summaryrefslogtreecommitdiffstats
path: root/lib/libc/stdlib/recallocarray.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2018-12-09no longer pass rdns in all filtering requests, they can be retrieved fromgilles4-29/+30
the filter session.
2018-12-09reverse bultin filters matching logic, to make it easier for human brainsgilles1-11/+14
to understand discussed with eric@
2018-12-09unbreak builtin filters after last simplification in smtp_sessiongilles1-2/+3
2018-12-09add client and listener address, as well as client rDNS and FCrDNS lookupgilles4-7/+33
result to the filter_session structure upon filter session allocation. it will allow me to simplify all filter hooks.
2018-12-09when doing the rDNS lookup, require getnameinfo to return a hostname not angilles1-2/+2
address by passing the NI_NAMREQD flag ok eric@
2018-12-09add basic MPLS filtering supportdenis5-8/+67
OK claudio@ jca@
2018-12-09Make sure that the prefixlen returned by mask2prefixlen is never biggerremi1-10/+14
than 128. Initially proposed by claudio@ for bgpd. ok claudio@
2018-12-09When -B is used to specify a specific boot device also change the rebootclaudio1-2/+3
behaviour of vmd to stop / exit at guest reboot. OK ccardenas@
2018-12-09style; OK ottoflorian1-3/+3
2018-12-08revert previous, it breaks regress and the llvm, gtk+2, and gtk+3 portsschwarze1-9/+21
because it changes the behaviour for empty input files; revert requested by naddy@ and sthen@
2018-12-08ssize_t and unsigned int may be different sizes. Use ssize_t insteadkrw1-5/+5
of unsigned int for value being compared to the results of writev() and sendmsg() calls. Noticed by naddy@ on i386 compile.
2018-12-08Fix kill [-SIGNAME | -s SIGNAME] and simplifyjca2-15/+12
While the code intended to support both -s NAME and -s SIGNAME, the tests performed were wrong. Replace convoluted code with less cryptic conditionals. ok anton@
2018-12-08Basic regress test for kill -s SIG[NAME] (now failing)jca1-1/+9
Prodded by anton@
2018-12-08Use correct RFC 3464 specified values for Action field in a DSN.sunil5-40/+42
error -> failed success -> delivered This fixes DSN parsing for Mailman. Issue reported by Cristiano Costa on misc@opensmtpd.org. While here, rename enums to reflect the intent and properly handle envelope ascii load/dump to understand change in the values. Suggestions and ok gilles@
2018-12-07format a pair of dashes as "\(em" rather than "--",schwarze1-5/+5
and a normal hyphen as "-" rather than "\-"
2018-12-07zap trailing whitespaceanton1-3/+3
2018-12-07For shared interrupts we need to make sure that we registerpatrick4-29/+36
with the lowest IPL. Once we actually run the IRQ handler we raise to the highest IPL. Fixes a crash seen when having a network card in the PCIe slot of the MacchiatoBin. ok ccardenas@
2018-12-07"every" is in seconds; from ross l richardsonjmc1-3/+3
2018-12-07Reorderingdanj1-50/+50
- Uppercase options come before lowercase ones - Sort alphabetically some parameters From Matthew Martin "if it's just reordering, you don't need my okay, go ahead" -- espie@
2018-12-07Make sure the TAP extension is only added to the vector when needed.mpi1-3/+4
Fix a problem reported by Mark Patruck and dhill@ ok markus@, dhill@
2018-12-07free(9) sizes for netcred.mpi2-5/+8
ok visa@
2018-12-07Stop passing `sc' when it isn't needed and use `ifp' where it's goodmpi3-57/+54
enough. ok sthen@, visa@
2018-12-07Remove useless spl protection.mpi1-5/+1
ok visa@
2018-12-07Test that "b" and "t" (branch) commands can be followed by a semicolonschwarze2-43/+71
and another command. Related to compile.c rev. 1.50. millert@ OK'ed this diff without seeing it before it even occurred to me that i might write it - but i guess below regress/, that's fair enough.
2018-12-07As an extension to POSIX, for consistency with our behaviour forschwarze1-2/+2
the "b" and "t" commands with a label, and for compatibility with GNU sed, also accept ";" followed by another command after "b" and "t" commands without a label: branch to the end of the script instead of erroring out. Parsing is unchanged. Missing feature reported by Lars dot Nooden at gmail dot com on bugs@. OK martijn@ millert@
2018-12-07properly handle EAI_NODATA and EAI_NONAME in fc-rdns lookupsgilles1-3/+12
ok eric@
2018-12-07I noticed the "pf table handler" process not going away on dhcpd restart,henning1-7/+7
looked at the error handling here, and.... oh my. If opening /dev/pf on startup fails, don't just warn and move on, but bail. If chroot (or the chdir after) fail, don't just warn and move on, bail. If dropping privileges fails, the last thing we want to do is to just move on with root privs, having warned or not. If the pipe to the parent process is closed, that almost certainly means that the parent process went away, and it absolutely certainly means that the table handler process has no meaningful reason to exist any more, thus bail. ok florian ccardenas krw
2018-12-07Remove public resolver IP addresses, just provide a neutral "documentationsthen1-18/+4
prefix" address instead - there are so many available with varying policies that this isn't a good place to list them (and might imply some kind of recommendation which is not intended). Particularly prompted by several on the previous list (he.net and opendns) strip RRSIG from results which cause DNSSEC failures now that validation is enabled in the example config as noticed by solene@. While there, shrink qname-minimisation comment to match other nearby comments, and drop dns64 example which is quite a specialist use case and not really needed in this basic example.
2018-12-07We are not going to send a neighbor advertisement from a non-masterflorian1-7/+7
carp interface. Move the check to the beginning of the function to make it clear that there are no other side effects happening. OK claudio
2018-12-07Enable DNSSEC validation.florian1-8/+6
Requested by & OK claudio Input & OK sthen OK job, solene Various commenting that they run with validation since a long time without issues.
2018-12-07Make sure that the prefixlen returned by mask2prefixlen6 is never biggerclaudio1-11/+15
than 128 also fail hard when the mask is non contiguous. OK remi@
2018-12-07Be more strict in converting a netmask into a prefixlen. Make sureclaudio3-30/+42
the prefixlen is never bigger than 128 for inet6. OK remi@
2018-12-07All the references to the M_ALIGN and MH_ALIGN macros are gone.claudio2-37/+3
Time to bring them behind the shed and free them. Use m_align() instead. OK mpi@ henning@ florian@ kn@
2018-12-07Refactor certificate initialization and verification.eric6-5/+441
Factorize code duplicated in smtp_session.c and mta_session.c Implement a simple callback interface, with proper request management and simplified imsg protocol. Only add the necessary parts for now. Exisiting code path will be adapted later. input from gilles@ sunil@ ok gilles@
2018-12-07Remove an ugly hack in the client certificate verification code that workstb1-48/+44
around broken GOST implementations. It looks like client certificates with GOST have been completely broken since reimport of the GOST code, so no-one is using LibreSSL this way. The client side was fixed only last week for TLSv1.0 and TLSv1.1. This workaround is now in the way of much needed simplifcation and cleanup, so it is time for it to go. suggested by and ok jsing
2018-12-07Fix calculation of initial bandwidth limits.dtucker2-7/+8
Account for written bytes before the initial timer check so that the first buffer written is accounted. Set the threshold after which the timer is checked such that the limit starts being computed as soon as possible, ie after the second buffer is written. This prevents an initial burst of traffic and provides a more accurate bandwidth limit. bz#2927, ok djm.
2018-12-07only consider the ext-info-c extension during the initial KEX. It shouldn'tdjm2-3/+6
be sent in subsequent ones, but if it is present we should ignore it. This prevents sshd from sending a SSH_MSG_EXT_INFO for REKEX for buggy these clients. Reported by Jakub Jelen via bz2929; ok dtucker@
2018-12-07fix option letter pasto in previousdjm1-2/+2
2018-12-07mention that the ssh-keygen -F (find host in authorized_keys) and -Rdjm1-5/+7
(remove host from authorized_keys) options may accept either a bare hostname or a [hostname]:port combo. bz#2935
2018-12-07no need to allocate channels_pre/channels_post in channel_init_channels()djm1-6/+2
as we do it anyway in channel_handler_init() that we call at the end of the function. Fix from Markus Schmidt via bz#2938
2018-12-07Handle 2 Tx chains in the computation of transmit power for the RTL8192EU.kevlo3-12/+32
While here sort vendors. Tested by jmatthew@ ok stsp@, jmatthew@
2018-12-06Add support for "-" as an input file for stdin as per POSIX.martijn1-21/+9
Simplify the code by allowing usage of stdin with the -i flag by pushing the result to stdout, so filters and in place editing can be combined. OK millert@
2018-12-06Core files with >65535 sections have to use PN_XNUM and a section headerguenther4-10/+78
to pass the real count, with a minimal .shstrtab segment for consistency. Also, add support for PN_XNUM to readelf. problem reported and testing by claudio@ ok kettenis@
2018-12-06add -not as a sh friendly alias for !.tedu2-5/+8
ok millert
2018-12-06log more info about errorstedu1-12/+30
2018-12-06add very experimental support for dns over https. (RFC 8484)tedu3-11/+235
performance may be less than great. ok anton
2018-12-06link-connect event report had an empty fcrdns field, but now that eric@ hasgilles6-16/+37
plugged fcrdns in the smtp_session we can fill the field with a value
2018-12-06introduce tx-mail and tx-rcpt report eventsgilles6-7/+168
2018-12-06allow passing data lines to proc filtersgilles5-79/+167
ok eric@
2018-12-06Be more strict when converting a netmask to prefixlen in mask2prefixlen6.claudio1-10/+14
Make sure we never return a value bigger than 128. OK remi@