| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2014-05-07 | Match search_string_def() prototype change, forgotten in previous protector.[ch] |   miod | 1 | -1/+1 | |
| commit. | |||||
| 2014-05-07 | KNF. |   jsing | 28 | -1888/+1968 | |
| 2014-05-07 | Render roff escape sequences contained in manual page descriptions |   schwarze | 1 | -2/+11 | |
| before putting them into the mpages table. Issue found by bentley@ in OpenBSD::Getopt(3p). | |||||
| 2014-05-07 | Fix two memory leaks in makewhatis -n: | schwarze | 1 | -2/+14 | |
| 1. As found by nigel@, names_check() requires database access. 2. Do not leak names and strings in -n mode. | |||||
| 2014-05-07 | consolidate some code by using reallocarray in all cases. |   tedu | 1 | -19/+9 | |
| ok deraadt millert | |||||
| 2014-05-07 | use reallocarray. ok guenther | tedu | 2 | -7/+5 | |
| 2014-05-07 | Fix whitespace mistakes. |   pirofti | 3 | -9/+9 | |
| 2014-05-07 | Do not segfault in makewhatis -Q if the next .SH after .SH NAME | schwarze | 1 | -4/+7 | |
| does not have any arguments. Crash found by nigel@ in kermit(1). | |||||
| 2014-05-07 | revert, thanks sthen | tedu | 2 | -18/+34 | |
| 2014-05-07 | back out the previous ICMP simplifying diff, it caused livelocks. |   pelikan | 3 | -12/+18 | |
| reported by Mikolaj Kucharski, thanks! ok krw | |||||
| 2014-05-07 | try postponed requests first, so we do in-order processing; ok mikeb@ |   markus | 1 | -2/+7 | |
| 2014-05-07 | print msgid for debugging; ok reyk & mikeb | markus | 1 | -3/+6 | |
| 2014-05-07 | make authentication work with X509 certificates that don't have a | markus | 3 | -22/+154 | |
| subject-altname, i.e. support IKEV2_ID_ASN1_DN correctly; feedback & ok mikeb@ | |||||
| 2014-05-07 | Remove the undocumented and ineffective -F option (force hard link | schwarze | 1 | -8/+4 | |
| to directory). This doesn't reduce functionality but merely results in a better error message when trying to use the option, and it simplifies the code. The -f option first appeared in AT&T Version 7 UNIX (1979), and Keith Bostic renamed it to -F for 4.3BSD-Reno in 1990 because it conflicted with System V and POSIX. Meanwhile, NetBSD, FreeBSD, and DragonFly removed it, too. From Tristan Le Guern <tleguern at bouledef dot eu>. OK guenther@ krw@ | |||||
| 2014-05-07 | factor out ikev2_ike_auth() (state machine; used multiple times via callbacks) | markus | 1 | -12/+15 | |
| from ikev2_ike_auth_recv() code (message parsing; used once); ok mikeb@ | |||||
| 2014-05-07 | add additional includes from eng_cryptodev.c |   jsg | 2 | -0/+10 | |
| makes this compile with OPENSSL_NO_DEPRECATED defined. ok deraadt@ | |||||
| 2014-05-07 | Remove the last hacks concerning the global list of IPv4 addresses in the |   mpi | 3 | -30/+15 | |
| source address selection logic. These hacks were only relevant for the NFS diskless boot code in order to pick the local broadcast address of the only configured interface. So, be explicit and set this address directly. Tested by florian@, ok henning@, beck@, chrisz@ | |||||
| 2014-05-07 | Make sure to call uhidev_close() upon detach for every HID driver calling | mpi | 6 | -6/+25 | |
| uhidev_open() at attach time. This plugs up to 3 xfer leaks and a buffer one. ok yuo@ | |||||
| 2014-05-07 | Kill the {nd6_,}useloopback buttons, using the loopback interface for | mpi | 6 | -53/+26 | |
| local traffic is not optional. ok mikeb@, stsp@, jca@ | |||||
| 2014-05-07 | Remove some m->m_pkthdr.rcvif dereference to help for upcoming | mpi | 2 | -28/+33 | |
| receiving pointer -> index conversion. No functional change. ok chrisz@, jca@, mikeb@, lteo@ | |||||
| 2014-05-07 | Initialize struct iface by zero. Without this, npppd had used random |   yasuoka | 1 | -2/+2 | |
| configuration. from Anders Berggren. | |||||
| 2014-05-07 | Fix ext2fs atime and mtime handling that I broke from an airport |   guenther | 1 | -2/+8 | |
| lounge after n2k14. Prototype patch from zhuk@ ok zhuk@ krw@ tedu@ | |||||
| 2014-05-07 | pass daemon_flags to nsd-control when used to check/reload/stop nsd, |   sthen | 1 | -4/+4 | |
| the only useful option here is to specify an alternative config path, which must be used for these operations as well as for startup. | |||||
| 2014-05-07 | missing word in error message. ok millert | tedu | 1 | -3/+3 | |
| 2014-05-07 | delete some crusty casts | tedu | 1 | -4/+4 | |
| 2014-05-07 | convert calloc to use reallocarray instead. ok millert | tedu | 1 | -2/+2 | |
| 2014-05-07 | calloc, from peter malone | tedu | 1 | -3/+2 | |
| 2014-05-07 | use calloc. from peter malone | tedu | 1 | -3/+2 | |
| 2014-05-07 | calloc is simpler. suggested by Peter Malone and halex | tedu | 1 | -8/+3 | |
| 2014-05-07 | use calloc. from Peter Malone | tedu | 2 | -8/+6 | |
| 2014-05-07 | miod forgot about fcrypt_b.c being needed, before he went off to get his |   deraadt | 2 | -2/+4 | |
| beauty sleep. He's probably having a nightmare about this right now.... ok tedu | |||||
| 2014-05-06 | temp variable for a bit of clarity | tedu | 1 | -6/+6 | |
| 2014-05-06 | remove unneeded variable | tedu | 1 | -4/+2 | |
| 2014-05-06 | When the stack protector heuristics doesn't cover a function, leave |   martynas | 1 | -8/+7 | |
| a little pointer-sized gap before the return value. This protects from common off-by-one type of bugs and costs nothing: the attacker won't be able to overwrite return pointer. Developed at m2k14, thanks for the hackathon! | |||||
| 2014-05-06 | factor out the safepath | tedu | 1 | -2/+3 | |
| 2014-05-06 | be more explicit about what's a string | tedu | 1 | -5/+5 | |
| 2014-05-06 | Introduce -fstack-shuffle, which randomizes local stack variables. | martynas | 2 | -12/+33 | |
| This will make the environment more hostile and help detect bugs that depend on overrunning one variable into another, with almost no performance cost. Discussed with Theo at m2k14 hackathon. "oh god yes" tedu@, "oh nice" djm@ | |||||
| 2014-05-06 | better alloc idiom | tedu | 1 | -2/+2 | |
| 2014-05-06 | factor max message size | tedu | 1 | -3/+4 | |
| 2014-05-06 | don't give people bad ideas about pool_debug | tedu | 1 | -2/+1 | |
| 2014-05-06 | We don't really need uniform distribution for mktemp(3) so use |   millert | 1 | -6/+19 | |
| arc4random_buf() to avoid lots of arc4random() calls with a getpid() syscall for each one. We fetch 32 bytes of random data at a time which can handle up to 16 Xs. 16 Xs should be enough for anyone. Requested and OK deraadt@ | |||||
| 2014-05-06 | small fix from mancha1. currently unused file, but no harm fixing it. | tedu | 1 | -1/+2 | |
| 2014-05-06 | reallocarray | tedu | 1 | -2/+2 | |
| 2014-05-06 | spell NULL as NULL | tedu | 1 | -2/+2 | |
| 2014-05-06 | Make sure the stdout output is check, to confirm proper sorting. | miod | 3 | -1/+10 | |
| 2014-05-06 | Assorted cleanups: | miod | 2 | -28/+8 | |
| - replace hardcoded sizes with sizeof() - pqueue_find() apparently used to need to keep track of the previous node when iterating, which causes its logic to be complicated. However, nowadays it only needs to iterate, so replace with a straightforward, much readable logic. - remove #if 0'ed code From ``sin'' from 2f30 dot org on tech@, thanks! | |||||
| 2014-05-06 | Add a fixed (read: non-SIGSEGV'ing) pq_test. | miod | 3 | -1/+111 | |
| 2014-05-06 | Remove broken-by-design test | miod | 2 | -190/+0 | |
| 2014-05-06 | Make sure PKCS7_get_octet_string() return values are checked for NULL. | miod | 2 | -4/+20 | |
| Reported by David Ramos (and simultaneously to OpenSSL as PR#3339). ok beck@ logan@ | |||||
| 2014-05-06 | Remove the ``addressable'' argument to search_string_def(). Turned out to be | miod | 2 | -15/+9 | |
| a bad idea, for it causes false positives, which then can cause ICE trying to protect narrower-than-int incoming arguments, if building with -fstack-protector-all. From etoh@'s gcc 3.4 tree, unbreaks -fstack-protector-all on m88k (well, maybe not completely, but it makes it compile more files, such as pf.c which contains functions receiving uint16_t arguments pushed on the stack due to the exhaustion of caller-saved registers). | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |