summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-11-21Allow rad(8) to watch interface groups; e.g. "interface tap" in rad.conf.Reyk Floeter
OK florian@, additional review from kn@
2018-11-21no more malloc.conf - it's contents are now in malloc(3) itself,Jason McIntyre
and sysctl(2); ok otto deraadt
2018-11-21fold the contents of malloc.conf.5 into malloc.3 and sysctl.2,Jason McIntyre
now that there is essentially no malloc.conf; text tweaked by deraadt; ok otto deraadt
2018-11-21syncTheo de Raadt
2018-11-21Introducing malloc_usable_size() was a mistake. While some otherOtto Moerbeek
libs have it, it is a function that is considered harmful, so: Delete malloc_usable_size(). It is a function that blurs the line between malloc managed memory and application managed memory and exposes some of the internal workings of malloc. If an application relies on that, it is likely to break using another implementation of malloc. If you want usable size x, just allocate x bytes. ok deraadt@ and other devs
2018-11-20when printing essids return the number of chars we printed, like printfPeter Hessler
OK stsp@
2018-11-20fix whitespace in debugging functionPeter Hessler
2018-11-20split up long lineanton
2018-11-20test getownanton
2018-11-20Add support for TIOCGPGRP ioctl commands to wscons.anton
ok visa@
2018-11-20No need for wscons to handle FIOSETOWN ioctl requests since sys_ioctl()anton
translates such requests into TIOCSPGRP. ok visa@
2018-11-20test fcntl(F_SETOWN)anton
2018-11-20DNS goes over both udp and tcp, so reflect that in example pf.conf line;Otto Moerbeek
ok reyk@
2018-11-20Revert free sizes for `subdevs' array, it is incorrect.Martin Pieuchot
Reported by anton@ and Natasha Kerensikova
2018-11-20Make rtable_satoplen() a bit more strict when parsing netmasks. EnsureClaudio Jeker
that the mask is contiguous and not longer then the prefixlen is not bigger then the maximum. Make the function behave a bit more like the similar netmask handling code in the old patricia codebase. Fixes a problem reyk@ reported regarding IPv6 masks and the fact that sin6_scope_id is after sin6_addr. OK mpi@
2018-11-20The first packet received from each AP in each QoS class would bePatrick Wildt
dropped as the sequence number matches the initial value of the cached last sequence number (zero). On some APs (notably Android WIFI hotspots) this hits the first packet of the WPA2 4-way handshake. This causes connection delays and in some cases connection to the AP fails completely. Initialize the cached last sequence numbers for received packets to an invalid value instead. From Christian Ehrhardt ok gerhard@ stsp@
2018-11-20Fix spelling of kettenis' email addressReyk Floeter
"just fix" deraadt@
2018-11-20Convert the pledge call to idiomatic format 'cause we love grep.Theo de Raadt
2018-11-20Saw a mention somewhere a while back that the gotdata() function inTheo de Raadt
here could creates non-uniformity since very short fetches of 0 would be excluded. blocks of 0 are just as random as any other data, including blocks of 4 4 4.. This is a misguided attempt to identify errors from the entropy churn/gather code doesn't make sense, errors don't happen. ok bcook
2018-11-20Fix when ber_free_elements is called with a NULL-value.Martijn van Duren
Found via snmpctl snmp walk 127.0.0.1 oid 1 OK claudio@
2018-11-20Fix the case where the recursion detection isn't reset when the command isMartijn van Duren
interrupted. Lots of back and forth with anton@ OK jca@, tb@, anton@
2018-11-20move a magic constant into a magic defineTed Unangst
2018-11-20Fix typos in memprobe address check. Diff from Andrew Daugherity.YASUOKA Masahiko
2018-11-20On mips64, DT_DEBUG doesn't need mprotecting if it's in the GNU_RELRO segmentPhilip Guenther
ok visa@
2018-11-20unveil(2) boot images which are specified by -o option. Also exitYASUOKA Masahiko
with an error status when writing cd image fails. ok deraadt
2018-11-19Fix compilation on alpha, where DEF_WEAK() really must be paired withPhilip Guenther
PROTO_NORMAL(). Problem noted by deraadt@
2018-11-19Improve POSIX compliance by making case-insensitive extendedIngo Schwarze
regular expressions the default in man(1) -k searches, also matching what the man-db package used by many Linux distributions does. Originally requested by Wolfram Schneider <wosch at FreeBSD> via Yuri Pankov <yuripv at FreeBSD>. Feedback and OK cheloha@, and no objections when shown on tech@. Thanks to cheloha@ for pointing out that POSIX requires this behaviour and for the suggestion to explicitly say that *extended* regular expressions are used here. While here, unify spelling of case-[in]sensitive, fix a typo, update the EXAMPLES, and add a STANDARDS section.
2018-11-19Utilize sigio with wscons. The old behavior of always making the process groupanton
of the process who opens the device the default recipient of sigio is removed as a side-effect of this change. Issuing ioctl(FIOSETOWN) is therefore mandatory in order to receive sigio, which is more consistent with other subsystems supporting sigio. This change is all made possible by the new sigio(9) API and prevents wscons from keeping a pointer to the recipient process. Usage of such pointer could cause a panic since wscons is not inform on process deallocation, leaving a dangling pointer behind. ok mpi@ visa@
2018-11-19delete the dns jackport experiment. it has no future.Ted Unangst
2018-11-19Revert previous - DTLSv1 uses MD5+SHA1 for RSA signature verification.Joel Sing
Discussed with beck@
2018-11-19Revert previous - the default sigalg for RSA key exchange is {sha1,rsa}.Joel Sing
In TLSv1.2, if the client does not send a signature algorithms extension then for RSA key exchange a signature algorithm of {sha1,rsa} is implied. The MD5+SHA1 hash only applies to older versions of TLS, which do not support sigalgs.
2018-11-19evbuffer_new and bufferevent_new can both fail (when malloc fails) andNicholas Marriott
return NULL. GitHub issue 1547.
2018-11-19Utilize sigio with sockets.Visa Hankala
OK mpi@
2018-11-19Add regress tests for sockets with sigio.Visa Hankala
2018-11-19Retire dom_rtkeylen from struct domain. Nothing is using this anymore.Claudio Jeker
It was used by the original patricia tree. OK mpi@
2018-11-19regenKevin Lo
2018-11-19Add ids for D-Link DWA-171 rev C1 and Xiaomi mini USB WiFi.Kevin Lo
2018-11-19silence (to log level debug2) failure messages when loading the defaultDamien Miller
hostkeys. Hostkeys explicitly specified in the configuration or on the command-line are still reported as errors, and failure to load at least one host key remains a fatal error. Based on patch from Dag-Erling Smørgrav via https://github.com/openssh/openssh-portable/pull/103 ok markus@
2018-11-19recent 802.1Q defines 88e7 for provider backbone bridgingDavid Gwynne
2018-11-18syncTheo Buehler
2018-11-18Fix inverted logic for redirecting ProxyCommand stderr to /dev/null.Darren Tucker
Fixes mosh in proxycommand mode that was broken by the previous ProxyCommand change that was reported by matthieu@. ok djm@ danj@
2018-11-18More uses of __func__ in debug printfs.Martin Pieuchot
2018-11-18Use "%s", __func__ in DPRINTF() to reduce grep noise.Martin Pieuchot
2018-11-18Remove old USB_DEBUG chunk.Martin Pieuchot
2018-11-18USB_DEBUG -> UPLCOM_DEBUG.Martin Pieuchot
2018-11-18Implement malloc_usable_size(); ok millert@ deraadt@ and jmc@ for the man pageOtto Moerbeek
2018-11-18MACHINE_ARCH -> MACHINE to fix syspatch build on macppc and arm64.Antoine Jacoutot
prodded by "multiplexd" ok tb@ who was coming up with the same patch
2018-11-18Use correct name when printing the error message that a network prefix-setClaudio Jeker
is not found. Fixes crash reported by Tom Smyth.
2018-11-18later versions of 802.1Q replaced the vlan CFI field with DEIDavid Gwynne
CFI stood for canonical format indicator, and basically said whether the payload was ethernet of fddi (with 0 meaning ethernet). DEI stands for drop eligibility indicator
2018-11-18handle the 802.1Q i-tag format for provider backbone bridges.David Gwynne
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 21:56:41 +0000