Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-01-19 | Explicitly mention that PATH_MAX includes the NUL in the ENAMETOOLONG | Todd C. Miller | |
description. | |||
2015-01-19 | Back out changes unrelated to the ENAMETOOLONG diff. | Todd C. Miller | |
2015-01-18 | Do not calculated the length of a report with an extra byte for the | Martin Pieuchot | |
reportID because the kernel skips it. Problem reported and fix tested by Benjamin Baier. | |||
2015-01-17 | Improve wording in alloca. | Ted Unangst | |
1. it's not a bug; it's a caveat. 2. "slightly unsafe" gives me the willies. 3. one .Xr to malloc should suffice ok deraadt jmc | |||
2015-01-17 | NGROUPS_MAX, not NGROUPS | Theo de Raadt | |
2015-01-17 | Remove a pasto introduced in the last commit, spotted by schwarze@ | Todd C. Miller | |
2015-01-16 | Use ">", not ">=" when comparing length to HOST_NAME_MAX since | Todd C. Miller | |
otherwise we end up needlessly replacing a NUL with a NUL. OK deraadt@ | |||
2015-01-16 | Replace HOST_NAME_MAX+1-1 with HOST_NAME_MAX. OK deraad@ | Todd C. Miller | |
2015-01-16 | Replace check for ">= HOST_NAME_MAX+1" with "> HOST_NAME_MAX". | Todd C. Miller | |
OK deraadt@ | |||
2015-01-16 | Move to the <limits.h> universe. | Theo de Raadt | |
review by millert, binary checking process with doug, concept with guenther | |||
2015-01-16 | The SSL/TLS session Id context is limited to 32 bytes. Instead of | Reyk Floeter | |
using the name of relayd relay or smtpd pki, use a 32 byte arc4random buffer that should be unique for the context. This fixes an issue in OpenSMTPD when a long pki name could break the configuration. OK gilles@ benno@ | |||
2015-01-16 | <sys/param.h> is not needed here either. | Theo de Raadt | |
ok guenther millert doug | |||
2015-01-16 | Complete the list of functions in the paragraph that mentions that | Lawrence Teo | |
errbuf needs to hold at least PCAP_ERRBUF_SIZE chars. | |||
2015-01-16 | Rename pcap_create()'s ebuf argument to errbuf to match the rest of the | Lawrence Teo | |
public pcap_* functions that use errbuf. Mainline libpcap also uses "errbuf" for pcap_create(). No object file change. | |||
2015-01-16 | Add more missing argument names. | Lawrence Teo | |
2015-01-16 | Remove pointless casts for several malloc/calloc/free calls. No object | Lawrence Teo | |
file change. | |||
2015-01-16 | Fix a use after free, where the already freed p->opt.source was used by | Lawrence Teo | |
pcap_cleanup_bpf() to disable monitor mode on 802.11 devices. feedback blambert@ ok deraadt@ mikeb@ millert@ | |||
2015-01-16 | Delete the MANLINT variable and the related SUFFIXES rules because | Ingo Schwarze | |
since yesterday, "mandoc -Tlint -Wfatal" can no longer fail. Instead, as suggested by deraadt@, provide a manlint target that is *not* run during make build, but can be run whenever you want to check syntax of manuals. "nice stuff" deraadt@ | |||
2015-01-15 | use .In where appropriate; from Kaspars at Bankovskis dot net | Ingo Schwarze | |
2015-01-15 | typo; from Kaspars at Bankovskis dot net | Ingo Schwarze | |
2015-01-15 | remove .Tn; from Jan Stary <hans at stare dot cz> | Ingo Schwarze | |
2015-01-15 | remove unused variable | Charles Longeau | |
ok tedu@ | |||
2015-01-15 | Use explicit_bzero instead of memset in hash Final and End functions. | Todd C. Miller | |
OK deraadt@ djm@ | |||
2015-01-15 | back in september I did the large abstraction refactoring to allow these | Theo de Raadt | |
other systems to fit into the same mold, so add copyright | |||
2015-01-15 | Make strlcpy/strlcat slightly easier to read. | Todd C. Miller | |
2015-01-15 | POSIX does not require an explicit inclusion of sys/types.h to get | Todd C. Miller | |
uid_t or gid_t (and neither do we). OK deraadt@ | |||
2015-01-14 | change _yp_domain[] to HOST_NAME_MAX+1, and re-arrange those who include | Theo de Raadt | |
it to get limits.h early enough | |||
2015-01-14 | these never needed sys/param.h | Theo de Raadt | |
2015-01-13 | For non-blocking sockets tls_connect_fds() could fail with EAGAIN. | Alexander Bluhm | |
Use the same logic from the read, write, accept functions to inform the caller wether a readable or writable socket is needed. After that event, the connect function must be called again. All the checks before connecting are done only once. OK tedu@ | |||
2015-01-13 | remove .Tn from stdio manuals; Kaspars Bankovskis found one of these | Ingo Schwarze | |
2015-01-13 | libedit claims compatibility with readline 4.2, so provide a stub for | Reyk Floeter | |
rl_set_keyboard_input_timeout() that was added in this version. Also crank the minor version. OK krw@ yasuoka@ deraadt@ | |||
2015-01-13 | Remove unnecessary calls to __atexit_register_cleanup(), calling __sinit() | Philip Guenther | |
instead where necessary. Based on a diff from enh (at) google.com ok millert@ | |||
2015-01-12 | Add fgetwln(3) from FreeBSD and bump libc minor revision. | Todd C. Miller | |
2015-01-12 | Add a note that HOST_NAME_MAX does not include a terminating \0, unlike | Nicholas Marriott | |
MAXHOSTNAMELEN. ok deraadt guenther | |||
2015-01-12 | rename blocks to words. bcrypt "blocks" are unrelated to blowfish blocks, | Ted Unangst | |
nor are they the same size. | |||
2015-01-12 | Fix a memory leak in bss_dgram. | Doug Hogan | |
Free data->saved_message.data. Based on OpenSSL commit: 41cd41c4416f545a18ead37e09e437c75fa07c95 except this version sets a->ptr to NULL to avoid accidental reuse and handles malloc failing. ok beck@, input + ok miod@ | |||
2015-01-09 | Cleanup some macros and #defines in i386 pmap. Previously committed and | Mike Larkin | |
backed out because of libkvm breakage, recommitting now with libkvm fix. ok deraadt@ | |||
2015-01-08 | missing , found by Dongsheng Song | Theo de Raadt | |
2015-01-08 | Avoid a double-free in an error path. | Doug Hogan | |
ok jsing@ beck@ | |||
2015-01-08 | declare a local version of MIN(), call it MINIMUM() | Theo de Raadt | |
(sorry, my other changes were accidentally premature) | |||
2015-01-08 | declare a local version of MIN(), call it MINIMUM() | Theo de Raadt | |
2015-01-07 | Do not need sys/param.h | Theo de Raadt | |
2015-01-07 | stupid me. need errno.h | Ted Unangst | |
2015-01-07 | set errno = EINVAL for invalid salts and hashes in most functions. | Ted Unangst | |
remember to set EACCES in bcrypt_checkpass for hash differences. the higher level crypt_checkpass function will reset errno to EACCES in all cases, which is probably the right behavior, but this change gives code working with the lower level functions the correct errno if they care. | |||
2015-01-07 | mix in more virtual memory and process information | Brent Cook | |
2015-01-06 | Backout revision 1.37. Setting ev->ev_pncalls to NULL results in | Alexander Bluhm | |
a use after free if the callback has freed the ev. With F in malloc.conf both tmux and the regression tests triggered a segmentation fault. OK nicm@ | |||
2015-01-06 | add initial HP-UX getentropy/arc4random support. | Brent Cook | |
patch from Kinichiro Inoguchi, tested on HP-UX 11.31 ok deraadt@ | |||
2015-01-06 | Apply commit e0e6958aa074a7714cd7c4aa779a1dfede3a03b1 from upstream. | Alexander Bluhm | |
- Avoid deadlock when activating signals. Fixes bug 3048812. Based on patch by Nicholas Marriott. The deadlock was ultimately fixed in a different way (by disabling reinit - see event.c r1.25). Add it now for consistency but without the Windows compatibility code. Convert the fnctl() calls to SOCK_CLOEXEC | SOCK_NONBLOCK to simplify the code. OK nicm@ | |||
2015-01-06 | Apply commit 2d8cf0b720cdd5f9f292f174a10ff74e62a380ec from upstream. | Alexander Bluhm | |
- Defensive programming to prevent (hopefully impossible) stack-stomping OK nicm@ | |||
2015-01-05 | Fix CVE-2014-6272 in Libevent 1.4 from upstream: | Alexander Bluhm | |
- https://github.com/libevent/libevent/commit/7b21c4eabf1f3946d3f63cce1319c490caab8ecf - For this fix, we need to make sure that passing too-large inputs to the evbuffer functions can't make us do bad things with the heap. On top of that do: - Update libevent version to 1.4.15-stable. - Use SIZE_MAX from limits.h instead of a private define. - Do not declare 'size_t need' twice to avoid a compiler warning. OK sthen |