Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-12-08 | Fix for CVE-2014-8602. | Florian Obser | |
OK sthen@ Unfortunately you only get the dedication to support the infrastructure of the universally connected self-organizing Internet - and the autonomy of its participants iff you are a paying customer with a support contract. | |||
2014-12-08 | Do not send an error body in a HEAD request answer. | Florian Obser | |
From Bertrand Janin (b at janin dot com), thanks! OK reyk@ | |||
2012-03-26 | Import Unbound 1.4.16 to work on in-tree (not yet linked to the build). | Stuart Henderson | |
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@ | |||
2014-12-08 | read(2) returns ssize_t, not size_t | Bret Lambert | |
ok florian@ | |||
2014-12-08 | no need for arc4random_uniform() here, arc4random() does the job | Gilles Chehade | |
spotted by deraadt@, ok eric@ | |||
2014-12-07 | Avoid NULL deref in error case; found with llvm. | Florian Obser | |
OK reyk | |||
2014-12-07 | Fix regression for priority "none" (spotted by doug) of last commit by not | Tobias Stoeckmann | |
parsing numbers at all -- syslog.conf(5) explicitly states that keywords have to be used. ok millert | |||
2014-12-06 | Verify that facility and priority numbers are in valid ranges. | Tobias Stoeckmann | |
ok bluhm | |||
2014-12-05 | enable warnings | Florian Obser | |
2014-12-05 | Bail out if the buffer is too small to contain the length of a | Florian Obser | |
parameter value. Found while investigating a dead store pointed out by llvm scan-build. | |||
2014-12-05 | dead stores; pointed out by llvm scan-build; no binary change | Florian Obser | |
2014-12-05 | pause shadows global; pointed out by gcc; no binary change | Florian Obser | |
2014-12-05 | mode is unused; pointed out by gcc; no binary change | Florian Obser | |
2014-12-05 | declare lerr and lerrx __dead; unconfuses llvm scan-build | Florian Obser | |
2014-12-04 | replace an overlapping memcpy with memmove, ok deraadt tedu | Stuart Henderson | |
2014-12-04 | stop viral header propagation. none of this code uses sys/hash.h | Ted Unangst | |
from Max Fillinger | |||
2014-12-03 | zap extra parameter that my first read missed, because that one is constant. | Marc Espie | |
Strangeness noticed by aja@ | |||
2014-12-03 | rtsol is gone | Florian Obser | |
OK deraadt@ | |||
2014-12-03 | Unhook rtsol(8) and rtsold(8) from the build. | Florian Obser | |
OK deraadt@ | |||
2014-12-03 | Fix off by one in check for socket path too long. From Nicolas Bedos. | Todd C. Miller | |
2014-12-03 | Restore packetp and snapend pointers once we're done with an incorrectly | Mike Belopuhov | |
aligned IP/IPv6 packet so that tcpdump can print hexdump of the whole packet including the Ethernet header (if requested) and not only the IP/IPv6 part of it. ok jsg | |||
2014-12-03 | Fixup a crash found by jsg using the AFL fuzzer. IP and IPv6 printing | Mike Belopuhov | |
routines should check that there's at least a complete IP/IPv6 header available in the buffer before trying to do anything else. ok jsg | |||
2014-12-02 | zap extra parenthesis after recent rewrite | Marc Espie | |
from Mark Patruck | |||
2014-12-01 | use reallocarray() deep inside an macro ugly as sin | Theo de Raadt | |
2014-11-30 | much simpler checks, always enforce root/bin (or root/wheel for symlinks) | Marc Espie | |
for files without @owner/@group annotations, independently of who you are. This should fix building-as-root for good, even without twiddling FAKE_AS_ROOT. | |||
2014-11-30 | interactive/progressmeter clean-up | Marc Espie | |
2014-11-30 | much cleaner way to handle progress meter wipes: have state methods that | Marc Espie | |
do print something call sync_display (which does nothing by default), and override THAT one for the progressmeter case to go clear. Should sync by default now. | |||
2014-11-30 | get rid of some of the unadorned printfs | Marc Espie | |
2014-11-30 | missed some. | Marc Espie | |
2014-11-30 | forgot to take that out... | Marc Espie | |
2014-11-30 | In mopFileRead(), make sure to never increment e_cursec beyond e_nsec, so | Miod Vallat | |
that the next call to this function will not access e_sections[] out of bounds. Repairs mopa.out(1) behaviour noticed by sebastia@ | |||
2014-11-30 | clear progress meter before asking questions | Marc Espie | |
From Carlin Bingham | |||
2014-11-30 | Remove passing an override of INSTALL_PROGRAM to the | Brad Smith | |
autoconf script. It doesn't seem to serve any purpose. ok sthen@ | |||
2014-11-29 | simplify the interactive code into its own little object with simpler | Marc Espie | |
interface, so that most is it interactive tests vanish from the main program. | |||
2014-11-29 | The startup script is /etc/rc.d/nsd | Todd C. Miller | |
OpenBSD doesn't need a /dev/log socket in the chroot for syslog to work. OK deraadt@ miod@ sthen@ | |||
2014-11-27 | default for interactive should match non-interactive. | Marc Espie | |
Pointed out by krw@ | |||
2014-11-27 | Fix typos in comments. | Tobias Stoeckmann | |
ok jmc, yasuoka | |||
2014-11-26 | Prefer setvbuf() to setlinebuf() for portability; ok deraadt@ | Todd C. Miller | |
2014-11-26 | Drop sysmerge.log ; it used to be handy for batch mode but now the | Antoine Jacoutot | |
console output is clear and clean in that mode. Since /var/tmp is now a symlink to /tmp: - directly use /tmp - if modifications were done; at the end of the run: - display our backup directory (in case we want to move it to survive a reboot) - display where and what files are still left for comparison discussed with and ok sthen@ | |||
2014-11-25 | evbuffer_read and evbuffer_write are wrappers around read and write, | David Gwynne | |
so you have to check their return values in the same way and handle errors the same way. returning 0 from evbuffer_read means the other end of the socket has gone away. we should try again on both evbuffer_read and evbuffer_write if we get EAGAIN or EINTR. ok millert@ bluhm@ | |||
2014-11-25 | minor clean-up: the stuff not to display is tied to the set, so make the | Marc Espie | |
current_set more explicit in the PkgAdd algorithm... and clean it up when we clean the set. Put the "tieing files" stuff into its own function so that the add code looks a bit less like a spaghetti monster | |||
2014-11-25 | use correct divisor when converting microseconds to 100ths of a second | Bret Lambert | |
found by yasuoka@ | |||
2014-11-24 | remove a surplus break statement | Jonathan Gray | |
2014-11-23 | some third-party applications generate malformed headers which we can still | Gilles Chehade | |
parse correctly, do not reject message as malformed in this case | |||
2014-11-23 | TargetPortalGroupTag is a binary 16-bit value so 0 is allowed. | Claudio Jeker | |
Still not perfect since binary values can also be base64 encoded but one step closer. | |||
2014-11-23 | Change the error handling a bit to ensure we do not double free the task | Claudio Jeker | |
by calling conn_task_cleanup() twice (once direct and once via conn_fail()). The error handling needs some more work but at least this fixes the crash found by jasper@ | |||
2014-11-23 | Clear the work in progress PDU before calling the task handler. | Claudio Jeker | |
This ensures that we don't have multiple pointers pointing to the same PDU. | |||
2014-11-23 | <sys/buf.h> isn't actually needed here | Philip Guenther | |
ok tedu@ | |||
2014-11-22 | oops, left an old line... | Theo de Raadt | |
2014-11-22 | /dev/random has created the same effect as /dev/arandom (and /dev/urandom) | Theo de Raadt | |
for quite some time. Mop up the last few, by using /dev/random where we actually want it, or not even mentioning arandom where it is irrelevant. |