summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-08-10first draft of tests for newlocale(3), duplocale(3), uselocale(3)Ingo Schwarze
2017-08-10Avoid possible NULL pointer dereference on fuseioctl()Ricardo Mestre
Found by Coverity Scan (CID 1453387) OK mpi@
2017-08-10Remove KOI8 lines after 5.9 is out.Theo Buehler
From Jan Stary, Klemens Nanni and others
2017-08-10replace memcpy() with assignements where the type is the same.Sebastian Benoit
noticed by deraadt@, ok claudio@
2017-08-10Add glue for passing through file+line when WITNESS is enabledPhilip Guenther
ok kettenis@
2017-08-10handle extended communities in bgpctl.Sebastian Benoit
From Dennis Fondras, thanks! ok phessler@
2017-08-10allow "del" in addition to "delete"Sebastian Benoit
from Denis Fondras, positive feedback from sthen@ and deraadt@ ok jca@
2017-08-10fix typo in commentPhilip Guenther
2017-08-10___errno (three underbars) is long gonePhilip Guenther
2017-08-10Use "! cmd" for commands that are expected to fail.Martin Pieuchot
Suggested by bluhm@
2017-08-10Test that 'route change' has no effect on a RTF_LOCAL route.Martin Pieuchot
2017-08-10Do not invalidate ND for local routes, make it consistent like ARP.Alexander Bluhm
OK mpi@
2017-08-10Prevent userland to modify RTF_LOCAL route entries.Martin Pieuchot
In particular setting an expiration timer on a route entry which would confuse L2 state machines. ok bluhm@
2017-08-10Remove some case statements which have been compiled out since 2000.Frederic Cambus
OK mpi@
2017-08-10icmp_mtudisc() might be called by TCP even on loopback after aAlexander Bluhm
retransmit timeout. Do not run path MTU discovery on local routes as we never want that on loopback. For permanent ARP or ND entries disable path MTU discovery as they use the same rt_expire field. This prevents that permanent routes and entries disappear. bug analysis friehm@; OK mpi@
2017-08-09Pull out the code that identifies if we have an ECC cipher in the cipherJoel Sing
list or if we are negotiating an ECC cipher in the handshake. This dedups some of the existing code and will make the EC extension rewrites easier. ok doug@
2017-08-09vmd: allow guest PCI interrupt line reassignment.Mike Larkin
I also added a couple config space register names to pcireg.h to try and reduce the use of magic numbers in vmd/pci.c ok pd@
2017-08-09Use X509_pubkey_digest() like libtls to hash the keys for the TLS privsepClaudio Jeker
code. This fixes interception mode (since there we rewrite the CERT which would alter the hash of the cert but the keys still remain the same). OK bluhm@ and jsing@
2017-08-09Call tls_config_skip_private_key_check() to disable the key checking inClaudio Jeker
the inspect case (same is done in the regular server mode). OK bluhm@ and jsing@
2017-08-09Don't use tls_cert_hash for the hashing used by the engine offloading magicClaudio Jeker
for the TLS privsep code. Instead use X509_pubkey_digest() because only the key should be used as identifier. Relayd is rewriting certificates and then the hash would change. Rename the hash is struct tls_keypair to pubkey_hash to make clear what this hash is about. With input and OK jsing@
2017-08-09Add IA32_MISC_ENABLE MSR and bitfield values, to be used shortly byMike Larkin
vmm(4)
2017-08-09reorder some MSRs in the MSR list that were out of order. No functionalMike Larkin
change; I'll be adding a few new ones and noticed these were misplaced.
2017-08-09reorder some MSRs in the MSR list that were out of order. No functionalMike Larkin
change; I'll be adding a few new ones and noticed these were misplaced.
2017-08-09Stop obsessively flushing the imsg connection. JustKenneth R Westerback
flush any queued messages on getting a POLLOUT.
2017-08-09Add some additional poll() error checking. Remove checksKenneth R Westerback
for EAGAIN as that is not a possible poll() errno. suggestions & ok guenther@
2017-08-09let the looking glass look at the details for a specific ASPeter Hessler
diff from Denis Fondras, thanks! OK benno@, phessler@
2017-08-09fix a few DPRINTFs in vmm.c so that compilation with VMM_DEBUG workspd
ok mlarkin@
2017-08-09Consistently return from each SSL/SSL_CTX control case, rather thanJoel Sing
breaking from some and returning from others.
2017-08-09Split out the remaining SSL_CTX controls into individual functions.Joel Sing
2017-08-09the recent adjustment of -i means usage() fits nicely onJason McIntyre
two lines now, instead of three;
2017-08-09Expose TSC to vmm guestpd
This exposes TSC to vmm guest and OpenBSD guests should use it as a preferred timecounter on >= skylake. This should improve the clock drift situation. This breaks vmctl send and receive (for >= skylake), working on that. ok mlarkin@
2017-08-09Start splitting out SSL_CTX controls into individual functions, so thatJoel Sing
they can eventually be exposed as direct functions/symbols.
2017-08-09Be consistent and return from each SSL control case, rather than breakingJoel Sing
from some.
2017-08-09Split out the remaining SSL controls into individual functions.Joel Sing
2017-08-09typo in commentMike Larkin
2017-08-09Split more controls into individual functions.Joel Sing
2017-08-09Start splitting out controls into individual functions, so that they canJoel Sing
eventually be exposed as direct functions/symbols.
2017-08-09Clear any pending (edge-triggered) interrupts at setup to avoidVisa Hankala
spurious interrupts with newly established handlers.
2017-08-09Remove unnecessary curly braces and unindent. Also add a few blank linesJoel Sing
for readability.
2017-08-09Fix conditionals for DH controls.Joel Sing
2017-08-09Remove knob and always do neighbor unreachable detection.Florian Obser
2017-08-09accept_rtadv doesn't do anything since some time.Florian Obser
OK mpi
2017-08-09We are no longer generating privacy addresses in theFlorian Obser
kernel. OK mpi
2017-08-09Move the socket lock "above" sosetopt(), sogetopt() and sosplice().Martin Pieuchot
Protect the fields modifieds by sosetopt() and simplify the dance with the stars. ok bluhm@
2017-08-09Fix filtering so it works after the change to only show windows if theyNicholas Marriott
have multiple panes.
2017-08-09Explain how to transform markup for the terminal when not using aIngo Schwarze
pager, and how to remove markup. Add related cross references. While here, as suggested by jmc@, replace the excessive cross references to the intro pages by a more relevant one to mandoc(1). Triggered by a question from, using feedback from, and OK jmc@.
2017-08-09Add -F to choose-tree, choose-client, choose-buffer to specify theNicholas Marriott
format of each line, as well as adding a couple of formats needed for the default display.
2017-08-09Add "PNP0303" (8042 PS/2 Controller) to acpi_isa_hids[]David Coppa
ok kettenis@
2017-08-09add mail.mda MDA in charge of running a third-party MDA, not linked yetGilles Chehade
2017-08-09at the exception of mail.local, smtpd never executes an MDA as root.Gilles Chehade
the check is performed daemon-side before even forking the child process, but let's also check euid in the mda we ship in case someone executes them by hand and needs to see an explicit error message.