summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2012-11-30Remove retired Thawte/Verisign certificates.Stuart Henderson
Remove intermediate GoDaddy certificate, this file should just contain roots. ok beck@ phessler@
2012-11-30Document a known bug in the DES crypt cipher implementation which we'reStefan Sperling
not going to fix in order to stay compatible with legacy password data. Nobody should use DES crypt anyway these days. See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc for details about this bug. Discussed with deraadt and beck about half a year ago (I'm pruning Ms from my tree).
2012-11-29- put the various options into the same order as those in resolv.hJason McIntyre
- sync RES_DEBUG with resolv.conf.5 - document RES_PRIMARY, but mark it unsupported (like we already do for RES_AAAONLY) - use the exact same text (about being enabled by default) for RES_RECURSE as for the other two defaults - document RES_INSECURE{1,2} - description lifted from resolv.conf.5 - document RES_NOALIASES - mostly sync the RES_USE_EDNS0 text with resolv.conf.5 - RES_USE_DNSSEC not documented for now. something to come... ok sthen
2012-11-29deal with vendor branch sillyness: those files are goneMarc Espie
2012-11-29bump major (new functions), regen relevant filesMarc Espie
2012-11-29lemon.c fixed differently upstream, solve conflictMarc Espie
2012-11-29minor update to 3.7.14.1Marc Espie
2012-11-29struct ktr_header changed back in April 2012, rearranging the members,Philip Guenthe
adding the thread ID, and switching the timestamp to a struct timespec. Correct the description of the EINVAL error.
2012-11-29Change scandir()'s 'select' argument fromPhilip Guenthe
int (*)(struct dirent *) to int (*)(const struct dirent *) to match POSIX. ok millert@, ports check by naddy@
2012-11-24Saner implementation for self-contained hostent and netent, and alsoEric Faurot
a couple of fixes.
2012-11-24knfEric Faurot
2012-11-24make separate structures for pack and unpackEric Faurot
2012-11-23Copy from the is* manpages the CAVEAT about the input range.Philip Guenthe
ok jmc@
2012-11-23Remplace aucat server by a new sndiod daemon aimed to be simplerAlexandre Ratchov
smaller and faster than aucat. It's a drop in replacement with the following exceptions that don't affect the default setup: - The sample rate and the encoding are a per-device parameters thus -r and -e options must precede the corresponding -f option - MIDI thru boxes are dynamically created and no -M option is required anymore, so -M was removed. - MIDI ports are exposed with a new ``midi/N'' name, rather than abusing MIDI thru boxes. with help from armani@, ok deraadt@
2012-11-23Make the client wait for the first flow control message rather thanAlexandre Ratchov
assuming it can send a full initial data buffer. This requires protocol version bump (but no library version bump).
2012-11-22Do not pass -Wmissing-prototypes when building on a non-ELF platform withMiod Vallat
gcc 3 as the compiler. The way constructors are built triggers this warning, which is fatal because of -Werror. ok espie@ guenther@
2012-11-19remove some useless Tn and double punctuation;Jason McIntyre
2012-11-19RES_IGNTC is no longer ignored; ok sthenJason McIntyre
2012-11-18Ensure that the base provided to strtol(3) is between 2 and 36 inclusive,Joel Sing
or the special value of 0. ok deraadt@ otto@
2012-11-17tweak previous;Jason McIntyre
2012-11-17Clarify ss_sp's meaning and that alt stacks are per-threadPhilip Guenthe
Correct EPERM vs EINVAL bits, mention posix and stack_t ok miod@ beck@
2012-11-15imsg_get() returns ssize_t, not size_t.Kenneth R Westerback
2012-11-12make scan_scaled set errno to EINVAL rather than ERANGE if it encountersAlexander Hall
an invalid multiplier, like the man page says it should "looks sensible" deraadt@, ok ian@
2012-11-12Fix pid matching on kernel crashdumps in kvm_getprocs(KERN_PROC_PID)Philip Guenthe
2012-11-10raise() is now correctly defined in libcPhilip Guenthe
2012-11-10raise() sends the signal to the current thread and only one error can occur.Philip Guenthe
ok jmc@
2012-11-10Per POSIX, fix raise() and abort() to send the signal to the current thread.Philip Guenthe
Should make coredumps from abort() easier to debug too. ok kurt@
2012-11-05typedef pthread_key_t to an int instead of a volatile int, reverts a chunkLandry Breuil
from r1.11. This allows webkit with --enable-debug to build, and is in line with what FreeBSD/NetBSD uses. ok kettenis@ guenther@
2012-11-02Add a new malloc option 'U' => "Free unmap" that does the guarding/Damien Miller
unmapping of freed allocations without disabling chunk randomisation like the "Freeguard" ('F') option does. Make security 'S' option use 'U' and not 'F'. Rationale: guarding with no chunk randomisation is great for debugging use-after-free, but chunk randomisation offers better defence against "heap feng shui" style attacks that depend on carefully constructing a particular heap layout so we should leave this enabled when requesting security options.
2012-11-02Use dedicated messages for flow control instead of abusing clock tickAlexandre Ratchov
messages and enable flow control for MIDI. Since this requires protocol version bump, both sndiod and libsndio must be kept up to date to work together.
2012-11-01Register cleanup handler passed by ld.so with atexit(3).Mark Kettenis
ok kurt@
2012-10-31On amd64 OPENSSL_cpuid_setup and OPENSSL_ia32cap_P are now hidden so we don'tMark Kettenis
have to go through the PLT/GOT to get at them anymore. In fact going through the GOT now fails since we no longer have a GOT entry for OPENSSL_ia32cap_P. Fixes the problem spotted by jasper@ and sthen@. Based on a diff from mikeb@ who did most of the actual work of tracking down the issue. ok millert@, mikeb@
2012-10-27make midi code use non-blocking i/o as does audio code, in orderAlexandre Ratchov
to make both look similar
2012-10-27crank SIO_MAXNFDSAlexandre Ratchov
2012-10-27check that polled fd number is smaller than SIO_MAXNFDSAlexandre Ratchov
2012-10-27include netinet/in.h to get htons & friends prototypesAlexandre Ratchov
2012-10-22Restore r1.10, lost during last update:Miod Vallat
Disable use of dladdr() on a.out arches, they do not provide it (yet);
2012-10-22struct buf -> ibuf; from Sunil NimmagaddaJason McIntyre
2012-10-21Add the IP_DIVERTFL socket option on divert(4) sockets to controlSebastian Benoit
which packets (as in direction) of the traffic will be diverted through the divert socket. ok claudio@, henning@
2012-10-17reword this sentence to avoid ambiguity;Jason McIntyre
original diff from dawe; guenther pointed out another interpretation while here, Fn -> Nm;
2012-10-16Make sleep(3) and usleep(3) more consistent and remove extraneousTodd C. Miller
historic implementation details that get in the way of readability. Our usleep(3) does not return EINVAL for values >= 1,000,000 but still mention it in CAVEATS since some do. Portions adapted from FreeBSD. OK jmc@
2012-10-13Makefile and header changes for OpenSSL-1.0.1cDamien Miller
major cranks
2012-10-13import files that CVS missed; sighDamien Miller
2012-10-13resolve conflictsDamien Miller
2012-10-13import OpenSSL-1.0.1cDamien Miller
2012-10-12For consistency with other OSes and ease of porting, makePhilip Guenthe
get{sock,peer}name() behave like accept() when the involved UNIX-domain socket isn't bound to an address, returning an AF_UNIX sockaddr with zero-length sun_path. Based on diff from robert@ and mikeb@ ok robert@ deraadt@
2012-10-05add send(2) MSG_DONTWAIT support which enables us to choose nonblockingYASUOKA Masahiko
or blocking for each send(2) call. diff from UMEZAWA Takeshi ok bluhm
2012-10-03tweak text for consistency; from artturi almJason McIntyre
2012-09-27last stage of rfc changes, using consistent Rs/Re blocks, and moving theJason McIntyre
references into a STANDARDS section;
2012-09-26Remove the first paragraph. The first sentence is already stated in theBrad Smith
STANDARDS section and the second sentence is bogus. ok matthew@