summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Part 2 of file descriptor race and deadlock corrections.kurt2006-09-261-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adjust design of file descriptor table to eliminate races with both opening and closing of file descriptor entries and eliminates one class of deadlocks. One nice side effect of this change in design should be better performance for applications that open and close many file descriptors due to reduced fd_table_lock contention and fd entry reuse. - Add entry states to manage use of entry and eliminate some closing races. fd entries are not deallocated upon close() now. - Call _thread_fd_table_init with one of five discreet modes to properly initialize an entry and manage the state transition to open. - When closing an entry hold the entry spinlock locked across the state transition and the _thread_sys_close call to close another race. - Introduce a new lock type FD_RDWR_CLOSE that transitions either a closed entry or an open entry into closing state and then waits for a RDWR lock so that the lock queue can unwind normally. All subsequent fd lock attempts for that entry are rejected with EBADF until the fd is fully closed, or reopened by dup2(). Once a thread holds the FD_RDWR_LOCK it is safe to close() it or dup2() on it. - When a thread creates a new fd there is a window of time when another thread could attempt to use the fd before the creating thread has initialized the entry for it. This can result in improper status_flags for the entry, so record the entries init mode, detect when this has happened and correct the status_flags when needed. reviewed by marc@ & brad@, tested by several, okay brad@
* Remove unnecessary /* NOTREACHED */ comments because our lint isray2006-09-252-20/+8
| | | | | | cool and recognizes __dead, and because shorter examples are clearer. OK otto@.
* Use S_IS* macros insted of masking with S_IF* flags. The latter mayotto2006-09-251-2/+2
| | | | | have multiple bits set, which lead to surprising results. Spotted by Paul Stoeber. ok djm@
* Also accept "HTTP/1.1 200" as a success response.ray2006-09-251-2/+3
| | | | OK djm@.
* If fgetln() != NULL, len == 0 is impossible, so remove check.ray2006-09-231-3/+3
| | | | OK otto@ and jaredy@.
* Back out change in rev 1.15 of to allow whitespace to separate amillert2006-09-221-10/+1
| | | | | | | | | flag from its optional argument if permutation is disabled. The idea was that since "r:" would match "-r foo" then "r::" should match "-r foo" too as long as we know that things have not been reshuffled. Unfortunately, this causes incompatibilities with GNU getopt_long when the POSIXLY_CORRECT environment variable is set. OK deraadt@
* fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339;djm2006-09-092-0/+34
| | | | ok beck@ miod@
* no point mentioning functions if we have nothing useful to sayjmc2006-08-051-13/+1
| | | | | | about them; ok djm
* wording/grammar tweaks;jmc2006-07-261-3/+4
|
* better macros;jmc2006-07-261-6/+6
|
* document `iv';jmc2006-07-261-1/+4
| | | | | from eren elci; tweaked by djm ok djm
* updates from nicholas marriott;jmc2006-07-251-5/+9
| | | | re-worded and ok djm
* allocate gsalt large enough; from Matthew R. Dempsky <mrd at alkemiootto2006-07-041-2/+2
| | | | dot org>; ok djm@ deraadt@
* sync with openssl-0.9.7j docs;jmc2006-06-271-9/+9
|
* crank shlib_versiondjm2006-06-274-6/+7
|
* resolve conflictsdjm2006-06-27317-4778/+8553
|
* This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-277-15/+882
|\ | | | | branch.
| * import of openssl-0.9.7jdjm2006-06-27116-2104/+4130
| |
| * This commit was manufactured by cvs2git to create branch 'unlabeled-1.1.1'.cvs2svn2005-05-101-0/+1541
| |
* | This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-27164-379/+27277
|\ \ | | | | | | branch.
| * | import of openssl-0.9.7jdjm2006-06-27380-3153/+32917
| | |
* | | This commit was generated by cvs2git to track changes on a CVS vendordjm2006-06-274-0/+870
|\ \ \ | | | | | | | | branch.
| * | | import of openssl-0.9.7jdjm2006-06-274-0/+870
| | | |
| * | | This commit was manufactured by cvs2git to create branch 'OPENSSL'.cvs2svn2005-05-101-0/+1541
| | | |
* | | | add class 1 and class 3 root certificates from CAcert.org. ok beck@jakob2006-06-121-0/+268
| | | |
* | | | potential fd leak (we will fix this before we move to cloning)deraadt2006-06-082-2/+6
| | | |
* | | | remove expired certificates. ok beck@jakob2006-06-071-541/+0
| | | |
* | | | update a couple of existing CAs that has been changed. ok beck@jakob2006-06-071-105/+87
| | | |
* | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort byjakob2006-06-071-2551/+2356
| | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@
* | | | back out last patch due to updated committed prematurelyjakob2006-06-071-2356/+2551
| | | |
* | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort byjakob2006-06-071-2551/+2356
| | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@
* | | | Fix 'double by a factor of two' and make cache options a bit morepedro2006-06-061-4/+4
| | | | | | | | | | | | | | | | descriptive while at it, input and okay jmc@
* | | | strtoul() -> strtonum(). Also change iflag to unsigned int, sinceray2006-06-021-23/+21
| | | | | | | | | | | | | | | | | | | | | | | | sleep takes an unsigned integer. OK moritz@, jaredy@, and dhill@
* | | | start sentence with a capital letter;jmc2006-06-011-2/+2
| | | |
* | | | fix a !foo & bar.thib2006-05-191-2/+2
| | | | | | | | | | | | | | | | ok miod@, tedu@, pedro@
* | | | move an option to the right place;jmc2006-05-171-2/+2
| | | |
* | | | Don't forget to return 0 on success, doh.otto2006-05-162-2/+4
| | | |
* | | | Try harder to trigger an exception. On architectures where floating-pointkettenis2006-05-151-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | exceptions are deferred, we might not see the exception before another floating-point instruction is executed. This is especially true on the i387 where we don't see underflow/overflow until the result is stored into memory.
* | | | Fix the second malloc_ulimit regression: maintaining the free listotto2006-05-141-3/+12
| | | | | | | | | | | | | | | | | | | | | | | | requires memory; try to make sure we have it. If all fails, leak instead of crash. Test case originally found by cloder@, fix tested by many.
* | | | Add a -hex option to 'rand' to output hexadecimal output.matthieu2006-05-142-2/+24
| | | | | | | | | | | | | | | | ok djm@ miod@, man page help from jmc@.
* | | | remove an 'is' from the comment to make the sentence correct.fkr2006-05-121-2/+2
| | | | | | | | | | | | | | | | ok jmc@, mbalmer@
* | | | Convert do {} while loop -> while {} for clarity. No binary changemillert2006-05-052-10/+10
| | | | | | | | | | | | | | | | on most architectures. From Oliver Smith. OK deraadt@ and henning@
* | | | backport checks for degenerate Diffie-Hellman public exponents fromdjm2006-05-049-1/+73
| | | | | | | | | | | | | | | | | | | | OpenSSL-0.9.8a, where they were added without a corresponding patch to 0.9.7 or an advisory! ok theo@ markus@
* | | | strtonum does not require limits.htedu2006-04-251-2/+1
| | | | | | | | | | | | | | | | spotted by ray some time ago
* | | | Do not leave an hole in the directory list if allocation of theotto2006-04-241-11/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | region succeeds, but allocation a required page dir failed. This can happen if we're really close to ulimit after allocation the region of the size requested. See malloc_ulimit1 regress test. Tested by many; thanks.
* | | | Hook new ulimit test casesotto2006-04-181-2/+2
| | | |
* | | | near ulimit test case 2otto2006-04-182-0/+46
| | | |
* | | | Near ulimit test case 1otto2006-04-182-0/+48
| | | |
* | | | delint; original from deraadt@ with fixes from tdeval@ and me;otto2006-04-181-43/+60
| | | | | | | | | | | | | | | | tested by quite a few developers. ok deraadt@
* | | | Clarify strlcpy code by explicitly naming variable `len' andray2006-04-181-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | separating out each step. Inspired during miscommunication with tedu@. OK deraadt@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-04-01 12:41:42 +0000