summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2014-05-01Correct a test for X509_get_notAfter() failing or returningJonathan Gray
an unsupported time type when passing data to keynote. Problem introduced by angelos in 1.41 though the code has been reformatted a few times since then. ok otto@ miod@
2014-04-30Preserve intended chronological order of leases inKenneth R Westerback
dhclient.leases.<if> files by writing out in reverse the reverse-chronological-order TAILQ client->leases. Found while trying to restore static lease functionality.
2014-04-30Write last disk sector, not last 512-byte block, when testing validityKenneth R Westerback
of new partition limit. Fixes growfs on 4K-sector disks. Reported by and fix tested by David Vasek via misc@.
2014-04-29make sure the state machine only advances if the AUTH payload hasMarkus Friedl
been verified; with & ok mikeb@
2014-04-28macro fixes for previous; ok reykJason McIntyre
2014-04-28Do not sleep after poll returning an error. Blindly copied over fromFlorian Obser
ping6 to ping by me without thinking clearly. pointed out by deraadt@ OK jca@
2014-04-28spacingReyk Floeter
2014-04-28spacingReyk Floeter
2014-04-28bump copyrightReyk Floeter
2014-04-28Add missing documentation for ipcomp(4) support and the configurationReyk Floeter
payloads. ok sthen@ krw@
2014-04-28It's about time to remove the infamous CAVEATS section in iked(8).Reyk Floeter
Software is never "finished" but the implementation has matured enough to drop the disclaimer about using it in production networks. Thanks to markus@, mikeb@ and Hans-Joerg Hoexer for their significant and ongoing work on improving iked(8). Removal prompted by sthen@ and many others.
2014-04-27sort the ip6 sysctls;Jason McIntyre
2014-04-27Document net.inet6.ip6.dad_pending.Loganaden Velvindron
OK from jmc@, and thanks to sthen@ for pointing out my mistake in the first version of the diff.
2014-04-25don't access a pointer till after the null checkJonathan Gray
ok mikeb@
2014-04-23Better name for fdmaskp, reduce the scope of some variables, don't abuseJeremie Courreges-Anglas
cc for poll()'s return value, and indent decls. ok florian@
2014-04-23His name is Van Jacobson. ok jmc@Jeremie Courreges-Anglas
2014-04-23Replace malloc / memset / select song and dance with poll(2) likeFlorian Obser
ping6. Prompted by and initial diff from Peter Malone (peter _AT_ petermalone _DOT_ org), thanks! OK jca@
2014-04-23don't clear label before readasciilabel(), it will not fill in someOtto Moerbeek
required fields like disk size, causing consistency check failures. with and ok krw@
2014-04-22malloc/memset -> calloc. from peter maloneTed Unangst
2014-04-22malloc/memset -> calloc. from peter maloneTed Unangst
2014-04-22malloc/memset->calloc. with bonus null check. from peter malone.Ted Unangst
2014-04-22malloc/memset -> calloc. from peter maloneTed Unangst
2014-04-22Update iked to use the same proc.c that relayd uses.Reyk Floeter
Less differences, less code to audit. ok mikeb@
2014-04-22for consistency's sake, use the terminology from the 802.1Q standardHenning Brauer
here too. pt out by alexey suslikov via mpi, ok reyk
2014-04-22Clarify an err() messagePhilip Guenther
2014-04-22Convert a malloc(x*y)+memset to calloc(x,y)Philip Guenther
From Jean-Philippe Ouellet (jean-philippe (at) ouellet.biz)
2014-04-21Ooops. Delete discarded offered leases from correct TAILQ. More thanKenneth R Westerback
one offer would cause infinite loop. ok guenther@
2014-04-21While we don't recommend using ext2fs, the directions for doing soPhilip Guenther
shouldn't be misleading ok krw@
2014-04-21Don't leak mountpoint info. Now with replacement for silly realloc() danceKenneth R Westerback
that appears to fix mysterious crashes seen with previous version that tried to sneak in to 5.5. ok otto@
2014-04-20Make -L even more useful to monitoring processes. Truncate andKenneth R Westerback
refill the file rather than creating a new one, which preserves an fd being monitored. And truncate file on losing link. Things like sysutils/ertn should now be able to see new leases, lease renewals and cable unplugs. tweaks by and ok sthen@
2014-04-19Add missing description for IPv6 mtudisctimeout sysctl andlogan
rework the wording for both IPv4 and IPv6. OK from sthen@, henning@ and claudio@
2014-04-19remove altq bits here, tooHenning Brauer
(i was convinced i committed that yesterday already, hrm)
2014-04-19Add missing man page descriptions for the following IPv6 sysctls:logan
-maxdynroutes -maxifprefixes -maxifdefrouters -neighborgcthresh OK from sthen@, claudio@ and henning@
2014-04-18round up some enemy sympathizers found calling RAND_seed().Ted Unangst
ok beck reyk
2014-04-17Sync show.c to what we have in netstat.c (at least steal some good idiomsClaudio Jeker
from there). OK sthen@ mpi@ jca@
2014-04-17Oops. INADDR_ANY != INADDR_BROADCAST. Fixes DHCPDISCOVERY andKenneth R Westerback
DHCPDECLINE. noted by sthen@
2014-04-17Eliminate a couple of always-NULL parameters. Eliminate someKenneth R Westerback
pointless repetition of well-known info in log messages. Pass around smaller bits of info. Make 'inaddr_any' a const struct initialized with { INADDR_ANY }. Tweaks and ok guenther@
2014-04-16Make dhclient -q even quieter. Make it immediately effective ratherKenneth R Westerback
than possibly emitting a couple of random memory allocation error messages first. ok guenther@
2014-04-16OpenSSL is not the only place with bloated code! Remove unusedKenneth R Westerback
function 'option_as_string()'.
2014-04-16More des_foo -> DES_fooMiod Vallat
2014-04-14Fix the following idiom in the following way:Bret Lambert
arc4random_buf(seed, sizeof(seed)); RAND_seed(seed, sizeof(seed)); + explicit_bzero(seed, sizeof(seed)); ok reyk@
2014-04-13At some point, we are going to switch the mandoc(1) defaultIngo Schwarze
from -Tascii to -Tlocale, even though not quite yet because there are more important things to do first. But let's already make -Tascii explicit in the build system right now, it is safer anyway.
2014-04-11fix a use after free in an error pathJonathan Gray
ok henning@ mikeb@
2014-04-10Add validation routines to ikev2_pld.c: For each payload type overallReyk Floeter
header structure is checked for sanity before copying the header. Always pass down the number of remaining bytes in the payload or substructure so we can always ensure to not go beyond actual data. Also remove the quick parsing step as it does not provide a real benefit anymore. From Hans-Joerg Hoexer ok mikeb@ markus@
2014-04-08Use VM_UVMEXP instead of VM_METER for memory usages and directlyMartin Pieuchot
include <sys/vmmeter.h> where it is needed instead of relying on it being included by <uvm/uvm_extern.h>. miod@ likes it, ok guenther@
2014-04-03On second thought, make that manpage MI, even though the binary is notMiod Vallat
necessarily built; that makes it consistent with wsconsctl(8). Prodded by deraadt.
2014-04-03Install the manpage on loongson too (and arm* while there); it could be arguedMiod Vallat
that this little binary is worth building everywhere with an MI manpage although there are still a few arches where it won't serve any useful purpose; spotted by Donovan Watteau.
2014-04-03Proper validation and computation of bsize in expert mode; ok krw@ millert@Otto Moerbeek
2014-03-31Use return value constants to make effects clearer than the useKenneth R Westerback
of an intermediate variable. No intended functional change.
2014-03-31Whitespace rectification.Kenneth R Westerback