Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-05-14 | constrain fractional part to [0-9] (less confusing to static analysis); ok ian@ | Damien Miller | |
2018-02-16 | Fix function argument names, from Abel Abraham Camarillo Ojeda via jmc@. | Nicholas Marriott | |
2018-01-12 | Adjust references for sysctl(3) to sysctl(2) | Theo de Raadt | |
2017-12-14 | Make a few internal symbols static and add a Symbols.map version script | Mark Kettenis | |
to control which symbols are exported from the shared library. ok guenther@, deraadt@, jca@ | |||
2017-12-06 | It's the imsg_compose(3) who accepts 'fd' argument, not imsg_create(3). | Vadim Zhukov | |
2017-05-03 | spacing (in EXAMPLES code) | Reyk Floeter | |
2017-04-20 | add previous to NAME; | Jason McIntyre | |
2017-04-20 | Add getptmfd(), fdopenpty(), fdforkpty() functions. These allow programs | Nicholas Marriott | |
to separate the open(/dev/ptm) from the ioctl(PTMGET) for privilege separation or pledge(). Based on a diff from reyk@. ok deraadt millert | |||
2017-04-18 | use freezero() instead of explicit_bzero+free | Theo de Raadt | |
2017-04-11 | Use freezero(3) for the imsg framework in imsg_free(3) and ibuf_free(3). | Reyk Floeter | |
In our privsep model, imsg is often used to transport sensitive information between processes. But a process might free an imsg, and reuse the memory for a different thing. iked uses some explicit_bzero() to clean imsg-buffer but doing it in the library with the freezero() is less error-prone and also benefits other daemons. OK deraadt@ jsing@ claudio@ | |||
2017-03-24 | Use C99 types (uint32_t) instead of BSD (u_int32_t) - the former are | Nicholas Marriott | |
more portable. Add stdint.h to the headers in imsg_init(3). No objections from millert@. | |||
2017-03-17 | Grow buffers using recallocarray, to avoid the potential dribble that | Theo de Raadt | |
the standard realloc*() functions can leave behind. imsg buffers are sometimes used in protocol stacks which require some secrecy, and layering violations would be needed to resolve this issue otherwise. Discussed with many. | |||
2017-03-16 | Fix overly-conservative overflow checks on mulitplications and add checks | Darren Tucker | |
on additions. This allows scan_scaled to work up to +/-LLONG_MAX (LLONG_MIN will still be flagged as a range error). ok millert@ | |||
2017-03-15 | Collapse underflow and overflow checks into a single block. | Darren Tucker | |
ok djm@ millert@ | |||
2017-03-15 | Catch integer underflow in scan_scaled reported by Nicolas Iooss. | Darren Tucker | |
ok deraadt@ djm@ | |||
2017-03-11 | fix signed integer overflow in scan_scaled. Found by Nicolas Iooss | Damien Miller | |
using AFL against ssh_config. ok deraadt@ millert@ | |||
2016-10-15 | zap trailing whitespace; | Jason McIntyre | |
2016-10-10 | Fixup the example for msgbuf_write() and imsg_read() to check the | Reyk Floeter | |
error cases for -1 and 0 explicitly (it initially only checked for -1, I updated it to also check for 0, and rzalamena@ figured out that 0 has to be checked in a differently). OK millert@ rzalamena@ | |||
2016-08-30 | Use a constant format string and output the variable part with %s | Philip Guenther | |
ok krw@ millert@ | |||
2016-08-30 | Use O_CLOEXEC when opening fds local to a function | Philip Guenther | |
ok jca@ krw@ | |||
2016-08-27 | Pull in <stdio.h> for NULL | Philip Guenther | |
ok deraadt@ | |||
2016-08-14 | Refer to /etc/passwd consistently as the "legacy password file" and | Theo Buehler | |
remove some references to differences between versions 6 and 7. ok jmc, millert, tedu | |||
2016-07-16 | Fix example: long long should be print with %lld | Jeremie Courreges-Anglas | |
2016-05-18 | Remove obsolete caveat. OK deraadt@ | Todd C. Miller | |
2016-03-30 | for some time now mandoc has not required MLINKS to function | Jason McIntyre | |
correctly - logically complete that now by removing MLINKS from base; authors need only to ensure there is an entry in NAME for any function/ util being added. MLINKS will still work, and remain for perl to ease upgrades; ok nicm (curses) bcook (ssl) ok schwarze, who provided a lot of feedback and assistance ok tb natano jung | |||
2015-12-29 | mention that ibuf_free() does not need a NULL check. | Sebastian Benoit | |
2015-12-29 | check for NULL in ibuf_free(). | Sebastian Benoit | |
ok and slight improvement, mmcco@ ok semarie@ and encouragement tedu@ krw@ | |||
2015-12-28 | Switch login(3) from lseek+read/write to pread/pwrite and only do the pread() | Philip Guenther | |
if the data is needed. Use O_CLOEXEC on the internal fd as MT paranoia. Fix cast in offset calculation; delete register keyword; prefer memset() over bzero() ok millert@ | |||
2015-12-09 | Add a cast to silence a compiler warning by clang on FreeBSD. | tb | |
From Craig Rodrigues. ok tedu@ | |||
2015-12-05 | Do not loop on EAGAIN in imsg_read(). Better to return the error to the | Claudio Jeker | |
caller and let him do another poll loop. This fixes spinning relayd processes seen on busy TLS relays. OK benno@ henning@ | |||
2015-11-27 | Remove three NULL-checks before free(). ok millert@ | mmcc | |
2015-11-26 | Use the backchannel for all error messages instead of syslog(3). | Todd C. Miller | |
OK deraadt@ beck@ | |||
2015-11-11 | creat() -> open equiv; from Frederic Nowak | Theo de Raadt | |
2015-11-10 | update NAME section to include all documented functions, | Jason McIntyre | |
or otherwise change Dt to reflect the name of an existing function; feedback/ok schwarze | |||
2015-10-15 | Don't Xr flock, since that is not the locking method used. | Theo de Raadt | |
ok millert | |||
2015-09-14 | Remove useless quoting from .Fo and .Fn function names, to prevent | Ingo Schwarze | |
development of a cargo cult in case people look at existing files for examples. This achieves a consistent .Fo and .Fn quoting style across the whole tree. | |||
2015-09-14 | in the SYNOPSIS, make void function arguments explicit | Ingo Schwarze | |
2015-09-10 | reduce more .Nd to one line and kill more .Tn | Ingo Schwarze | |
2015-09-10 | reduce .Nd to one line and kill .Tn while here | Ingo Schwarze | |
2015-08-28 | Remove lies about openpty(4) searching for a free pseudo-tty by iterating | Mark Kettenis | |
through all existing pseudo-tty devices in /dev. | |||
2015-08-20 | remove cast of malloc(), since stdlib.h is included | Theo de Raadt | |
2015-07-19 | Handle malloc(0) returning NULL (which can happen on some other | Nicholas Marriott | |
platforms) by explicitly making imsg->data = NULL when there is no data. ok deraadt | |||
2015-07-15 | typo in manual page. | Igor Sobrado | |
ok jsing@ | |||
2015-07-12 | Use memset instead of bzero for better portability. | Nicholas Marriott | |
ok gilles claudio doug | |||
2015-07-11 | typo in embedded code block; from Ben Cornett | Theo de Raadt | |
2015-07-03 | bzero cmsgbuf before using it, silences valgrind warnings. | Bryan Steele | |
henning@ "sure" | |||
2015-06-11 | The correct semantic is to check msgbuf_write() for <= 0, not just < 0. | Reyk Floeter | |
Fix one occurence in imsg_flush() and clarify it the man page. Discussed with at least blambert@ jsg@ yasuoka@. OK gilles@ | |||
2015-06-03 | Do not assume that asprintf() clears the pointer on failure, which | Todd C. Miller | |
is non-portable. Also add missing asprintf() return value checks. OK deraadt@ guenther@ doug@ | |||
2015-04-24 | Use strtonum() instead of strtoul() when parsing uid/gid so we get | Todd C. Miller | |
consistent handling of negative ids on 32bit/64bit systems. The only negative uid/gid allowed is -1 which is special-cased so it can be preserved when writing the new master.passwd file instead of being written as an unsigned number. OK deraadt@ | |||
2015-03-15 | tzfile.h is an internal header that should never have been installed. | Todd C. Miller | |
What's worse, the tzfile.h that gets installed is over 20 years old and doesn't match the real tzfile.h in libc/time. This makes the tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE define has been moved to time.h temporarily until its usage is replaced by 1900 in the tree. Actual removal of tzfile.h is pending a ports build. Based on a diff from deraadt@ |