summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2016-08-30Use struct stat for storing attributes in fusebufs, because using structMartin Natano
vattr in userspace is suboptimal as some related helpers are not available, e.g. VATTR_NULL() and IFTOVT(). The conversion is now done in the kernel where it belongs. As a side effect the <sys/vnode.h> include can be removed from libfuse. tweaks and ok guenther
2016-08-30Use a constant format string and output the variable part with %sPhilip Guenther
ok krw@ millert@
2016-08-30Use O_CLOEXEC when opening fds local to a functionPhilip Guenther
ok jca@ krw@
2016-08-29Store the return value of mbrtowc() in a size_t, not int.Todd C. Miller
OK schwarze@
2016-08-28Don't call lstat() before readlink() just to see if it's a symlink,Philip Guenther
as readlink() will tell you that more cheaply. ok millert@
2016-08-27Stop recommending the non-standard and slightly dangerous fgetln(3).Ingo Schwarze
Recommend POSIX getline(3) instead.
2016-08-27When a precision is specified for a string format use strnlen()Todd C. Miller
to determine the length instead of doing it manually. OK schwarze@
2016-08-27Be more strict when parsing TLS extensions.Joel Sing
Based on a diff from Kinichiro Inoguchi. ok beck@
2016-08-27improve revision 1.2: in unusual cases, fgetwc(3) can succeedIngo Schwarze
even though ferror(3) is already set; also from Andrey Chernov <ache at freebsd dot org>; OK millert@
2016-08-27Pull in <stdio.h> for NULLPhilip Guenther
ok deraadt@
2016-08-27Pull in <stdio.h> for NULLPhilip Guenther
ok deraadt@
2016-08-27Pull in <stdio.h> for NULLPhilip Guenther
ok deraadt@
2016-08-27Pull in <sys/time.h> for struct timespecPhilip Guenther
ok deraadt@
2016-08-26Pull in <time.h> for clock_gettime()Philip Guenther
ok deraadt@
2016-08-25After read errors, fgetln(3) sometimes succeeded (returning non-NULL)Ingo Schwarze
and failed (setting errno and ferror(3)) both at the same time. That's a bad idea in general, and here in particular since returning partial lines was neither reliable (sometimes, you got NULL anyway) nor predictable (almost always, the line would be truncated long before the actual read error). Instead, on read failure, fail properly and always return NULL. Issue found in a discussion with Andrey Chernov <ache at freebsd dot org> who finally agreed to move FreeBSD into the same direction. The fix is joint work with and OK by millert@.
2016-08-24set the error indicator on malloc(3) failure;Ingo Schwarze
from Andrey Chernov <ache at freebsd dot org>; OK millert@
2016-08-22Various clean up and reorganisation of the connection info handling code.Joel Sing
In particular, rename tls_free_conninfo() to tls_conninfo_free() and make it a real free function. Rename tls_get_conninfo() to tls_conninfo_populate() and have it allocate the struct tls_conninfo (after freeing any existing one). ok beck@
2016-08-22Stick with the usual 'if NULL return NULL' idiom.Joel Sing
ok beck@
2016-08-22Bump TLS_API due to the addition of server side SNI functions.Joel Sing
2016-08-22Bump libtls minor due to the addition of symbols.Joel Sing
2016-08-22Provide an API that enables server side SNI support - add the ability toJoel Sing
provide additional keypairs (via tls_config_add_keypair_{file,mem}()) and allow the server to determine what servername the client requested (via tls_conn_servername()). ok beck@
2016-08-22Create contexts for server side SNI - these include the additional SSL_CTXJoel Sing
that is required for certificate switching with libssl and the certificate itself so that we can match against the subject and SANs. Hook up the servername callback and switch to the appropriate SSL_CTX if we find a matching certificate. ok beck@
2016-08-21bugfix: when fgetwc(3) fails, fgetwln(3) must fail as well;Ingo Schwarze
OK jca@ martijn@ millert@
2016-08-21fix obvious typo in the .Dt section numberIngo Schwarze
2016-08-20Sync connect_wait() example with its real usage in ftp(1).Todd C. Miller
2016-08-20Declare all _asr_* debug functions as hidden.Jeremie Courreges-Anglas
Reported by & similar diff by guenther@ some time ago, ok eric@
2016-08-18Add an EXAMPLES section that illustrates how to deal with connect(2)Todd C. Miller
returning EINTR. OK jung@ deraadt@
2016-08-18Split out the TLS server SSL_CTX allocation and configuration code, soJoel Sing
that it can be reused to allocate the additional SSL_CTXs needed for SNI. ok reyk@
2016-08-18Rework parts of the libtls man page for clarity. Split out the connectionJoel Sing
information related functions under their own heading and dedup the text relating to when these functions can be called. With input from and ok jmc@
2016-08-17% is escaped with more %, not backslash.Ted Unangst
2016-08-17Generate syslog warnings for %s fmt strings NULL to "(null)" conversions.Theo de Raadt
Over time we can repair software which performs this non-standard behaviour, and fix bugs along the way. Let's first find out how bad the situation is by deploying this in snapshots. This type of logging is possible because OpenBSD syslog_r(3) -> sendsyslog(2) is side-effect free enough to be used in the bowels of libc. ok tedu
2016-08-17wrterror() is fatal, delete dead code; ok tom@ natano@ tedu@Otto Moerbeek
2016-08-15The tls_conninfo serial is also unused.Joel Sing
2016-08-15Group conninfo fields by connection and peer cert based information,Joel Sing
sort and remove unused fingerprint.
2016-08-15Fix some style(9) issues.Joel Sing
2016-08-15Explicitly pass in an SSL_CTX * to the functions that operate on one,Joel Sing
instead of assuming that they should use the one associated with the TLS context. This allows these functions to be used with the additional SSL contexts that are needed to support server-side SNI. Also rename tls_configure_keypair() to tls_configure_ssl_keypair(), so that these functions have a common prefix. ok reyk@
2016-08-15add a bit of spacing to previous, to keep the notes about deprecatedJason McIntyre
functions out the way of the main body; ok guenther
2016-08-14Reduce qabs() and qdiv() to aliases of llabs() and lldiv().Philip Guenther
Merge the manual pages and call them deprecated there. ok and manpage tweak jmc@, ok natano@
2016-08-14Refer to /etc/passwd consistently as the "legacy password file" andTheo Buehler
remove some references to differences between versions 6 and 7. ok jmc, millert, tedu
2016-08-13modern interfaces should use modern speelings, so spell quad_t as int64_t.Ted Unangst
2016-08-13Avoid leaking memory if tls_config_set_alpn() is called multiple timesJoel Sing
(this was in the original commit, but got reverted in the recommit).
2016-08-13Load CA, certificate and key files into memory when the appropriateJoel Sing
tls_config_set_*_file() function is called. This allows us to immediately propagate useful error messages, play more nicely with privsep/pledge and have a single code path. Instead of always loading the default CA when tls_config_new() is called, defer and only load the default CA when tls_configure() is invoked, if a CA has not already been specified. ok beck@ bluhm@
2016-08-12Bump libtls minor due to symbol additions.Joel Sing
2016-08-12Add ALPN support to libtls.Joel Sing
ok beck@ doug@
2016-08-11Between relro and previous RWX work, the __{got,plt}_{start,end} symbolsPhilip Guenther
are no longer needed by ld.so. Move them to the m88k-specific list, as it hasn't made the jump. ok deraadt@
2016-08-10armish handled some early-gen arm machines, which required tons ofTheo de Raadt
workarounds. Some of them will soon stand in the way of armv7. Off to the attic you go.
2016-08-09Expand the asynchronous connect information and move it out ofTodd C. Miller
ERRORS and into a new second paragraph. Adapted from NetBSD. OK deraadt@ jmc@
2016-08-09Document that connect goes async when interrupted by signal.Todd C. Miller
2016-08-08Look for a PT_GNU_RELRO section and, if present, mprotect that rangePhilip Guenther
instead of the [__got_start, __got_end) range. Also, instead of mprotecting the [__plt_start, __plt_end) range, just scan for sections which are both writable and executable and mprotect them to read-only. (This part was stolen from kettenis@) ok kettenis@
2016-08-07Update the link for the getentropy(2) manual to man.openbsd.org/Theo Buehler
ok deraadt@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-06 19:27:22 +0000