summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2024-08-24Change DHCP_SYNC_LEASE messages from log_info to log_debug, they resultStuart Henderson
in quite a lot of noise in a typical dhcpd sync setup. From Michał Markowski, ok florian
2024-08-23FALLTROUGH -> FALLTHROUGHJonathan Gray
2024-08-23cron: use strtonum() and tighter limits on step valuesTodd C. Miller
Using strtonum() instead of atoi() gives us an extra layer of bounds checking for free while parsing an entry. This is in addition to the existing bounds checking in set_range(). The step value is now limited to the maximum range for an entry. If the field consists of a range, the step must not be larger than the difference between the high and low parts of the range. OK deraadt@
2024-08-23Change SIGCHLD handler to just set a flag.Todd C. Miller
We already call reap_kids() in multiple event loops so there is no need to call waitpid() inside the handler itself. OK denis@ deraadt@
2024-08-22sync manual section numbersJonathan Gray
2024-08-22ospfd: fix whitespace error introduced in previousTheo Buehler
2024-08-22inet_pton returns 0 and -1 for error.Florian Obser
Adjust the error check that is now wrong after the inet_aton -> inet_pton conversion. Noticed by & OK bluhm. OK tb
2024-08-22Mechanically change inet_aton to inet_pton.Florian Obser
npppd does not document that it would accept truncated or otherwise not fully spelled out IPv4 addresses. ok yasuoka
2024-08-21Increase maximum Signed Object size to 8MBJob Snijders
OK tb@ claudio@
2024-08-21An area is either a decimal number or an IPv4 address.Florian Obser
This lets us replace inet_aton with inet_pton since we do not need inet_aton's flexibility. phessler, sthen and Tom Smyth all confirm that they never came across a different way of specifying an area. OK claudio, deraadt
2024-08-21Mechanically replace inet_aton with inet_pton.Florian Obser
OK claudio, deraadt
2024-08-21An area is either a decimal number or an IPv4 address.Florian Obser
This lets us replace inet_aton with inet_pton since we do not need inet_aton's flexibility. phessler, sthen and Tom Smyth all confirm that they never came across a different way of specifying an area. OK claudio, deraadt
2024-08-21Get rid of inet_atonFlorian Obser
OK deraadt
2024-08-21Use getaddrinfo to lookup names and parse IP addresses.Florian Obser
OK deraadt
2024-08-21Mechanically change inet_aton to inet_pton.Florian Obser
OK claudio, deraadt
2024-08-21Mechanically change inet_aton to inet_pton.Florian Obser
This could use getaddrinfo in places but the code is just too crufty and my joo janta's turned black immediately. OK deraadt
2024-08-21Use getaddrinfo(3) to resolve hostnames / ip addresses.Florian Obser
OK dlg
2024-08-21We can fully spell out IP addresses in config files.Florian Obser
OK claudio
2024-08-21s/inet_aton/inet_pton/Florian Obser
OK claudio
2024-08-21Mechanically change inet_aton to inet_pton.Florian Obser
OK claudio
2024-08-21We can fully spell out IP addresses in config files.Florian Obser
OK claudio
2024-08-21Use inet_pton to parse ext-communities with an IPv4 address.Florian Obser
No need for inet_aton's flexibility. OK claudio
2024-08-20Use msgbuf_queuelen() instead of accessing the queued member directly.Claudio Jeker
OK tb@
2024-08-20Update Geofeed referenceJob Snijders
RFC 9632 introduced additional constraints and requirements for RPKI-based Geofeed authenticators (at my request).
2024-08-20Use stats.msg_queue_len instead of looking into the msgbuf struct.Claudio Jeker
OK tb@
2024-08-20Use msgbuf_queuelen() instead of accessing wbuf.queue for msgbuf structs.Claudio Jeker
Also export the msgbuf queue len as a stats member so bgpctl does not need to dig into the msgbuf structure inside struct peer. This skips imsg related msgbuf since that will be handled by a imsgbuf specific function. OK tb@
2024-08-19Fix CVE-2024-43688, buffer underflow for very large step valuesTodd C. Miller
In get_number(), reject values that are so large that they are interpreted as negative numbers. In set_range(), step values smaller than one or larger than the "stop" value are ignored. This prevents bit_nset() from being called with out-of-range values. Bug found by Dave G. of Supernetworks.
2024-08-19Prepare for releasing version 9.2Job Snijders
2024-08-18fix commentTheo de Raadt
1995-10-18initial import of NetBSD treeTheo de Raadt
2024-08-18add qwz firmwarePeter Hessler
2024-08-17Use 'int ch' instead of 'char ch' in one place for getopt.Mike Larkin
Forgot one change during an earlier commit; use 'int ch' to make builds complete without warning on arm64. ok dv
2024-08-17Replace homemade copy_of() with strdup()Denis Fondras
OK tb@
2024-08-17Allow PPP interface to run in an rdomain and get a default route installed ↵Denis Fondras
in the same routing domain Input and OK claudio@
2024-08-17Since we are not using a pid file the manuals render a bit strange.Florian Obser
Pointed out by tb
2024-08-16Make sure that the uptime field is always updated. Previously it wasYASUOKA Masahiko
used before initialized when the database has a session.
2024-08-16Free memory as much as possible. Also, fix a use-after-free when exiting.YASUOKA Masahiko
2024-08-16Send a reply to the control client when DAE is timed out instead ofYASUOKA Masahiko
silence. Also, fix a broken error string.
2024-08-16Delete req_modified. Which is not used.YASUOKA Masahiko
2024-08-15Ensure synchronization jobs are stopped when the timeout is reachedJob Snijders
OK tb@ claudio@
2024-08-15Call repo_check_timeout() before colleting the POLLOUT fds. SinceClaudio Jeker
repo_abort() called by repo_check_timeout() will add messages to be sent out. OK tb@
2024-08-15Add filtered support to bgplgd.Claudio Jeker
OK tb@
2024-08-15Accept empty lines for authopts to fix the parser to accept the oldYASUOKA Masahiko
syntax. It was broken by parse.y 1.18. Found by Mike at mgm51.com.
2024-08-14Add 'bgpctl show rib filtered' support.Claudio Jeker
OK tb@
2024-08-14Introduce 'rde rib Loc-RIB include filtered' a feature that includesClaudio Jeker
filtered prefixes in the Loc-RIB This includes filtered prefixes into the Loc-RIB but they are marked ineligible so nothing will select them but it is possible to show them in bgpctl. So 'bppctl show rib filtered' will return all prefixes filtered out by the input filters. OK tb@
2024-08-14Messages from modules were leaked. Call imsg_free() for them.YASUOKA Masahiko
2024-08-14Don't abort the query when it is requesting to the next module.YASUOKA Masahiko
2024-08-14Initialize dae objects properly.YASUOKA Masahiko
2024-08-14Don't abort the query when a duplicated query is received. Also tweakYASUOKA Masahiko
the log message.
2024-08-12implement the report response for proc-filters tooOmar Polo
Reported by renegm on GitHub: <https://github.com/OpenSMTPD/OpenSMTPD/issues/1257> ok gilles@