Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-01-22 | remove a stupid -Wstrict-prototype warning by making the hash function | Ted Unangst | |
static. noticed by florian riehm | |||
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt | |
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | |||
2014-12-18 | simple to use siphash here. ok deraadt | Ted Unangst | |
2014-11-20 | Don't allow embedded nul characters in strings. | Jonathan Gray | |
Fixes a pfctl crash with an anchor name containing an embedded nul found with the afl fuzzer. pfctl parse.y patch from and ok deraadt@ | |||
2014-11-18 | Nuke more obvious #include duplications. | Kenneth R Westerback | |
ok deraadt@ millert@ tedu@ | |||
2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
format string, create a temporary message. OK deraadt@ claudio@ | |||
2014-11-02 | Add gcc format attributes to parse.y for ospf{6,}d. | Doug Hogan | |
Fix a few yyerror() lines that are missing arguments. ok claudio@ sthen@ | |||
2014-10-25 | Remove unnecessary netinet/in_systm.h include. | Lawrence Teo | |
ok millert@ | |||
2014-07-20 | Fixed typo in error message. | Tobias Stoeckmann | |
okay deraadt@ | |||
2014-07-12 | Close connections when msgbuf_write() returns 0. | Kenneth R Westerback | |
ok claudio@ | |||
2014-07-11 | Close the control fd when it has reported EOF. | Kenneth R Westerback | |
ok henning@ | |||
2014-06-23 | The second level of the CTL_NET sysctl is a PF_*, not an AF_* | Philip Guenther | |
inconsistent usage in route(8) noted by Gregor Best (gbe (at) ring0.de) | |||
2014-01-22 | relax the cfg file secrecy check slightly to allow group readability | Henning Brauer | |
default permissions and mtree NOT changed. prodded by benno, ok phessler benno jmatthew theo pelikan florian | |||
2013-11-25 | use u_char for buffers in yylex, for ctype calls | Sebastian Benoit | |
found by millert@, ok deraadt@ | |||
2013-11-13 | from claudio | Sebastian Benoit | |
"Let msgbuf_write return -1 with errno EAGAIN. The users then must check if this was the case and readd the event or poll again. The current handling in the imsg code is wrong for sure." ok gilles, benno | |||
2013-10-30 | another simple %i to %d conversion for obviousness | Theo de Raadt | |
2013-08-14 | Enforce that the ls_id and the adv_rtr field in a type 1 router LSA are | Claudio Jeker | |
the same. This will drop updates trying to attack the OSPF LSDB. For ospfd such bad router LSA were never a problem since the LSA lookup always includes the ls_id and adv_rtr -- so the bad packets would have never been picked up by the SPF calculation. OK bluhm@ benno@ | |||
2013-08-14 | no longer any need to quote macro lines with >9 args; | Jason McIntyre | |
From: Jan Stary | |||
2013-06-01 | Minor cleanup, do not set values to 0 twice. | Claudio Jeker | |
2013-03-22 | whitespace tweak; gratuitous difference with ospf6d | Stuart Henderson | |
2013-03-22 | reinstate code to announce routes to backup carp interfaces. this was removed | Stuart Henderson | |
in a cleanup in r1.83, but we do still want to announce these (with a high metric), so that a specific route to the relevant network is maintained during failover. ok florian@ claudio@ | |||
2013-03-11 | handle ECONNABORTED errors from accept(). In many code blocks they can be | Theo de Raadt | |
ignored silently and without aborting, much like EINTR and EWOULDBLOCK are. ok's from various maintainers of these directories... | |||
2013-03-06 | sync yyerror() with version in bgpd so that it logs to syslog when daemonized. | Stuart Henderson | |
ok florian@ | |||
2013-03-06 | When dumping config, just print "passive" for passive interfaces rather | Stuart Henderson | |
than showing hello timers/keys. ok florian@ | |||
2013-01-17 | improve snapshot handling: | Markus Friedl | |
- don't start a new snapshot if we are already in NBR_STA_SNAP - ignore IMSG_DB_SNAPSHOT and IMSG_DB_END unless we are in NBR_STA_SNAP - add new IMSG_LS_SNAP message so we can distinguish it from IMSG_LS_UPD. this way we can ignore them if we are not in NBR_STA_SNAP ok claudio@ | |||
2013-01-17 | do not send IMSG_LS_UPD if we have no links; ok claudio | Markus Friedl | |
2013-01-17 | ignore the nbr_adj_timer if we are not forming adjacencies; ok claudio | Markus Friedl | |
2013-01-17 | transmit correct state to RDE; ok claudio | Markus Friedl | |
2013-01-17 | allow two minutes until neighbor adjacencies are formed; ok claudio@ | Markus Friedl | |
2013-01-17 | for point-to-point interfaces we need to send lsupdates to the | Markus Friedl | |
interface address, since there is no DR and multicast messages to the DR will be ignored. see RFC 2328, 13.3(5) ok claudio@ | |||
2013-01-17 | the peer might still send more DD messages, even if the RDE has | Markus Friedl | |
processed all received DDs (dd_pending == 0), so we need to check for state != NBR_STA_XCHNG; ok claudio@ | |||
2013-01-17 | the event NBR_EVT_SEQ_NUM_MIS is not defined in state NBR_STA_XSTRT | Markus Friedl | |
(would change back to NBR_STA_XSTRT anyway) ok claudio@ | |||
2012-09-26 | last stage of rfc changes, using consistent Rs/Re blocks, and moving the | Jason McIntyre | |
references into a STANDARDS section; | |||
2012-09-18 | The if (!better && !equal) check is redundant as the same condition | Alexander Bluhm | |
is checked a few lines below again. Fewer checks make the code more readable. ok stsp@ | |||
2012-08-29 | bump reference to rfc 1583 to rfc 2328; | Jason McIntyre | |
2012-05-14 | Don't display a nonsense uptime for an inactive interface. ldpd fix from | Stuart Henderson | |
Rafael Zalamena on tech@, I also applied it to ospfd. ok phessler@ | |||
2012-04-24 | take a stab at documenting when arguments need quoted, and valid macro | Jason McIntyre | |
characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke | |||
2012-04-11 | delete excessive evtimer_pending; ok claudio | Theo de Raadt | |
2012-04-10 | Handle file descriptor exhaustion in the accept() case. | Theo de Raadt | |
ok claudio | |||
2012-04-04 | Both LSA_TYPE_AREA_OPAQ and LSA_TYPE_AS_OPAQ can be found when traversing | Claudio Jeker | |
the LSDB. So adjust SPF calculation to not trigger a fatal. Problem found and fix tested by Chris Wopat | |||
2011-09-16 | Rather than reloading kernel routes immediately when an RTM_DESYNC is seen, | Stuart Henderson | |
set (or extend) a timer and only reload when this expires. Avoids repeatedly dumping full kernel routes (thus generating more load) when the machine has problems keeping up with messages on the route socket. (if you see lots of repeated "reloading interface list and routing table" in ospfd logs, this will help). Suggestions/ok claudio@. | |||
2011-08-20 | Decouple log_verbose() from log_init() so the verbose flag stays set with | Stuart Henderson | |
"ospfd -v" (previously only "-vd" worked). Feedback on earlier implementation from henning@ blambert@ claudio@, ok claudio@ | |||
2011-07-04 | LINK_STATE_IS_UP() cleanup userland part. There is no need to special | Claudio Jeker | |
case carp(4) interfaces anymore. LINK_STATE_IS_UP() almost always does the right job. OK deraadt@ henning@ This needs a -current kernel or link state may be not reported correctly. | |||
2011-06-21 | Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudio | Mike Belopuhov | |
2011-05-24 | Fix nexthop calculation for directly connected P2P links. connected | Claudio Jeker | |
may only be set on directly connected networks but not on router nodes which are used by the P2P links. Fix for PR 6597. OK sthen@ | |||
2011-05-09 | First bits to support opaque LSA. Type-9, 10 and 11 are LSA that can | Claudio Jeker | |
hold about any data you like and is used for things like greaceful reload. Implement the basic redistribute logic and LSDB handling but the data sent is currently not looked at. Tested and OK sthen@ | |||
2011-05-06 | Do not special case loopback interfaces on init. Instead force them | Claudio Jeker | |
to IF_STA_LOOPBACK in if_act_start() this way they will repsect IFF_UP on startup. Also remove a now no longer needed workaround when reloading interfaces. Initial diff provided by Patrick Coleman. OK dlg@ | |||
2011-05-02 | More spring cleaning | Claudio Jeker | |
2011-05-02 | Wrap some long lines and other cleanup. No functional change. | Claudio Jeker | |
2011-05-02 | Some KNF, some other cleanup, fix some fatalx() messages. | Claudio Jeker | |
No functional change |