wireguard-openbsd/sbin/mountd/mountd.c, branch jd/queueboosts

simplify, no need to make a copy of the filename, pointer is fine

2020-01-24T18:51:45Z

okay millert@ schwarze@

When system calls indicate an error they return -1, not some arbitrary

2019-06-28T13:32:41Z

value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.

Ignore SIGPIPE in case a TCP client resets the connect

2018-04-28T09:56:21Z

ok otto@

Remove unnecessary SIGSYS/ENOSYS handling for getfh(2).

2015-12-23T21:32:52Z

Encouragement from deraadt@

Add privilege separation and pledge().

2015-12-23T21:16:17Z

A privileged (that is, unpledged) child is forked that makes the "unpledgable" getfh(2) and mount(2) calls. It also takes care of writing /var/db/mountdtab so that the parent does not have to pledge "cpath wpath". This, then, allows the parent to pledge "stdio rpath inet dns". Suggestions and OK deraadt@

When (re)reading /etc/exports, handle the case where the mount point of an

2015-12-15T18:17:34Z

export is not also the mount point of a local filesystem. In this case, the local filesystem would not be removed from the "unexport list", causing the export to be "unexported" again. This fix then also allows us to actually delete an export that has been removed from /etc/exports, by passing the MNT_DELEXPORT export flag to mount(2). Makes sense to millert@.

Remove NULL-checks before free(). ok tb@

2015-12-10T17:26:59Z

Two reallocarray() conversions that were missed earlier.

2015-08-20T22:16:35Z

OK deraadt@

is included, so do not need to cast result from

2015-08-20T22:02:20Z

malloc, calloc, realloc* ok krw millert

Replace with and other less dirty headers where

2015-01-16T06:39:28Z

possible. Annotate lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)