Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-04-08 | Plug simple memory leak. ``Don't forget to free tcpopts when you | Ray Lai | |
are done.'' From NetBSD from Coverity CID 2057. OK henning@ and jaredy@ | |||
2006-04-08 | Remove a little bit of dead code; minburst is set to 2 earlier, and | Ray Lai | |
cannot be 0. From NetBSD from Coverity CID 577. OK henning@ | |||
2006-04-08 | Memory leak on fork error plus change time variable to prevent | Ray Lai | |
shadowing time(3) function. From NetBSD from Coverity CID 1688. OK jaredy@ and moritz@ | |||
2006-04-07 | fsck needs to unset FS_FLAGS_UPDATED if it changes the super block | Pedro Martelletto | |
2006-04-06 | allow lists inside lists for address specs, has been in my tree for | Henning Brauer | |
quite some time... theo likes | |||
2006-04-06 | if "/etc/rc shutdown" exits 2, attempt powerdown. it does so if | Henning Brauer | |
rc.shutdown sets powerdown to YES. From: Michele 'mydecay' Marchetto <mydecay@openbeer.it> but didn't apply, so I redid & added comment to clarify ok mickey theo | |||
2006-04-02 | malloc(x * y) -> calloc(x, y) from adobriyan AT gmail.com, with tweaks | Damien Miller | |
suggested by kjell@; ok otto@ pat@ millert@ jaredy@ | |||
2006-04-02 | use SEEK_* for lseek() | Theo de Raadt | |
2006-04-01 | Do not attempt to print parameters which turned out to be dead; fixes PR#5066. | Miod Vallat | |
2006-03-31 | tweaks; | Jason McIntyre | |
2006-03-31 | Be careful when accessing the external destination address, as it is not set | Hans-Joerg Hoexer | |
for bypass and deny flows. Also display acquire/dontacquire flows. ok henning@ | |||
2006-03-31 | wenn dumping rules always show type, srcid and dstid (if set). | Hans-Joerg Hoexer | |
ok reyk@ | |||
2006-03-31 | allow do delete dynamic rules | Hans-Joerg Hoexer | |
ok reyk@ | |||
2006-03-31 | allow specification of encapsulated protocol for ike; ok hshoexer | Markus Friedl | |
2006-03-31 | allow specification of encapsulated protocol for flows; ok hshoexer | Markus Friedl | |
2006-03-31 | uppercase `ip'; | Jason McIntyre | |
2006-03-31 | Super block changes for FFS2, thanks to all who tested. | Pedro Martelletto | |
Silent okay after almost 3 weeks, hackers@. | |||
2006-03-30 | when resolving interface names to ip adresses, set netmask to all bits 1 | Hans-Joerg Hoexer | |
2006-03-30 | Print the "Encap" heading only when the sadb is not empty. | Hans-Joerg Hoexer | |
Fix identation (was off by one space). both requested and ok markus@ | |||
2006-03-30 | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok ↵ | Markus Friedl | |
hshoexer, reyk | |||
2006-03-30 | document -encap. ok claudio@ | Hans-Joerg Hoexer | |
2006-03-30 | If an address family is specified do not print IPSec "routes". Additionally | Claudio Jeker | |
add a -encap option to show only the IPSec part. OK hshoexer@, henning@ | |||
2006-03-30 | Minor cleanup and start using rmx_refcnt to show the refcount instead of 0. | Claudio Jeker | |
OK henning@ | |||
2006-03-30 | Really ignore sendpipe, recvpipe, rtt, rttvar, etc. in route(8) instead of | Claudio Jeker | |
passing these values to the kernel where they get ignored anyway. OK henning@ | |||
2006-03-30 | Document 'F' as an answer to fsck, okay deraadt@ jolan@ | Pedro Martelletto | |
2006-03-30 | when asking y or n, accept "F" which forces yes from the on. i have | Theo de Raadt | |
wished for this for 10+ year, but always forgotten to make the change after cleaning up a nasty file system; ok pedro millert | |||
2006-03-29 | Use sysctl to get information about encap routes (aka ipsec). Now | Hans-Joerg Hoexer | |
you see something actually useful... requested by and ok henning@ | |||
2006-03-26 | fix output of ``ccdconfig -gv'': one typo, and one missing \t | Alexander von Gernler | |
mickey@ ok | |||
2006-03-23 | Print the lladdr on carp interfaces. | Ryan Thomas McBride | |
ok henning@ | |||
2006-03-23 | Fix pretty-print of carp link addresses by making them print like IFT_ETHER. | Ryan Thomas McBride | |
Diff from jon@abccomm.com | |||
2006-03-23 | sloppy style to cast the sockaddrs backwards, and then potentially wrong ↵ | Theo de Raadt | |
size; ok cloder | |||
2006-03-22 | earlier asprintf diff caused malloc in signal handler. clarify the | Theo de Raadt | |
code a bit more so that this mistake will not be done again | |||
2006-03-22 | add support for macros in ipsec.conf(5). some bits have already been | Reyk Floeter | |
there. requested by david@ ok hshoexer@, msf@ | |||
2006-03-22 | No need to specify the DOI, make examples more consistent. | Hans-Joerg Hoexer | |
Suggested by david@ | |||
2006-03-21 | Correctly check for the end of the cmds table. There is no need to check for | Claudio Jeker | |
c_func2. Until now ifconfig accepted something like ifconfig tun0 1.2.3.4 1.2.3.5 foobar without error. Additionally change the error message to a more comprehensible message. OK markus@, henning@ | |||
2006-03-21 | instead of sizeof(array) / sizeof(element) computation, use the existing | Daniel Hartmeier | |
end-of-array NULL marker, shuts up source analysis tool, from deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 2298: Fix memory leak. | David Hill | |
NetBSD Coverity CID 2299: Fix memory leak. NetBSD Coverity CID 2301: Fix memory leak. ok ray@ | |||
2006-03-20 | Don't increment a pointer *before* testing it for NULL | David Hill | |
ok deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 2302: Free fat if fatal error to avoid leak. | David Hill | |
ok otto@ deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 774: Don't increment a pointer *before* testing it for NULL! | David Hill | |
ok otto@ | |||
2006-03-20 | NetBSD Coverity CID 2074: Fix memory leak. | David Hill | |
ok deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 1745: Fix memory leak. | David Hill | |
yes otto@ | |||
2006-03-20 | NetBSD Coverity CID 2305: Fix memory leak. | David Hill | |
ok deraadt@ | |||
2006-03-20 | When being verbose while deleting ike rules (-dv), print deletions instead of | Hans-Joerg Hoexer | |
additions. Suggested by david@ | |||
2006-03-20 | When adding a connection, do not explicitly start that connection | Hans-Joerg Hoexer | |
using "t" and "c" fifo commands. This is prone to a race when adding several tunnels between the same peers. Just let isakmpd start that connection on its own (using the connection checker). | |||
2006-03-20 | make sure the command fifo is ready before isakmpd returns. This | Hans-Joerg Hoexer | |
resolves a startup race when interacting with ipsecctl. Suggested by and discussed with moritz@ ok moritz@ | |||
2006-03-19 | Fix mem leaks in error path. From NetBSD's coverity analysis. ok pat@ | Otto Moerbeek | |
deraadt@ | |||
2006-03-17 | Off-by-one; from NetBSD's coverity analysis; ok millert@ | Otto Moerbeek | |
2006-03-16 | typo. | Alexandre Anriot | |
ok otto@ | |||
2006-03-14 | implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4) | Damien Miller | |
which optionally verifies that a packet is received on the interface that holds the route back to the packet's source address. This makes it an automatic ingress filter, but only when routing is fully symmetric. bugfix feedback claudio@; ok claudio@ and dhartmei@ |