| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2015-10-15 | Remove three distracting aliases for NULL. |   mmcc | 2 | -15/+11 | |
| ok nicm@ | |||||
| 2015-10-15 | Simplify the part of args() that is handling .Bl -column phrases: |   schwarze | 1 | -73/+28 | |
| Delete manual "Ta" handling because macro handling should not be done in an argument parser but should be left to the macro parsers, which exist anyway and work well. No functional change, minus 40 lines of code. Confusing and redundant code found while investigating an old bug report from tim@. | |||||
| 2015-10-15 | When blk_full() handles an .It line in .Bl -column and indirectly | schwarze | 1 | -1/+6 | |
| calls phrase_ta() to handle a .Ta child macro, advance the body pointer accordingly, such that a subsequent tab character rewinds the right body block and doesn't fail an assertion. That happened when there was nothing between the .Ta and the tab character. Bug reported by tim@ some time ago. | |||||
| 2015-10-15 | it is perhaps better style to not call close() on -1, even if harmless |   tedu | 1 | -6/+12 | |
| 2015-10-15 | make sure req is zeroed in tcp case | tedu | 1 | -2/+2 | |
| 2015-10-15 | better memory handling of the request/cache chain | tedu | 1 | -9/+23 | |
| 2015-10-15 | do not insert entry into cache until it's fully formed | tedu | 1 | -2/+2 | |
| 2015-10-15 | doh, not all requests are the same size. check len first. | tedu | 1 | -2/+3 | |
| 2015-10-15 | assert is the wrong tool | tedu | 1 | -3/+4 | |
| 2015-10-15 | the inet sockets don't work well with inet6 addrs. pick family from addr. | tedu | 1 | -3/+3 | |
| detected by naddy | |||||
| 2015-10-15 | everybody can build rebound | tedu | 1 | -2/+3 | |
| 2015-10-15 | no mail for _rebound. deraadt | tedu | 1 | -1/+2 | |
| 2015-10-15 | introduce logerr, since most logging is followed by exit | tedu | 1 | -33/+36 | |
| 2015-10-15 | don't allow NSD to pick up libevent from /usr/local if the libevent2 |   sthen | 1 | -1/+2 | |
| package is installed. | |||||
| 2015-10-15 | now with _rebound user, we can try a little harder at privdrop | tedu | 1 | -3/+11 | |
| 2015-10-15 | _rebound user and group (52) | tedu | 2 | -0/+2 | |
| 2015-10-15 | make the HUP interlocking in the parent work better. | tedu | 1 | -10/+24 | |
| 2015-10-15 | trivial KNF |   deraadt | 1 | -3/+5 | |
| 2015-10-15 | In syslogd replace the dprintf() macro with a logdebug() function |   bluhm | 3 | -85/+97 | |
| as dprintf(3) is in libc now and does something different. OK guenther@ | |||||
| 2015-10-15 | Pledge login_token with "stdio rpath wpath cpath fattr getpw tty". | bluhm | 1 | -1/+4 | |
| OK deraadt@ | |||||
| 2015-10-15 | just a space in usage, from deraadt | tedu | 1 | -2/+2 | |
| 2015-10-15 | Remove an unused included header (sys/stat.h). | mmcc | 1 | -2/+1 | |
| 2015-10-15 | add a hint about the config file, until it changes | tedu | 1 | -1/+5 | |
| 2015-10-15 | child can be pledged down a bit to just sockets and io | tedu | 1 | -1/+6 | |
| 2015-10-15 | When using a pf rule with both nat-to and rdr-to, it could happen | bluhm | 1 | -3/+6 | |
| that the nated source port was reused as destination port. Do not initialize nport at the beginning of the function, but where it is needed. OK sashan@ | |||||
| 2015-10-15 | import rebound, a lightweight dns proxy, for further polishing | tedu | 4 | -0/+648 | |
| 2015-10-15 | Introduce an unsigned char variable for the ctype function calls. | mmcc | 1 | -5/+7 | |
| ok millert@ | |||||
| 2015-10-15 | Don't Xr flock, since that is not the locking method used. | deraadt | 1 | -3/+2 | |
| ok millert | |||||
| 2015-10-15 | Remove disklabel -B (NUMBOOT) support. All the platforms which used to need |   miod | 4 | -320/+8 | |
| it are now using MI installboot for that purpose. ok krw@ deraadt@ | |||||
| 2015-10-15 | Avoid a race between fopen(3) and fchmod(2). Use umask(2) and | bluhm | 1 | -3/+4 | |
| unlink(2) and fopen(3) to prevent an attacker to open an old file with wrong permissions before the secret is written into it. This also guarantees that a new file with correct permissions is created. Without fchmod(2) "fattr" can be removed from pledge. with and OK deraadt@ | |||||
| 2015-10-15 | No need to create links for xxboot now that MI installboot is the preferred | miod | 1 | -4/+1 | |
| way to install boot blocks. | |||||
| 2015-10-15 | Use MI installboot instead of disklabel -B to install boot blocks. | miod | 6 | -36/+19 | |
| ok krw@ deraadt@ | |||||
| 2015-10-15 | Add an extra argument to bootstrap() to allow for a limited overlap between an | miod | 6 | -14/+31 | |
| existing partition and the boot blocks span, and update all callers to require an overlap limit of zero sectors (thus not changing their behaviour). Then, add proper support for vax: copy the 2nd-stage boot block to /boot and install the 1st-stage boot block at the beginning of the disk, retaining the disklabel; allow for an overlap of up to 16 sectors, which is perfectly fine as long as your `a' partition is FFS. Note that regular installs will not even have such an overlap, because the default OpenBSD span on a disk on vax starts at sector 16, but installation media use sperific layout which require this. ok krw@ | |||||
| 2015-10-15 | add missing comma and missing range restriction, found by smilint | sthen | 1 | -4/+7 | |
| 2015-10-15 | relaydMIBObjects, not relaydMIBOjbects. From Rob Pierce. | sthen | 1 | -4/+6 | |
| 2015-10-15 | Remove some unnecessary NULL-checks before free(). Change two bzero() | mmcc | 6 | -28/+18 | |
| calls on pf data to explicit_bzero(). ok mikeb@ | |||||
| 2015-10-15 | Add TIOCFLUSH to "tty" in support of tcflush() | deraadt | 1 | -1/+2 | |
| 2015-10-15 | Exposing FIOASYNC in pledge "ioctl" is a mistake; remove it, cannot find safe uses of it | deraadt | 1 | -2/+1 | |
| 2015-10-15 | Plegde x99token with "stdio rpath wpath cpath fattr getpw tty". | bluhm | 1 | -1/+4 | |
| with and OK deraadt@ | |||||
| 2015-10-15 | Handle F_ISATTY in the fcntl() stub as well | deraadt | 1 | -1/+2 | |
| ok guenther | |||||
| 2015-10-15 | remove '!' (subshell) and 'v' (edit) commands from ramdisk more(1) command. | deraadt | 1 | -114/+1 | |
| first off, ^Z job control was added to BSD unix sometime around 1980 and is a much better mechanism since the parent shell can contain what is going on. !command support becomes a visible defect when programs are pledge'd secondly this saves space. ok miod tobias | |||||
| 2015-10-15 | corrects pledge code for fsck_ffs and fsck_ext2fs |   semarie | 4 | -6/+16 | |
| on filesystem error, fsck will try to display username of inode, resulting need of "getpw" for not SMALL version. add a missed (?) -DSMALL in distrib/special/ for fsck_ffs and fsck_ext2fs found by hard way by ajacoutot@ OK millert@ | |||||
| 2015-10-15 | Let the rx path of cnmac run without the kernel lock. To avoid the need |   visa | 1 | -31/+11 | |
| of a mutex, the path no longer cleans up the queue of tx requests. ok mpi@ | |||||
| 2015-10-15 | Fix previous. The port number is not included in sc_src and it is |   yasuoka | 1 | -5/+3 | |
| checked already at beginning of the loop. ok reyk | |||||
| 2015-10-15 | in6_pcbconnect() returns EADDRNOTAVAIL when |   vgross | 1 | -3/+4 | |
| all the ports in the range portfirst .. portlast are in use. ok millert@, mpi@ | |||||
| 2015-10-15 | iobuf_queue() should return the number of bytes it queued on success, not 0 |   gilles | 1 | -2/+2 | |
| ok eric@ | |||||
| 2015-10-15 | Let "all" as an argument for "resume envelope", "pause envelope" |   sunil | 2 | -3/+12 | |
| and "remove" subcommands. seems potentially useful millert@, Ok gilles@ | |||||
| 2015-10-15 | A classic case for bzero() -> explicit_bzero() | mmcc | 1 | -2/+2 | |
| ok deraadt@ | |||||
| 2015-10-15 | Cast arguments of ctype functions to Char, a lexism defined as unsigned | mmcc | 1 | -5/+5 | |
| char. Part of a larger attempt to audit ctype function argument types with Coccinelle. ok deraadt@ | |||||
| 2015-10-15 | FIOCLEX & FIONCLEX should be in base ioctl set | deraadt | 1 | -3/+3 | |
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |