| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Nuke net.inet6.icmp6.rediraccept and allow redirects on interfaces |   florian | 2014-08-27 | 1 | -8/+2 |
| | | | | | | | | with autoconf enabled. If one is doing SLAAC one does already trust link local icmp6 so the policy for icmp6 redirects should be the same. pointed out by & OK bluhm@; OK henning@ | ||||
| * | Delete secret or secret-derived data with explicit_bzero. |   doug | 2014-08-25 | 1 | -13/+13 |
| | | | | | | concept ok deraadt@ diff looks ok tedu@ | ||||
| * | unbind; |   jmc | 2014-08-23 | 5 | -27/+16 |
| | | |||||
| * | POSIX/FreeBSD/NetBSD/Linux/etc agree -- blk[size|cnt]_t is the bomb. |   krw | 2014-08-22 | 1 | -3/+3 |
| | | | | | | | | | | | | | So add the types blksize_t (a.k.a. int32_t) and blkcnt_t (a.k.a. int64_t). Use blkcnt_t in stat.h since the base type (int64_t) does not change. blksize_t in stat.h will follow after the tree is audited for signed issues, since the base type will change from u_int32_t to a POSIX compliant int32_t. Guidance and feedback from guenther@ ok millert@ | ||||
| * | Remove userland bits related to the crypto(4) interface; ok deraadt |   mikeb | 2014-08-20 | 1 | -21/+3 |
| | | |||||
| * | a small tweak to improve malloc in multithreaded programs. we don't need |   tedu | 2014-08-18 | 1 | -7/+21 |
| | | | | | | | | to hold the malloc lock across mmap syscalls in all cases. dropping it allows another thread to access the existing chunk cache if necessary. could be improved to be a bit more aggressive, but i've been testing this simple diff for some time now with good results. | ||||
| * | Add mention of execvpe() setting errno on failure. |   guenther | 2014-08-18 | 1 | -3/+4 |
| | | | | | from Justus Baumgartner (meddev50 (at) gmail.com) | ||||
| * | Cover execvpe() in the description of what the envp arg means. | guenther | 2014-08-16 | 1 | -3/+5 |
| | | | | | | from Justus Baumgartner (meddev50 (at) gmail.com) ok jmc@ | ||||
| * | Fixed typo in "distinct". |   tobias | 2014-08-16 | 1 | -3/+3 |
| | | | | | ok jmc@ | ||||
| * | XPG requires insque() and remque() to work with linear lists and not just | guenther | 2014-08-15 | 5 | -101/+26 |
| | | | | | | | | | | circular lists. Amazingly, they managed to extend the requirements to no longer match the behavior of the VAX instructions they were modeled after, so the trivial VAX ASM versions have to go. Nice job breaking it, X/Open! Based on a diff from enh (at) google.com ok miod@ | ||||
| * | Use O_CLOEXEC wherever we open a file and then call fcntl(F_SETFD, FD_CLOEXEC) | guenther | 2014-08-15 | 1 | -3/+2 |
| | | | | | | | | on it, simplifying error checking, reducing system calls, and improving thread-safety for libraries. ok miod@ | ||||
| * | fixed overrid(d)en typo | tobias | 2014-08-14 | 1 | -2/+2 |
| | | | | | millert@ and jmc@ agree that "overriden" is wrong | ||||
| * | AF_IMPLINK and AF_BLUETOOTH are gone | guenther | 2014-08-10 | 1 | -9/+3 |
| | | |||||
| * | Only need <stdint.h> and not all of <inttypes.h> here | guenther | 2014-08-10 | 2 | -4/+4 |
| | | |||||
| * | Make queries using the search list for hostname lookups fail with |   eric | 2014-07-23 | 4 | -5/+31 |
| | | | | | | | | | | | NO_DATA/EAI_NODATA when the hostname param is an empty string. So far, they were using the entries in the search list with no additional component, which is not really expected. reported by jsing@ and a few others ok deraadt@, "makes sense" jsing@ | ||||
| * | Add pthread_sigmask() and raise() to the list of async signal safe |   matthew | 2014-07-21 | 2 | -2/+6 |
| | | | | | | | functions, per POSIX Issue 7 ok deraadt | ||||
| * | missing newline |   deraadt | 2014-07-21 | 1 | -1/+2 |
| | | |||||
| * | Fix typo: s/lstate/lstat/ | matthew | 2014-07-21 | 2 | -6/+6 |
| | | |||||
| * | Switch from <sys/endian.h> or <machine/endian.h> to the new, | guenther | 2014-07-21 | 17 | -38/+35 |
| | | | | | | | being-standardized <endian.h> ok deraadt@ millert@ beck@ | ||||
| * | Move more OS-specific functionality to arc4random.h headers. |   bcook | 2014-07-20 | 2 | -6/+14 |
| | | | | | | | | | Move <sys/mman.h> and raise(SIGKILL) calls to OS-specific headers. On OpenBSD, move thread_private.h as well to arc4random.h. On Windows, use TerminateProcess on getentropy failure. ok deraadt@ | ||||
| * | From ISO/IEC 9899:1999 and 9899:201x, | guenther | 2014-07-20 | 3 | -12/+12 |
| | | | | | | | | | | 6.11.5 - Storage-class specifiers: The placement of a storage-class specifier other than at the beginning of the declaration specifiers in a declaration is an obsolescent feature. Diff from Jean-Philippe Ouellet (jean-philippe (at) ouellet.biz) | ||||
| * | arc4random re-seeds with getentropy() now; ok deraadt@ jmc@ |   naddy | 2014-07-19 | 1 | -3/+3 |
| | | |||||
| * | Document that abort() is async signal safe now that it doesn't flush | matthew | 2014-07-19 | 2 | -13/+12 |
| | | | | | | | | | | | stdio buffers While here replace "SUSv[67]" with "POSIX Issue [67]" and update signal(3) to mention that pselect() and ppoll() are async signal safe like sigaction(2) already does. ok guenther | ||||
| * | Change _rs_allocate so it can combine the two regions (rs and rsx) | deraadt | 2014-07-19 | 2 | -28/+25 |
| | | | | | | | | | | | into one if a system has an awesome getentropy(). In that case it is valid to totally throw away the rsx state in the child. If the getentropy() is not very good and has a lazy reseed operation, this combining is a bad idea, and the reseed should probably continue to use the "something old, something new" mix. _rs_allocate() can accomodate either method, but not on the fly. ok matthew | ||||
| * | Oops, getentropy() is an "extension interface", not a "base interface" | matthew | 2014-07-18 | 2 | -4/+5 |
| | | | | | | Also, update the async signal safe list in signal(3) too (reminded by deraadt) | ||||
| * | Document that getentropy() is async signal safe. | matthew | 2014-07-18 | 1 | -2/+3 |
| | | | | | Pointed out by Jean-Philippe Ouellet | ||||
| * | As discussed with beck, tweak the wording for getentropy slightly so | deraadt | 2014-07-18 | 1 | -5/+4 |
| | | | | | | that a certain kind of people don't go bonkers over "what is entropy". it is what it is, input to PRNG's. | ||||
| * | Remove "const" from the lsearch(3) manual's synopsis too. | matthew | 2014-07-18 | 1 | -3/+3 |
| | | | | | Reminded by Rafael Neves | ||||
| * | zap trailing whitespace; | jmc | 2014-07-18 | 1 | -3/+3 |
| | | |||||
| * | Change lsearch()'s "base" argument to require a non-const pointer to | matthew | 2014-07-18 | 1 | -2/+2 |
| | | | | | | | | align with POSIX and other systems. Pointed out by Elliott Hughes on tech ok deraadt | ||||
| * | Seperate arc4random's os-dependent parts into static inline functions, | deraadt | 2014-07-18 | 2 | -36/+57 |
| | | | | | | making it much easier for libressl -portable to fill in the gaps. ok bcook beck | ||||
| * | it is 2014, and we still need to encourage people away from srand() | deraadt | 2014-07-17 | 2 | -5/+14 |
| | | | | | and random(). Sigh. | ||||
| * | "Race-free because we're running single-threaded in a new | deraadt | 2014-07-17 | 1 | -1/+5 |
| | | | | | | address space, and once allocated rs is never deallocated." document the forkhandler to save reviewers time, with matthew | ||||
| * | zap trailing newlines; "go for it" deraadt |   okan | 2014-07-16 | 4 | -6/+2 |
| | | |||||
| * | #ifdef wrap the _rs_forkhandler | deraadt | 2014-07-16 | 1 | -1/+3 |
| | | |||||
| * | added handler for an atfork hook from kettenis@ | bcook | 2014-07-16 | 1 | -1/+10 |
| | | | | | ok deraadt@ beck@ kettenis@ | ||||
| * | international currency locale rules as per POSIX.1-2008 |   pelikan | 2014-07-14 | 3 | -5/+49 |
| | | | | | | | required for libc++ ok guenther afresh1 | ||||
| * | crank major for syslog_r(3) using sendsyslog(2). new kernel needed, too. | deraadt | 2014-07-14 | 1 | -1/+1 |
| | | |||||
| * | Convert syslog_r(3) to using sendsyslog(2). This ensures that syslog_r(3) | deraadt | 2014-07-14 | 1 | -77/+5 |
| | | | | | | | can be used anywhere (signal handler, stack protector fault handler) as long as the format string does not contain floating point. ok tedu miod beck | ||||
| * | add missing whitespace between .Fa macro argument and trailing punctuation |   schwarze | 2014-07-13 | 1 | -3/+3 |
| | | |||||
| * | one .Fn argument per function argument | schwarze | 2014-07-13 | 1 | -8/+8 |
| | | |||||
| * | yes indeed, it returns void *. from Jean-Philippe Ouellet, i also had | deraadt | 2014-07-13 | 1 | -3/+3 |
| | | | | | this lurking in a tree | ||||
| * | tweak previous; | jmc | 2014-07-13 | 1 | -2/+2 |
| | | |||||
| * | missing bracket in previous; | jmc | 2014-07-13 | 1 | -2/+2 |
| | | |||||
| * | Document KERN_PROC_NOBROADKILL |   claudio | 2014-07-13 | 1 | -2/+6 |
| | | |||||
| * | Update BUGS section. |   miod | 2014-07-13 | 1 | -4/+6 |
| | | |||||
| * | oops, i deleted the wrong word | tedu | 2014-07-13 | 1 | -2/+2 |
| | | |||||
| * | remove a lie spotted by guenther | tedu | 2014-07-13 | 1 | -5/+4 |
| | | |||||
| * | once srandomdev() is called, switch to using arc4random() but mask off the | tedu | 2014-07-13 | 1 | -12/+10 |
| | | | | | | high bit as required by posix. wouldn't want to break any standards. idea and ok deraadt | ||||
| * | Split out ntoh[ls] and hton[ls] into their own manpage. | guenther | 2014-07-13 | 3 | -136/+199 |
| | | | | | | | Update byteorder(3) to cover the new functions in <endian.h> ok deraadt@ millert@ | ||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |