summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2019-10-13Factor out socket cleanup codeJeremie Courreges-Anglas
As a side effect this shuts down the TLS connection before closing the underlying socket for redirectionss. ok job@
2019-10-11don't use sizeof(pointer) to represent buffer sizeJonathan Gray
ok martijn@ deraadt@
2019-10-09On a 503, only retry if "Retry-After: 0" is present.Jeremie Courreges-Anglas
We just bail out if the header is absent or if the server tells us to wait. Prodding from job@, ok sthen@ deraadt@
2019-10-09Use snprintf instead of sprintf.Martijn van Duren
Requested by and OK deraadt@
2019-10-09openssh-8.1Damien Miller
2019-10-09fix an unreachable integer overflow similar to the XMSS case, and someDamien Miller
other NULL dereferences found by fuzzing. fix with and ok markus@
2019-10-09fix integer overflow in XMSS private key parsing. Reported byDamien Miller
Adam Zabrocki via SecuriTeam's SSH program. Note that this code is experimental and not compiled by default. ok markus@
2019-10-08Correct type for end-of-list sentinel; fixes initializer warnings onDarren Tucker
some platforms. ok deraadt.
2019-10-08Simplify threads flag handlingkn
Instead of always passing the threads flag which decides whether other function arguments are used or not, make callers pass those arguments or NULL depending on the threads flag. This reflects better how thread IDs are shown in place of user names/IDs. OK millert
2019-10-08Free the "e" element in ber_printf_elements if it fails, since there's noMartijn van Duren
chance that it's part of the new ber structure. Feedback and OK claudio@
2019-10-08Don't rely on the pdu returning the correct errorindex.Martijn van Duren
Noticed by semarie@ Feedback and OK claudio@
2019-10-08Replace "boolean.h" with <stdbool.h>kn
Be consistent with other programs in base and unify variable usage as follows to improve readability: bool = (bool == No) ? Yes : No -> bool = !bool if (bool == Yes) -> if (bool) if (bool == No) -> if (!bool) bool = Maybe -> bool = -1 OK millert
2019-10-07reversed test yielded incorrect debug messageDamien Miller
2019-10-07jmc is a stickler for consistency.Ted Unangst
2019-10-07add --label to usage. thx jmcTed Unangst
2019-10-07two compat features to allow the zstdgrep script to work.Ted Unangst
add --label option to prefix the output instead of filename. allow using - to mean stdin. ok deraadt
2019-10-07If optstring is NULL and usecommonopt is true, optstr was prependedAlexander Bluhm
by uninitialized garbage. Crash in snmp(1) found by regress/usr.sbin/snmpd. OK martijn@
2019-10-07Fix respawn-pane/window if default-command is set, reported by Janos Barbero.Nicholas Marriott
2019-10-06Avoid gasting around get_process_info()kn
get_process_info() returns a pointer to the global handle later only be used in format_next_process(); treat this struct handle as such without casting the pointer to caddr_t and back again. No object change. OK millert deraadt
2019-10-06Zap intermediate structs in compare_*()kn
SETORDER() can assign from function arguments directly without additional identical structs in each function. No object change. OK millert
2019-10-05Retry request once when receiving a 503Jeremie Courreges-Anglas
Basic implementation: we just retry once, and make no attempt (yet) to parse any Retry-After header. The idea is to work around cdn.openbsd.org sometimes replying with a 503 for reasons unknown. According to juanfra@ it sets "Retry-After: 0" so this minimal implementation should be enough. Different diff from espie@, test case from sthen@, input from millert@, ok millert@ deraadt@
2019-10-04better link "set" and "SET OPTIONS";Jason McIntyre
original diff from sven falempin, tweaked a bit by myself; ok sthen
2019-10-04Avoid a path traversal bug in s_server on Windows.Brent Cook
openssl s_server has an arbitrary read vulnerability on Windows when run with the -WWW or -HTTP options, due to an incomplete path check logic. Thanks to Jobert Abma for reporting. ok tb@
2019-10-04the formatting for the mini synopses in this page did not render wellJason McIntyre
on html or groff. the solution, to replace the non-standard .nr macros with a hang list, was provided by ingo - thanks! ok schwarze
2019-10-04fix memory leak in error path; bz#3074Damien Miller
patch from krishnaiah.bommu@intel.com, ok dtucker
2019-10-04spaceDamien Miller
2019-10-04Check for gmtime failure in moduli generation. Based on patch fromDarren Tucker
krishnaiah.bommu@intel.com, ok djm@
2019-10-03use a more common options order in SYNOPSIS and sync usage();Jason McIntyre
while here, no need for Bk/Ek; ok dtucker
2019-10-03Implement snmp set.Martijn van Duren
Manpage help jmc@ schwarze@ OK semarie@ claudio@
2019-10-03Use a malloc'd buffer for lsk since commands can be very long, from Gregory ↵Nicholas Marriott
Pakosz.
2019-10-03Do not lazily use BUFSIZ for "I don't care what size" when buildingNicholas Marriott
strings because it is only guaranteed to be 256 bytes and even the default 1024 is not always enough. Reported by Gregory Pakosz.
2019-10-03use the right argv element for the error message.Sebastien Marie
ok martijn@
2019-10-02thinko in previous; spotted by Mantas MikulėnasDamien Miller
2019-10-02make signature format match PROTOCOL.sshsig file: the message hashDamien Miller
should be written as a string, not raw bytes. Spotted by Mantas Mikulėnas
2019-10-02ban empty namespace strings for sshsig; spotted by Mantas MikulėnasDamien Miller
2019-10-02Remove references to "aucat socket".Alexandre Ratchov
The "aucat socket" was removed ~7 years ago. As the output could be anything on the network, also drop the .Xr to audio(4). ok sthen jmc
2019-10-02remove some duplicate #includesDamien Miller
2019-10-01For invalid queries and for valid queries returning no result,Ingo Schwarze
return the appropriate 40x status code rather than 200. Improvement suggested and diff tested by John Gardner <gardnerjohng at gmail dot com>.
2019-10-01update currency exchange rates;Jason McIntyre
2019-10-01revert unconditional forced login implemented in r1.41 of ssh-pkcs11.c;Damien Miller
r1.45 added a forced login as a fallback for cases where the token returns no objects and this is less disruptive for users of tokens directly in ssh (rather than via ssh-agent) and in ssh-keygen bz3006, patch from Jakub Jelen; ok markus
2019-09-29group and sort single letter options; ok deraadtJason McIntyre
2019-09-28Add where missing and harmonize PATH to be _PATH_DEFPATH (without local norAntoine Jacoutot
X11R6). Suggested by tb@ ok deraadt@ tb@ millert@
2019-09-28ensure dependency_libs and libdir are defined after parsing .la file.Sebastien Marie
problem raised with librsvg which use libtool-rust, and our libtool just die if deplib_list is undef. tested in bulk by sthen@ and naddy@ "modern" perl practice/syntax suggested by espie@ makes sense sthen@ ok espie@
2019-09-27fix the DH-GEX text in -a;Jason McIntyre
because this required a comma, i added a comma to the first part, for balance...
2019-09-25Style and line length nits.Nicholas Marriott
2019-09-24Some minor performance improvements - most notably, don't search theNicholas Marriott
input state table if the next character matches the same state as before.
2019-09-24Couple of bits of minor cleanup.Nicholas Marriott
2019-09-24Mouse formats don't work in copy mode so don't try to use them.Nicholas Marriott
2019-09-24identity_file[] should be PATH_MAX, not the arbitrary number 1024Theo de Raadt
2019-09-24Make select-pane -P set window-active-style also to match previousNicholas Marriott
behaviour, reported by Thomas Sattler.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-16 05:22:08 +0000