summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2014-11-22use size_t where appropriate. ok deraadt reykTed Unangst
2014-11-21white space begoneTheo de Raadt
2014-11-21a long time ago, DISPLAY and UNDISPLAY required special treatment, as theyMarc Espie
were displayed "on the fly". But prepare+log means the display happens later in any case, so they can be done as part of regular plist. Also, mark known manpage dirs for even more verbiage reduction...
2014-11-20big trim-down of MESSAGE/UNMESSAGE: just match checksums between new packagesMarc Espie
and old packages. Rationale being you don't need to display UNMESSAGE if the new package has the exact same one. And likewise, you don't need to display MESSAGE if the old package had the exact same one.
2014-11-20Yet more #include de-duplication.Kenneth R Westerback
ok deraadt@ tedu@
2014-11-20avoid some warning message, normal dirs don't have any log info registeredMarc Espie
2014-11-20theo's right. use random_name for truely random stuff.Marc Espie
rename variable and index accordingly.
2014-11-20Don't allow embedded nul characters in strings.Jonathan Gray
Fixes a pfctl crash with an anchor name containing an embedded nul found with the afl fuzzer. pfctl parse.y patch from and ok deraadt@
2014-11-20clean up some files generated during the build.Brad Smith
noticed by deraadt@
2014-11-20using ${SHELL} is nicer, ok bradTheo de Raadt
2014-11-20run the install script with sh. Come on upstream -- allow us to buildTheo de Raadt
your software on noexec filesystems...
2014-11-20better length handling. Fixes a crash found with the afl fuzzer.Jonathan Gray
slightly tweaked version of an earlier diff ok'd by djm@ and miod@
2014-11-20sanity check the length of the packet in the pcap headerJonathan Gray
fixes a crash found by the afl fuzzer ok djm@ miod@
2014-11-20Make ip6_print() take an unsigned length matchingJonathan Gray
ip_print() and others. Allows code deciding on a minimum length to memmove() to work as intended, preventing various crashes found with the afl fuzzer. Callers of ip6_print() should of course be fixed to provide sane lengths as well. ok deraadt@ djm@
2014-11-20remove nt and lanman functions which aren't used. ok reyk yasuokaTed Unangst
2014-11-20Merge in some commits from upstream..Brad Smith
- Removed 'increased limit open files' log message that is written to console. It is only written on verbosity 4 and higher. This keeps system bootup console cleaner. - Fix #627: SSL_CTX_load_verify_locations return code not properly checked. - Fix that CD flag disables DNS64 processing, returning the DNSSEC signed AAAA denial. - Fix cdflag dns64 processing. ok sthen@
2014-11-20merge conflictsBrad Smith
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2014-11-19reduce redundant strlen calls by calling it once and saving the valueTed Unangst
2014-11-19delete the KERN_VNODE sysctl. it fails to provide any isolation from theTed Unangst
kernel struct vnode defintion, and the only consumer (pstat) still needs kvm to read much of the required information. no great loss to always use kvm until there's a better replacement interface. ok deraadt millert uebayasi
2014-11-19move to stravis so doug@ will stop laughing at my misuse of strnvis.David Gwynne
ok doug@ millert@
2014-11-19file overlooked in previous snmpd commitBret Lambert
2014-11-19Support exporting relayd statistics via AgentX/snmpdBret Lambert
This should be equivalent to the statistics available via the various relaydctl show commands okay benno@ reyk@
2014-11-19add support for AgentX subagents in snmpdBret Lambert
snmp requests are now packaged into pseudo-continuations to allow for being dispatched to seperate processes; lightly tested for interoperability with NetSNMP, but doesn't implement the complete set of AgentX messages while here, clean up return types of mps_get* functions, and make smi_insert refuse to insert duplicate OIDs okay benno@ reyk@
2014-11-19two obvious markup fixes; from frankgroeneveld dot nlIngo Schwarze
2014-11-18Nuke more obvious #include duplications.Kenneth R Westerback
ok deraadt@ millert@ tedu@
2013-11-26import NSD 4.0.0, tests from Dorian Büttner, Patrik Lundin, requested by ↵Stuart Henderson
brad@
2014-11-17CAVEATS was removed (no more INSTALL/DEINSTALL scripts, so it's OK forStuart Henderson
PKG_TMPDIR to be on a fs mounted with noexec); remove a reference to CAVEATS from the section talking about PKG_TMPDIR. ok espie@
2014-11-17Always free "ps" after usage.Tobias Stoeckmann
ok stsp
2014-11-17show super speed status in verbose outputJonathan Gray
2014-11-16use sa_family instead of hard coded inet. from Yury KonovalovTed Unangst
2014-11-16Convert the logic in yyerror(). Instead of creating a temporaryAlexander Bluhm
format string, create a temporary message. OK doug@
2014-11-16Convert the logic in the error function of the ldap schema parser.Alexander Bluhm
Instead of creating a temporary format string, create a temporary message. OK doug@
2014-11-16Replace a plethora of historical protection options with justTheo de Raadt
PROT_NONE, PROT_READ, PROT_WRITE, and PROT_EXEC from mman.h. PROT_MASK is introduced as the one true way of extracting those bits. Remove UVM_ADV_* wrapper, using the standard names. ok doug guenther kettenis
2014-11-16so old it becomes untrueTheo de Raadt
2014-11-15Reduce instances of `` '' in manuals.Anthony J. Bentley
troff displays these as typographic quotes, but nroff implementations almost always print them literally, which rarely has the intended effect with modern fonts, even in stock xterm. These uses of `` '' can be replaced either with more semantic alternatives or with Dq, which prints typographic quotes in a UTF-8 locale (but will automatically fall back to `` '' in an ASCII locale). improvements and ok schwarze@
2014-11-14Shorten the AgentX header debug messages (only compiled with -DDEBUG)Reyk Floeter
to a single line and print to stderr instead of stdout. This makes it easier to follow the debug output again. Also, as a rule of thumb, it is OK to exceed 80 chars for these kinds of developer debug messages. OK blambert@
2014-11-14Add gcc printf format attributes to yyerror() in parse.y files.Doug Hogan
No yyerror() calls needed to be changed. ok bluhm@
2014-11-13remove networks(5) support; it wasn't even documented to exist;Ingo Schwarze
"just go ahead" deraadt@
2014-11-13Fix a condition which selects log level for errors on routing socket,YASUOKA Masahiko
since it was logically reverse.
2014-11-13When the pool address is changed and there is a PPP session which usesYASUOKA Masahiko
the pool to be deleted, then the PPP session is to be deleted. But the internal radish tree had kept the deleted session. This causes "use-after-free", and it had made npppd crash.
2014-11-12tweak previous;Jason McIntyre
2014-11-12truncate dead.letterGilles Chehade
2014-11-11Tweak the the DHCPACK to DHCPINFORM log entry so that it isKenneth R Westerback
less threatening and more informative. e.g. DHCPACK on <null address> to 5c:51:4f:56:81:c3 via em0 changes to DHCPACK to 192.168.19.62 (3c:97:0e:0c:0c:d7) via em0 Issue noted and diff tested by Marc Peters. Thanks! ok yasuoka@ millert@
2014-11-11Allow the log directory to be configurable in the config file, rather thanBob Beck
fixed as /logs within the chroot. As this httpd is properly privesp'ed this has the nice property of allowing us to put the logs outside the chroot if we want to. ok reyk@
2014-11-11Adjust aspath_strlen() since the output format changed to ASPLAIN.Claudio Jeker
This should return the proper length again. OK phessler, benno
2014-11-11The default output format for 32bit AS numbers has moved from AS_DOT+Peter Hessler
to ASPLAIN. Of course, you can still input AS numbers in either format. OK henning@, claudio@, benno@, sthen@
2014-11-10Fix horrible spelling mistake introduced in r1.17Miod Vallat
2014-11-10Don't attempt to open log files when using syslog, as we are not going toBob Beck
use them. ok reyk@