Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-08-20 | Remove userland bits related to the crypto(4) interface; ok deraadt | Mike Belopuhov | |
2014-08-19 | Entries for broadcast addresses should also be ignored, just like local | Martin Pieuchot | |
entries. ok florian@, mikeb@, henning@ | |||
2014-08-18 | Sync proc.c with httpd. httpd needs SIGUSR1 but iked will ignore it | Reyk Floeter | |
now instead of terminating the process. ok mikeb@ | |||
2014-08-16 | repair operation of kern.arandom, which will only allow a buffer of | Theo de Raadt | |
512 bytes. As a result, it stopped working... ok miod | |||
2014-08-11 | When parsing 32 bit values, verify that we received 4 bytes. | Tobias Stoeckmann | |
ok krw@ | |||
2014-08-10 | Only need <stdint.h> and not all of <inttypes.h> here | Philip Guenther | |
2014-08-10 | Delete extern declarations for variables that don't exist (anymore?) | Philip Guenther | |
2014-08-10 | msts(4) appears to support TIOCSTSTAMP | Philip Guenther | |
From Maurice Janssen (maurice (at) z74.net) | |||
2014-08-05 | Fix an example, nat-to requires to specify the "out" direction in pf rules. | Reyk Floeter | |
From "Vigdis" via misc@ can go in deraadt@ | |||
2014-07-31 | unbreak the build - e2fs_isave now needs the superblock. | Martin Pelikan | |
2014-07-28 | Fix memory exhaustion occurring on DHCP options with 0 length. | Tobias Stoeckmann | |
halex@ and krw@ pointed out that a NULL check before free can go, too. ok deraadt@, halex@, krw@ | |||
2014-07-28 | merge dhcpd's packet.c revision 1.7: | Tobias Stoeckmann | |
Fix very hard to reach DoS attack vector, which would involve more than 8 billion network packets. Mixture of many many malformed and proper packets could result in a division by zero. ok krw@ | |||
2014-07-24 | Unbreak ''route flush'': the kernel now adds local (RTF_LOCAL) routes | Jeremie Courreges-Anglas | |
for addresses configured on the system, and prevents userland from deleting them. Just skip those routes when flushing. Problem noticed by mlarkin@, ok henning@ mpi@ claudio@ sthen@ deraadt@ | |||
2014-07-22 | FSTAB -> _PATH_FSTAB, the latter is deprecated. | Jeremie Courreges-Anglas | |
From natano@bitrig, ok deraadt@ | |||
2014-07-21 | Switch from <sys/endian.h> or <machine/endian.h> to the new, | Philip Guenther | |
being-standardized <endian.h> ok deraadt@ millert@ beck@ | |||
2014-07-20 | Make sure the correct errno is reported by warn* or err* and not | Philip Guenther | |
the errno of an intervening cleanup operation like close/unlink/etc. Diff from Doug Hogan (doug (at) acyclic.org) | |||
2014-07-20 | Mark fatal() as printf-like. | Philip Guenther | |
Don't put a format string that's only used once in a variable. | |||
2014-07-17 | files-to-dump can be a duid; | Jason McIntyre | |
From: Maximilian Fillinger | |||
2014-07-17 | Convert a couple calloc()s that were originally malloc()s to reallocarray()s. | Philip Guenther | |
The child after fork() should use _exit() instead of exit(). Fix comment typo. ok millert@ | |||
2014-07-16 | zap trailing newlines; "go for it" deraadt | Okan Demirmen | |
2014-07-16 | Yes /etc/disklabels/ is a good practice for placing labels of disks | Theo de Raadt | |
in case of catastropy. But it is so poorly documented that any admin is more likely to store the labels elsewhere, so let's stop bothering with providing the directory. Discussed a bit, no objections. | |||
2014-07-15 | add -N to usage()/SYNOPSIS and tweak previous; | Jason McIntyre | |
rather than adding "net" to the -o list, claudio points out that -o net and -o noauto are really noops, so remove "noauto"; help/ok claudio | |||
2014-07-14 | Make sure to correctly exit the loop in priv_flush_routes() in case of | Miod Vallat | |
allocation failure; ok krw@ | |||
2014-07-14 | powerdown=YES has been removed. | Martin Pelikan | |
ok deraadt | |||
2014-07-14 | remove the never installed getmntopts.3 page, as well as the | Jason McIntyre | |
corresponding comment in Makefile; ok claudio deraadt | |||
2014-07-13 | -N for SYNOPSIS and usage(), and some small changes to previous; | Jason McIntyre | |
2014-07-13 | kill fs2hXX/h2fsXX macros with letohXX/htoleXX | Martin Pelikan | |
The reason being that ext2 structures are little-endian but JBD2 journal is big-endian. Don't confuse readers by talking about "file system endian". While here, nuke the copy of bswap.c and link it against the kernel's like fsck_ext2fs has done, for better maintainability. ok guenther | |||
2014-07-13 | kill fs2hXX/h2fsXX macros with letohXX/htoleXX | Martin Pelikan | |
The reason being that ext2 structures are little-endian but JBD2 journal is big-endian. Don't confuse readers by talking about "file system endian". ok guenther | |||
2014-07-13 | When renewing a lease, update client->active or you end up in a | Kenneth R Westerback | |
tight renew loop. Caused by recent reshuffling of code in bind_lease(). | |||
2014-07-13 | new superblock header needs fixes | Martin Pelikan | |
2014-07-13 | new superblock header needs fixes for BE architectures | Martin Pelikan | |
2014-07-13 | Intorduce the same -N flag that mount(8) just got to do the same | Claudio Jeker | |
selection of file systems with option 'net'. Again this will be used by the rc script to fsck iscsi file systems before mounting them. Again by default file systems with the net option are ignored when scanning fstab. "Get it in" deraadt@ | |||
2014-07-13 | Introduce a -N option to mount and a 'net' mount option. | Claudio Jeker | |
File systems marked with net will not be mounted by default. mount -a -N will mount all those file systems instead. This will be used to mark file systems needing network to work -- in other words which depend on iscsid. "Get it in" deraadt@ | |||
2014-07-12 | Log a warning whenever RTM_DESYNC is seen. Thus giving entrail | Kenneth R Westerback | |
investigators some clue why dhclient may have gotten confused when some RTM_ messages vanish. sthen@ thinks this is a good start. | |||
2014-07-12 | ewps, that giant table has -inet6 twice, for SMALL and !SMALL | Henning Brauer | |
no breakage involved, but wasn't correct in the SMALL case either | |||
2014-07-12 | provide a missing rfc number; | Jason McIntyre | |
From: Josh Grosse i've actually just whacked the titles to keep it brief and avoid the mess of the punctuation added by these macros. | |||
2014-07-12 | Sync msgbuf_write() changes from relayd. | Reyk Floeter | |
Please note that proc.c should be kept identical in relayd, iked and snmpd (currently without the includes). ok benno@ | |||
2014-07-12 | tweak previous; | Jason McIntyre | |
2014-07-12 | Bring back resolv.conf write reduction. Race was something else. | Kenneth R Westerback | |
2014-07-11 | Fix on big-endian arches after the inode change. | Miod Vallat | |
2014-07-11 | Sigh. Further torture finds a race. Back to drawing board for | Kenneth R Westerback | |
reducing resolv.conf writing. | |||
2014-07-11 | Move updating resolv.conf contents and active lease to before address | Kenneth R Westerback | |
manipulation starts. Thus making it more likely the correct resolv.conf gets written. | |||
2014-07-11 | Don't write out a new resolv.conf until the new address is added | Kenneth R Westerback | |
and we become responsible for the interface. Don't write out a new resolv.conf when our address has been deleted and we are no longer responsible for the interface. Less writing is more better. | |||
2014-07-11 | net.inet6.ip6.accept_rtadv bit the bucket | Henning Brauer | |
ok florian bluhm benno stsp | |||
2014-07-11 | allow IFXF_AUTOCONF6 to be set and cleared. | Henning Brauer | |
"ifconfig <if> inet6 autoconf" to turn it on, -autoconf to turn it off. show AUTOCONF6 in the flags line. -inet6 turns IFXF_AUTOCONF6 off as well. ok stsp benno florian bluhm | |||
2014-07-11 | make dump support DUIDs for command line arguments and /etc/dumpdates (using | Alexander Hall | |
the new shiny -U switch) dumpdates part originating from, and discussed with, Maximilian Fillinger seems reasonable to krw@, "get it in" deraadt@ | |||
2014-07-11 | Prevent division by zero on erroneous file systems. | Tobias Stoeckmann | |
ok pelikan@ | |||
2014-07-11 | __dead for finish() | Florian Obser | |
OK benno@ | |||
2014-07-11 | Silence compiler warning and build with -Wall etc. | Florian Obser | |
OK benno@ | |||
2014-07-11 | Silence a compiler warning and build with -Wall etc. | Florian Obser | |
While here check that our buffer is big enough. OK benno@ |