summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2015-09-10Make syslogd compile again after recent libtls changes. Adapt toAlexander Bluhm
new tls_read() and tls_write() calling semantics, adapt to TLS_WANT_POLLIN and TLS_WANT_POLLOUT renaming. OK beck@
2015-09-10fix after libtls api changesBob Beck
ok jsing@
2015-09-10fix after libtls api changesBob Beck
ok jsing@
2015-09-10Update httpd to call tls_handshake() after tls_accept_socket().Joel Sing
ok beck@
2015-09-09Hide YP-specific xdr_* functions, and have the YP tools link -lrpcsvcTheo de Raadt
as needed. ok miod guenther
2015-09-09Fix memory leak in error path when max length exceeded.Todd C. Miller
From Michael McConville
2015-09-09Remove more dead code.Antoine Jacoutot
2015-09-09To double the receive buffer of a socketpair does not help as sendingAlexander Bluhm
checks the send buffer size. So double both buffer sizes. Moreover the default for sending is 2048 and for receiving is 4096. This makes the existing double buffer algorithm inconsistent. It is better to make the buffers large enough to hold 8 full length messages. Just make sure that it does not shrink. Keep the approach that doubles the buffer sizes. When we are low on buffers and cannot reach the full size, increase it as much as possible. While there, add consistent error messages. OK benno@
2015-09-09Remove unused code.Antoine Jacoutot
2015-09-09Move and tweak a comment.Antoine Jacoutot
2015-09-07when bypassing the enqueuer, insert Message-Id header if none was found andGilles Chehade
the client has connected from a loopback interface. ok millert@ eric@
2015-09-07append a slash immediately after a file system path that is a directory;Igor Sobrado
uppercase the description of /var/run/iked.sock (found by jmc@); add missing full stop. ok jmc@
2015-09-07Fix a regression that was introduced with server.c r1.64: Do NOT freeReyk Floeter
srv_conf->auth in serverconfig_free() because it was not allocated in config_getserver() but assigned as a reference by id from a global list that is maintained independently. This fixes a potential double-free. This fix also makes srv_conf->auth "const" to emphasize that the read-only auth pointer was not allocated here. OK jsing@
2015-09-07Simplify handling of sum files.Antoine Jacoutot
2015-09-07No need to restore backup of sum files; once the new ones are installed,Antoine Jacoutot
it means we already processed all relevant files.
2015-09-06UINT_MAX would overflow the integer calculation later on, leading toTobias Stoeckmann
floating point exception just like -1 would do. Use INT_MAX, which is already way too high to make sense anyway.
2015-09-06Avoid floating point exception when an invalid font width was specified.Tobias Stoeckmann
Also print actually helpful error messages when command line arguments are invalid. ok miod@
2015-09-06hex array of bytes should be printed fixed-form; from Jihyun YuTheo de Raadt
2015-09-05Avoid unintended problems with operator precedence when doing anJonathan Gray
assignment and comparison. ok deraadt@ looks correct millert@ jung@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-09-04zap extra newline that snuck inJasper Lievisse Adriaanse
2015-09-03In sendsyslog(2) I got the plural s of messages right. The messagesAlexander Bluhm
of syslogd(8) should be alike. syslogd: dropped 1 message OK lteo@ millert@
2015-09-03Instead of creating a line buffer on the stack, tcp_readcb() canAlexander Bluhm
use the global linebuf like the other libevent read callbacks. OK jung@
2015-09-03Document spool dir in smtpd's FILES section and be consistent withTodd C. Miller
using compact lists for FILES in the other manual pages. OK gilles@
2015-09-03Modify acpidump to work on systems booted from efi boot. Use the ACPIYASUOKA Masahiko
config address passed through the boot parameter. ok mlarkin
2015-09-03move paren to correctly return a negative error value instead of theJonathan Gray
result of the < 0 test which would be 1. ok gilles@
2015-09-03the session kicking mechanism has an accounting bug leading to some legitGilles Chehade
sessions being kicked if they generate too many consecutive errors. remove the mechanism altogether until it is redesigned.
2015-09-01Bind the *:514 UDP socket of syslogd with SO_REUSEADDR. This avoidsAlexander Bluhm
conflicts with other processes bound to a specific address with the same port. Syslogd uses this socket basically for outgoing traffic to remote UDP log servers, so increase the chance that it works. OK jung@ benno@
2015-09-01stop defining a local copy of perror(); libc/rpc no longer uses it.Theo de Raadt
ok beck millert miod
2015-08-31The !prog and +host features allow to select log messages from aAlexander Bluhm
specific programm or host. It does not make sense to truncate the string from the config at some character from a list. Just take whatever the user specified as progname or hostname. If it contains funky charactes it will not match and the action is not taken. This fixes matching with IP addresses if syslogd is started with -n. OK semarie@
2015-08-30rename a variable "err" to "error"Theo de Raadt
2015-08-30warnx(3) has an implicit \n at the end.Florian Obser
pointed out by deraadt@
2015-08-28log battery changes every 10%, not every 21.Ted Unangst
ok deraadt jung phessler
2015-08-28Rework the UNIX domain socket garbage collector, including ideas fromPhilip Guenther
{Free,Net}BSD - when a socket is closed with fds in its input, defer closing them to a task to avoid recursing. This eliminates the complicated extra reference taking which had a 37 line(!) comment explanation - move flags, counts, and links only needed for this from struct file to struct unpcb - document the flow of the mark/sweep collector much help from claudio@ who made me explain the GC to him until we trusted it ok claudio@ mpi@ deraadt@
2015-08-28Xr ntpctl; from Rob PierceTheo de Raadt
2015-08-27missing va_end(); OK deraadtGleydson Soares
2015-08-27When syslogd is reloading a modified config, it does a reexec onAlexander Bluhm
itself. For this it uses the original arguments of main(). The function loghost_parse() modifies the optarg memory it is operating on. To prevent that the exec arguments have been tampered, pass a copy of optarg to loghost_parse(). OK deraadt@
2015-08-27Add a boundary check for safety and use snprintf() to construct the IPYASUOKA Masahiko
address strings instead of strl{cpy,cat}(). Also make the function return a valid string even in failure case. input deraadt ok deraadt
2015-08-26fix a use after free in an error path found with aflJonathan Gray
ok yasuoka@
2015-08-25Use ppoll(2) instead of poll(2). This has two benefits. Firstly,Todd C. Miller
we can use struct timespec throughout and avoid any conversion issues which might cause jobs to fire prematurely. Secondly, it eliminates a race condition that could delay us taking action on SIGCHLD and SIGHUP. OK deraadt@ okan@ ratchov@
2015-08-25strlcpy() accesses the source string until it finds NUL, even ifAlexander Bluhm
it is behind the size limit. As msg is not NUL-terminated in this case, it depended on memory content wether syslogd will crash. So using memcpy() and setting the NUL explicitly is the correct way. OK deraadt@
2015-08-25Remove references to the -h command line option which was removed.YASUOKA Masahiko
Also use `return' instead of exit(3) in main(). Patch from Michael Reed ok jmc
2015-08-25Remove -h command line option from radiusd(8) to make it better style.YASUOKA Masahiko
Patch from Michael Reed
2015-08-24cp -> mvAntoine Jacoutot
Put /usr/share/sysmerge under XXX.
2015-08-24Make backup directory of replaced files persistent: /var/sysmerge/backups.Antoine Jacoutot
3 rotations so that we have history of modified files. In batch mode, when a file cannot be handled automatically, remove it from the checksum file so that the next interactive sysmerge(8) run will ask to merge the changes. ok rpe@
2015-08-24/usr/share/sysmerge -> /var/sysmergeAntoine Jacoutot
requested by several discussed with deraadt@
2015-08-23Use simple byte pointer arithmetic and memcpy from/to aligned stackChristian Weisgerber
variables to handle the "packed" binary format passed out to userland when querying the prefix/router list. From NetBSD (Martin Husemann). ok mpi@
2015-08-21Increase the input side socket buffer size for "check icmp" not toYASUOKA Masahiko
drop the reply messages when "check icmp" is used with many hosts. ok reyk benno
2015-08-21Use reallocarray() instead of malloc() before strvisx().Reyk Floeter
Found by deraadt@ OK blambert@
2015-08-21The WebDAV MOVE method was not included in the switch statementReyk Floeter
handling the HTTP methods in server_http.c which resulted in a 405 method not allowed error when trying to use it. Fix by jaminh on github