summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2014-10-26Add a format specifier for the printf.Brad Smith
ok guenther@
2014-10-25Remove unnecessary netinet/in_systm.h include.Lawrence Teo
ok millert@
2014-10-23mention hw.perfpolicy; Daniel JakotsTheo de Raadt
2014-10-22Fix error reporting when reallocarray() fails. OK miod@Todd C. Miller
2014-10-22Use svc_getreq_poll() instead of svc_getreqset2() for mountd'sTodd C. Miller
custom svc_run loop. From Dimitris Papastamos. OK schwarze@
2014-10-18Simple malloc() to reallocarray() conversion to potentially avoid integerDoug Hogan
overflow. ok deraadt@
2014-10-18Convert malloc() with a size var using multiplication to reallocarray().Doug Hogan
Avoid assigning the size unless reallocarray() succeeds to avoid overflow. ok deraadt@
2014-10-17Nuke 'increase' which was always set to 1. Replace the if/else that testedKenneth R Westerback
its value with the body of the if. No functional change. 'increase' was orphaned when r1.139 eliminated support for 'medium' statements in dhclient.conf. Stumbled over while looking into a problem for weerd@.
2014-10-17trivial replacement with reallocarray()Theo de Raadt
2014-10-14rely on reallocarray() to give us the overflow detection, rather thanTheo de Raadt
hand-crafting a solution. ok millert
2014-10-12DH_compute_key() returns -1 on error but this was notJonathan Gray
handled by testing the result with a negation. Ralf Horstmann discovered iked would segfault when connecting from Strongswan on Android because of this and supplied the patch to fix the problem. ok reyk@
2014-10-11slightly more complicated reallocarray conversion. always realloc* ratherTheo de Raadt
than the silly test which realloc* does itself, and massage the inode sizes more carefully ok doug
2014-10-11Userland reallocarray() audit.Doug Hogan
Avoid potential integer overflow in the size argument of malloc() and realloc() by using reallocarray() to avoid unchecked multiplication. ok deraadt@
2014-10-09no more modulesTed Unangst
2014-10-09no more modulesTed Unangst
2014-10-09fairly obvious reallocarray() conversion, where the size is recalculatedTheo de Raadt
only on success.
2014-10-09obvious reallocarray() conversionsTheo de Raadt
2014-10-08trivial use of getreallocarray()Theo de Raadt
2014-10-08trivial use of reallocarrayTheo de Raadt
2014-10-08replace internal erealloc() with ereallocarray(), and then use it toTheo de Raadt
spot mult int overflow
2014-10-08tedu the tedu code that tedu forgot to tedu when he tedued the other partJoel Sing
of this tedu code.
2014-10-08trivial use of reallocarray()Theo de Raadt
2014-10-02dhclient: add support for RFC 3442 local subnet routesMatthew Dempsky
If the classless-static-routes option specifies the router IP address as 0.0.0.0, then that indicates the route is a "local subnet route" that should be directly routable via the interface. This reuses the "route add -net $dest -netmask $mask -cloning -iface $addr" trick suggested by claudio@ for r1.272. Restores interoperability with Google Compute Engine after recent GCE DHCP server changes. ok krw, mpi
2014-10-02no more sl(4);Jason McIntyre
2014-10-01Remove some sl(4) references.Martin Pieuchot
2014-10-01tedu slattach, part of the slip show.Martin Pieuchot
2014-10-01Unhook slattach(8) it has been deprecated for a long time and will hitMartin Pieuchot
the Attic soon.
2014-09-27Fix mmap() calls that check for a result other than MAP_FAILED.Doug Hogan
ok tedu@
2014-09-20provide a hint for enabling jumbo frames, since we removed it from theJason McIntyre
driver pages;
2014-09-15Remove non-standard <sys/dkstat.h> header. It has not contained anythingMiod Vallat
related to disk stastics for almost 17 years, and the remaining userland-visible defines duplicate those found in <sys/sched.h>. Move the remaining _KERNEL defines to <sys/tty.h> where they belong, and update all users to cope with this. ok kettenis@
2014-09-13Replace all queue *_END macro calls except CIRCLEQ_END with NULL.Doug Hogan
CIRCLEQ_* is deprecated and not called in the tree. The other queue types have *_END macros which were added for symmetry with CIRCLEQ_END. They are defined as NULL. There's no reason to keep the other *_END macro calls. ok millert@
2014-09-08Additional cleanup for procfs removalDoug Hogan
ok guenther@
2014-09-08Delete procfs; it's always had races and is now unused: no one noticed forPhilip Guenther
months that I broke it before the 5.5 release. confirmed as not being required by ports by sthen@, ajacoutot@, dcoppa@
2014-09-08obvious cases of missing .An;Ingo Schwarze
found with the new mandoc(1) MANDOCERR_AN_MISSING warning; no text changes
2014-09-07Reuse xtrfile() to avoid duplication.Philip Guenther
Casting from long to int for a size_t argument is dumb. Calling warnx() right before err() is silly. ok millert@
2014-09-06inodesc.id_entryno holds a file size, so upgrade it from int to u_int64_t;Philip Guenther
this fixes handling of very large files on FFS2. Correct a copy-n-pasto that rendered useless the check for allocated fragmented that are marked free in the bitmap. allocdir() returns an inode number, so return an ino_t. sizeof()*N should be printed with %zu, while direct and indirect block numbers should be cast to (long long) use %lld inodesc.id_entryno fix based on a diff from David Vasek <vasek@fido.cz> ok krw@ otto@
2014-09-03Mark msg() and panic() as printf-like and fix the format error it turns upPhilip Guenther
ok krw@
2014-09-03Kill off compat for systems that don't define NAME_MAX or that lack stuffPhilip Guenther
like, oh, strchr() and prototypes for read() and write(). Mark quit() as both __dead and printf-like, and dumpabort() as __dead. ok krw@
2014-08-29mount_mfs does not require disklabel to be run;Jason McIntyre
diff From: Navan Carson confirmed/ok mikeb
2014-08-27Nuke net.inet6.icmp6.rediraccept and allow redirects on interfacesFlorian Obser
with autoconf enabled. If one is doing SLAAC one does already trust link local icmp6 so the policy for icmp6 redirects should be the same. pointed out by & OK bluhm@; OK henning@
2014-08-27Add support for Curve25519 using the public domain code that is foundReyk Floeter
in OpenSSH. The "private use" DH group 1034 is based on the value that was picked by strongswan recently. OK mikeb@ markus@
2014-08-25Sync dh.[ch] from iked. The files are identical, so any change inReyk Floeter
either iked or isakmpd should be synced to the other daemon. The previous changes from iked include: plug two memory leaks, verify EC points and add the Brainpool curves. All tests in regress/sbin/isakmpd/dh passed OKAY. ok markus@ mikeb@
2014-08-25Add support for DH groups 27-30 using the Brainpool curves which haveReyk Floeter
previously been added to LibreSSL's libcrypto. ok markus@ mikeb@
2014-08-25Fix a few fd leaks in isakmpd.Doug Hogan
The latter close is from a sweep of the tree looking for fdopen problems. While reviewing the patch, gerhard@ fixed another leak. ok gerhard@
2014-08-25Delete secret or secret-derived data with explicit_bzero.Doug Hogan
concept ok deraadt@ diff looks ok tedu@
2014-08-24Remove imaginary non-reserved port support from mountd.Doug Hogan
This bug was reported by Julian Hsiao. ok concept deraadt@, miod@ mountd.8 diff is from jmc@. ok doug@ mountd.c diff is from me. ok miod@
2014-08-23Fix double free in ike_auth.cdoug
ok jca@
2014-08-23when you specify queues in a rule, make sure they have been defined.Martin Pelikan
DIOCADDRULE EBUSY turns into an error message that pfctl -n catches. DIOCXCOMMIT EINVAL after the kernel rejected the rules was reported to occur, possibly from hfsc.c: this should be fixed as well. ok henning mikeb sthen
2014-08-22fix memory leak in isakmpddoug
ok gerhard@ (also corrected first version)
2014-08-21deny "once" flags for match rules; ok henningMike Belopuhov
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-12 16:03:29 +0000