summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2021-12-13tee(1): increase I/O buffer size from 8KB to 64KBScott Soule Cheloha
64KB strikes a good balance between space and time on today's machines. Buffers smaller than 64KB waste more time in userspace traveling to and from the kernel. Buffers larger than 64KB do I/O a bit faster, but the performance improvements rapidly diminish at a steep memory cost. Discussed with millert@ and deraadt@. Positive feedback from Geoff Steckel. Thread: https://marc.info/?l=openbsd-tech&m=163737586414354&w=2 ok millert@ deraadt@
2021-12-13including sys/cdefs.h manually started as a result of netbsd trying toTheo de Raadt
macro-build a replacement for sccsid, and was done without any concern for namespace damage. Unfortunately this practice started infecting other code as others were unaware they didn't need the file. ok millert guenther
2021-12-13acct(4) ac_tty shouldn't need NODEV from sys/param.h (which is kernel API),Theo de Raadt
-1 is sufficient to indicate the process had no controlling tty, removing one more sys/param.h include in our userland ok millert
2021-12-13Make pane-border-format a pane option, GitHub issue 2999.Nicholas Marriott
2021-12-12Convert req.c to compile with opaque EVP_MD_CTX.Theo Buehler
ok inoguchi
2021-12-12Convert passwd.c to opaque EVP_MD_CTX and add a bit of error checking.Theo Buehler
tweak/ok inoguchi
2021-12-12Make speed.c compile with opaque EVP_CIPHER, EVP_MD and HMAC_CTX.Theo Buehler
ok inoguchi
2021-12-12A few more simplifications using get0_pubkey instead of get_pubkey + free.Theo Buehler
2021-12-12Simplify x509.c slightly by using X509_get0_pubkey() instead ofTheo Buehler
X509_get_pubkey() ok inoguchi
2021-12-12Make x509.c compile with opaque EVP_PKEY.Theo Buehler
ok inoguchi
2021-12-12Use correct spelling of NULLTheo Buehler
ok inoguchi
2021-12-12Make ts.c compile with opaque EVP_MD_CTX.Theo Buehler
ok inoguchi
2021-12-10fix a copy-and-paste error;Ingo Schwarze
from Richard Ulmer <... rulmer at mailbox dot org>
2021-12-10Missed unlinked control notifications, GitHub issue 2996.Nicholas Marriott
2021-12-10Mention XParseColor(3) for the cursor colour escape sequence.Nicholas Marriott
2021-12-10Add a NOBLOCK flag rather than adding amount to wait for whenNicholas Marriott
dealing with potentially-long sequences. GitHub issue 3001.
2021-12-09imrove the description of lesskey; based on a diff from richard ulmerJason McIntyre
ok deraadt schwarze
2021-12-07better error message for FIDO keys when we can't match them to a tokenDamien Miller
2021-12-07Simple conversion to opaque EVP_CIPHER.Theo Buehler
2021-12-07switch from tradcpp(1) to cpp(1); ok jsg@Robert Nagy
2021-12-07Improve the COMMAND SECTION section in multiple respects regardingIngo Schwarze
correctness, clarity, readability, and markup conventions. Triggered by Richard Ulmer <... rulmer at mailbox dot org> wondering whether the list of actions is complete and pointing out that the "shell" action no longer exists (it was removed quite some time ago for security reasons). OK jmc@
2021-12-07Respond to OSC 4 query.Nicholas Marriott
2021-12-07Use four digits not two for RGB responses to match other terminals.Nicholas Marriott
2021-12-07sys/signal.h (or some master include) must happen before sys/proc.h, whichTheo de Raadt
is not standalone. This problem is being hidden by a sys/param.h which cannot be deleted yet.
2021-12-07Use PATH_MAX (the standard name) rather than MAXPATHLEN (from BSD sys/param.h)Theo de Raadt
2021-12-06Clean up a bunch of dead code in s_server.c and s_socket.cTheo Buehler
jsg's analysis tool flagged a potential double free in do_server(). While this looks like a false positive, we can clean this code up a little: the host name passed to the callbacks isn't used by either sv_body() and www_body(), so it can be made local to do_accept() (an extra variable would not even be needed). Simplify the callbacks' signatures accordingly. Remove some commented out linger code that would never be used again anyway. ok inoguchi jsg
2021-12-06Fix g/G keys to be in line with copy mode.Nicholas Marriott
2021-12-06Do not dereference NULL window when resizing client, GitHub issue 2982.Nicholas Marriott
2021-12-05sys/select.h is not needed, if howmany/NBBY are needed they will arriveTheo de Raadt
via netinet/in.h and sys/time.h, which I must say surprises me a bit
2021-12-05fix unintended sizeof pointer in debug pathJonathan Gray
ok markus@
2021-12-04RSA/SHA-1 is not used by default anymore on the serverChristian Weisgerber
2021-12-03Fixed-size NOFILE_MAX (from sys/param.h of course) array is crazy, soTheo de Raadt
rewrite to expand the array as needed. ok tb
2021-12-02hash full host:port when asked to hash output, fixes hashes for non-Damien Miller
default ports. bz3367 ok dtucker@
2021-12-02improve the testing of credentials against inserted FIDO keys a littleDamien Miller
more: ask the token whether a particular key belongs to it in cases where the token support on-token user- verification (e.g. biometrics) rather than just assuming that it will accept it. Will reduce spurious "Confirm user presence" notifications for key handles that relate to FIDO keys that are not currently inserted in at least some cases. Motivated by bz3366; by Pedro Martelletto
2021-12-02move check_sk_options() up so we can use it earlierDamien Miller
2021-12-02ssh-rsa is no longer in the default for PubkeyAcceptedAlgorithms.Darren Tucker
2021-12-02list uppercase options along with lower in SYNOPSIS/options list/usage;Jason McIntyre
suggested by/ok deraadt
2021-12-02don't put the tty into raw mode when SessionType=none, avoids ^c beingDamien Miller
unable to kill such a session. bz3360; ok dtucker@
2021-11-30Improved error handling in config parser.Tobias Stoeckmann
- Escaped newlines confused column counter - An unclosed quote could have been logged multiple times - Signed data types could overflow, which is undefined behavior ok tedu
2021-11-30Fix indentation of return in yy_try_NUL_trans().Todd C. Miller
M4_YY_NOOP_GUTS_VAR is a no-op in most cases but its indentation remains, leading to double indentation of the return statement. This fixes "misleading indentation" warnings from clang. OK tb@
2021-11-29Bump response timer to three seconds, GitHub issue 2984.Nicholas Marriott
2021-11-29Fix user option lookup ordering.Nicholas Marriott
2021-11-29local copy of roundup() means no more sys/param.hTheo de Raadt
2021-11-28Stop using MAXBSIZE to eliminate sys/param.h including (which injects aTheo de Raadt
ton of namespace intrusion). Create local sizes, and refactor some code along the way. ok millert
2021-11-28sshsig: return "key not found" when searching empty files rather thanDamien Miller
"internal error"
2021-11-28ssh-keygen -Y match-principals doesn't accept any -O optionsDamien Miller
at present, so don't say otherwise in SYNOPSIS; spotted jmc@
2021-11-28fix indenting in last commitDamien Miller
2021-11-28missing initialisation for oerrnoDamien Miller
2021-11-27Add ssh-keygen -Y match-principals operation to perform matching ofDamien Miller
principals names against an allowed signers file. Requested by and mostly written by Fabian Stelzer, towards a TOFU model for SSH signatures in git. Some tweaks by me. "doesn't bother me" deraadt@
2021-11-26openssl(1): drop support for netscape certificates and server gated keys.Theo Buehler
ok inoguchi jsing