summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-12-04simplify wording; triggered by a shorter diff from Kaspars Bankovskis;Ingo Schwarze
OK jmc@ jasper@
2014-12-03Move Windows OS-specific functions to make porting easier.Brent Cook
Several functions that need to be redefined for a Windows port are right in the middle of other code that is relatively portable. This patch isolates the functions that need Windows-specific implementations so they can be built conditionally in the portable tree. ok jsing@ deraadt@
2014-12-03We're not supporting 16-bit Windows, remove cast.Brent Cook
ok jsing@ deraadt@
2014-12-03handle the (impossible) situation of a size_t - 1 buffer fromTheo de Raadt
EC_POINT_point2oct so that later allocation does not overflow with miod
2014-12-03Spotted another opportunity to use reallocarray().Theo de Raadt
ok miod
2014-12-02Add brainpool curves to eccurves_default[], accidentally missing from 1.32;Miod Vallat
from OpenSSL HEAD via Thomas Jakobi.
2014-12-02add some openbsd tags, and a first pass at cleanup;Jason McIntyre
2014-12-02Kill the only instance of .Lb in our tree. It is better to not useIngo Schwarze
it at all, not even occasionally, because there is no sustainable way (and even less any portable way) to maintain the list of library names. Besides, without such a list, even the formatting looks bad. OK jmc@ bentley@
2014-12-02macro cleanup; kaspars at bankovskis dot netIngo Schwarze
2014-12-02Noone cares what castle the princess is inTheo de Raadt
2014-12-02sync bcopy/memmove/memcpy implementation with the kernel. ok deraadtTed Unangst
2014-11-30Fix a minor documentation bug: When given the old real ID unchanged,Ingo Schwarze
it is assigned to the saved ID even if no new effective ID is given, but the existing effective ID differs from the saved ID. Update STANDARDS and purge the redundant CAVEATS section. OK millert@ jmc@, no objections from tedu@
2014-11-30update STANDARDS; ok millert@ jmc@Ingo Schwarze
2014-11-30do not use .St -p1003.1d-99 which is used in exactly two pages;Ingo Schwarze
im going to delete support for it from mandoc(1)
2014-11-30Replace all 14 instances of .St -ansiC-99 in our tree with .St -isoC-99.Ingo Schwarze
The former is not used anywhere in NetBSD, FreeBSD, or DragonFly and not supported by groff, so i'm going to delete it from mandoc(1). We don't need two macros for the same thing.
2014-11-30obvious STANDARDS updateIngo Schwarze
2014-11-30move the description of flags from the SYNOPSIS to the DESCRIPTION;Ingo Schwarze
from <kaspars at bankovskis dot net>, minimally tweaked by me; ok guenther@ jmc@
2014-11-30restructure libc/string + libc/arch/*/string coperation regardingTheo de Raadt
(potentially) MD versions (function dependent, not filename dependent) split out memcpy/memmove/bcopy and strchr/index/strrchr/rindex Bring back amd64 .S versions And the final touch: switch all architectures temporarily to MI memcpy.c, which contains syslog + abort for overlapping copies. A nice harsh undefined behaviour. We will clean the entire userland of the remaining issues in this catagory, then switch to the optimised memcpy which skips the memmove check. I tried to cut this change into pieces, but testing each sub-step on every architecture is too time consuming and mindnumbing. ok miod
2006-10-10Preliminary userland bits for OpenBSD/landisk, many things coming fromMiod Vallat
NetBSD.
2014-11-30mandoc -Tlint fixes from <kaspars at bankovskis dot net>Ingo Schwarze
2014-11-30Even though not callable, "Ed" is a macro name, so for clarity,Ingo Schwarze
escape it when it appears on a macro line.
2014-11-30Remove non-portable use of .Pf that doesn't work with groff;Ingo Schwarze
found because the groff_mdoc(7) macros warn about it.
2014-11-27Ensure that sess_cert is not NULL at the start ofJoel Sing
ssl3_send_client_key_exchange(), rather than checking it in the key exchange algorithm specific code. ok beck@ miod@
2014-11-27Avoid a double-free in an error path.Joel Sing
Reported by Felix Groebert of the Google Security Team. ok beck@ miod@
2014-11-27Avoid a NULL dereference in the DTLS client that can be triggered by aJoel Sing
crafted server response used in conjunction with an anonymous DH or anonymous ECDH ciphersuite. Fixes CVE-2014-3510, which is effectively a repeat of CVE-2014-3470 in copied code. Reported by Felix Groebert of the Google Security Team. ok beck@ miod@
2014-11-26garbage collect .TnIngo Schwarze
2014-11-26remove superflous gettimeofday wrapper.Brent Cook
ok beck@ tedu@ miod@ guenther@ doug@ deraadt@
2014-11-26memset like a normal human.Brent Cook
ok beck@ tedu@ miod@
2014-11-26normalize set/getsockopt usage.Brent Cook
Remove the remaining random casts on optval. Fixups for this can be handled by the portability layer all in once place. Remove remaining fake socklen_t unions, though beck@ points out that this also removes support for socklen_t changing its length at runtime. RIP. ok tedu@ beck@ miod@ deraadt@
2014-11-26Linux has had IP_MTU since 2005, don't force it.Brent Cook
ok beck@ miod@ tedu@ deraadt@
2014-11-26macro cleanup; from kaspars at bankovskis dot netIngo Schwarze
2014-11-25zap trailing whitespace;Jason McIntyre
2014-11-25C99 says setvbuf() returns non-zero, not EOF. Also, POSIX documentsTodd C. Miller
that it returns an error for invalid mode which matches our behavior. OK jmc@ deraadt@
2014-11-25rand() is a pseudo-random number generatorTodd C. Miller
2014-11-25Don't describe random() as "better".Todd C. Miller
Remove the bug about rand() being faster. Add a bug about historical implementations seeding very poorly.
2014-11-25Warn people to use arc4random() in DESCRIPTION so they see it usingTodd C. Miller
the same text from random.3.
2014-11-25Move guts of setbuf.3 into setvbuf.3 to make it clear which oneTodd C. Miller
should be used in new code.
2014-11-25rand48(3) not drand48(3) to align with the actual man page and XrTodd C. Miller
entries.
2014-11-25macro and typo fixes from kaspars at bankovskis dot netIngo Schwarze
2014-11-25no first person in man pages.Ted Unangst
2014-11-25no need for md5 xrTed Unangst
2014-11-25revert the bludgeoning of DES. if we need a thread safe crypt, maybe it'sTed Unangst
better to find one instead of continuing to mangle this mess.
2014-11-25push some global data down into functions to make this threadlier.Ted Unangst
only doing what's needed for crypt_hashpass. sigh.
2014-11-24introduce a hashspace define and check that there's enough space toTed Unangst
write out a hash. also simplify writing out the hash.
2014-11-24check crypt() for null. noticed by Jonas TermansenTed Unangst
2014-11-23Merge from FreeBSD:Philip Guenther
------------------------------------------------------------------------ r246641 | jilles | 2013-02-10 15:09:15 -0800 (Sun, 10 Feb 2013) | 8 lines fts: Use O_DIRECTORY when opening name that might be changed by attacker. There are uncommon cases where fts_safe_changedir() may be called with a non-NULL name that is not "..". Do not block or worse if an attacker put (a (symlink to) a fifo or device where a directory used to be. MFC after: 1 week ------------------------------------------------------------------------ r241010 | jilles | 2012-09-27 15:05:54 -0700 (Thu, 27 Sep 2012) | 9 lines libc/fts: Use O_CLOEXEC for internal file descriptors. Because fts keeps internal file descriptors open across calls, making such descriptors close-on-exec helps not only multi-threaded applications but also single-threaded applications. In particular, this prevents passing a temporary file descriptor for saving the current directory to processes created via find -exec. ------------------------------------------------------------------------ ports scan for possible O_CLOEXEC affected programs by sthen@ ok millert@
2014-11-22mop up a barely started project... getting in the way of grepping the tree!Theo de Raadt
2014-11-22Fix incorrect escape.Anthony J. Bentley
2014-11-21MPE support, begone. ok teduTheo de Raadt
2014-11-21space needed between macro args and punctuation;Jason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-30 02:33:30 +0000