| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
from Fabien Romano and Jonathan Armani
|
|
|
|
| |
Armani
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- wrap with #ifndef NO_LOG_BAD_DNS_RESPONSES libc code that uses
p_class() and p_type() for diagnostics, then add that define to
libstub to avoid pulling in res_debug_syms.o
- split rcmd() and ruserok() into separate files, as nothing uses both
- split readdir_r() to its own file
- split syslog_r() from syslog(), as the latter needs localtime(); many
binaries no longer need to pull in all the time code after this; switch
from usleep() to nanosleep() while we're at it
(The profit of analysis of -Wl,-M,--cref output)
Chops 888kB from /bin and /sbin on i386
ok deraadt@, miod@
|
|
|
|
|
| |
noticed by Jonathan Armani & Fabien Romano
ugh+ok otto@
|
| |
|
|
|
|
|
|
|
| |
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms
|
|
|
|
| |
Okay deraadt@, otto@.
|
|
|
|
|
|
| |
ecvt, fcvt, gcvt, *printf, strtof, strtod, strtold act per ieee
1003.1. after these massive changes, remove unused files which
would not work now. reported by Maksymilian Arciemowicz; ok theo
|
| |
|
|
|
|
|
| |
specified in hint or hints is NULL.
claudio@ ok
|
| |
|
|
|
|
| |
ok tedu@ deraadt@ krw@
|
| |
|
|
|
|
|
| |
to u_int32_t to do integer math with (in a situation where that is legit)
ok otto millert
|
|
|
|
| |
ok otto@
|
|
|
|
|
|
| |
now doing.
ok deraadt@
|
|
|
|
|
| |
Someone may have passed a read-only string to putenv() (I'm looking
at you cron!).
|
|
|
|
|
|
|
|
|
|
|
| |
PF_UNSPEC queries are made. While there change the default from inet6
first then inet4 to inet4 first then inet6, this prevents the many
people with IPv4 only connectivity from constantly trying to contact
IPv6 addresses, and also unbreaks many ports who don't use getaddrinfo
right.
ok deraadt@, plenty of cheering in the room wrt the idea, not loud
enough complaining from the v6 crowd.
|
|
|
|
|
|
| |
standard explicitly disallows passing setenv a name with a '=' in
it but historic BSD behavior is to allow this but to ignore the '='
and anything after it.
|
|
|
|
| |
hint from claudio@, ok millert@
|
| |
|
|
|
|
|
|
| |
argument if the argument is deemed to be optional ('::').
feedback and ok jmc@ and millert@
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
PAGE_(SIZE|SHIFT|MASK) defines that evaluate to variables on the
sparc architecture;
ok otto@ tested on my reanimated ss20
|
|
|
|
|
|
|
| |
on sparc, it expands to something that just plain does not work,
because the page size can be variable. Sorry we didn't spot this
before. Backing it all out to allow sparc to build; please find a
different way to fix it.
|
|
|
|
|
|
|
| |
(MALLOC_OPTIONS=L). It was too slow to turn on by default, and we
don't do optional security.
requested by deraadt@ grumbling ok otto@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Move all runtime options into a structure that is made read-only
(via mprotect) after initialisation to protect against attacks that
overwrite options to turn off malloc protections (e.g. use-after-free)
Allocate the main bookkeeping data (struct dir_info) using mmap(),
thereby giving it an unpredictable address. Place a PROT_NONE guard
page on either side to further frustrate attacks on it.
Add a new 'L' option that maps struct dir_info PROT_NONE except when
in the allocator code itself. Makes attacks on it basically impossible.
feedback tedu deraadt otto canacar
ok otto
|
| |
|
|
|
|
| |
Make it less ambiguous; ok gilles@ claudio@
|
|
|
|
| |
as static const
|
| |
|
|
|
|
| |
Suggested by and ok claudio@, ok jmc@
|
| |
|
|
|
|
|
|
| |
struct in the if_msghdr instead of using sizeof() blindly. This allows us
to grow if_data without causing issues for the getifaddrs() users.
OK deraadt@ (who needs this for some cool upcomming stuff)
|
|
|
|
|
| |
the page as possible (i.e. make malloc option P a default).
ok art@ millert@ krw@
|
|
|
|
|
| |
a page to 0. P default will be changed in a separate commit.
ok millert@ art@ krw@
|
|
|
|
|
| |
a separate symbolic constant for the leeway we allow when moving
allocations towards the end of a page. No functional change.
|
| |
|
|
|
|
|
|
| |
(might catch errors closer to the trouble spot) and junk fill pages just
before reuse instead of immediate (we can't access the page anyway)
since we set PROT_NONE in the F case. ok djm@
|
|
|
|
| |
ok jmc@
|
| |
|
|
|
|
| |
tried and how many actually succeeded.
|
| |
|
|
|
|
| |
threaded case) but much smaller working set; prompted by and ok deraadt@
|
|
|
|
|
| |
non-syscalls, there's just too much code not doing the right thing on
error paths; prompted by and ok deraadt@
|
|
|
|
| |
kurt@
|
|
|
|
|
| |
mapping the region next to the existing one first; there's a pretty
high chance there's a hole there we can use; ok deraadt@ tedu@
|