summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2015-01-19Explicitly mention that PATH_MAX includes the NUL in the ENAMETOOLONGTodd C. Miller
description.
2015-01-19Back out changes unrelated to the ENAMETOOLONG diff.Todd C. Miller
2015-01-18Do not calculated the length of a report with an extra byte for theMartin Pieuchot
reportID because the kernel skips it. Problem reported and fix tested by Benjamin Baier.
2015-01-17Improve wording in alloca.Ted Unangst
1. it's not a bug; it's a caveat. 2. "slightly unsafe" gives me the willies. 3. one .Xr to malloc should suffice ok deraadt jmc
2015-01-17NGROUPS_MAX, not NGROUPSTheo de Raadt
2015-01-17Remove a pasto introduced in the last commit, spotted by schwarze@Todd C. Miller
2015-01-16Use ">", not ">=" when comparing length to HOST_NAME_MAX sinceTodd C. Miller
otherwise we end up needlessly replacing a NUL with a NUL. OK deraadt@
2015-01-16Replace HOST_NAME_MAX+1-1 with HOST_NAME_MAX. OK deraad@Todd C. Miller
2015-01-16Replace check for ">= HOST_NAME_MAX+1" with "> HOST_NAME_MAX".Todd C. Miller
OK deraadt@
2015-01-16Move to the <limits.h> universe.Theo de Raadt
review by millert, binary checking process with doug, concept with guenther
2015-01-16The SSL/TLS session Id context is limited to 32 bytes. Instead ofReyk Floeter
using the name of relayd relay or smtpd pki, use a 32 byte arc4random buffer that should be unique for the context. This fixes an issue in OpenSMTPD when a long pki name could break the configuration. OK gilles@ benno@
2015-01-16<sys/param.h> is not needed here either.Theo de Raadt
ok guenther millert doug
2015-01-16Complete the list of functions in the paragraph that mentions thatLawrence Teo
errbuf needs to hold at least PCAP_ERRBUF_SIZE chars.
2015-01-16Rename pcap_create()'s ebuf argument to errbuf to match the rest of theLawrence Teo
public pcap_* functions that use errbuf. Mainline libpcap also uses "errbuf" for pcap_create(). No object file change.
2015-01-16Add more missing argument names.Lawrence Teo
2015-01-16Remove pointless casts for several malloc/calloc/free calls. No objectLawrence Teo
file change.
2015-01-16Fix a use after free, where the already freed p->opt.source was used byLawrence Teo
pcap_cleanup_bpf() to disable monitor mode on 802.11 devices. feedback blambert@ ok deraadt@ mikeb@ millert@
2015-01-16Delete the MANLINT variable and the related SUFFIXES rules becauseIngo Schwarze
since yesterday, "mandoc -Tlint -Wfatal" can no longer fail. Instead, as suggested by deraadt@, provide a manlint target that is *not* run during make build, but can be run whenever you want to check syntax of manuals. "nice stuff" deraadt@
2015-01-15use .In where appropriate; from Kaspars at Bankovskis dot netIngo Schwarze
2015-01-15typo; from Kaspars at Bankovskis dot netIngo Schwarze
2015-01-15remove .Tn; from Jan Stary <hans at stare dot cz>Ingo Schwarze
2015-01-15remove unused variableCharles Longeau
ok tedu@
2015-01-15Use explicit_bzero instead of memset in hash Final and End functions.Todd C. Miller
OK deraadt@ djm@
2015-01-15back in september I did the large abstraction refactoring to allow theseTheo de Raadt
other systems to fit into the same mold, so add copyright
2015-01-15Make strlcpy/strlcat slightly easier to read.Todd C. Miller
2015-01-15POSIX does not require an explicit inclusion of sys/types.h to getTodd C. Miller
uid_t or gid_t (and neither do we). OK deraadt@
2015-01-14change _yp_domain[] to HOST_NAME_MAX+1, and re-arrange those who includeTheo de Raadt
it to get limits.h early enough
2015-01-14these never needed sys/param.hTheo de Raadt
2015-01-13For non-blocking sockets tls_connect_fds() could fail with EAGAIN.Alexander Bluhm
Use the same logic from the read, write, accept functions to inform the caller wether a readable or writable socket is needed. After that event, the connect function must be called again. All the checks before connecting are done only once. OK tedu@
2015-01-13remove .Tn from stdio manuals; Kaspars Bankovskis found one of theseIngo Schwarze
2015-01-13libedit claims compatibility with readline 4.2, so provide a stub forReyk Floeter
rl_set_keyboard_input_timeout() that was added in this version. Also crank the minor version. OK krw@ yasuoka@ deraadt@
2015-01-13Remove unnecessary calls to __atexit_register_cleanup(), calling __sinit()Philip Guenther
instead where necessary. Based on a diff from enh (at) google.com ok millert@
2015-01-12Add fgetwln(3) from FreeBSD and bump libc minor revision.Todd C. Miller
2015-01-12Add a note that HOST_NAME_MAX does not include a terminating \0, unlikeNicholas Marriott
MAXHOSTNAMELEN. ok deraadt guenther
2015-01-12rename blocks to words. bcrypt "blocks" are unrelated to blowfish blocks,Ted Unangst
nor are they the same size.
2015-01-12Fix a memory leak in bss_dgram.Doug Hogan
Free data->saved_message.data. Based on OpenSSL commit: 41cd41c4416f545a18ead37e09e437c75fa07c95 except this version sets a->ptr to NULL to avoid accidental reuse and handles malloc failing. ok beck@, input + ok miod@
2015-01-09Cleanup some macros and #defines in i386 pmap. Previously committed andMike Larkin
backed out because of libkvm breakage, recommitting now with libkvm fix. ok deraadt@
2015-01-08missing , found by Dongsheng SongTheo de Raadt
2015-01-08Avoid a double-free in an error path.Doug Hogan
ok jsing@ beck@
2015-01-08declare a local version of MIN(), call it MINIMUM()Theo de Raadt
(sorry, my other changes were accidentally premature)
2015-01-08declare a local version of MIN(), call it MINIMUM()Theo de Raadt
2015-01-07Do not need sys/param.hTheo de Raadt
2015-01-07stupid me. need errno.hTed Unangst
2015-01-07set errno = EINVAL for invalid salts and hashes in most functions.Ted Unangst
remember to set EACCES in bcrypt_checkpass for hash differences. the higher level crypt_checkpass function will reset errno to EACCES in all cases, which is probably the right behavior, but this change gives code working with the lower level functions the correct errno if they care.
2015-01-07mix in more virtual memory and process informationBrent Cook
2015-01-06Backout revision 1.37. Setting ev->ev_pncalls to NULL results inAlexander Bluhm
a use after free if the callback has freed the ev. With F in malloc.conf both tmux and the regression tests triggered a segmentation fault. OK nicm@
2015-01-06add initial HP-UX getentropy/arc4random support.Brent Cook
patch from Kinichiro Inoguchi, tested on HP-UX 11.31 ok deraadt@
2015-01-06Apply commit e0e6958aa074a7714cd7c4aa779a1dfede3a03b1 from upstream.Alexander Bluhm
- Avoid deadlock when activating signals. Fixes bug 3048812. Based on patch by Nicholas Marriott. The deadlock was ultimately fixed in a different way (by disabling reinit - see event.c r1.25). Add it now for consistency but without the Windows compatibility code. Convert the fnctl() calls to SOCK_CLOEXEC | SOCK_NONBLOCK to simplify the code. OK nicm@
2015-01-06Apply commit 2d8cf0b720cdd5f9f292f174a10ff74e62a380ec from upstream.Alexander Bluhm
- Defensive programming to prevent (hopefully impossible) stack-stomping OK nicm@
2015-01-05Fix CVE-2014-6272 in Libevent 1.4 from upstream:Alexander Bluhm
- https://github.com/libevent/libevent/commit/7b21c4eabf1f3946d3f63cce1319c490caab8ecf - For this fix, we need to make sure that passing too-large inputs to the evbuffer functions can't make us do bad things with the heap. On top of that do: - Update libevent version to 1.4.15-stable. - Use SIZE_MAX from limits.h instead of a private define. - Do not declare 'size_t need' twice to avoid a compiler warning. OK sthen