled in the builds, but is already able to establish IKEv2 sessions with some other IKEv2 implementations as a responder. with lots of help and debugging by jsg@ ok deraadt@