Age | Commit message (Collapse) | Author |
|
Remove intermediate GoDaddy certificate, this file should just contain roots.
ok beck@ phessler@
|
|
not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.
Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).
|
|
- sync RES_DEBUG with resolv.conf.5
- document RES_PRIMARY, but mark it unsupported (like we already do
for RES_AAAONLY)
- use the exact same text (about being enabled by default) for
RES_RECURSE as for the other two defaults
- document RES_INSECURE{1,2} - description lifted from resolv.conf.5
- document RES_NOALIASES
- mostly sync the RES_USE_EDNS0 text with resolv.conf.5
- RES_USE_DNSSEC not documented for now. something to come...
ok sthen
|
|
|
|
|
|
|
|
|
|
adding the thread ID, and switching the timestamp to a struct timespec.
Correct the description of the EINVAL error.
|
|
int (*)(struct dirent *)
to
int (*)(const struct dirent *)
to match POSIX.
ok millert@, ports check by naddy@
|
|
a couple of fixes.
|
|
|
|
|
|
ok jmc@
|
|
smaller and faster than aucat. It's a drop in replacement with the
following exceptions that don't affect the default setup:
- The sample rate and the encoding are a per-device parameters
thus -r and -e options must precede the corresponding -f option
- MIDI thru boxes are dynamically created and no -M option
is required anymore, so -M was removed.
- MIDI ports are exposed with a new ``midi/N'' name, rather
than abusing MIDI thru boxes.
with help from armani@, ok deraadt@
|
|
assuming it can send a full initial data buffer. This requires protocol
version bump (but no library version bump).
|
|
gcc 3 as the compiler. The way constructors are built triggers this warning,
which is fatal because of -Werror. ok espie@ guenther@
|
|
|
|
|
|
or the special value of 0.
ok deraadt@ otto@
|
|
|
|
Correct EPERM vs EINVAL bits, mention posix and stack_t
ok miod@ beck@
|
|
|
|
an invalid multiplier, like the man page says it should
"looks sensible" deraadt@, ok ian@
|
|
|
|
|
|
ok jmc@
|
|
Should make coredumps from abort() easier to debug too.
ok kurt@
|
|
from r1.11. This allows webkit with --enable-debug to build, and is in
line with what FreeBSD/NetBSD uses.
ok kettenis@ guenther@
|
|
unmapping of freed allocations without disabling chunk randomisation
like the "Freeguard" ('F') option does. Make security 'S' option
use 'U' and not 'F'.
Rationale: guarding with no chunk randomisation is great for debugging
use-after-free, but chunk randomisation offers better defence against
"heap feng shui" style attacks that depend on carefully constructing a
particular heap layout so we should leave this enabled when requesting
security options.
|
|
messages and enable flow control for MIDI. Since this requires protocol
version bump, both sndiod and libsndio must be kept up to date to work
together.
|
|
ok kurt@
|
|
have to go through the PLT/GOT to get at them anymore. In fact going through
the GOT now fails since we no longer have a GOT entry for OPENSSL_ia32cap_P.
Fixes the problem spotted by jasper@ and sthen@. Based on a diff from mikeb@
who did most of the actual work of tracking down the issue.
ok millert@, mikeb@
|
|
to make both look similar
|
|
|
|
|
|
|
|
Disable use of dladdr() on a.out arches, they do not provide it (yet);
|
|
|
|
which packets (as in direction) of the traffic will be diverted
through the divert socket.
ok claudio@, henning@
|
|
original diff from dawe; guenther pointed out another interpretation
while here, Fn -> Nm;
|
|
historic implementation details that get in the way of readability.
Our usleep(3) does not return EINVAL for values >= 1,000,000 but
still mention it in CAVEATS since some do.
Portions adapted from FreeBSD. OK jmc@
|
|
major cranks
|
|
|
|
|
|
|
|
get{sock,peer}name() behave like accept() when the involved UNIX-domain
socket isn't bound to an address, returning an AF_UNIX sockaddr
with zero-length sun_path. Based on diff from robert@ and mikeb@
ok robert@ deraadt@
|
|
or blocking for each send(2) call.
diff from UMEZAWA Takeshi
ok bluhm
|
|
|
|
references into a STANDARDS section;
|
|
STANDARDS section and the second sentence is bogus.
ok matthew@
|