Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
better to find one instead of continuing to mangle this mess.
|
|
only doing what's needed for crypt_hashpass. sigh.
|
|
write out a hash. also simplify writing out the hash.
|
|
|
|
------------------------------------------------------------------------
r246641 | jilles | 2013-02-10 15:09:15 -0800 (Sun, 10 Feb 2013) | 8 lines
fts: Use O_DIRECTORY when opening name that might be changed by attacker.
There are uncommon cases where fts_safe_changedir() may be called with a
non-NULL name that is not "..". Do not block or worse if an attacker put (a
(symlink to) a fifo or device where a directory used to be.
MFC after: 1 week
------------------------------------------------------------------------
r241010 | jilles | 2012-09-27 15:05:54 -0700 (Thu, 27 Sep 2012) | 9 lines
libc/fts: Use O_CLOEXEC for internal file descriptors.
Because fts keeps internal file descriptors open across calls, making such
descriptors close-on-exec helps not only multi-threaded applications but
also single-threaded applications.
In particular, this prevents passing a temporary file descriptor for saving
the current directory to processes created via find -exec.
------------------------------------------------------------------------
ports scan for possible O_CLOEXEC affected programs by sthen@
ok millert@
|
|
|
|
|
|
|
|
|
|
ok tedu@ on a previous version
|
|
ok tedu@
|
|
by stu@, thanks!
|
|
switch fprintf(stderr) over to event_warn() on malloc failure. fix
up an errant newline in an existing event_warn while there.
originally i just wanted to delete the fprintf
diff from nicm@ who is away from a keyboard right now so cant commit
guenther@ agrees with the idea
|
|
|
|
pwd_gensalt origins, but a string argument works equally work and is more
friendly to consumers beyond local user accounts.
ok deraadt
|
|
causing as(1) to create a wrong nop-sled for text segment aligns.
Revert, until it is found and fixed.
|
|
Makefile.inc (i.e. landisk and m88k)
|
|
|
|
the current uint32_t.
ok guenther@ deraadt@
|
|
ok deraadt@ tedu@
|
|
code is already used in the kernel and the files are unmodified copies
from src/sys/lib/libkern/arch/amd64/. Depending on the function, this
gives us some speedup in userland.
ok deraadt@, no objections from miod@
|
|
|
|
|
|
trying to check what's missing;
|
|
Would be nice to document when/where this originated (in glibc?) if
anyone knows...
tweaks by schwarze@
ok jmc@ espie@ kettenis@ schwarze@ dimitry(at)google.com
|
|
--------
r260571 | jilles | 2014-01-12 12:30:55 -0800 (Sun, 12 Jan 2014) | 9 lines
fts: Stat things relative to the directory fd, if possible.
As a result, the kernel needs to process shorter pathnames if fts is not
changing directories (if fts follows symlinks (-L option to utilities), fts
cannot open "." or FTS_NOCHDIR was specified).
Side effect: If pathnames exceed PATH_MAX, [ENAMETOOLONG] is not hit at the
stat stage but later (opendir or application fts_accpath) or not at all.
--------
Prompted by a similar diff from (enh (at) google.com), who also reran a
performance test.
ok millert@
|
|
|
|
|
|
|
|
|
|
from schwarze@
|
|
from schwarze@
|
|
from schwarze again
|
|
represent newlines still.
|
|
|
|
evbuffers, not evbufbuffers.
|
|
.Fo evbuffer_readln
.Fa "struct evbuffer *buf"
.Fa "size_t *read_out"
.Fa "enum evbuffer_eol_style eol_style"
.Fc
is more readable mdoc for very long prototypes than lines like
.Fn "evbuffer_readln" "struct evbuffer *buf" "size_t *read_out" "enum evbuffer_eol_style eol_style"
|
|
evbuffer_foo functions do. reyk, nicm, jmc, and schwarze seem to
support a manpage as a reasonable solution to this problem.
im putting this in a separate manpage because i find they get too
cumbersome when they get too big. ingo agrees (and suggests even
this might be too big).
the file is evbuffer_new.3 rather than evbuffer.3 because we document
functions.
ok reyk@ nicm@ jmc@ schwarze@
this is rough, everyone has tweaks coming.
|
|
|
|
kernel struct vnode defintion, and the only consumer (pstat) still needs
kvm to read much of the required information. no great loss to always use
kvm until there's a better replacement interface.
ok deraadt millert uebayasi
|
|
ok deraadt@
|
|
|
|
Based on boringssl commit: 1df112448b41c3568477f3fcd3b8fc820ce80066
ok miod@ jsing@
|
|
|
|
|
|
|
|
ok espie@ deraadt@ millert@ tedu@
|