summaryrefslogtreecommitdiffstats
path: root/lib/libc (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Nuke some trailing tabs.krw2016-12-151-3/+3
|
* Fix regressions introduce in the fix for CVE-2016-6559.millert2016-12-081-6/+5
| | | | From FreeBSD (glebius)
* Fix a typo, decrement rem, don't increment for single digit hex bytes.millert2016-12-071-2/+2
| | | | From Henri Kemppainen
* CVE-2016-6559: fix potential buffer overflow(s) in link_ntoa(3).millert2016-12-061-19/+35
| | | | | | | A specially crafted struct sockaddr_dl argument can trigger a stack overflow of a static buffer in libc. An attacker may be able to use this to write to arbitrary locations in the data segment. From FreeBSD (glebius); OK deraadt@ mestre@
* the referred to EXAMPLES section is now in strncpy(3);jmc2016-11-121-3/+3
| | | | | | issue reported by scott cheloha ok otto
* Fix a use after free error introduced in rev 1.18 by only callingmillert2016-11-091-8/+11
| | | | closedir() outside the loop. OK deraadt@ guenther@ markus@
* MALLOC_STATS tweaks, by default not compiled inotto2016-11-041-13/+29
|
* small tweak to also check canaries if F is in effectotto2016-11-031-3/+5
|
* remove some old option letters and also make P non-settable. It hasotto2016-10-311-24/+6
| | | | | been the default for ages, and I see no valid reason to be able to disable it. ok natano@
* include float.h for the LDBL_MAX_EXP cpp test in floatio.hjsg2016-10-302-2/+4
|
* Pages in the malloc cache are either reused quickly or unmappedotto2016-10-281-14/+1
| | | | | | quickly. In both cases it does not make sense to set hints on them. So remove that option, which is just a remainder of old times when malloc used to hold on to pages. ok stefan@
* For consistency, allow symlinkat(2) in the same way as symlink(2);schwarze2016-10-271-4/+5
| | | | | | no need to wait until the first program using it breaks... "could make sense" semarie@ (and thanks for the cluestick) OK deraadt@
* $OpenBSD$tb2016-10-223-0/+3
|
* - fix MALLOC_STATS compileotto2016-10-221-3/+6
| | | | - redundant cast is redundant
* fix some void * arithmetic by castingotto2016-10-211-4/+4
|
* and recommit with fixed GCotto2016-10-211-103/+112
|
* backout for now; flag combination GC is not okotto2016-10-201-110/+103
|
* avoid sentence splicing;jmc2016-10-201-2/+2
|
* canary corruption message changed a bitotto2016-10-201-5/+5
|
* Also place canaries in > page sized objects (if C is in effect); ok tb@otto2016-10-201-103/+110
|
* Remove the save_errno dance inside strerror_r(3). It is from thebluhm2016-10-191-5/+3
| | | | | time when we had national language support. OK millert@
* Use the reentrant strerror_r() instead of strerror() to expand %m.millert2016-10-191-10/+5
| | | | | Previously, syslog_r() would avoid calling strerror() since the latter is not reentrant. OK bluhm@
* note that SO_REUSEADDR is restricted to callers with the same uid or root;jmc2016-10-191-4/+5
| | | | | | | while there, super-user -> superuser for internal consistency; diff from kirill miazine, tweaked by myself; ok deraadt millert guenther
* Avoid generate SIGTTOU when restoring the terminal mode. If we getmillert2016-10-181-1/+5
| | | | | | | | | SIGTTOU it means the process is not in the foreground process group which, in most cases, means that the shell has taken control of the tty. Requiring the user the fg the process in this case doesn't make sense and can result in both SIGTSTP and SIGTTOU being sent which can lead to the process being suspended again immediately after being brought into the foreground.
* Roll back uintptr_t cast changes after discussions with tedu, otto anddtucker2016-10-163-24/+7
| | | | | | | | | | | | | others. C11 6.5.6.9 says: When two pointers are subtracted, both shall point to elements of the same array object, or one past the last element of the array object; the result is the difference of the subscripts of the two array elements. In these cases the objects are arrays of char so the result is defined, and we believe that the report is based on a compiler incorrectly trapping on defined behaviour.
* Wrap _malloc_init() so internal calls go directlyguenther2016-10-152-2/+6
| | | | | prodded by otto@ ok kettenis@ otto@
* Cast pointers to uintptr_t to avoid potential signedness errors.dtucker2016-10-143-7/+24
| | | | | Based on patch from yuanjie.huang at windriver.com via OpenSSH bz#2608, with & ok millert, ok deraadt.
* 0xd0 -> 0xdb; ok deraadt@ millert@ tedu@otto2016-10-141-3/+3
|
* optimize canary code a bit by storing offset of sizes table instead ofotto2016-10-121-5/+7
| | | | recomputing it all the time
* make clear the length printed is the requested lengthotto2016-10-081-3/+3
|
* sort;jmc2016-10-071-5/+5
|
* introduce a sysctl to hijack dns sockets. when set to a port number,tedu2016-10-071-2/+6
| | | | | | | all dns socket connections will be redirected to localhost:port. this could be a sockopt on the listening socket, but sysctl is an easier interface to work with right now. ok deraadt
* rss limit is no longer enforced. noticed by Raimo Niskanentedu2016-10-071-5/+3
|
* grammar fix previous;jmc2016-10-071-2/+2
|
* document "chunk canary corrupted" errorotto2016-10-071-2/+7
|
* stray tabotto2016-10-071-2/+2
|
* Beter implementation of chunk canaries: store size in chunk meta dataotto2016-10-071-61/+63
| | | | instead of chunk itself; does not change actual allocated size; ok tedu@
* Use the userspace-visible thread register directly in __cerror insteadguenther2016-10-041-6/+8
| | | | | | | of indirecting through __errno(). Register naming tweaks and clang testing by patrick@ and jsg@ ok kettenis@
* Make read(2) return EISDIR on directories.jca2016-09-301-4/+6
| | | | | | | | | | | Years ago Theo made read(2) return 0 on directories, instead of dumping the directory content. Another behavior is allowed as an extension by POSIX, returning an EISDIR error, as used on a few other systems. This behavior is deemed more useful as it helps spotting errors. This implies that it might break some setups. Ports bulk builds by ajacoutot@ and naddy@, ok millert@ bluhm@ naddy@ deraadt@
* use the same template for describing securelevel interaction;jmc2016-09-281-11/+15
|
* document kern.allowkmem; ok deraadtjmc2016-09-281-2/+10
|
* sigsetmask() and sigblock() are no longer used by any setjmp implementationguenther2016-09-262-5/+3
| | | | | so the internal hidden names are unused; switch to PROTO_DEPRECATED() and drop the DEF_WEAK()s
* Fix matching when all of user, host and domain are specified.millert2016-09-241-10/+8
| | | | OK guenther@
* s/alloctaed/allocated/ in commentguenther2016-09-231-2/+2
|
* Switch from calling obsolete sig{block,setmask} to directly using theguenther2016-09-223-76/+42
| | | | | | | | sigprocmask syscall. abort() can't return, so simplify the call, and use the internal name to avoid the PLT. no-return observation by Miod Vallat, testing by aoyama@
* m88k switched to RELROguenther2016-09-221-6/+0
|
* Simplify __cerror now that %r27 is always the TCB pointer.guenther2016-09-223-54/+40
| | | | | | | Don't need a PLT relocation for __cerror. Move macros for doing internal aliases in ASM from SYS.h to DEFS.h __cerror tweaks by Miod Vallat, testing by aoyama@
* no more KERN_ARND; ok deraadtjmc2016-09-211-10/+2
|
* Delete casts to off_t and size_t that are implied by assignmentsguenther2016-09-2135-114/+106
| | | | | | | or prototypes. Ditto for some of the char* and void* casts too. verified no change to instructions on ILP32 (i386) and LP64 (amd64) ok natano@ abluhm@ deraadt@ millert@
* gmtime_r() should return NULL on failure, not the struct tm * resultmillert2016-09-191-3/+2
| | | | parameter that was passed in. From Carlin Bingham.
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.