summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2014-05-06don't sa_free() in the receive path (prevents use-after-free); ok mikeb@Markus Friedl
2014-05-06send the delete with the locally allocated SPI in ikev2_init_create_child_sa()Markus Friedl
2014-05-06make sure some notify payloads are encrypted; ok mikeb@Markus Friedl
2014-05-06initial support for PFS; ok reyk@Markus Friedl
2014-05-06retire IKED_REQ_DELETE and fix delete parsing; ok reyk@Markus Friedl
2014-05-06no need to include rand.h now the RAND_seed() calls are gone.Jonathan Gray
2014-05-05ca_x509_serialize: don't leak the bio buffer; ok reyk@Markus Friedl
2014-05-05make the ca_pubkey_serialize() code similar to the private key code, andMarkus Friedl
2014-05-05pfkey is unreliable, so add a select-timeout before MSG_PEEK;Markus Friedl
2014-05-05Zap trailing whitespace. Started by pointed comments from andre@.Kenneth R Westerback
2014-05-05Ugly workaround for an overoptimistic alignment expectation of dos_partitionMiod Vallat
2014-05-05Enhance reading of saved ascii labels (-R) to process mountpointKenneth R Westerback
2014-05-05the caller of ikev2_msg_retransmit_response already frees the sa; ok mikebMarkus Friedl
2014-05-05don't leak on pid mismatch; ok mikebMarkus Friedl
2014-05-05validate the attribute length, too; from hshoexer; ok mikebMarkus Friedl
2014-05-05convert select to poll. from peter maloneTed Unangst
2014-05-05"new file systemsize is" -> "new filesystem size is".Kenneth R Westerback
2014-05-05A couple of malloc()+memset(0) -> calloc.Kenneth R Westerback
2014-05-05change surprisingly consistent mispelling of length ("lenght")Bret Lambert
2014-05-04Factor out the code to set the expiry, renewal and rebinding times forKenneth R Westerback
2014-05-04With the recent change by deraadt@ to introduce kern.nosuidcoredump=3,Reyk Floeter
2014-05-04tweak previous;Jason McIntyre
2014-05-04When kern.nosuidcoredump=3, act like =2 but try to dump cores intoTheo de Raadt
2014-05-02remove unused variableCharles Longeau
2014-05-02'for (part == 0; ...)' is not the same as 'for(part = 0; ...)'.Kenneth R Westerback
2014-05-01Correct a test for X509_get_notAfter() failing or returningJonathan Gray
2014-04-30Preserve intended chronological order of leases inKenneth R Westerback
2014-04-30Write last disk sector, not last 512-byte block, when testing validityKenneth R Westerback
2014-04-29make sure the state machine only advances if the AUTH payload hasMarkus Friedl
2014-04-28macro fixes for previous; ok reykJason McIntyre
2014-04-28Do not sleep after poll returning an error. Blindly copied over fromFlorian Obser
2014-04-28spacingReyk Floeter
2014-04-28spacingReyk Floeter
2014-04-28bump copyrightReyk Floeter
2014-04-28Add missing documentation for ipcomp(4) support and the configurationReyk Floeter
2014-04-28It's about time to remove the infamous CAVEATS section in iked(8).Reyk Floeter
2014-04-27sort the ip6 sysctls;Jason McIntyre
2014-04-27Document net.inet6.ip6.dad_pending.Loganaden Velvindron
2014-04-25don't access a pointer till after the null checkJonathan Gray
2014-04-23Better name for fdmaskp, reduce the scope of some variables, don't abuseJeremie Courreges-Anglas
2014-04-23His name is Van Jacobson. ok jmc@Jeremie Courreges-Anglas
2014-04-23Replace malloc / memset / select song and dance with poll(2) likeFlorian Obser
2014-04-23don't clear label before readasciilabel(), it will not fill in someOtto Moerbeek
2014-04-22malloc/memset -> calloc. from peter maloneTed Unangst
2014-04-22malloc/memset -> calloc. from peter maloneTed Unangst
2014-04-22malloc/memset->calloc. with bonus null check. from peter malone.Ted Unangst
2014-04-22malloc/memset -> calloc. from peter maloneTed Unangst
2014-04-22Update iked to use the same proc.c that relayd uses.Reyk Floeter
2014-04-22for consistency's sake, use the terminology from the 802.1Q standardHenning Brauer
2014-04-22Clarify an err() messagePhilip Guenther