| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Suggested by Evan Silberman, confirmed by jmc@
|
|
|
|
| |
Suggested by eric@, input from deraadt@, ok deraadt@ eric@
|
|
|
|
|
|
|
|
|
|
| |
The previous wording implied this option does nothing, which is wrong.
This option does affect the way gethostbyname(3) works on OpenBSD
(return IPv6 addresses if available). On some systems, it also
introduces IPv4-mapped IPv6 addresses, a "feature" that we don't
support.
ok deraadt@ eric@
|
|
|
|
| |
ok tedu
|
| |
|
| |
|
|
|
|
|
| |
and correct Xr.
ok jmc
|
| |
|
|
|
|
|
|
| |
value < 0. errno is only updated in this case. Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.
|
|
|
|
|
| |
-1 to mark failure, not arbitrary values < 0. I believe manual pages
should follow the described contract precisely and accurately.
|
|
|
|
|
| |
jmc@ noticed that the text wasn't completely clear;
OK jmc@
|
| |
|
| |
|
|
|
|
|
| |
Checking Disabled flag. Introduce a RES flag to do so. ok krw@
deraadt@ eric@
|
|
|
|
|
|
|
|
| |
effectively use pledge(2) in some programs.
approval from many, thanks!
idea by & ok deraadt@
|
|
|
|
| |
ok benno
|
| |
|
| |
|
|
|
|
|
|
| |
and reference gethostby*(3) and /etc/hosts instead.
Say that setnetent(3), getnetent(3), and endnetent(3) now do nothing.
With feedback from guenther and significant help from deraadt@.
|
|
|
|
|
|
| |
While here, stop implying plans to support additional address
families in the future, and do not call gethostbyname2(3) "advanced".
OK deraadt@ guenther@
|
|
|
|
|
|
| |
getnetent(3), and endnetent(3) do nothing, just like sethostent(3),
gethostent(3), and endhostent(3) years ago.
OK deraadt@ guenther@
|
| |
|
|
|
|
|
| |
POSIX functions) and turn the weird DIAGNOSTICS section into a normal
RETURN VALUES section while here.
|
|
|
|
| |
what the reader is using.
|
| |
|
|
|
|
| |
negative. Quiets a warning from clang. OK bluhm@
|
| |
|
|
|
|
|
| |
crash when given a large hex number as part of the dotted quad.
OK deraadt@ jsg@
|
|
|
|
|
|
|
|
|
|
|
|
| |
RES_USE_DNSSEC is implemented by setting the DNSSEC DO bit in outgoing
queries. The resolver is then supposed to set the AD bit in the reply
if it managed to validate the answer through DNSSEC. Useful when the
application doesn't implement validation internally. This scheme
assumes that the validating resolver is trusted and that the
communication channel between the validating resolver and and the client
is secure.
ok eric@ gilles@
|
|
|
|
|
|
|
| |
EDNS allows for various DNS extensions, among which UDP DNS packets size
bigger than 512 bytes. The default is still to not advertize anything.
ok eric@
|
|
|
|
|
|
|
| |
diff from kirill miazine
while here, bump all the no op texts to one standard blurb;
help/ok jca
|
|
|
|
|
|
| |
adding appropriate #ifdef's around declarations.
ok millert@ (with a tweak I will commit separately)
|
| |
|
|
|
|
| |
From FreeBSD (glebius)
|
|
|
|
| |
From Henri Kemppainen
|
|
|
|
|
|
|
| |
A specially crafted struct sockaddr_dl argument can trigger a stack
overflow of a static buffer in libc. An attacker may be able to
use this to write to arbitrary locations in the data segment.
From FreeBSD (glebius); OK deraadt@ mestre@
|
|
|
|
|
|
|
| |
or prototypes. Ditto for some of the char* and void* casts too.
verified no change to instructions on ILP32 (i386) and LP64 (amd64)
ok natano@ abluhm@ deraadt@ millert@
|
|
|
|
|
|
|
|
| |
* Add missing .Dv, .Ev, and .Fa macros.
* Delete deprecated .Tn macros.
* Mark up global variable names with .Va, not with .Fa or .Li.
* Mark up config file commands with .Ic, not with .Fa.
* Fix HISTORY, trivial to verify from the CSRG archive CD.
|
|
|
|
|
|
| |
resolver(3).
OK jmc@
|
|
|
|
| |
ok jung@
|
| |
|
|
|
|
| |
OK deraadt@ jca@ jung@ florian@
|
|
|
|
| |
ok millert@ deraadt@
|
|
|
|
|
|
| |
rlogind and rshd (remember them?)
ok deraadt@
|
| |
|
|
|
|
|
|
| |
data isn't necessary.
ok mpi@, ok&tweak natano@
|
|
|
|
|
|
|
|
|
|
|
|
| |
correctly - logically complete that now by removing MLINKS from base;
authors need only to ensure there is an entry in NAME for any function/
util being added. MLINKS will still work, and remain for perl to ease
upgrades;
ok nicm (curses) bcook (ssl)
ok schwarze, who provided a lot of feedback and assistance
ok tb natano jung
|
| |
|
|
|
|
| |
ok and valuable input from millert@
|
|
|
|
| |
millert@
|