summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2016-05-25To prevent screwing up terminal settings when printing to theIngo Schwarze
terminal, for ASCII and UTF-8, escape bytes not forming characters and bytes forming non-printable characters with vis(3) VIS_OCTAL. For other character sets, abort printing of the current string in these cases. In particular, * let scp(1) respect the local user's LC_CTYPE locale(1); * sanitize data received from the remote host; * sanitize filenames, usernames, and similar data even locally; * take character display widths into account for the progressmeter. This is believed to be sufficient to keep the local terminal safe on OpenBSD, but bad things can still happen on other systems with state-dependent locales because many places in the code print unencoded ASCII characters into the output stream. Using feedback from djm@ and martijn@, various aspects discussed with many others. deraadt@ says it should go in now, i probably already hesitated too long
2016-05-25Avoid a use-after-free.Kenneth R Westerback
Diff from Vladimir Sotirov via tech@. Thanks! ok millert@
2016-05-25Don't warn when read or write block at cycle boundary, this mayAlexandre Ratchov
happen when remote devices are used and is not an error.
2016-05-25Assert we're not freeing buffers we didn't allocateAlexandre Ratchov
2016-05-25Log files skipped during poll() as well, and flush the log bufferAlexandre Ratchov
right before we call poll().
2016-05-25Set initial mixer slot name to "prog" to make all slots visible inAlexandre Ratchov
audioctl and alike.
2016-05-24KNF compression proposal and simplify the client side a little. ok djm@Darren Tucker
2016-05-24Back out 'plug memleak'.Darren Tucker
2016-05-23prefer agent-hosted keys to keys from PKCS#11; ok markusDamien Miller
2016-05-23Use a fixed buffer for strftime() because there is no portable way toNicholas Marriott
tell if the buffer is too small, and an expanding buffer is overkill anyway.
2016-05-23Remove unused variable, from Ben Boeckel.Nicholas Marriott
2016-05-23Trim trailing whitespace from man.conf lines. OK schwarze@.Todd C. Miller
2016-05-23UTF-8 support.Ingo Schwarze
Using feedback about bugs in earlier versions from Matthew Martin <phy1729 at gmail dot com> and from tsg@ who tested it with afl(1). OK czarkoff@ tsg@
2016-05-23Plug mem leak in filter_proposal. ok djm@Darren Tucker
2016-05-22On hppa, function pointer comparison can require dereferencing them.Philip Guenther
kdump can't do that for a sigaction sa_handler pointer from the trace, so cast to void* to suppress it. ok deraadt@
2016-05-19fix type of ed25519 valuesDamien Miller
2016-05-18Also print a warning if the user doesn't fill the mail SubjectJeremie Courreges-Anglas
Alternative diff by Tim (trondd ! kagu-tsuchi . com), ok tedu@
2016-05-18Print a user-friendly message if some fields are missing; ok tedu@Jeremie Courreges-Anglas
2016-05-17Refactor the handling of pledge and the optional user string: The threeTheo Buehler
way pledge introduced by millert@ in -r1.70 is now a two way pledge, one for non-root and one for root. This also ensures that root drops the id promise in all cases early on. This disentangling of the bits for root and non-root simplifies the code paths in all cases. ok millert@
2016-05-17Move the code block that builds up a default seed further down in orderTheo Buehler
to reduce the noise in the next commit. While there, fix the indent level of a bit introduced in the previous commit. ok millert@
2016-05-17Fix "skeyinit username" run as root. Also reduce the pledgeTodd C. Miller
promise when run as root since we don't need proc or exec as root. OK tb@, earlier version OK deraadt@
2016-05-13spelling and usage() fixes;Jason McIntyre
2016-05-13have sinclude/include be more compatible with sysv, handle list of filesMarc Espie
small improvement and okay millert@
2016-05-13-F is nonstandard as well. from Caspar SchutijserTed Unangst
2016-05-12Add -F option to install(1) that calls fsync(2) on the installedTodd C. Miller
file right before closing it. OK tedu@ phessler@
2016-05-12- Rework load_cfg() error handling a little.Tim van der Molen
- Add -q to source-file to suppress errors about nonexistent files. Input and OK nicm@
2016-05-12set-hook needs CANFAIL like the other set commands.Nicholas Marriott
2016-05-11remove hppa64 port, which we never got going beyond broken single users.Theo de Raadt
hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis
2016-05-11Add on alerts rather than ignoring them if the event has already beenNicholas Marriott
queued, for example bell and activity together. From Marcel Lippmann via Romain Francoise.
2016-05-11signify should refer to the future keyTheo de Raadt
2016-05-11Allow top(1) to filter process args if they are being displayed.Edd Barrett
OK tedu@, deraadt@, and with input from Michal Mazurek. Thanks
2016-05-09Implement Mdocdate keyword substitution.Ingo Schwarze
In particular, this stops rcsdiff(1) and CVSweb from showing wrong Mdocdate lines in diffs. Problem originally reported by tj@. OK tobias@ otto@ millert@
2016-05-08Switch to getpwnam_shadow() now that getpwnam() no longer opens the shadowTim van der Molen
database; OK deraadt@ sthen@
2016-05-08The header <vis.h> is no longer needed; ok martijn@.Ingo Schwarze
2016-05-08Enable UTF-8 detection in wall(1). This deliberately ignores UTF-8 charactersMartijn van Duren
and replaces them with a single question mark. Similar to write(1). code OK and tweaks schwarze@ man page adjustment by schwarze@ and OK jmc@
2016-05-08Delete encoding code for the unused TODIGIT information.Ingo Schwarze
I'm not aware of plans to add any TODIGIT support, and when shown on tech@, people were more or less indifferent and showed confusion about what this code even did. But the encoding code was buggy, in particular lacking validity checks, and hence clobbered other important data, in particular character type and character width data, with consequences that are hard to judge.
2016-05-07systrace is dead. long live systrace.Theo de Raadt
2016-05-07Free memory if realloc fails. The application is most likely to terminate afterMartijn van Duren
a failure, but if it does not we better clean up after ourselfs. OK deraadt@ and stefan@
2016-05-06Remove #ifdef INET6 bits, missed in a commit earlier this weekJeremie Courreges-Anglas
This probably broke passive FTP on IPv6 and [ip::v6]:port syntax in RAMDISK ftp(1), sorry about that. The diff was initially ok millert@
2016-05-05Remove __sigblockset. This is a leftover after the removal of the signalMartijn van Duren
blocking code in common/gs.h rev 1.14. Remove a redundant return while here. OK millert@
2016-05-05Fix one of the reads past the end of the buffer. FoundAlexandre Ratchov
by Geoff Hill, fix proposed by jsg@ and zhuk@.
2016-05-04Fix up a couple of long lines.Nicholas Marriott
2016-05-04Kill #ifdef INET6 occurrences in userland.Jeremie Courreges-Anglas
Prompted by and ok millert@ (tcpdump and libpcap left untouched, the #ifdef force is too strong with those)
2016-05-04add IdentityAgent; noticed & ok jmc@Markus Friedl
2016-05-04allow setting IdentityAgent to SSH_AUTH_SOCK; ok djm@Markus Friedl
2016-05-04move SSH_MSG_NONE, so we don't have to include ssh1.h; ok deraadt@Markus Friedl
2016-05-04missing const in prototypes (ssh1)Markus Friedl
2016-05-04Fix inverted logic for updating StreamLocalBindMask which would cause theDarren Tucker
server to set an invalid mask. ok djm@
2016-05-04IdentityAgent for specifying specific agent sockets; ok djm@Markus Friedl
2016-05-04fix junk characters after quotesDamien Miller