summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2019-11-13refactor the nc pool loop to not shut down the socket early, andBob Beck
2019-11-13unbreak ramdisksTheo de Raadt
2019-11-12check for privileged bridges ioctls next to the other privileged ioctls.David Gwynne
2019-11-12allow an empty attestation certificate returned by a security keyDamien Miller
2019-11-12security keys typically need to be tapped/touched in order to performDamien Miller
2019-11-12pass SSH_ASKPASS_PROMPT hint to y/n key confirm tooDamien Miller
2019-11-12dd API for performing one-shot notifications via tty or SSH_ASKPASSDamien Miller
2019-11-12add xvasprintf()Damien Miller
2019-11-12a long long time ago, there was no such thing as "from socket" and theGilles Chehade
2019-11-12we might not have a best resolver at allFlorian Obser
2019-11-12do not leak buf or region if either fails to allocateFlorian Obser
2019-11-12fix a logic bug in ruleset matching that makes `from socket` rules possiblyGilles Chehade
2019-11-12remove extra layer for ed25519 signature; ok djm@Markus Friedl
2019-11-12check sig_r and sig_s for ssh-sk keys; ok djmMarkus Friedl
2019-11-12enable ed25519 support; ok djmMarkus Friedl
2019-11-12update sk-api to version 2 for ed25519 support; ok djmMarkus Friedl
2019-11-12implement sshsk_ed25519_assemble(); ok djmMarkus Friedl
2019-11-12implement sshsk_ed25519_inner_sig(); ok djmMarkus Friedl
2019-11-12rename sshsk_ecdsa_sign() to sshsk_sign(); ok djmMarkus Friedl
2019-11-12factor out sshsk_ecdsa_inner_sig(); ok djm@Markus Friedl
2019-11-12factor out sshsk_ecdsa_assemble(); ok djm@Markus Friedl
2019-11-12implement ssh-ed25519-sk verification; ok djm@Markus Friedl
2019-11-12syncTheo de Raadt
2019-11-12fix a formatting warning;Jason McIntyre
2019-11-12Add configuration options to explicitly specify ESN support for child SAs.tobhe
2019-11-12document new helperMarc Espie
2019-11-12document how DEBUG_PACKAGES worksMarc Espie
2019-11-12document DEBUGINFO_ARCHS.Marc Espie
2019-11-12document the new annotations corresponding to DEBUG_PACKAGESMarc Espie
2019-11-12we are not using was_ratelimitedFlorian Obser
2019-11-12Pass in a callback function to resolve() instead of a flag toFlorian Obser
2019-11-12 Error logging is done inside of resolve since it depends on theFlorian Obser
2019-11-12 It is possible to cancel libunbound queries by tracking an id.Florian Obser
2019-11-12use the default URL when running fw_update, we can't guarantee that pkg_add willStuart Henderson
2019-11-12Only check if the current thread has the lock in rw_assert_unlocked(9).Martin Pieuchot
2019-11-12Convert tsleep(9) that wait for a multiple of `hz' to tsleep_nsec(9).Martin Pieuchot
2019-11-12Default to 0 arguments if no symbol has been found in the CTF section.Martin Pieuchot
2019-11-12Fix support for 3168 iwm(4) devices, and load new firmware for them.Stefan Sperling
2019-11-12tweak previous; ok deraadtJason McIntyre
2019-11-12syncTheo de Raadt
2019-11-12enable rpki-client buildTheo de Raadt
2019-11-12Now that libc.so has only five PLT entries on almost all our archs,Philip Guenther
2019-11-12Check sleep timeout state only if the sleep has a timeout. Otherwise,Visa Hankala
2019-11-12SIOCDVNETID mutates state, so should only be run by root.David Gwynne
2019-11-11Prevent underflows in tp->snd_wnd if the remote side ACKs more thanAlexander Bluhm
2019-11-11skip demanding -fstack-protector-all on hppa. we never wrote a stack protectorTheo de Raadt
2019-11-11Typo.Martin Pieuchot
2019-11-11print the URL when sysupgrade fetches new sets, allowing time for a quick ^CStuart Henderson
2019-11-11Prevent a NULL deref in ieee80211_node2req() which could be triggeredStefan Sperling
2019-11-11Kernel is missing propper input validation when configuring IPv6Alexander Bluhm