summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-06-25recognize @option is-branchMarc Espie
so that it trickles to snapshots and then can be used in ports
2016-06-24use crypt_checkpass to simplify password checking logic.Ted Unangst
2016-06-24make use of former changes. If list is higher than display go thru more.Marc Espie
2016-06-24simplify the logic. no need for a separate hook when we can just specializeMarc Espie
find_window_size. fix a bug: integrate SIG{CONT} for re-checking window size. the way it's currently written, first call to compute_playfield will call itself once. But it makes for less code.
2016-06-24regenFlorian Obser
2016-06-24Update to 4.1.10Florian Obser
Testing by millert@, sthen@ and me. came up with the same diff & OK sthen@
2013-11-26import NSD 4.0.0, tests from Dorian Büttner, Patrik Lundin, requested by ↵Stuart Henderson
brad@
2010-01-15NSD v3.2.4Jakob Schlyter
2016-06-23there's no reason for window size computation to be linked to theMarc Espie
ProgressMeter, so make it available from state. - computation is lazy, so no runtime difference; - don't bother setting a SIG{WINCH} on non-tty; - progressmeter already has access to state; - do an empty window_size_changed in base state, override it for addcreatedelete to inform the progressmeter. to be reused in dpb...
2016-06-23add fh variation of printing code. Systematically use it with STDOUT/STDERRMarc Espie
for classical functions.
2016-06-23move transaction-specific states from struct smtp_session to struct smtp_txEric Faurot
ok gilles@
2016-06-22backport r3782, fixing qname-minimisation with various broken DNS servers,Stuart Henderson
often found at CDNs. - Use QTYPE=A for QNAME minimisation. - Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three.
2016-06-22backport r3781, fix segfault in -hStuart Henderson
2016-06-22update to unbound-1.5.9. (there will be a follow-up commit to cherrypick aStuart Henderson
couple of post-1.5.9 patches). tests from Mark Patruck, danj, matthieu, millert. reads ok to jung, ok florian.
2014-11-20update to Unbound 1.5.0, ok sthen@Brad Smith
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2016-06-22have a consistent exit code when looking for stuffMarc Espie
2016-06-21do not allow whitespace in macro names, i.e. "this is" = "a variable".Sebastian Benoit
change this in all config parsers in our tree that support macros. problem reported by sven falempin. feedback from henning@, stsp@, deraadt@ ok florian@ mikeb@
2016-06-21pass file name thru to Subst for better error messages.Marc Espie
reported by Adam Wolk
2016-06-20with new fork+reexec, in case of failure in init of any child processGilles Chehade
causing it to exit, we could end up with a NULL deref in parent. free commit offered by eric@, ok gilles@
2016-06-20change the "nexthop 1.2.3.4 now valid: via 192.168.0.1" message to log_debug()Sebastian Benoit
ok deraadt@ florian@ stsp@ phessler@
2016-06-19Replace some expensive evals.Antoine Jacoutot
2016-06-19Do caching differently.Antoine Jacoutot
2016-06-19Temporarily turn caching off; there's a small regression when enablingAntoine Jacoutot
multiple daemons at once; being worked on.
2016-06-19Implement rcctl get|getdef all.Antoine Jacoutot
With this and the previous 2 commits, we can move from constructs like: $ for i in $(rcctl ls all); do rcctl get $i; done to just: $ rcctl get all Shrinking the run by a factor of more than 3.5. prodded by and discussed with reyk@ at BSDcan2016 ok robert@
2016-06-19Cache result of often used functions (svc_is_{base,meta,special}).Antoine Jacoutot
Large speedup when iterating over all rc.d scripts. with and ok robert@
2016-06-19grep(1) /etc/rc.conf instead of /etc/rc to detect whether a particularAntoine Jacoutot
rc.d script comes from base of not; it's much faster. ok robert@
2016-06-18Fix removal of dual-stack neighbors.Renato Westphal
2016-06-18Fix memory leak found with valgrind.Renato Westphal
2016-06-18Fix use after free bug.Renato Westphal
2016-06-18Do not allow configuring the same interface for both LDP and VPLS.Renato Westphal
Configuring an interface for both LDP signaling and as a member of a VPLS instance doesn't cause any harm as far as ldpd is concerned. But it certainly doesn't make any sense, so it's better to reject the configuration and warn the user instead of ignoring this silently.
2016-06-18Use log_warnx() instead of log_warn() when appropriate.Renato Westphal
2016-06-18Remove TODO comments about loop detection.Renato Westphal
LDP loop detection is only necessary for ATM LSRs running in cell mode. We are never going to implement this "feature". Also, add two more comments in lde_check_request().
2016-06-18Fix small LIB<->LFIB synchronization issue.Renato Westphal
ldpd operates only with the best routes of each IP prefix. In other words, the routes with the lowest priorities. When a route with a better priority is detected (possibly with a different nexthop), we should uninstall the labels from the "old" routes and try to install a new label for the new route (if there's one available in the LIB). In this specific case, ldpd was failing to uninstall the labels from the old routes because it wasn't keeping track of each route's priority in lde. With this missing bit of information, the parent process had no way to get the correct label to uninstall when processing a IMSG_KLABEL_DELETE message.
2016-06-17Also add missing date or message-id when listening on the submit portOtto Moerbeek
ok gilles@
2016-06-17No need to hardcode return code.Antoine Jacoutot
2016-06-15properly reset the transaction when a filter rejects a message.Eric Faurot
ok gilles@
2016-06-15increase number of connections a local address is allowed to establishGilles Chehade
decrease the delay between transactions in the same session ok eric@
2016-06-15'Received' header violates RFC when receiving a TLS session, rework formatGilles Chehade
reported by vstakhov
2016-06-15dedup interactive options handling code yet again.Marc Espie
dynamic code mixin
2016-06-15ProgressMeter keeps state. Unfortunately, term is shared between processes.Marc Espie
Adds supplementary code that was first tested in proot, but may be needed to split pkg_add into processes in the future.
2016-06-14Fix typo; OK jung@Todd C. Miller
2016-06-14restrict %m and friends to "separate words" so they won't collide withMarc Espie
branch specifiers. Unlikely, but better safe than sorry.
2016-06-14refer to pkg_add(1) for pkg-name conventionsMarc Espie
2016-06-14more unification of stuff run on the command lineMarc Espie
don't mention FW_UPDATE, it's an internal detail
2016-06-14new syntax: pkgname%branch to select a branch wherever it makes sense.Marc Espie
see pkg_add(1) for details. Search framework makes that surprisingly simple.
2016-06-14Remove unused variable, found by clangReyk Floeter
2016-06-14reorg examples to better use actual options.Marc Espie
emphasize -U straight away because people often don't even realize it's there. Make more use of default stem so that we don't have to update examples too often. Ditch the interactive ftp stuff, there's nobody that actually uses that, especially since there are almost no ftp mirrors left.
2016-06-13Implement support for the Configuration Sequence Number TLV.Renato Westphal
The Configuration Sequence Number optional TLV is documented in RFC 5036, pages 53 and 54. Fixes IxANVL LDP test 23.10.
2016-06-13Implement a timeout for the session initialization FSM.Renato Westphal
This prevents neighbors stuck in the initialization FSM to linger forever as long as the associated transport connection is up. This timeout can be seen in the 'Session Initialization State Transition Diagram' of RFC 5036. The RFC, however, doesn't specify how much we should wait. Let's use 180 seconds for that, the default LDP hold time. Fixes IxANVL LDP test 6.15.