summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Copy permissions AND ownership when -o will override an input file.tobias2015-10-141-4/+8
| | | | with input by and ok deraadt@, millert@, tim@
* syncderaadt2015-10-141-0/+1
|
* unfortunately rewritelabel() just before termination does a non-permittedderaadt2015-10-141-5/+1
| | | | | ioctl to rewrite the label, in support of the old-school "frag info in the disklabel" concept. disklabel folk, please come talk to me...
* sync with httpd - no functional change, just C99 typesreyk2015-10-141-18/+19
|
* Only accept one filesystem/device as argument for checking. Few peoplederaadt2015-10-146-46/+47
| | | | | | will be calling these directly, and not for the multiple filesystem case. fsck(8) is generally the parent and will handle things. ok semarie; this change will also help a goal jsing has
* When pledged with "fattr", allow chown to supplimentary groups. Thisderaadt2015-10-143-18/+20
| | | | | came out of a discussion regarding "sort foo -o foo". ok semarie
* add includes for crc32() and uuid_dec_be() missed in rev 1.11jsg2015-10-142-2/+4
| | | | ok krw@
* Init a variable in the recently added carp_vhe_match() function clangjsg2015-10-141-2/+2
| | | | | | and mpi believe could be used uninitialised. ok mpi@
* gc lst_ForEachNodeWhile, which isn't actually in use anywhereespie2015-10-143-19/+3
|
* make sure we use stdbool.hespie2015-10-145-15/+8
| | | | | Mostly diff by Daniel Dickman, who told me to commit in his stead, as he's tied up at work.
* include err.h for the err() calls added in rev 1.46jsg2015-10-141-1/+2
|
* Don't use the NONE enum value where NULL was intended. Found with clang.jsg2015-10-141-3/+3
| | | | ok renato@
* bugfix: add ${.CURDIR} to deal with obj symlinksvgross2015-10-141-2/+2
|
* unbreak regress/sbin/newfssemarie2015-10-141-2/+2
| | | | | | /dev/prandom is no more since Nov 30, 2008 OK otto@
* bugfix : use ${.CURDIR} to cope with obj symlinksvgross2015-10-141-3/+3
|
* add regress tests for automatic port allocation.vgross2015-10-143-2/+18
| | | | | - enable ipv4 - leave ipv6 disabled
* add regress tests for automatic port allocationvgross2015-10-142-0/+166
|
* Reset the RTF_CONNECTED flag when cloning an entry.mpi2015-10-141-5/+4
| | | | | | | While here check for RTF_CLONED insted of RTM_RESOLVE when adding an entry. Found while debugging naddy@'s NFS vs em(4) vs rtisvalid(9) issue.
* Rewrite the logic around the dymanic array of routing tables to helpmpi2015-10-144-91/+131
| | | | | | | | | | | | | | | turning rtable_get(9) MP-safe. Use only one per-AF array, as suggested by claudio@, pointing to an array of pointers to the routing table heads. Routing tables are now allocated/initialized per-AF. This will let us allocate routing table on-demand instead of always having an AF_INET, AF_MPLS and AF_INET table as soon as a new rtableID is used. This also get rid of the "void ***" madness. ok dlg@, jmatthew@
* Convert fgetln to getline.sunil2015-10-141-23/+17
| | | | Ok millert@ eric@ gilles@
* tweak previous (two details i apparently missed)schwarze2015-10-141-4/+6
|
* Pledge "stdio" for simple games.doug2015-10-1410-10/+40
| | | | ok semarie@
* Two more char -> unsigned char in ctype functions.reyk2015-10-141-2/+3
|
* More (unsigned char) casts for ctype functions.reyk2015-10-141-3/+4
| | | | Pointed out by Michael McConville
* Add EVP_AEAD_CTX_init(3) manpage to document the new(ish) AEAD API.reyk2015-10-144-1/+285
| | | | | | | | | | | | The "authenticated encryption with additional data" API is used for ciphers like AES-GCM or ChaCha20-Poly1305. The manpage is a beginning and certainly needs more work, especially improvements in the EXAMPLES section. Based on agl's source code comments. Converted from pod to mandoc by schwarze@ OK schwarze@ jsing@
* enable pledge(2) in rain(6)semarie2015-10-141-1/+8
| | | | | | | | it is libcurses program: at init it needs "stdio rpath getpw tty", and after drop to just "stdio tty". "tty" is needed at end for restoring the tty. initial patch from doug@ ok doug@ deraadt@
* Remove conditional compilation and #defines around signal handlingguenther2015-10-144-59/+24
| | | | | | | Don't catch signals that were ignored on entry Suppress SIGCHLD if our kid is stopped: we don't care and it's not an error ok millert@
* pledge "tty" can allow ioctl TIOCEXCL on a ttyderaadt2015-10-141-1/+2
|
* I messed up reading the call graph. -d delete does use search, so aderaadt2015-10-141-4/+1
| | | | late pledge is not possible in this way.
* sendmsg() is allowed to pass cmsg's which are not CMSG_RIGHTS - lastderaadt2015-10-141-4/+4
| | | | refactoring inverted the checks; spotted by sthen in ping6.
* Backout last. Breaks sparc64, amoung other dubiousness.krw2015-10-143-35/+7
| | | | requested by deraadt@
* Reject the escape sequences \[uD800] to \[uDFFF] in the parser.schwarze2015-10-134-5/+10
| | | | | | | These surrogates are not valid Unicode codepoints, so treat them just like any other undefined character escapes: Warn about them and do not produce output. Issue noticed while talking to stsp@, semarie@, and bentley@.
* Major character table cleanup:schwarze2015-10-1316-594/+469
| | | | | | | | | | | | | * Use ohash(3) rather than a hand-rolled hash table. * Make the character table static in the chars.c module: There is no need to pass a pointer around, we most certainly never want to use two different character tables concurrently. * No need to keep the characters in a separate file chars.in; that merely encourages downstream porters to mess with them. * Sort the characters to agree with the mandoc_chars(7) manual page. * Specify Unicode codepoints in hex, not decimal (that's the detail that originally triggered this patch). No functional change, minus 100 LOC, and i don't see a performance change.
* Call the sort program through $SORTPROG, as intended; OK millert@tim2015-10-131-18/+18
|
* Prevent a NULL-pointer dereference when closing a ugen(4) nodempi2015-10-131-4/+2
| | | | | | in case the kernel failed to change the interface of a device. Found the hardway by okan
* In rev 1.15 the sizeof argument was fixed in a strlcat() call butmillert2015-10-131-2/+2
| | | | | | the truncation check immediately following it was not updated to match. Not an issue in practice since the buffers are the same size. OK deraadt@
* Check if a file name can be extracted from a line before marking forlum2015-10-131-2/+2
| | | | deletion.
* 3 more headers required for one stinking inet6 ioctl..deraadt2015-10-131-1/+4
|
* - pf_insert_src_node(): global argument (arg6) is useless, functionsashan2015-10-134-31/+20
| | | | | | | | | | | always gets pointer to rule. - pf_remove_src_node(): function should always remove matching src node, regardless the sn->rule.ptr being NULL or valid rule - sn->rule.ptr is never NULL, spotted by mpi and Richard Procter _von_ gmail.com OK mpi@, OK mikeb@
* sm_error() already does the exit for us.ajacoutot2015-10-131-2/+2
|
* Allow ioctl SIOCGNBRINFO_IN6 in case of "route", for use by ndp.deraadt2015-10-131-1/+2
|
* NET_RT_FLAGS must also accept a proto selection.deraadt2015-10-131-2/+3
|
* Test t16 for ed-formatted diffs does not contain a substitution.tobias2015-10-134-2/+12
| | | | Add a minimalistic check in t17.
* Ignore the setuid/setgid/sticky bits when copying the permissions of an inputtim2015-10-131-2/+2
| | | | | | file to the new output file. In preparation for pledge(2). Suggested by and OK millert@
* Replace our /^\.\././ expression with /.//. The term is simpler and hastobias2015-10-131-2/+2
| | | | | | | | the same meaning in our diff ed-context. As a bonus, our ed-diff output can be processed by GNU patch now, too. okay millert@
* Put ASN1_dup() under #ifndef LIBRESSL_INTERNAL.jsing2015-10-132-10/+10
|
* After the socket is open, the remainder is just io operations.deraadt2015-10-131-1/+4
| | | | Use pledge "stdio".
* Remove -b flag and let ping6 set the socket buffer size automaticallyflorian2015-10-132-43/+25
| | | | | like ping. Suggested by deraadt@, OK dlg
* -C and -c allow at most one input file. Ensure this is the case when thetim2015-10-131-6/+6
| | | | | | input files are specified through --files0-from. OK millert@
* apply PubkeyAcceptedKeyTypes filtering earlier, so all skippeddjm2015-10-131-8/+15
| | | | keys are noted before pubkey authentication starts. ok dtucker@