summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2014-12-14macro cleanup; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-13Provide our own copy of {round,trunc}_page() now that uvm's is unreachable fromMiod Vallat
non-_KERNEL code.
2014-12-13macro cleanup; from Kaspars Bankovskis, tweaked a bitIngo Schwarze
2014-12-12catch up with swab.c rev. 1.9:Ingo Schwarze
update SYNOPSIS and DESCRIPTION and add STANDARDS
2014-12-12markup fixes from Kaspars at Bankovskis dot net;Ingo Schwarze
some of this is already contained upstream in NetBSD, the rest will be sent there
2014-12-12markup fixes, and repair some wrong argument types while here;Ingo Schwarze
from Kaspars at Bankovskis dot net
2014-12-12sysctl kern.global_ptrace.Ted Unangst
controls whether you can ptrace any process with appropriate privileges or only one own's children. ok deraadt
2014-12-12Xr getdtablecountTheo de Raadt
2014-12-11update swab() to match the current posix definition. "rationale: none."Ted Unangst
rewrite the function to be simpler as well. the compiler can unroll the loop for us if necessary. ok schwarze
2014-12-11we do not need the complexity of an assembly swab function here.Ted Unangst
ok deraadt
2014-12-11Fix previous:Ingo Schwarze
As pointed out by stsp@, LC_CTYPE *does* affect the ctype.h functions. Use a wording similar to a suggestion by deraadt@. Feedback and OK jmc@, OK stsp@.
2014-12-11Remove an undocumented limit on the length of the pattern and stringTodd C. Miller
to match of PATH_MAX. As fnmatch() is used for matching more than just pathnames, this can prevent legitimate matches for long strings or partterns. OK miod@ tedu@
2014-12-10add missing sentence to RETURN VALUES; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10use .Rv and simplify wording; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10use .Rv; no change of meaning; from Kaspars at Bankovskis dot netIngo Schwarze
2014-12-10ssl3_init_finished_mac() calls BIO_new() which can fail since it in turnJoel Sing
calls malloc(). Instead of silently continuing on failure, check the return value of BIO_new() and propagate failure back to the caller for appropriate handling. ok bcook@
2014-12-10Remove support for GOST R 34.10-94 signature authentication, along withJoel Sing
the two ciphersuites that use it. GOST94 public/private keys have been long obsoleted and libcrypto does not have support for them anyway. Discussed with Dmitry Eremin-Solenikov.
2014-12-10libssl major++Joel Sing
2014-12-10Add support for ALPN.Joel Sing
Based on OpenSSL and BoringSSL. ok bcook@
2014-12-10add stdint.h to ssl.h.Brent Cook
ok jsing@
2014-12-10Prefer .In and .Rv -stdPhilip Guenther
2014-12-10Improve the description and layout of the RUSAGE_* values, and do somePhilip Guenther
general cleanup diff from Kaspars Bankovskis (kaspars (at) bankovskis.net) ok and tweaks schwarze@, jmc@
2014-12-09Xr and Ox fixes;Jason McIntyre
2014-12-09random seed buffer must be unsignedTheo de Raadt
2014-12-09put back some information what the character classes actually mean;Ingo Schwarze
while here, remove the lie that regex(3) character classes would depend on the locale; ok jmc@
2014-12-09LC_CTYPE has no effect on ctype(3), but on wctype(3); ok jmc@Ingo Schwarze
2014-12-09Import new amd64 assembly versions of strchr/index, strrchr/rindex,Reyk Floeter
and strlen that provide a significantly faster performance than our previous .c or .S implementations. Based on NetBSD's code. Tested with different amd64 CPUs. ok deraadt@ mikeb@
2014-12-09no more string(3);Jason McIntyre
2014-12-09no more ctype(3);Jason McIntyre
2014-12-09fix NAME;Jason McIntyre
2014-12-09improve warnings from rand_r(), rand(), and random()Theo de Raadt
It may take a few iterations to get the tone right. previously discussed with millert
2014-12-09In ingo's new world order, we do not want multiple manual pages describingTheo de Raadt
the same thingies. Therefore these "lists of functions" man pages can go away. Hurray! I've wanted these pages to die for around 10 years! ok ingo (and i think jmc)
2014-12-09more standardsier: cast to int to make sure we keep the negative numbers.Ted Unangst
observed by jonas termansen
2014-12-08Oops, got the sense of the test backwards. Hilarious that we didn't spot it.Theo de Raadt
2014-12-08Change rand(), random(), drand48(), lrand48(), mrand48(), and srand48()Theo de Raadt
to returning strong random by default, source from arc4random(3). Parameters to the seeding functions are ignored, and the subsystems remain in strong random mode. If you wish the standardized deterministic mode, call srand_deterministic(), srandom_determistic(), srand48_deterministic(), seed48_deterministic() or lcong48_deterministic() instead. The re-entrant functions rand_r(), erand48(), nrand48(), jrand48() are unaffected by this change and remain in deterministic mode (for now). Verified as a good roadmap forward by auditing 8800 pieces of software. Roughly 60 pieces of software will need adaptation to request the deterministic mode. Violates POSIX and C89, which violate best practice in this century. ok guenther tedu millert
2014-12-08typoTheo de Raadt
2014-12-08major++Ted Unangst
2014-12-08Add chflagsat(), modeled on fchmodat() with name to match FreeBSD.Philip Guenther
2014-12-08more libc, less kernel documentationTed Unangst
2014-12-08tweak recommendation to use arc4random_bufTed Unangst
2014-12-08delete documentation for deleted DES interfacesTed Unangst
2014-12-08remove cfree from documentationTed Unangst
2014-12-08don't do silly (and slow) one byte reads in unbuffered mode.Ted Unangst
from enh at google
2014-12-08delete obsolete sunos cfree function. ok deraadt millert naddyTed Unangst
2014-12-08add siphash from the kernel to libcTed Unangst
2014-12-08remove setkey and encrypt interfaces. they are useless and dangerous.Ted Unangst
ok deraadt naddy
2014-12-08avoid void arithmetic. from david carlierTed Unangst
2014-12-08Use platform-defined method of printing a pointer.Brent Cook
Casting a pointer to an unsigned long discards bits on an LLP64 system. ok deraadt@
2014-12-08avoid left shift overflow in reallocarray.Brent Cook
Some 64-bit platforms (e.g. Windows 64) have a 32-bit long. So, shifting 1UL 32-bits to the left causes an overflow. This replaces the constant 1UL with (size_t)1 so that we get the correct constant size for the platform. discussed with tedu@ & deraadt@
2014-12-07Allow specific libtls hostname validation errors to propagate.Brent Cook
Remove direct calls to printf from the tls_check_hostname() path. This allows NUL byte error messages to bubble up to the caller, to be logged in a program-appropriate way. It also removes non-portable calls to getprogname(). ok jsing@