| Commit message (Collapse) | Author | Files | Lines |
|
the filter session.
|
|
to understand
discussed with eric@
|
|
|
|
result to the filter_session structure upon filter session allocation. it
will allow me to simplify all filter hooks.
|
|
address by passing the NI_NAMREQD flag
ok eric@
|
|
OK claudio@ jca@
|
|
than 128. Initially proposed by claudio@ for bgpd.
ok claudio@
|
|
behaviour of vmd to stop / exit at guest reboot.
OK ccardenas@
|
|
|
|
because it changes the behaviour for empty input files;
revert requested by naddy@ and sthen@
|
|
of unsigned int for value being compared to the results of writev()
and sendmsg() calls.
Noticed by naddy@ on i386 compile.
|
|
While the code intended to support both -s NAME and -s SIGNAME, the
tests performed were wrong. Replace convoluted code with less cryptic
conditionals. ok anton@
|
|
Prodded by anton@
|
|
error -> failed
success -> delivered
This fixes DSN parsing for Mailman. Issue reported by Cristiano
Costa on misc@opensmtpd.org.
While here, rename enums to reflect the intent and properly handle
envelope ascii load/dump to understand change in the values.
Suggestions and ok gilles@
|
|
and a normal hyphen as "-" rather than "\-"
|
|
|
|
with the lowest IPL. Once we actually run the IRQ handler
we raise to the highest IPL. Fixes a crash seen when having
a network card in the PCIe slot of the MacchiatoBin.
ok ccardenas@
|
|
|
|
- Uppercase options come before lowercase ones
- Sort alphabetically some parameters
From Matthew Martin
"if it's just reordering, you don't need my okay, go ahead" -- espie@
|
|
Fix a problem reported by Mark Patruck and dhill@
ok markus@, dhill@
|
|
ok visa@
|
|
enough.
ok sthen@, visa@
|
|
ok visa@
|
|
and another command. Related to compile.c rev. 1.50.
millert@ OK'ed this diff without seeing it before it even occurred to me
that i might write it - but i guess below regress/, that's fair enough.
|
|
the "b" and "t" commands with a label, and for compatibility with
GNU sed, also accept ";" followed by another command after "b"
and "t" commands without a label: branch to the end of the script
instead of erroring out. Parsing is unchanged.
Missing feature reported by Lars dot Nooden at gmail dot com on bugs@.
OK martijn@ millert@
|
|
ok eric@
|
|
looked at the error handling here, and.... oh my.
If opening /dev/pf on startup fails, don't just warn and move on, but bail.
If chroot (or the chdir after) fail, don't just warn and move on, bail.
If dropping privileges fails, the last thing we want to do is to just move
on with root privs, having warned or not.
If the pipe to the parent process is closed, that almost certainly means
that the parent process went away, and it absolutely certainly means that
the table handler process has no meaningful reason to exist any more, thus
bail.
ok florian ccardenas krw
|
|
prefix" address instead - there are so many available with varying
policies that this isn't a good place to list them (and might imply
some kind of recommendation which is not intended).
Particularly prompted by several on the previous list (he.net and opendns)
strip RRSIG from results which cause DNSSEC failures now that validation
is enabled in the example config as noticed by solene@.
While there, shrink qname-minimisation comment to match other nearby
comments, and drop dns64 example which is quite a specialist use case
and not really needed in this basic example.
|
|
carp interface. Move the check to the beginning of the function to
make it clear that there are no other side effects happening.
OK claudio
|
|
Requested by & OK claudio
Input & OK sthen
OK job, solene
Various commenting that they run with validation since a long time
without issues.
|
|
than 128 also fail hard when the mask is non contiguous.
OK remi@
|
|
the prefixlen is never bigger than 128 for inet6.
OK remi@
|
|
Time to bring them behind the shed and free them. Use m_align() instead.
OK mpi@ henning@ florian@ kn@
|
|
Factorize code duplicated in smtp_session.c and mta_session.c
Implement a simple callback interface, with proper request management
and simplified imsg protocol.
Only add the necessary parts for now.
Exisiting code path will be adapted later.
input from gilles@ sunil@
ok gilles@
|
|
around broken GOST implementations. It looks like client certificates with
GOST have been completely broken since reimport of the GOST code, so no-one
is using LibreSSL this way. The client side was fixed only last week for
TLSv1.0 and TLSv1.1. This workaround is now in the way of much needed
simplifcation and cleanup, so it is time for it to go.
suggested by and ok jsing
|
|
Account for written bytes before the initial timer check so that the first
buffer written is accounted. Set the threshold after which the timer is
checked such that the limit starts being computed as soon as possible, ie
after the second buffer is written. This prevents an initial burst of
traffic and provides a more accurate bandwidth limit. bz#2927, ok djm.
|
|
be sent in subsequent ones, but if it is present we should ignore it.
This prevents sshd from sending a SSH_MSG_EXT_INFO for REKEX for buggy
these clients. Reported by Jakub Jelen via bz2929; ok dtucker@
|
|
|
|
(remove host from authorized_keys) options may accept either a bare
hostname or a [hostname]:port combo. bz#2935
|
|
as we do it anyway in channel_handler_init() that we call at the end of
the function. Fix from Markus Schmidt via bz#2938
|
|
While here sort vendors.
Tested by jmatthew@
ok stsp@, jmatthew@
|
|
Simplify the code by allowing usage of stdin with the -i flag by pushing
the result to stdout, so filters and in place editing can be combined.
OK millert@
|
|
to pass the real count, with a minimal .shstrtab segment for consistency.
Also, add support for PN_XNUM to readelf.
problem reported and testing by claudio@
ok kettenis@
|
|
ok millert
|
|
|
|
performance may be less than great.
ok anton
|
|
plugged fcrdns in the smtp_session we can fill the field with a value
|
|
|
|
ok eric@
|
|
Make sure we never return a value bigger than 128.
OK remi@
|