summaryrefslogtreecommitdiff
path: root/lib/libc
AgeCommit message (Collapse)Author
2014-05-21warn about implicit. misspelled function names in libc are deadly.Ted Unangst
2014-05-18factor out a bit of the chunk index code and use it to make sure that aTed Unangst
freed chunk is actually freeable immediately. catch more errors. hints/ok otto
2014-05-17correctly match size and buffer. from enh at googleTed Unangst
2014-05-17Add missing header needed by isdigit().Charles Longeau
While there, sort headers. ok tedu@
2014-05-17refactor some of the des crypt code to use fewer globals.Ted Unangst
ok miod
2014-05-16update NAME and MLINKS for previous;Jason McIntyre
2014-05-16document crypt_checkpassTed Unangst
2014-05-16use $2b in the bcrypt example, ok teduStuart Henderson
2014-05-14stop flushing streams in abort(). it's hackish and unsafe, and no longerTed Unangst
required. try to document this fact and some of the history. with feedback from deraadt guenther millert
2014-05-13for non-valid combinations with `#', instead of trying to list them all,Jason McIntyre
simply say all other combinations are behaviour undefined; ok guenther, who reminded me to change these too;
2014-05-13skip incomplete entries in /etc/hosts and /etc/networksEric Faurot
fix null deref spotted by Seth Hanford, pinpointed by dtucker@ ok florian@
2014-05-12these files have moved to libutilMarc Espie
2014-05-12...better if I actually unplug it, Makefile doesn't do itMarc Espie
2014-05-12remove md5crypt.Ted Unangst
while changing things, add a crypt_checkpass wrapper that handles most of the edge cases. (not quite ready for production, though.) ok deraadt
2014-05-12move the ohash functions into libutil by popular demand.Marc Espie
It's not a standard interface, so it doesn't belong in libc. I hate duplicating the code in client programs, so do beck@, kettenis@, schwarze@, millert@, miod@... and they agree with libutil.
2014-05-12tweak interface to do the right thing, after useful comments from millert@Marc Espie
(mostly use a calloc function to avoid potential integer overflow)
2014-05-12change to having four freelists per size, to reduce another source ofTed Unangst
deterministic behavior. four selected because it's more than three, less than five. i.e., no particular reason.
2014-05-10remove warning by adding explicit parentheses around && within ||Charles Longeau
ok sperreault@
2014-05-10fix MALLOC_STATS code that was broken in rev 1.159, not compiled in by defaultOtto Moerbeek
2014-05-09Add a bit more detail about dot notation from the old inet(3) manpage.Philip Guenther
ok jmc@
2014-05-09when demonstrating the correct "double-check" idiom, provide aTheo de Raadt
reminder that the return value is int...
2014-05-08move reallocarray() to a seperate file so that -portable applicationsTheo de Raadt
can avoid reinventing the wheel ok guenther schwarze
2014-05-07comment style fixAlexander Hall
ok crickets@
2014-05-07Kill the {nd6_,}useloopback buttons, using the loopback interface forMartin Pieuchot
local traffic is not optional. ok mikeb@, stsp@, jca@
2014-05-06We don't really need uniform distribution for mktemp(3) so useTodd C. Miller
arc4random_buf() to avoid lots of arc4random() calls with a getpid() syscall for each one. We fetch 32 bytes of random data at a time which can handle up to 16 Xs. 16 Xs should be enough for anyone. Requested and OK deraadt@
2014-05-06missing NULL checks to see if init is needed. found hard way by deraadt.Ted Unangst
2014-05-06fix stupid commitTed Unangst
2014-05-06enh@google reported a warning in crufty y2k code. just delete it.Ted Unangst
ok deraadt stsp
2014-05-06reallocarray for things which are arrays. ok deraadtTed Unangst
2014-05-06use explicit_bzeroTed Unangst
2014-05-06clear a stack buffer with explicit_bzeroTed Unangst
2014-05-06move chacha context and buffer out of bss and allow mmap to place themTed Unangst
wherever it decides it would like them. first step. ok deraadt dlg djm
2014-05-04delete useless test codeTheo de Raadt
2014-05-04tweak previous;Jason McIntyre
2014-05-04When kern.nosuidcoredump=3, act like =2 but try to dump cores intoTheo de Raadt
the /var/crash/programname/ directory, as root. For instance, # mkdir /var/crash/bgpd/ # chmod 700 /var/crash/bgpd/ # If you skip this step, you are a moron # sysctl kern.nosuidcoredump=3 # bgpd # pkill -ABRT bgpd # ls /var/crash/bgpd/ 14764.core 23207.core 6423.core Of course, in real life the idea is that you don't kill the daemon but it crashes and you collect parallel cores. Careful you don't fill your /var. Further tuneables are being considered. Sorry to be picking on bgpd for this example. I've watched the "too difficult to debug privsep code" angst for far too long. ok guenther
2014-05-03now that 5.5 has been released with compatibility for 2b hashes,Ted Unangst
switch to generating them by default. prodded by deraadt and sthen
2014-05-031. Drop support for no minor. This variant doesn't exist anymore.Ted Unangst
2. Pull up the actual minor processing code into the switch that parses it. 3. atoi is actually simpler than strtonum in this case, but check the input beforehand so we don't get unexpected results. 4. Slightly more consistent style between various parse and check and increment operations on salt. ok deraadt
2014-05-03Noncharacters 0xFFFE and 0xFFFF don't render a UTF-8 string invalidStefan Sperling
so stop rejecting them in our citrus UTF-8 parser. This is a common misinterpretation of the Unicode standard which resulted in a corrigendum last year: http://www.unicode.org/versions/corrigendum9.html Pointed out by jilles@freebsd (via pfg@freebsd), thanks!
2014-05-03Add #ifndef NO_PRINTF_PERCENT_N. Since we are fully standardized, weTheo de Raadt
don't use disable %n ourselves. But Google's Android libc is based on our libc.... Giving them an easy knob to disable this dangerous feature easily make their job easier without making our job any harder. Request from Elliott @ google
2014-05-02No really, pid 2 isn't specialPhilip Guenther
2014-05-02The page daemon no longer has a fixed PID. ok kettenis@ jmc@Jeremie Courreges-Anglas
2014-05-01tweak previous; ok sthenJason McIntyre
2014-05-01Extend fread() and fwrite() to check for integer overflow, in which caseTheo de Raadt
errno EOVERFLOW is returned and error is set on the FILE. ok kettenis miod beck
2014-05-01nibbles aren't enough random, use bytes. does a better job of pickingTed Unangst
a free chunk at random and may allow to increase delayed chunk array. ok otto
2014-04-30first cut at documenting the change to malloc doing a partial 'junk' byStuart Henderson
default and the new 'j' option to disable this; ok jmc@
2014-04-30minor++ because of AI_ADDRCONFIGsperreault
prodded by naddy, confirmed by Mark Kettenis
2014-04-28Implement AI_ADDRCONFIGsperreault
This is a getaddrinfo() flag that is defined thusly in RFC 3493: If the AI_ADDRCONFIG flag is specified, IPv4 addresses shall be returned only if an IPv4 address is configured on the local system, and IPv6 addresses shall be returned only if an IPv6 address is configured on the local system. The loopback address is not considered for this case as valid as a configured address. For example, when using the DNS, a query for AAAA records should occur only if the node has at least one IPv6 address configured (other than IPv6 loopback) and a query for A records should occur only if the node has at least one IPv4 address configured (other than the IPv4 loopback). The flag is set by default when hints is NULL. ok Eric Faurot, Jason McIntyre
2014-04-27zap trailing whitespace;Jason McIntyre
2014-04-27Document net.inet6.ip6.dad_pending.Loganaden Velvindron
OK from jmc@, and thanks to sthen@ for pointing out my mistake in the first version of the diff.
2014-04-24uses ssh these days, not rsh; ok teduJason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-17 16:55:44 +0000