summaryrefslogtreecommitdiff
path: root/lib/libc/gen
AgeCommit message (Collapse)Author
2017-03-17recallocarray() the string buffer, to avoid leaving such contentsTheo de Raadt
around in the address space. Don't bother doing so for the buffer which contains aslr'd pointers... ok millert
2017-03-16sync the vfs bits as best i can;Jason McIntyre
2017-03-16bit more consistent;Jason McIntyre
2017-03-13- no KERN_RND: from schwarzeJason McIntyre
- remove some XXX i no longer need
2017-03-13for each sysctl name, attach the variable name as seen by sysctl(8);Jason McIntyre
includes some fixes from schwarze, as well as some general tweaking; ok deraadt schwarze
2017-02-15Style improvement, no functional change.Ingo Schwarze
As reported by Yuri Pankov, some versions of GCC whine that "tmp" might be used uninitialized in fts_open(3). Clearly, that cannot actually happen, but explicitly setting it to NULL is safer anyway. While here, rename the badly named variable "tmp" and make the inner "if" easier to understand. Feedback and OK guenther@
2016-12-25gcc says "if you define labels and don't use them, I will whine."Kenneth R Westerback
ok tom@
2016-11-09Fix a use after free error introduced in rev 1.18 by only callingTodd C. Miller
closedir() outside the loop. OK deraadt@ guenther@ markus@
2016-10-19Use the reentrant strerror_r() instead of strerror() to expand %m.Todd C. Miller
Previously, syslog_r() would avoid calling strerror() since the latter is not reentrant. OK bluhm@
2016-10-18Avoid generate SIGTTOU when restoring the terminal mode. If we getTodd C. Miller
SIGTTOU it means the process is not in the foreground process group which, in most cases, means that the shell has taken control of the tty. Requiring the user the fg the process in this case doesn't make sense and can result in both SIGTSTP and SIGTTOU being sent which can lead to the process being suspended again immediately after being brought into the foreground.
2016-10-07sort;Jason McIntyre
2016-10-07introduce a sysctl to hijack dns sockets. when set to a port number,Ted Unangst
all dns socket connections will be redirected to localhost:port. this could be a sockopt on the listening socket, but sysctl is an easier interface to work with right now. ok deraadt
2016-09-28use the same template for describing securelevel interaction;Jason McIntyre
2016-09-28document kern.allowkmem; ok deraadtJason McIntyre
2016-09-24Fix matching when all of user, host and domain are specified.Todd C. Miller
OK guenther@
2016-09-21no more KERN_ARND; ok deraadtJason McIntyre
2016-09-21Delete casts to off_t and size_t that are implied by assignmentsPhilip Guenther
or prototypes. Ditto for some of the char* and void* casts too. verified no change to instructions on ILP32 (i386) and LP64 (amd64) ok natano@ abluhm@ deraadt@ millert@
2016-09-07Remove usermount remnants. ok teduMartin Natano
2016-09-03tweak previous;Jason McIntyre
2016-09-03note that getpass is obsolete. removed from posix in 2001.Ted Unangst
2016-09-01Mention explicit_bzero(3); ok jmcMartin Natano
2016-08-27Pull in <stdio.h> for NULLPhilip Guenther
ok deraadt@
2016-08-14Refer to /etc/passwd consistently as the "legacy password file" andTheo Buehler
remove some references to differences between versions 6 and 7. ok jmc, millert, tedu
2016-07-20Make the size for the syn cache hash array tunable. As we areAlexander Bluhm
swapping between two syn caches for random reseeding anyway, this feature can be added easily. When the cache is empty, there is an opportunity to change the hash size. This allows an admin under SYN flood attack to defend his machine. Suggested by claudio@; OK jung@ claudio@ jmc@
2016-07-14kern.usermount is currently a no-op;Jason McIntyre
ok deraadt
2016-07-06Use fstatat() to avoid path surgery.Philip Guenther
bug catching and ok millert@
2016-06-30nptys sysctls were removedTed Unangst
2016-06-28For the EINVAL case there can be more than a single option.Todd C. Miller
2016-06-28fts_open() requires that the list passed as argument to contain at leastTodd C. Miller
one path. When the list is empty (contain only a NULL pointer), return EINVAL instead of pretending to succeed, which will cause a NULL pointer deference in a later fts_read() call. From FreeBSD.
2016-06-28Add sysctl for arp timers: net.inet.ip.arptimeout (expire timer for resolvedChris Cappuccio
entries) and net.inet.ip.arpdown (expire timer for unresolved entries) ok mpi@
2016-06-28Do not return an error in fts_open(3) if one of the paths in argvTodd C. Miller
is empty. Otherwise, programs using fts(3) will report an error if one of the paths is empty instead of just treating it as a non-existent file. OK guenther@
2016-06-27make proper use of fstatat, as suggested by guenther@Marc Espie
okay millert@
2016-06-27make the fallback code more accurate (in particular, it should return namesMarc Espie
based on the actual device, not any kind of inode equality which won't hold for duplicates of the dev tree in a chroot) no bump as it doesn't change any API. okay and improvements guenther@
2016-06-18sort previous;Jason McIntyre
2016-06-18Add net.inet.{tcp,udp}.rootonly sysctl, to mark which portsVincent Gross
cannot be bound to by non-root users. Ok millert@ bluhm@
2016-06-07Document the net.inet.tcp.synuselimit sysctl; OK bluhm@ jmc@Tim van der Molen
2016-06-01Kill sysctl net.inet6.ip6.rr_pruneJeremie Courreges-Anglas
We don't support Router Renumbering and there are no plans to change that. ok mpi@
2016-05-29wxabort bits; ok deraadtJason McIntyre
2016-05-28The synopsis rendered very poorly because of a "Quite Ugly butTheo Buehler
syntactically correct" roff mess. Follow the mdoc style guide on function pointers to improve this a little. Neglect and remove a comment that advises against trying to fix this. guidance and ok schwarze@
2016-05-26Use S_ISDIR instead of doing it by hand. No binary change.Todd C. Miller
2016-05-23Stop supporting longjmperror(); it's not used, not portable, and the checksPhilip Guenther
longjmp performs can't really be relied upon, even after we got rid of the false positives... ok millert@ deraadt@
2016-05-19no more v6only;Jason McIntyre
2016-05-18Reduce quadruple negation to double negation;Ingo Schwarze
from Edgar Pettijohn <edgar at pettijohn minus web dot com>. OK jmc@ deraadt@ While here, remove two instances of inconsistent future tense.
2016-05-13remove extra argument; from rafael nevesJason McIntyre
2016-05-11remove hppa64 port, which we never got going beyond broken single users.Theo de Raadt
hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis
2016-05-07stop opening the shadow database by default. only programs that request itTed Unangst
via the _shadow functions will open now, preventing some programs running as root from accidentally loading password hashes it into their memory. ok deraadt
2016-05-07Avoid a transient PLT entry for the internal __getcwd syscall stub forPhilip Guenther
slightly better code on some archs
2016-05-07Use a Thread Information Block in both single and multi-threaded programs.Philip Guenther
This stores errno, the cancelation flags, and related bits for each thread and is allocated by ld.so or libc.a. This is an ABI break from 5.9-stable! Make libpthread dlopen'able by moving the cancelation wrappers into libc and doing locking and fork/errno handling via callbacks that libpthread registers when it first initializes. 'errno' *must* be declared via <errno.h> now! Clean up libpthread's symbol exports like libc. On powerpc, offset the TIB/TCB/TLS data from the register per the ELF spec. Testing by various, particularly sthen@ and patrick@ ok kettenis@
2016-03-30Eliminate userspace caching by getlogin_r/setlogin; make the getloginPhilip Guenther
syscall behave exactly like userspace getlogin_r() and rename it to match. Eliminate the reduced-to-no-op wrappers of the syscalls. Eliminate the unnecessary per-thread static buffering by getlogin(). ok kettenis@ deraadt@
2016-03-30some Xr adjustment to catch up with MLINKS removal;Jason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-24 15:56:22 +0000