Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | unveil maildir, utmp, /tmp, and /dev. For the vast number of people | 2018-09-24 | 1 | -1/+9 | |
| | | | | using biff. | ||||
* | check return from pread, don't divide -1 for count | 2017-04-03 | 1 | -2/+6 | |
| | |||||
* | use recallocarray() because the array contains data that can be observed | 2017-04-03 | 1 | -2/+3 | |
| | |||||
* | Prefer pread() over lseek()+read() | 2017-04-02 | 1 | -4/+3 | |
| | | | | | | open() only needs the mode argument if O_CREAT is present ok beck@ deraadt@ | ||||
* | Use open(tty, O_WRONLY) + fdopen() instead of fopen(tty, "w") to | 2016-04-02 | 1 | -2/+4 | |
| | | | | keep stdio from opening with O_CREAT which would require pledge cpath. | ||||
* | Call pledge(2) after initial getsockname(2) to avoid "inet" addition. | 2015-10-12 | 1 | -4/+5 | |
| | | | | From & OK deraadt@ | ||||
* | normalize a few more tame request orderings, to help review | 2015-10-10 | 1 | -2/+2 | |
| | |||||
* | With nfs spool (fork + seteuid/setuid balony) support gone, it becomes | 2015-10-09 | 1 | -1/+5 | |
| | | | | | possible to pledge "stdio rpath wpath tty proc" Noone uses this code anymore. This is a demonstration... | ||||
* | remove NFS spool support; it stands in the way of pledge(2) | 2015-10-09 | 1 | -8/+1 | |
| | |||||
* | Trim trailing whitespace from the comsat message before calling | 2015-07-06 | 1 | -4/+10 | |
| | | | | | strtonum() to parse the offset since mail.local writes a trailing newline. Otherwise comsat just discards the message. OK deraadt@ | ||||
* | Convert many atoi() calls to strtonum(), adding range checks and failure | 2015-04-18 | 1 | -2/+5 | |
| | | | | | handling along the way. Reviews by Brendan MacDonell, Jeremy Devenport, florian, doug, millert | ||||
* | Replace <sys/param.h> with <limits.h> and other less dirty headers where | 2015-01-16 | 1 | -3/+4 | |
| | | | | | | | | | possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | ||||
* | remove some unnecessary sys/param.h inclusions | 2012-12-04 | 1 | -2/+1 | |
| | |||||
* | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | 2009-10-27 | 1 | -12/+1 | |
| | | | | | | | unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms | ||||
* | convert to new .Dd format; | 2007-05-31 | 1 | -2/+2 | |
| | |||||
* | recv(2) returns a ssize_t, so match cc with it. | 2006-08-17 | 1 | -10/+10 | |
| | | | | | | | | st.st_mtime is a time_t, so match utmpmtime with it. Check for -1 instead of <0 for some system calls. Remove pointless casts. OK dhill@ and millert@ | ||||
* | the third arg of read() is size_t, not int (cast fix) | 2005-11-15 | 1 | -5/+5 | |
| | | | | | use UT_NAMESIZE more consistently from Andrey Matveev | ||||
* | more signal flag races; ok miod@ | 2004-09-16 | 1 | -3/+3 | |
| | |||||
* | ARGSUSED before signal handler with unused signo | 2004-09-14 | 1 | -2/+4 | |
| | |||||
* | free(NULL) allowed | 2003-09-26 | 1 | -4/+3 | |
| | |||||
* | Fix typo in revision 1.29; deraadt@ OK | 2003-09-25 | 1 | -3/+3 | |
| | |||||
* | realloc fixes; ho ok | 2003-09-24 | 1 | -4/+11 | |
| | |||||
* | use fseeko; millert ok | 2003-06-19 | 1 | -3/+3 | |
| | |||||
* | Remove the advertising clause in the UCB license which Berkeley | 2003-06-02 | 2 | -13/+5 | |
| | | | | rescinded 22 July 1999. Proofed by myself and Theo. | ||||
* | use socklen_t more; henning ok | 2002-09-06 | 1 | -3/+3 | |
| | |||||
* | fix int overflow in statbf.st_size, from netbsd PR#17933 | 2002-08-22 | 1 | -2/+8 | |
| | | | | as by request from deraadt@ | ||||
* | KNF | 2002-07-03 | 1 | -18/+8 | |
| | |||||
* | fix patch; moritz@jodeit.org | 2002-06-20 | 1 | -5/+5 | |
| | |||||
* | handle non-terminated things better; moritz@jodeit.org | 2002-06-19 | 1 | -8/+15 | |
| | |||||
* | Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically. | 2002-02-16 | 1 | -8/+8 | |
| | |||||
* | kill more registers; | 2001-12-07 | 1 | -11/+11 | |
| | | | | millert@ ok | ||||
* | Ensure SA_RESTART is not set on SIGALRM. With it set, the SIGALRM is not | 2001-11-18 | 1 | -8/+17 | |
| | | | | | | seen after a successful recv(). This affects some other programs too.. but turning off SA_RESTART requires SIGNIFICANT analysis -- not for the faint of heart. | ||||
* | volatile sig_atomic_t | 2001-11-17 | 1 | -3/+3 | |
| | |||||
* | -Wall | 2001-07-08 | 1 | -4/+4 | |
| | |||||
* | strlcpy | 2001-05-12 | 1 | -4/+3 | |
| | |||||
* | $OpenBSD$ | 2001-01-28 | 3 | -4/+5 | |
| | |||||
* | use sig_atomic_t, and check for signal flag more often | 2001-01-17 | 1 | -6/+7 | |
| | |||||
* | change signal handler to set a flag, and then in the main loop do | 2001-01-11 | 1 | -7/+20 | |
| | | | | | | | the work that this handler used to do. many signal handlers in the tree should be changed to this, since a large percentage of them have raceable stuff in them; like mixing malloc's and stdio inside and outside the handler.. terrrible stuff | ||||
* | Some miscellaneous man page repairs. | 2000-09-08 | 1 | -10/+10 | |
| | |||||
* | More <sys/file.h> vs. <fcntl.h> and open() flags fixes. | 1999-08-17 | 1 | -2/+2 | |
| | |||||
* | use sockaddr_storage | 1999-06-23 | 1 | -2/+2 | |
| | |||||
* | remove argument from .Os macros so value in /usr/share/tmac/mdoc/doc-common | 1999-05-23 | 1 | -2/+2 | |
| | | | | is used instead; kwesterback@home.com | ||||
* | vis() buf overflow | 1999-02-21 | 1 | -2/+2 | |
| | |||||
* | ftpd: sleep for an indeterminate amount for non-existant logins | 1998-07-13 | 1 | -3/+3 | |
| | | | | | to simulate a crypt, like login does. Use SEEK_* not L_* and kill some 0L's used in lseek while we're there. | ||||
* | do not syslog() with "\n"; skipped smtpd/named/ipmon; 12 minutes of dabbling | 1998-07-10 | 1 | -2/+2 | |
| | |||||
* | do not exit(-1) | 1997-11-20 | 1 | -2/+2 | |
| | |||||
* | More errno saving. | 1997-08-05 | 1 | -1/+3 | |
| | |||||
* | save errno in sigchld handlers | 1997-08-04 | 1 | -1/+4 | |
| | |||||
* | Deal with _POSIX_SAVED_IDS when relinquishing privileges | 1996-12-22 | 1 | -2/+4 | |
| | |||||
* | vis | 1996-08-27 | 1 | -4/+6 | |
| |