summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2016-01-07fix SEE ALSO;Jason McIntyre
2016-01-07Move sndiod man page to section 8.Alexandre Ratchov
suggested by deraadt, fixes from jmc, ok millert
2016-01-06add a bug that the path whitelist is not available at this time.Ted Unangst
2016-01-06Long ago, malloc internally had two kinds of failures, warnings and errors.Ted Unangst
The 'A' option elevated warnings to errors, and has been the default for some time. Then warnings were effectively eliminated in favor of everything being an error, but then the 'a' flag turned real errors into warnings! Remove the 'a' option entirely. You shouldn't have used it anyway. ok tb tdeval
2016-01-05Use "path" not "file" as the function arg to utimes() and utimensat().Todd C. Miller
The DESCRIPTION section already referred to "path" in some places.
2016-01-04Follow style(9) and drop lint /* NOTREACHED */ annotations fromtb
the examples. Diff from Juuso Lapinlampi < wub () partyvan ! eu >, thanks! ok schwarze@
2016-01-04Bugfix: When errno happens to be EILSEQ upon entry to fgetws(3),Ingo Schwarze
and when the file ends without a terminating Ln character, fgetws(3) discarded any characters read and reported bogus EOF. Never inspect errno(2) unless right after an error occurred! OK millert@
2016-01-04Fix lots of bugs.Ingo Schwarze
1. When fprintf(fp, "...%ls...", ...) encounters an encoding error, do not destroy all the fp->_flags, which made the file permanently unreadable and unwriteable. 2. Do not change fp->_flags at all in case of encoding errors. Neither the manual nor POSIX ask for it, no other conversions set the error indicator, and it isn't needed because the return value reports failure and must be checked anyway. 3. Detect failure in mbrtowc(3), do not silently treat invalid bytes in the format string as the end of the format string. 4. Detect failure of __find_arguments(), no matter whether due to out of memory conditions or encoding errors, and gracefully fail rather than accessing an invalid pointer. 5. Remove the pointless and slightly dangerous errno = EILSEQ overrides after functions that already do that and are required by the standard to do so. OK jca@ on items 1, 2, and 5. OK millert@ on the complete diff. "Completely brutal mix of bugs." deraadt@
2016-01-04Calling clone(2) with CLONE_NEWPID yields multiple processes with pid=1.Brent Cook
Work around this particular case by reseeding whenever pid=1, but as guenther@ notes, directly calling clone(2), and then forking to match another pid, provides other ways to bypass new process detection on Linux. Hopefully at some point Linux implements something like MAP_INHERIT_ZERO, and does not invent a corresponding mechanism to subvert it. Noted by Sebastian Krahmer and the opmsg team. See http://stealth.openwall.net/crypto/randup.c for a test program. ok beck@
2015-12-30Document that the ssl free() functions are NULL safe. OK mmcc@Todd C. Miller
2015-12-30another case where bad things would happen after wrterrorTed Unangst
2015-12-30if somebody makes the mistake of disabling abort, don't deref null inTed Unangst
validate_junk. from Michal Mazurek
2015-12-29Verify that the section header size supplied in the ELF header is whatmmcc
we expect it to be. This prevents out-of-bounds access or excessive memory allocation on a malformed ELF header. Found by Serguey Parkhomovsky with AFL. Improved by and ok kettenis@
2015-12-29mention that ibuf_free() does not need a NULL check.Sebastian Benoit
2015-12-29check for NULL in ibuf_free().Sebastian Benoit
ok and slight improvement, mmcco@ ok semarie@ and encouragement tedu@ krw@
2015-12-28Remove NULL-checks before free() and needless argument casts.mmcc
ok tb@
2015-12-28Remove NULL-checks before free() and unnecessary argument casts.mmcc
ok tb@
2015-12-28Remove NULL-checks before free() and a few related dead assignments.mmcc
ok and valuable input from millert@
2015-12-28Switch login(3) from lseek+read/write to pread/pwrite and only do the pread()Philip Guenther
if the data is needed. Use O_CLOEXEC on the internal fd as MT paranoia. Fix cast in offset calculation; delete register keyword; prefer memset() over bzero() ok millert@
2015-12-27remove unused variableCharles Longeau
ok tedu@
2015-12-25Simplify allocation logic based on free and realloc's behavior on NULL.mmcc
ok tedu@
2015-12-25revert change to call kevent immediately.Ted Unangst
tcpbench (at a minimum) relies on the old behavior of changes all happening after all event handlers run. in particular, it resets the event for the listening socket *before* calling accept(), when it is still readable. kevent then (correctly) says it is readable on the next go through the loop. silly, subtle, and stupid. problem reported by kettenis
2015-12-25Add missing second argument to FD_SET macro in example code snippet.tb
Spotted and diff provided by d ! lowe () openmailbox ! org, thanks! ok schwarze@
2015-12-24Both our manual and POSIX ask us to set the error indicator when anIngo Schwarze
encoding error occurs, so do it. While here, do not set errno after mbrtowc(3) failure; mbrtowc(3) already does that, and that behaviour is required by the standard. ok jca@ guenther@ "nice find" deraadt@
2015-12-24remove NULL-check before free()mmcc
2015-12-24More adress -> addressmmcc
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2015-12-23remove two NULL castsmmcc
2015-12-23Remove the rest of the scaffolding for nonexistent ElGamal support,mmcc
which has been disabled for sixteen years. ok millert@, tb@, sthen@
2015-12-23Remove NULL casts and tweak style in a few places. A more invasivemmcc
version of this diff was reviewed by tb@
2015-12-23remove NULL-checks before free()mmcc
2015-12-23remove NULL-checks before free()mmcc
2015-12-23remove a few NULL-checks before free()mmcc
2015-12-23Update sqlite3 to 3.9.2. Bump major, regen .pc and header. ChangesJames Turner
available here: http://sqlite.org/changes.html Tested in bulk by aja@. ok landry@
2015-03-16Update sqlite3 to 3.8.7.4. Changes available here: ↵James Turner
http://sqlite.org/changes.html#version_3_8_7_4 ok landry@
2012-04-14sqlite 3.7.11 library, vendor sourcesMarc Espie
2015-12-23assign pointer NULL rather than 0mmcc
2015-12-23assign pointer to NULL rather than 0mmcc
2015-12-22remove NULL-checks before free()mmcc
2015-12-22initialize a pointer to NULL rather than 0mmcc
2015-12-20Expose internal functions necessary to open audio devices and midiAlexandre Ratchov
ports using existing file descriptors.
2015-12-20Clean up a condition. No functional change. ok tb@mmcc
2015-12-19gethostbyname2() and gethostbyaddr() need <sys/socket.h>; discussed withTim van der Molen
millert@
2015-12-19Style cleanup and removal of needless casts. ok tb@mmcc
2015-12-19Remove NULL-checks before free(). ok tb@mmcc
2015-12-19More style improvement and removal of NULL/allocation casts.mmcc
ok tb@
2015-12-18Remove code for unimplemented ElGamel support that's been disabled formmcc
sixteen years. ok millert@, tb@, sthen@
2015-12-18A few more NULL casts and style tweaks. No functional change.mmcc
2015-12-18Cleanup and modernization. No functional change. Discussed with halex@.mmcc
2015-12-18Fix wrong answer if the imaginary part is zero.Alexandr Shadchin
NetBSD also turn off this piece of code. ok tb@