summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2017-08-08Stop running nd6_expire every second.Florian Obser
We know when pltime or vltime decrease to zero. Run nd6_expire then. Input & OK mpi, bluhm
2017-08-08Kernel sendsyslog(2), libc syslog(3), and syslogd(8) restrict andAlexander Bluhm
truncate the length of a syslog message to 8192 bytes. Use one global define LOG_MAXLINE for all of them. OK deraadt@ millert@
2017-08-07Since sendsyslog(2) handles the LOG_CONS parameter, the variableAlexander Bluhm
conp in syslog(3) is unused. Remove dead code. OK jca@ deraadt@
2017-08-05We only support ASCII and UTF-8, so we never need toIngo Schwarze
change _ctype_, _tolower_tab_, and _toupper_tab_. No functional change. Suggested by and OK kettenis@
2017-08-04Update libexpat to 2.2.3. Only few changes affect OpenBSD.Alexander Bluhm
OK deraadt@
2017-08-04Enable atomic support functions.Mark Kettenis
ok mlarkin@
2017-08-02Fix register numbering for OpenBSD/i386. Make exception handling work withMark Kettenis
clang on that platform. ok millert@
2017-08-01delete sigmask(3) from sigsetmask(3) SYNOPSIS and use .Xr ratherIngo Schwarze
than .Fn for it, it is documented sigblock(3) as noticed by jmc@; some minor typo and punctuation cleanup while here; OK jmc@
2017-08-01add missing and correct misspelled names, most in NAME sections;Ingo Schwarze
found with regress/usr.bin/mandoc/db/dbm_dump; OK jmc@
2017-08-01Use "volatile unsigned int" instead of _atomic_lock_t. The _atomic_lock_tMark Kettenis
isn't the same size on all our architectures and should only be used for spin locks. ok visa@, mpi@
2017-08-01correct function name;Jason McIntyre
from carlos cardenas
2017-07-30disable post fork checks for now, too much turbulence in the airTed Unangst
2017-07-29not all the world is an i386. Back out breakage.Theo de Raadt
2017-07-29Use memory barriers to prevent pointer use before initialization.Paul Irofti
This work was sparked by the topic posted on hn by wuch. I am still not sure that this fixes the defect he claims to have observed because I was not able to create a proper regress test for it to manifest. To that end, a proof of concept is more than welcomed! Thank you for the report! Discussed with and OK kettenis@, tedu@.
2017-07-29change if ((a == b)) to if (a == b); silences noisy on-by-defaultFlorian Obser
"equality comparison with extraneous parentheses [-Wparentheses-equality]" clang warning. OK deraadt, kettenis
2017-07-28Gcc3 does not have -fvisibility feature, so skip -fvisibility=hiddenKenji Aoyama
flag when compiling with gcc3. ok espie@
2017-07-27Use stdrup, to avoid clang whining about the length parameters beingTheo de Raadt
based upon input being used unsafely (they are safe) ok millert kettenis
2017-07-27bad things can (and will) happen if a threaded program calls fork() andTed Unangst
then strays off the path to exec(). one common manifestation of this problem occurs in pthread_join(), so we can add a little check there. first person to hit this in real life gets to change the error message.
2017-07-26Initialize "old" screen buffer lines before use; otherwise, they wouldIngo Schwarze
never get NUL-terminated and cause read buffer overruns. This fixes for example segfaults in sftp(1) that could be triggered by typing in an extremely long string (more than one line - the longer, the likelier to crash), then hitting backspace once. Problem reported and patch OK'ed by sthen@.
2017-07-25as noted by Hanno Boeck, using the *check_private_key functions isSebastian Benoit
tricky, especially since the manpage is full of lies. Try to make readers think twice before using them. With oks and help from schwarze@, tedu@, sthen@, jmc@
2017-07-24Rewrite and move the last remnants of the ServerHello SNI handling intoJoel Sing
tlsext_sni_serverhello_parse(). This also adds a check to ensure that if we have an existing session, the name matches what we specified via SNI. ok doug@
2017-07-24Rewrite the TLS Renegotiation Indication extension handling using CBB/CBSJoel Sing
and the new extension framework. Feedback from doug@ ok inoguchi@
2017-07-23Hook the TLS extension parsing framework into the serverhello parsing.Joel Sing
Missed in the original commit.
2017-07-22Favor err() over perror() in example.anton
ok schwarze@
2017-07-22zap trailing whitespace;Jason McIntyre
2017-07-22rework the page a bit, clarify a few things, maybe better wordingTed Unangst
2017-07-20Allow leading . in nameConstraints. from openssl via jabberwock. ok jsingTed Unangst
2017-07-20Accessing a mmap(2)ed file behind its end should result in a SIGBUSAlexander Bluhm
according to POSIX. Bring regression test and kernel in line for amd64 and i386. Other architectures have to follow. OK deraadt@ kettenis@
2017-07-20Rename TBUF_LEN and FMT_LEN to _SIZE as they contain a NUL byte.Alexander Bluhm
Change FMT_SIZE to 1024+1 for consistency. Do not loop over the format string if there is no output space left. OK deraadt@ millert@
2017-07-19Update libexpat to 2.2.2. Fixes NULL parser dereference.Alexander Bluhm
no objections deraadt@
2017-07-19Check the return value of CBB_init_fixed(), since it can fail.Joel Sing
2017-07-18Both syslog(3) and syslogd(8) truncate the message at 8192 bytes.Alexander Bluhm
Do the same in sendsyslog(2) and document the behavior. reported by Ilja Van Sprundel; OK millert@ deraadt@
2017-07-16Start rewriting TLS extension handling.Joel Sing
Introduce a TLS extension handling framework that has per-extension type functions to determine if an extension is needed, to build the extension data and parse the extension data. This is somewhat analogous to BoringSSL, however these build and parse functions are intentionally symetrical. The framework is hooked into the existing TLS handling code in such a way that we can gradual convert the extension handling code. Convert the TLS Server Name Indication extension to the new framework, while rewriting it to use CBB/CBS and be more strict in the process. Discussed with beck@ ok inoguchi@
2017-07-15Remove unused variable.Joel Sing
Reported by <dravion at ht-foss dot net>
2017-07-13Get rid of ip6.maxifprefixes and ip6.maxifdefrouters, the kernel noFlorian Obser
longer tracks prefixes or default routers from router advertisements. Pointed out by jmc. ports tree grepping sthen, who only found nsh OK mpi, sthen
2017-07-10if there are no changes for kevent, pass in NULL instead.Ted Unangst
this has no effect except to make ktrace output prettier. ok bluhm mpi
2017-07-10remove misc. depend and yacc nits that no longer matter.Marc Espie
okay millert@
2017-07-10one more instance of the previous commit; also initialize ->offset to aOtto Moerbeek
definite value in the size == 0 case
2017-07-10replace Fifos with FIFOs.David Gwynne
ok jmc@ visa@
2017-07-09use working boilerplate for yacc/lex instead of homemade rules.Marc Espie
okay millert@ (forgot the obvious scanner.l tweak in my diff)
2017-07-08update the little endian processor list to give it a chance of matchingTed Unangst
what the reader is using.
2017-07-07Only access offset if canaries are enabled *and* size > 0, otherwise offsetOtto Moerbeek
is not initialized. Problem spotted by Carlin Bingham; ok phessler@ tedu@
2017-07-06Document tls_config_set_crl_file() and tls_config_set_crl_mem().Joel Sing
Based on a diff from Jack Burton <jack at saosce dot com dot au>, thanks!
2017-07-06Bump minor due to symbol addition.Joel Sing
2017-07-06Add support for providing CRLs to libtls - once a CRL is provided weJoel Sing
enable CRL checking for the full certificate chain. Based on a diff from Jack Burton <jack at saosce dot com dot au>, thanks! Discussed with beck@
2017-07-06The 0x (or 0X) prefix in base 16 is optional so only skip over theTodd C. Miller
prefix if the character following it is a valid hex char. The C99 standard is clear that given the string "0xy" zero should be returned and endptr set to point to the "x". OK deraadt@ espie@
2017-07-06fix broken cross references; found with mandoc -TlintIngo Schwarze
2017-07-06Add ULL suffix to 64 bit constants. This avoids compiler warningsAlexander Bluhm
on i386 and allows to compile the C++ test. Upstream dropped the ULL in an insufficient attempt to make the siphash code C89 compatible. Their fix will be more complicated. No binary change.
2017-07-06Compile libexpat with -fvisibility=hidden. This restricts theAlexander Bluhm
exported symbols to the indended API. We do not need a Symbols.map anymore. Major library bump is necessary as some internal functions vanish from the ABI. Discussed upstream with Sebastian Pipping; ports bulk build ajacoutot@; OK deraadt@
2017-07-05RFC 6066 states that IP literals are not permitted in "HostName" for aJoel Sing
TLS Server Name extension, however seemingly several clients (including Python, Ruby and Safari) violate the RFC. Given that this is a fairly widespread issue, if we receive a TLS Server Name extension that contains an IP literal, pretend that we did not receive the extension rather than causing a handshake failure. Issue raised by jsg@ ok jsg@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-30 03:28:23 +0000