summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2015-10-18Pull in <float.h> instead of declaring __flt_rounds() locallyPhilip Guenther
ok miod@ jsg@
2015-10-18libc DNS functions will now use the new dnssocket() / dnsconnect()Theo de Raadt
system calls. These signal to the pledge kernel code that a DNS transaction is happening. These special sockets only work well with port 53 (there are some cute plans...). Programs calling pledge "inet" will not work! You need pledge "dns", and of course, you need a fairly fresh kernel. ok guenther kettenis tedu
2015-10-18ld.so no longer needs or uses a bind lock, so stop setting it. ThisPhilip Guenther
eliminates a chunk of complexity from the libpthread init and the fork wrapper, as it was the bind lock that needed prebinding before use.
2015-10-18better placement for dnssocket/dnsconnectTheo de Raadt
2015-10-18create libc stubs for dnssocket() and dnsconnect()Theo de Raadt
2015-10-17Rename SYSEXIT() to SYSCALL_END() for consistency with most other archs.Philip Guenther
No change in resulting object files ok millert@
2015-10-17Move the last of the __DBINTERFACE_PRIVATE bits from <db.h> to libc's wrapperPhilip Guenther
and eliminate the now superfluous -D option ok kettenis@ millert@
2015-10-17PROTO_NORMAL for pledge(); ok guentherTheo de Raadt
2015-10-16Check file sizes only for regular files. The current code breaks savecoreTobias Stoeckmann
due to its kvm handling. ok deraadt
2015-10-16Remove pointless externs - the structs are declared in the same files aJoel Sing
few lines above.
2015-10-16Expand DECLARE_ASN1_ALLOC_FUNCTIONS and DECLARE_ASN1_FUNCTIONS_constJoel Sing
macros. The only change in the generated assembly is due to line numbering.
2015-10-16Remove pointless uses of DECLARE_ASN1_ENCODE_FUNCTIONS_const.Joel Sing
DECLARE_ASN1_FUNCTIONS_const already includes this macro so using both means we end up with duplicate function prototypes and externs.
2015-10-16Fix use of pointer value after BIO_free, and remove senseless NULL checks.Bob Beck
ok bcook@
2015-10-16Merge nlist out of boundary access fix with other nlist implementations.Tobias Stoeckmann
While at it, merge style and typo fixes back into nlist(3), too. ok deraadt, jsing, millert
2015-10-16Put tls_config_verify_client_optional() in the right place.Joel Sing
2015-10-16Fix tpyo.Joel Sing
2015-10-16actually include the prerequisite dependency for BIO instead of doing nastynessBob Beck
2015-10-16Validate parsed ELF values to prevent out of boundary accesses.Tobias Stoeckmann
While at it, return proper return value when encountering a stripped binary. Instead of -1 (illegal file), it should be the amount of symbols that were tried to be resolved. ok millert
2015-10-15Don't Xr flock, since that is not the locking method used.Theo de Raadt
ok millert
2015-10-15Handle F_ISATTY in the fcntl() stub as wellTheo de Raadt
ok guenther
2015-10-14Document flock requestTodd C. Miller
2015-10-14better fix for overrun reported by Qualys Security.Ted Unangst
buf is at all times kept nul terminated, so there is no need to enforce this again upon exit. (no need to move buf around after we exahust space.) ok beck miod
2015-10-14Bail out early if we have no buf_lenBob Beck
ok miod@
2015-10-14fix a memory leak reported by Qualys Security.Ted Unangst
move the bndec variable in tighter since it's not used elsewhere in the loop, then always free it after use. ok bcook miod
2015-10-14Ensure we don't write a 0 byte past end of the buffer in the error case.Bob Beck
ok bcook@ deraadt@
2015-10-14tweak previous (two details i apparently missed)Ingo Schwarze
2015-10-14Add EVP_AEAD_CTX_init(3) manpage to document the new(ish) AEAD API.Reyk Floeter
The "authenticated encryption with additional data" API is used for ciphers like AES-GCM or ChaCha20-Poly1305. The manpage is a beginning and certainly needs more work, especially improvements in the EXAMPLES section. Based on agl's source code comments. Converted from pod to mandoc by schwarze@ OK schwarze@ jsing@
2015-10-13In rev 1.15 the sizeof argument was fixed in a strlcat() call butTodd C. Miller
the truncation check immediately following it was not updated to match. Not an issue in practice since the buffers are the same size. OK deraadt@
2015-10-13Put ASN1_dup() under #ifndef LIBRESSL_INTERNAL.Joel Sing
2015-10-13Convert ECParameters_dup() from a macro that uses ASN1_dup_of() into anJoel Sing
actual function. This removes the last ASN1_dup_of usage from the tree. Feedback from doug@ and miod@
2015-10-13Convert a number of the old ASN1_{d2i,i2d}_{bio,fp}_of() macros toJoel Sing
ASN1_item_{d2i,i2d}_{bio,fp}() function calls. ok beck@ doug@
2015-10-13Group d2i/i2d function prototypes by type and add missing externs for theJoel Sing
DSAPublicKey, DSAPrivateKey and DSAparams ASN1_ITEMs.
2015-10-13Sync printf family return value with ISO C which specifies thatTodd C. Miller
these functions return a negative value on failure. OK doug@ deraadt@
2015-10-13new sentence, new line;Jason McIntyre
do not Xr self;
2015-10-13Tighten the ranges in wcrtomb(3).Anthony J. Bentley
By definition, the range of valid Unicode code points is the union of U+0000..U+D7FF and U+E000..U+10FFFF (see Unicode 8.0.0, chapter 3.9). In UTF-16, the encoded values that would represent U+D800..U+DFFF are used for surrogate pairs. UTF-8 has no concept of surrogate pairs; attempting to treat them as regular code points violates the standard and makes no sense besides. ok stsp@
2015-10-12satisfy jmc!Theo de Raadt
2015-10-12Add details about a variety of semantics; going to keep adding and thenTheo de Raadt
reevaluate the direction of this manual page a bit later.
2015-10-12When isatty() was switched to F_ISATTY, the inline copy in ttyname()Christian Weisgerber
was forgotten. Just call isatty(). ok deraadt@
2015-10-12Make it clear that umask ignores everything but the rwx bits.Todd C. Miller
OK deraadt@
2015-10-12Make wcrtomb() more readable by weeding out range errors up front,Ingo Schwarze
doing ASCII handling once rather than twice, and using <= rather than ((&~)==) obfuscation (which already caused a bug in the past). No functional change. Joint work with and OK stsp@ semarie@ bentley@
2015-10-12pledge wasn't called pledge in 5.8, and it was disabled;Ingo Schwarze
issue noticed by tim@, solution suggested by deraadt@
2015-10-12unifdef EVP_CHECK_DES_KEY: Ben Kaduk noticed it has a syntax error; thatPhilip Guenther
error was present in the original 2004 commit, so it hasn't been used in over 11 years, thus exceeding our deprecation requirements by over a decade. OpenSSL has chosen to *fix it*; we'll gladly watch it burn ok jsing@
2015-10-12make description of ERRORS more complete;Ingo Schwarze
diff from Benny Lofgren <bl dash lists at lofgren dot biz>; ok nicm@
2015-10-11Do not insert whitespace into syntax displays, it's just confusing,Ingo Schwarze
except at the one place where it is indeed helpful. Add some missing .Cm macros. Remove some useless escaping, one needless .Xo, and an empty .No. Triggered by a much smaller patch from guenther@. OK jmc@ guenther@
2015-10-11Fix empty .No macros, use .Pf to prefix delimiters to macros.Ingo Schwarze
Based on a patch from guenther@, tweaked by me. OK jmc@ guenther@
2015-10-11Document that execve(2) resets SIGCHLD to SIG_DFLPhilip Guenther
wordsmithing and ok jmc@
2015-10-11Prefer .Fa over .Em for struct membersPhilip Guenther
ok jmc@
2015-10-11Document that bind(2) and connect(2) ignore the incoming sa_lenPhilip Guenther
suggest by and ok deraadt@ wordsmithing jmc@
2015-10-10Code points U+10000 to U+fffff are valid, too.Ingo Schwarze
Fixing a regression in wcrtomb(3) found with the mandoc testsuite that was caused by the last commit. OK semarie@ bentley@
2015-10-09do not use weak; plus this dies next weekTheo de Raadt