| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
| |
The index() and rindex() functions were marked LEGACY in the 2001
revision of POSIX and were subsequently removed from the 2008 revision.
The strchr() and strrchr() functions are part of the C standard.
This makes the source code a lot more consistent, as most of these C
files also call into other str*() routines. In fact, about a dozen
already perform strchr() calls.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add an API for alerting internal libc routines to the presence of
"unsafe" paths post-chroot, and use it in ftpd. [11:07]
Fix a buffer overflow in telnetd. [11:08]
Make pam_ssh ignore unpassphrased keys unless the "nullok" option is
specified. [11:09]
Add sanity checking of service names in pam_start. [11:10]
Approved by: so (cperciva)
Approved by: re (bz)
Security: FreeBSD-SA-11:06.bind
Security: FreeBSD-SA-11:07.chroot
Security: FreeBSD-SA-11:08.telnetd
Security: FreeBSD-SA-11:09.pam_ssh
Security: FreeBSD-SA-11:10.pam
|
|
|
|
| |
MFC after: 3 months.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
from scratch, copying needed functionality from the old implemenation
on demand, with a thorough review of all code. The main change is that
interface layer has been removed from the CARP. Now redundant addresses
are configured exactly on the interfaces, they run on.
The CARP configuration itself is, as before, configured and read via
SIOCSVH/SIOCGVH ioctls. A new prefix created with SIOCAIFADDR or
SIOCAIFADDR_IN6 may now be configured to a particular virtual host id,
which makes the prefix redundant.
ifconfig(8) semantics has been changed too: now one doesn't need
to clone carpXX interface, he/she should directly configure a vhid
on a Ethernet interface.
To supply vhid data from the kernel to an application the getifaddrs(8)
function had been changed to pass ifam_data with each address. [1]
The new implementation definitely closes all PRs related to carp(4)
being an interface, and may close several others. It also allows
to run a single redundant IP per interface.
Big thanks to Bjoern Zeeb for his help with inet6 part of patch, for
idea on using ifam_data and for several rounds of reviewing!
PR: kern/117000, kern/126945, kern/126714, kern/120130, kern/117448
Reviewed by: bz
Submitted by: bz [1]
|
|
|
|
| |
MFC after: 3 days.
|
|
|
|
|
|
|
| |
Retire the the now unused sctp_udp_tunneling_for_client_enable
sysctl variable.
MFC after: 3 months.
|
| |
|
|
|
|
|
|
| |
PR: docs/159341
Submitted by: Garrett Cooper
Approved by: re (kib)
|
|
|
|
|
|
|
|
|
|
|
| |
* Decouple the path supervision using a separate HB timer per path.
* Add support for potentially failed state.
* Bring back RTO.min to 1 second.
* Accept packets on IP-addresses already announced via an ASCONF
* While there: do some cleanups.
Approved by: re@
MFC after: 2 months.
|
|
|
|
|
| |
This makes sctp_opt_info() compiliant with the latest version
of the socket API ID.
|
|
|
|
|
|
| |
This only applies to 9.0 and higher, since the type
of the values has changed since we introduced it.
So it can't be MFCed.
|
|
|
|
| |
MFC after: 1 month.
|
|
|
|
| |
MFC after: 1 month.
|
|
|
|
|
|
|
| |
* Add support for SCTP_SENDV_NOINFO.
* Improve the error handling of sctp_sendv() and sctp_recv().
MFC after: 1 month
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In particular add support for:
* SCTP_SNDINFO, SCTP_PRINFO, SCTP_AUTHINFO, SCTP_DSTADDRV4, and
SCTP_DSTADDRV6 cmsgs.
* SCTP_NXTINFO and SCTP_RCVINFO cmgs.
* SCTP_EVENT, SCTP_RECVRCVINFO, SCTP_RECVNXTINFO and SCTP_DEFAULT_SNDINFO
socket option.
* Special association ids (SCTP_FUTURE_ASSOC, ...)
* sctp_recvv() and sctp_sendv() functions.
MFC after: 1 month.
|
|
|
|
|
|
|
| |
* Cleanup usage of iov's.
* Add support for SCTP_TIMEOUTS socketoption.
* Fix a bug in sctp_recvmsg(): return the msg_flags in case of an error.
* Fix a bug in the error handling of sctp_peeloff(): return the -1.
|
|
|
|
|
|
| |
Submitted by: henning petersen <henning.petersen t-online de>
PR: 153756
MFC after: 1 week
|
|
|
|
|
|
|
| |
* When calling syslog(), pass a format string.
* Define YY_NO_INPUT on nslexer.l
Submitted by: Norberto Lopes <nlopes.ml at gmail.com>
|
|
|
|
| |
They have no effect when coming in pairs, or before .Bl/.Bd
|
|
|
|
|
|
|
| |
return zero.
Spotted by: Kostik Belousov <kostikbel__at__gmail.com>
MFC after: 2 weeks
|
|
|
|
|
| |
Spotted by: Kostik Belousov <kostikbel__at__gmail.com>
MFC after: 2 weeks
|
|
|
|
| |
Approved by: rrs (mentor)
|
|
|
|
| |
Approved by: rrs (mentor)
|
|
|
|
|
|
| |
translating these manual pages. Minor corrections by me.
Submitted by: Nobuyuki Koganemaru <n-kogane@syd.odn.ne.jp>
|
|
|
|
|
|
|
| |
with h_errno.
Obtained from: NetBSD
MFC after: 2 weeks
|
|
|
|
|
|
|
|
|
|
| |
have to return ERANGE and terminate with NS_RETURN.
- When gethostbyname_r(3) and the friends end with an error,
set errno to the value nss backend returns, and return errno
value.
PR: kern/131623
MFC after: 2 weeks
|
| |
|
| |
|
|
|
|
|
|
|
| |
sinfo we will crash. Instead we should provide
our own temp structure to use internally.
MFC after: 1 month
|
|
|
|
|
|
|
| |
address ever gets checked.
Approved by: rrs (mentor)
MFC after: 1 month
|
|
|
|
| |
Approved by: rrs (mentor)
|
|
|
|
|
| |
Approved by: rrs (mentor)
MFC after: 1 month
|
| |
|
|
|
|
|
|
| |
specifying `db' as source of service in /etc/nsswitch.conf.
MFC after: 2 weeks
|
|
|
|
| |
MFC after: 2 weeks
|
|
|
|
|
|
| |
the logic bit.
MFC after: 2 weeks
|
|
|
|
|
|
| |
lines terminated with '\n'.
MFC after: 2 weeks
|
|
|
|
| |
Approved by: rrs (mentor)
|
|
|
|
|
|
| |
Add missing RETURN VALUES section in sctp_opt_info(3).
Approved by: rrs (mentor)
|
|
|
|
|
|
| |
PR: 142573, 142576 (mostly)
Submitted by: brucec
MFC after: 1 week
|
|
|
|
|
|
| |
PR: docs/140940
Submitted by: Bruce Cran <bruce@cran.org.uk>
MFC after: 1 week
|
| |
|
|
|
|
| |
MFC after: 1 week
|
|
|
|
| |
Controlled by NLS define.
|
| |
|
| |
|
|
|
|
| |
PR: kern/129477
|
|
|
|
|
| |
Reviewed by: bushman
Approved by: dfr (mentor)
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the kernel will return in msfr_nsrcs the number of source filters
in-mode for a given multicast group.
However, the filters themselves were never copied out, as the libc
function clobbers this field with zero, causing the kernel to assume
the provided vector of struct sockaddr_storage has zero length.
This bug would only affect users of SSM multicast, which is shimmed
in 7.x.
Picked up during mtest(8) refactoring.
MFC after: 1 day
|
|
|
|
|
| |
Obtained from: KAME
MFC after: 2 weeks
|