summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | observe the following spelling:jmc2010-09-102-9/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - wide character (noun) - wide-character (adjective) this is the "fix of least resistance", and appears to be in line with posix style; a tiny fix still needed for curses, but i'll mail that upstream;
* | | | Use mandoc instead of groff to build PostScript manuals; note thatschwarze2010-09-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | these are not built by default, but only built when MANPS is set. kristaps@ and jmc@ agree with the idea, and the patch doesn't bother deraadt@ at all
* | | | Oracle has re-licensed sunrpc under a three-clause BSD license.millert2010-09-012-54/+58
| | | | | | | | | | | | | | | | Update our sources appropriately. OK deraadt@ jsg@
* | | | Check for duplicate variables in the environment when setting a valuemillert2010-08-232-11/+24
| | | | | | | | | | | | | | | | via setenv() or putenv(). OK miod@
* | | | Sync hcreate(3) with NetBSD, adding some caveats.ray2010-07-281-12/+67
| | | | | | | | | | | | | | | | OK jmc
* | | | getopt_long.c replaced getopt.c 6+ years ago; we can retireblambert2010-07-221-7/+1
| | | | | | | | | | | | | | | | | | | | | | | | the REPLACE_GETOPT macro, at long last ok millert@
* | | | Document new unsetenv() error returns.naddy2010-07-061-2/+8
| | | | | | | | | | | | | | | | From Nicolas Legrand <nlegrand@ethelred.fr>; ok jmc@
* | | | getpeereid() can now be a library routine using getsockopt() withderaadt2010-07-013-3/+158
| | | | | | | | | | | | | | | | | | | | | | | | | | | | SOL_SOCKET and SO_PEERCRED, only issue being that it cannot return EFAULT for a page fault. The kernel code will soon be put into compat, and then in 10 years or so tedu will delete it. ok guenther millert
* | | | oops. Missed this from my aes-ni commit.thib2010-07-011-3/+4
| | | |
* | | | AES-NI engine support for OpenSSL.thib2010-07-0120-6/+3322
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is code mostly picked up from upstream OpenSSL, or to be more exact a diff from David Woodhouse <dwmw2 at infradead dot org>. Remember to make includes before doing a build! no objections from djm@ OK deraadt@, reyk@ (AES is about 4.25x faster on his x201 now)
* | | | use a union to align the dns answer buffer until gcc4 is fixedderaadt2010-06-291-5/+8
| | | |
* | | | use a union to align the dns answer buffer until gcc4 is fixedderaadt2010-06-291-5/+8
| | | |
* | | | Make unsetenv(NULL) and unsetenv("") give EINVAL, per POSIX. ok deraadt@naddy2010-06-291-1/+5
| | | |
* | | | VIA xcrypt for amd64, simpler version of a diff from deraadtjsg2010-06-292-12/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | with suggestions from miod. The codepath doesn't seem to be called yet, this will be investigated later. looks good miod@, ok deraadt@
* | | | Add the extendedKeyUsage flags serverAuth and clientAuth. Newer Windowsreyk2010-06-261-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version require these flags to accept the X.509 certificates from the gateway or client; I just add both flags to make it work in both cases and verified it with win7, for example when authenticating against iked. go ahead beck@
* | | | Avoid using and end pointer since strnlen(string, -1) is legalmillert2010-06-021-4/+3
| | | | | | | | | | | | | | | | | | | | and would otherwise result in overflowing the end pointer and cause strnlen() to return 0. OK sthen@
* | | | oops - forgot to check for trailing whitespace;jmc2010-05-261-2/+2
| | | |
* | | | reword the 'D' dump bit to make it clear that the malloc.out file needsthib2010-05-261-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | to exist before exit for malloc to dump stats in it. tweaks from jmc@ ok otto@,jmc@
* | | | Add HISTORY section, mostly for strnlen() but include strlen() formillert2010-05-241-2/+11
| | | | | | | | | | | | | | | | completeness (verified).
* | | | remove unused variable.chl2010-05-211-2/+1
| | | | | | | | | | | | | | | | ok millert@ tedu@
* | | | tweak previous;jmc2010-05-193-15/+13
| | | |
* | | | add posix_madvise, posix_memalign, strndup, and strnlen. mostly fromtedu2010-05-189-17/+270
| | | | | | | | | | | | | | | | | | | | brad and millert, with hints from guenther, jmc, and otto I think. ok previous.
* | | | Do not return success when the IPv6 address has a :: and 8 hex sections.claudio2010-05-061-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | ::1:2:3:4:5:6:7:8 for example. PR 6277, fix by Jun KAWAI (kwj at vlax net) OK henning, gilles, jsing (who also reminded me to remove the now wrong comment about superfluous ::)
* | | | When running in pic mode we don't have enough general registers for alljsg2010-05-032-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the xcrypt inputs, hence the dance which is done to make this work. The constraint for the key however was "mr" which is both from memory and from a general register, it seems gcc3 went with the former and gcc4 went with the later in the pic case, so change the constraint for the key to just "m" which gives us more efficient code that both gcc3 and gcc4 are happy with. ok kettenis@
* | | | The openssl command line tool treats the non-null terminated bufferderaadt2010-04-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | "mbuf" as a C string when using the pop3 s_client feature. This causes a segmentation fault with malloc.conf option "J" set when BIO_printf() runs off the end of the buffer. The following patch fixes PR 6282 from Matthew Haub (asked to submit upstream), ok djm
* | | | Security fix for CVE-2010-0740jasper2010-04-142-6/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "In TLS connections, certain incorrectly formatted records can cause an OpenSSL client or server to crash due to a read attempt at NULL." http://openssl.org/news/secadv_20100324.txt ok deraadt@ djm@ sthen@
* | | | - nuke some unneeded Pp; from kristapsjmc2010-04-071-6/+3
| | | | | | | | | | | | | | | | - small tweak while here
* | | | Build all manual pages in base with mandoc(1) instead of groff,schwarze2010-04-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | excepting the tbl(1) pages, which are less than twenty. "commit the diff that enables it, now" deraadt@
* | | | WARNINGS -> CAVEATS, and a little neccessary cleanup;jmc2010-04-012-24/+24
| | | |
* | | | Modify example not to use an assignment in the if statement. We shouldn'tkettenis2010-03-241-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | teach people bad habits! ok krw@, jmc@, dlg@, thib@
* | | | It's unsetenv() that doesn't like `=' in the argument, not putenv().kili2010-03-101-3/+3
| | | | | | | | | | | | | | | | ok millert@
* | | | cherrypick patch from OpenSSL 0.9.8m:djm2010-03-047-14/+20
| | | | | | | | | | | | | | | | | | | | *) Always check bn_wexpend() return values for failure. (CVE-2009-3245) [Martin Olsson, Neel Mehta]
* | | | Use size_t in appropriate places; fixes sorting of big arrays;otto2010-02-081-9/+10
| | | | | | | | | | | | | | | | | | | | after the diff was written, I made it similar to the freebsd fix of the same code; pr6287 ok millert@ guenther@
* | | | use size_t to index arrays; avoids big array bugs; ok millert@ guenther@otto2010-02-081-1/+1
| | | |
* | | | Use MACHINE_CPU instead of MACHINE_ARCH to pick the correct machine dependentmiod2010-02-035-23/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | files or directories when applicable. The inspiration and name of MACHINE_CPU come from NetBSD, although the way to provide it to Makefiles is completely different. ok kettenis@
* | | | add a fix from OpenSSL CVS for SA38200.jasper2010-01-312-20/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "Modify compression code so it avoids using ex_data free functions. This stops applications that call CRYPTO_free_all_ex_data() prematurely leaking memory." looks ok to markus@
* | | | stucture -> structure;jmc2010-01-251-3/+3
| | | |
* | | | New options 'S', as a shorthand for the options most suitable as anotto2010-01-132-3/+9
| | | | | | | | | | | | | | | | extra safeguard (FGJ). Idea from deraadt@; ok deraadt@ dlg@
* | | | new ipsca root.dlg2009-12-311-0/+108
| | | |
* | | | ipsca has expireddlg2009-12-311-51/+0
| | | |
* | | | replace a few remaining UNIX terms with .Ux macros; this diffsobrado2009-12-291-4/+4
| | | | | | | | | | | | | | | | completes the changes from Oct 22.
* | | | save calls to arc4random() by using a nibble at a time; not becauseotto2009-12-161-24/+27
| | | | | | | | | | | | | | | | | | | | arc4random() is slow, but it induces getpid() calls; also saves a bit on stirring efforts
* | | | No point in refreshing the pid from inside arc4_stir() when thatguenther2009-12-151-6/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | doesn't test it, so factor out the two places that test it into a routine and do the refreshing there. With this, arch4random_buf() doesn't trigger superfluous calls to getpid() when filling large buffers. ok deraadt@, "looks nicer indeed" otto@
* | | | plug a memory leak; found by parfait, ok djmderaadt2009-12-111-0/+2
| | | |
* | | | Make userland malloc use __LDPGSZ granularity on mips, regardless of themiod2009-12-071-1/+3
| | | | | | | | | | | | | | | | actual kernel page size.
* | | | missing word;jmc2009-12-051-3/+3
| | | | | | | | | | | | | | | | from trhodes@freebsd, r200095;
* | | | Switch the chunk_info lists to doubly-linked lists and use the queueotto2009-11-271-51/+34
| | | | | | | | | | | | | | | | | | | | | | | | macros for them. Avoids walking the lists and greatly enhances speed of freeing chunks in reverse or random order at the cost of a little space. Suggested by Fabien Romano and Jonathan Armani; ok djm@
* | | | Don't forget to fill region from the cache with junk if needed in one case;otto2009-11-271-1/+3
| | | | | | | | | | | | | | | | from Fabien Romano and Jonathan Armani
* | | | No need to clear a mmapped region; from Fabien Romano and Jonathanotto2009-11-271-2/+1
| | | | | | | | | | | | | | | | Armani
* | | | More shrinkage, a bit for ramdisks but mostly for static binaries:guenther2009-11-185-392/+445
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - wrap with #ifndef NO_LOG_BAD_DNS_RESPONSES libc code that uses p_class() and p_type() for diagnostics, then add that define to libstub to avoid pulling in res_debug_syms.o - split rcmd() and ruserok() into separate files, as nothing uses both - split readdir_r() to its own file - split syslog_r() from syslog(), as the latter needs localtime(); many binaries no longer need to pull in all the time code after this; switch from usleep() to nanosleep() while we're at it (The profit of analysis of -Wl,-M,--cref output) Chops 888kB from /bin and /sbin on i386 ok deraadt@, miod@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-28 14:17:07 +0000