Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-05-04 | delete useless test code | Theo de Raadt | |
2014-05-04 | tweak previous; | Jason McIntyre | |
2014-05-04 | When kern.nosuidcoredump=3, act like =2 but try to dump cores into | Theo de Raadt | |
the /var/crash/programname/ directory, as root. For instance, # mkdir /var/crash/bgpd/ # chmod 700 /var/crash/bgpd/ # If you skip this step, you are a moron # sysctl kern.nosuidcoredump=3 # bgpd # pkill -ABRT bgpd # ls /var/crash/bgpd/ 14764.core 23207.core 6423.core Of course, in real life the idea is that you don't kill the daemon but it crashes and you collect parallel cores. Careful you don't fill your /var. Further tuneables are being considered. Sorry to be picking on bgpd for this example. I've watched the "too difficult to debug privsep code" angst for far too long. ok guenther | |||
2014-05-03 | now that 5.5 has been released with compatibility for 2b hashes, | Ted Unangst | |
switch to generating them by default. prodded by deraadt and sthen | |||
2014-05-03 | 1. Drop support for no minor. This variant doesn't exist anymore. | Ted Unangst | |
2. Pull up the actual minor processing code into the switch that parses it. 3. atoi is actually simpler than strtonum in this case, but check the input beforehand so we don't get unexpected results. 4. Slightly more consistent style between various parse and check and increment operations on salt. ok deraadt | |||
2014-05-03 | Noncharacters 0xFFFE and 0xFFFF don't render a UTF-8 string invalid | Stefan Sperling | |
so stop rejecting them in our citrus UTF-8 parser. This is a common misinterpretation of the Unicode standard which resulted in a corrigendum last year: http://www.unicode.org/versions/corrigendum9.html Pointed out by jilles@freebsd (via pfg@freebsd), thanks! | |||
2014-05-03 | Add #ifndef NO_PRINTF_PERCENT_N. Since we are fully standardized, we | Theo de Raadt | |
don't use disable %n ourselves. But Google's Android libc is based on our libc.... Giving them an easy knob to disable this dangerous feature easily make their job easier without making our job any harder. Request from Elliott @ google | |||
2014-05-02 | No really, pid 2 isn't special | Philip Guenther | |
2014-05-02 | The page daemon no longer has a fixed PID. ok kettenis@ jmc@ | Jeremie Courreges-Anglas | |
2014-05-01 | tweak previous; ok sthen | Jason McIntyre | |
2014-05-01 | Extend fread() and fwrite() to check for integer overflow, in which case | Theo de Raadt | |
errno EOVERFLOW is returned and error is set on the FILE. ok kettenis miod beck | |||
2014-05-01 | nibbles aren't enough random, use bytes. does a better job of picking | Ted Unangst | |
a free chunk at random and may allow to increase delayed chunk array. ok otto | |||
2014-04-30 | first cut at documenting the change to malloc doing a partial 'junk' by | Stuart Henderson | |
default and the new 'j' option to disable this; ok jmc@ | |||
2014-04-30 | minor++ because of AI_ADDRCONFIG | sperreault | |
prodded by naddy, confirmed by Mark Kettenis | |||
2014-04-28 | Implement AI_ADDRCONFIG | sperreault | |
This is a getaddrinfo() flag that is defined thusly in RFC 3493: If the AI_ADDRCONFIG flag is specified, IPv4 addresses shall be returned only if an IPv4 address is configured on the local system, and IPv6 addresses shall be returned only if an IPv6 address is configured on the local system. The loopback address is not considered for this case as valid as a configured address. For example, when using the DNS, a query for AAAA records should occur only if the node has at least one IPv6 address configured (other than IPv6 loopback) and a query for A records should occur only if the node has at least one IPv4 address configured (other than the IPv4 loopback). The flag is set by default when hints is NULL. ok Eric Faurot, Jason McIntyre | |||
2014-04-27 | zap trailing whitespace; | Jason McIntyre | |
2014-04-27 | Document net.inet6.ip6.dad_pending. | Loganaden Velvindron | |
OK from jmc@, and thanks to sthen@ for pointing out my mistake in the first version of the diff. | |||
2014-04-24 | uses ssh these days, not rsh; ok tedu | Jason McIntyre | |
2014-04-23 | tweak previous; sorry ingo, my review was pretty poor; | Jason McIntyre | |
2014-04-23 | remove Z option and default to something halfway to J. | Ted Unangst | |
we always junk small chunks now, and the first part of pages, but only after free. J still does the old thing. j disables everything. Consider experimental as we evaluate performance in the real world. ok otto | |||
2014-04-23 | more info about HISTORY; ok jmc@ | Ingo Schwarze | |
2014-04-23 | explain a bit more what's going on for stupid me. | Marc Espie | |
okay otto@ | |||
2014-04-23 | Better, cleaner hash function that computes the same on be and le archs. | Otto Moerbeek | |
Should improve sparc64 and other be archs. ok matthew@ miod@ | |||
2014-04-22 | add closing parenthesis. | Igor Sobrado | |
ok millert@ | |||
2014-04-22 | - one more mallocarray -> reallocarray | Jason McIntyre | |
- use <> | |||
2014-04-22 | change mallocarray to reallocarray. useful in a few more situations. | Ted Unangst | |
malloc can, as always, be emulated via realloc(NULL). ok deraadt | |||
2014-04-22 | Oh yeah, MLINKS for errc family | Philip Guenther | |
Prodded by deraadt@ | |||
2014-04-22 | Add errc/verrc/warnc/vwarnc family: versions of err/... that take the errno | Philip Guenther | |
value to use for the strerror() message as an argument. Originally from FreeBSD 3.0 Patch from Steffen Nurpmeso (sdaoden (at) gmail.com) with minor tweaks. | |||
2014-04-21 | correct man page section | Theo de Raadt | |
2014-04-21 | crank minor | Theo de Raadt | |
2014-04-21 | Introducing: void *mallocarray(size_t nmemb, size_t size); | Theo de Raadt | |
Like calloc(), except without the cleared-memory gaurantee ok beck guenther, discussed for more than a year... | |||
2014-04-21 | Correctly document the return value of getenv(3) | Philip Guenther | |
From Ben Cornett (ben (at) lantern.is) | |||
2014-04-19 | change some rsh references to ssh. poke by jmc | Ted Unangst | |
2014-04-19 | tweak previous; | Jason McIntyre | |
2014-04-19 | need to escape %U, since it is used in Re/Rs blocks; | Jason McIntyre | |
2014-04-19 | zap trailing whitespace; | Jason McIntyre | |
2014-04-19 | Add missing description for IPv6 mtudisctimeout sysctl and | logan | |
rework the wording for both IPv4 and IPv6. OK from sthen@, henning@ and claudio@ | |||
2014-04-19 | one small tweak to avoid ever going off the end of a string. | Ted Unangst | |
2014-04-19 | improved checking for invalid hashes. from solar designer | Ted Unangst | |
2014-04-19 | kill a stray \ | Theo de Raadt | |
2014-04-19 | Add missing man page descriptions for the following IPv6 sysctls: | logan | |
-maxdynroutes -maxifprefixes -maxifdefrouters -neighborgcthresh OK from sthen@, claudio@ and henning@ | |||
2014-04-19 | Use somewhat harsher language and better examples; demonstrate that | Theo de Raadt | |
non-dangerous use functions is difficult. ok guenther | |||
2014-04-19 | Demonstrate correct usage of snprintf (regarding overflow detection) | Theo de Raadt | |
ok guenther | |||
2014-04-19 | Split inet(3) into three pages by decade: 1980s -> inet_lnaof(3), | Philip Guenther | |
1990s -> inet_addr(3), 2000s and beyond -> inet_ntop(3). ok tedu@ (who also noted the timeline) deraadt@ jmc@ | |||
2014-04-18 | remove references to rshd; | Jason McIntyre | |
2014-04-18 | It's been a quarter century: we can assume volatile is present with that name. | Philip Guenther | |
2006-10-10 | Preliminary userland bits for OpenBSD/landisk, many things coming from | Miod Vallat | |
NetBSD. | |||
2014-04-17 | Don't default enable the debug functionality with its unprotected getenv(). | Philip Guenther | |
ok eric@ sthen@ deraadt@ | |||
2014-04-17 | It's been a quarter century: we can assume volatile is present with that name. | Philip Guenther | |
2014-04-14 | print pid in error messages; ok reyk@ | Otto Moerbeek | |