summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2014-12-08Fix for CVE-2014-8602.Florian Obser
OK sthen@ Unfortunately you only get the dedication to support the infrastructure of the universally connected self-organizing Internet - and the autonomy of its participants iff you are a paying customer with a support contract.
2014-12-08Do not send an error body in a HEAD request answer.Florian Obser
From Bertrand Janin (b at janin dot com), thanks! OK reyk@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2014-12-08read(2) returns ssize_t, not size_tBret Lambert
ok florian@
2014-12-08no need for arc4random_uniform() here, arc4random() does the jobGilles Chehade
spotted by deraadt@, ok eric@
2014-12-07Avoid NULL deref in error case; found with llvm.Florian Obser
OK reyk
2014-12-07Fix regression for priority "none" (spotted by doug) of last commit by notTobias Stoeckmann
parsing numbers at all -- syslog.conf(5) explicitly states that keywords have to be used. ok millert
2014-12-06Verify that facility and priority numbers are in valid ranges.Tobias Stoeckmann
ok bluhm
2014-12-05enable warningsFlorian Obser
2014-12-05Bail out if the buffer is too small to contain the length of aFlorian Obser
parameter value. Found while investigating a dead store pointed out by llvm scan-build.
2014-12-05dead stores; pointed out by llvm scan-build; no binary changeFlorian Obser
2014-12-05pause shadows global; pointed out by gcc; no binary changeFlorian Obser
2014-12-05mode is unused; pointed out by gcc; no binary changeFlorian Obser
2014-12-05declare lerr and lerrx __dead; unconfuses llvm scan-buildFlorian Obser
2014-12-04replace an overlapping memcpy with memmove, ok deraadt teduStuart Henderson
2014-12-04stop viral header propagation. none of this code uses sys/hash.hTed Unangst
from Max Fillinger
2014-12-03zap extra parameter that my first read missed, because that one is constant.Marc Espie
Strangeness noticed by aja@
2014-12-03rtsol is goneFlorian Obser
OK deraadt@
2014-12-03Unhook rtsol(8) and rtsold(8) from the build.Florian Obser
OK deraadt@
2014-12-03Fix off by one in check for socket path too long. From Nicolas Bedos.Todd C. Miller
2014-12-03Restore packetp and snapend pointers once we're done with an incorrectlyMike Belopuhov
aligned IP/IPv6 packet so that tcpdump can print hexdump of the whole packet including the Ethernet header (if requested) and not only the IP/IPv6 part of it. ok jsg
2014-12-03Fixup a crash found by jsg using the AFL fuzzer. IP and IPv6 printingMike Belopuhov
routines should check that there's at least a complete IP/IPv6 header available in the buffer before trying to do anything else. ok jsg
2014-12-02zap extra parenthesis after recent rewriteMarc Espie
from Mark Patruck
2014-12-01use reallocarray() deep inside an macro ugly as sinTheo de Raadt
2014-11-30much simpler checks, always enforce root/bin (or root/wheel for symlinks)Marc Espie
for files without @owner/@group annotations, independently of who you are. This should fix building-as-root for good, even without twiddling FAKE_AS_ROOT.
2014-11-30interactive/progressmeter clean-upMarc Espie
2014-11-30much cleaner way to handle progress meter wipes: have state methods thatMarc Espie
do print something call sync_display (which does nothing by default), and override THAT one for the progressmeter case to go clear. Should sync by default now.
2014-11-30get rid of some of the unadorned printfsMarc Espie
2014-11-30missed some.Marc Espie
2014-11-30forgot to take that out...Marc Espie
2014-11-30In mopFileRead(), make sure to never increment e_cursec beyond e_nsec, soMiod Vallat
that the next call to this function will not access e_sections[] out of bounds. Repairs mopa.out(1) behaviour noticed by sebastia@
2014-11-30clear progress meter before asking questionsMarc Espie
From Carlin Bingham
2014-11-30Remove passing an override of INSTALL_PROGRAM to theBrad Smith
autoconf script. It doesn't seem to serve any purpose. ok sthen@
2014-11-29simplify the interactive code into its own little object with simplerMarc Espie
interface, so that most is it interactive tests vanish from the main program.
2014-11-29The startup script is /etc/rc.d/nsdTodd C. Miller
OpenBSD doesn't need a /dev/log socket in the chroot for syslog to work. OK deraadt@ miod@ sthen@
2014-11-27default for interactive should match non-interactive.Marc Espie
Pointed out by krw@
2014-11-27Fix typos in comments.Tobias Stoeckmann
ok jmc, yasuoka
2014-11-26Prefer setvbuf() to setlinebuf() for portability; ok deraadt@Todd C. Miller
2014-11-26Drop sysmerge.log ; it used to be handy for batch mode but now theAntoine Jacoutot
console output is clear and clean in that mode. Since /var/tmp is now a symlink to /tmp: - directly use /tmp - if modifications were done; at the end of the run: - display our backup directory (in case we want to move it to survive a reboot) - display where and what files are still left for comparison discussed with and ok sthen@
2014-11-25evbuffer_read and evbuffer_write are wrappers around read and write,David Gwynne
so you have to check their return values in the same way and handle errors the same way. returning 0 from evbuffer_read means the other end of the socket has gone away. we should try again on both evbuffer_read and evbuffer_write if we get EAGAIN or EINTR. ok millert@ bluhm@
2014-11-25minor clean-up: the stuff not to display is tied to the set, so make theMarc Espie
current_set more explicit in the PkgAdd algorithm... and clean it up when we clean the set. Put the "tieing files" stuff into its own function so that the add code looks a bit less like a spaghetti monster
2014-11-25use correct divisor when converting microseconds to 100ths of a secondBret Lambert
found by yasuoka@
2014-11-24remove a surplus break statementJonathan Gray
2014-11-23some third-party applications generate malformed headers which we can stillGilles Chehade
parse correctly, do not reject message as malformed in this case
2014-11-23TargetPortalGroupTag is a binary 16-bit value so 0 is allowed.Claudio Jeker
Still not perfect since binary values can also be base64 encoded but one step closer.
2014-11-23Change the error handling a bit to ensure we do not double free the taskClaudio Jeker
by calling conn_task_cleanup() twice (once direct and once via conn_fail()). The error handling needs some more work but at least this fixes the crash found by jasper@
2014-11-23Clear the work in progress PDU before calling the task handler.Claudio Jeker
This ensures that we don't have multiple pointers pointing to the same PDU.
2014-11-23<sys/buf.h> isn't actually needed herePhilip Guenther
ok tedu@
2014-11-22oops, left an old line...Theo de Raadt
2014-11-22/dev/random has created the same effect as /dev/arandom (and /dev/urandom)Theo de Raadt
for quite some time. Mop up the last few, by using /dev/random where we actually want it, or not even mentioning arandom where it is irrelevant.