CVSROOT: /cvs
Module name: src
Changes by: jsing@cvs.openbsd.org 2014/07/25 08:04:51

Modified files:
lib/libssl/src/crypto/chacha: chacha.h
lib/libssl/src/crypto/poly1305: poly1305.h

Log message:
Add missing year to copyright.

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 09:47:11

Modified files:
usr.sbin/httpd : httpd.conf.5 parse.y

Log message:
Add and document 'root' configuration option for the docroot.

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 10:06:19

Modified files:
usr.bin/mandoc : cgi.c

Log message:
Rewrite http_parse() completely:
1. Make sure the last occurrence of each key is used, even if
it is empty, in which case it resets the value to the default.
2. When there is an HTTP encoding error, skip the affected
key-value pair only, but not all subsequent key-value pairs.
3. Do not modify a string returned from getenv(3).
4. Do not assume the NULL pointer is all null bits.

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 10:23:19

Modified files:
usr.sbin/httpd : config.c httpd.c httpd.h parse.y server.c
server_http.c

Log message:
Add support for "virtual hosts" aka. server blocks aka. multiple
servers with the same or "overlapping" IP address but a different name.

ok beck@

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 10:43:05

Modified files:
usr.bin/mandoc : cgi.c

Log message:
clean up pg_show() to not modify a string returned from getenv(3)

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 10:55:40

Modified files:
usr.bin/mandoc : cgi.c

Log message:
The names of all other struct query memebers match the corresponding
QUERY_STRING keys, so rename "expr" to "query".
Also add some missing function prototypes.
No functional change.

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 11:04:47

Modified files:
usr.sbin/httpd : parse.y

Log message:
Add a single line to fix the address matching of multiple server blocks with
non-virtual hosts. I had this line in a previous diff.

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 11:33:51

Modified files:
usr.bin/mandoc : cgi.c

Log message:
Even though this is not XHTML yet, remove some gratuitious violations
of XHTML syntax. Also add some cosmetic newlines to the HTML code.

CVSROOT: /cvs
Module name: src
Changes by: jasper@cvs.openbsd.org 2014/07/25 11:36:32

Modified files:
distrib/sets/lists/base: md.octeon

Log message:
fix perl5 architecture name

ok deraadt@

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 11:49:11

Modified files:
usr.sbin/httpd : httpd.conf.5

Log message:
Add multiple-servers "virtual hosts" example.

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 11:51:33

Modified files:
usr.bin/mandoc : cgi.c

Log message:
In generated .Xr links, avoid double encoding of ampersands
and avoid empty arch= keys.

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 12:19:33

Modified files:
usr.bin/mandoc : cgi.c

Log message:
We cannot easily control the order of the QUERY_STRING keys generated
by the search form, it's just the order of the fields in the form.
Actually, that's not too bad; the generated URI resembles the
generating form.

To minimize confusion for people looking at URIs, give the keys
in the same order when generating URIs for search listings and
search redirections, the latter being used instead of search
listings that would have only one single entry. Also, if the
manpath is the default, remove it form the generated URIs.

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 13:36:02

Modified files:
usr.bin/mandoc : cgi.c

Log message:
oops, we must not try to validate a manpath we don't have;
fixing an oversight introduced in rev. 1.17

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 14:08:49

Modified files:
usr.bin/mandoc : cgi.c

Log message:
Sort the URI keys for .Xr links in the same order used by the search form,
and leave out the manpath when it is the default.
For building the HTML formatter options, do not use a static buffer.

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 14:13:06

Modified files:
usr.sbin/httpd : server_file.c

Log message:
Don't leak docroot in the error message if the default index file is missing.

OK florian@

CVSROOT: /cvs
Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/25 15:05:38

Modified files:
usr.bin/mandoc : cgi.c

Log message:
Choosing the right encoding is a tricky business...

Printing query strings for URIs *always* needs URI-encoding, and when
embedding the URI into an HTML document, it needs replacement of
the "&" separators by "&" *in addition to that*, not instead.
Delete the function html_primtquery(), it was completely wrong.

You can see the badness by entering "mandoc &sec=2" into the query input
box before this patch and click "Submit". You come to the right page at
first (...man.cgi?query=mandoc+%26sec%3D2&apropos=0&sec=0&...), but now
the link to mandoc(1) is wrong: ...mandoc.1?query=mandoc &sec=2&...
Clicking on that, the "&sec=2" disappears from the query input box and
suddenly you have the first dropdown set to "2 - System Calls". Oops.

CVSROOT: /cvs
Module name: src
Changes by: dtucker@cvs.openbsd.org 2014/07/25 15:22:03

Modified files:
usr.bin/ssh : ssh-agent.c

Log message:
Clear buffer used for handling messages. This prevents keys being
left in memory after they have been expired or deleted in some cases
(but note that ssh-agent is setgid so you would still need root to
access them). Pointed out by Kevin Burns, ok deraadt

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 15:29:58

Modified files:
usr.sbin/httpd : httpd.c httpd.h server_file.c server_http.c

Log message:
Canonicalize the request path once without the docroot and prepend the
docroot only only when it's needed. Suggested by deraadt@.

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 15:36:37

Modified files:
usr.sbin/httpd : server_http.c

Log message:
New HTTP/1.1 RFC 7231 prefers IMF-fixdate from RFC 5322.

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 15:48:05

Modified files:
usr.sbin/httpd : server_http.c

Log message:
Append mandatory Date header to each response.

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 17:23:39

Modified files:
usr.sbin/httpd : http.h httpd.h server.c server_file.c
server_http.c

Log message:
It is recommended to use a URL in the Location header of 3xx
responses. To accomplish this, add some semantics to retrieve the
server host name of a connection: either IP, IP:PORT (if not 80) or
[IP6]:PORT, or Host value (if valid).

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 17:25:38

Modified files:
usr.sbin/httpd : server_http.c

Log message:
Reset the default Host for each request

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/25 17:30:58

Modified files:
usr.sbin/httpd : config.c httpd.h server.c

Log message:
Differentiate servers by address and port, not just by address.

CVSROOT: /cvs
Module name: src
Changes by: tobias@cvs.openbsd.org 2014/07/26 01:48:49

Modified files:
usr.sbin/dhcpd : packet.c

Log message:
Fix very hard to reach DoS attack vector, which would involve more than
8 billion network packets. Mixture of many many malformed and proper
packets could result in a division by zero.

ok krw@

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/26 03:59:15

Modified files:
usr.sbin/httpd : httpd.c

Log message:
bzero is over, memset is cool. pointed out by halex@

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/26 04:27:19

Modified files:
etc/examples : httpd.conf

Log message:
Add more examples. Requested by deraadt@

CVSROOT: /cvs
Module name: src
Changes by: mpi@cvs.openbsd.org 2014/07/26 04:48:59

Modified files:
usr.sbin/apmd : apmd.c

Log message:
Revert "adjust -C algorithm to be more aggressive in scaling up" for
the moment, it triggers a race that breaks suspend/resume on some
machines.

ok tedu@, deraadt@, jsg@

CVSROOT: /cvs
Module name: src
Changes by: kettenis@cvs.openbsd.org 2014/07/26 10:07:39

Modified files:
sys/kern : kern_sched.c

Log message:
If we're stopping a secondary cpu, don't let sched_choosecpu() short-circuit
and return the current current CPU, otherwise sched_stop_secondary_cpus()
will spin forever trying to empty its run queues. Fixes hangs during suspend
that many people reported over the last couple of days.

ok bcook@, guenther@

CVSROOT: /cvs
Module name: www
Changes by: beck@cvs.openbsd.org 2014/07/26 12:25:42

Modified files:
libressl : index.html

Log message:
Nuke blink, add statement about OS provided intrinsics

CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/26 16:38:38

Modified files:
usr.sbin/httpd : server_file.c

Log message:
Remove redundant slash

Module name: www
Changes by: kili@cvs.openbsd.org 2014/07/27 04:54:07

Modified files:
faq : current.html

Log message:
Note about apache-httpd* rc script renaming.

ok sthen@

Module name: www
Changes by: schwarze@cvs.openbsd.org 2014/07/27 05:19:30

Modified files:
faq/ports : guide.html

Log message:
minor wording improvements for "make plist"
from edward at rdtan dot net, tweaked by me

Module name: www
Changes by: schwarze@cvs.openbsd.org 2014/07/27 05:40:41

Modified files:
faq/ports : guide.html

Log message:
When discussing the PLIST, mention that pkg_create(1) explains packing
list annotations; from edward at rdtan dot net, tweaked by me

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/27 15:51:53

Modified files:
usr.bin/mandoc : term_ascii.c

Log message:
Even for UTF-8 output, a non-breaking space character has the same width
as a normal space character, and not width 0. Bug reported by bentley@.

</pre>
</pre><br><center>
<a href="?q=configure">Configure</a> |

<a href="?q=about">About</a> |
<a href="?q=news">News</a> |
<a href="mailto:webguy@marc.info?subject=Add%20a%20list%20to%20MARC">Add&nbsp;a&nbsp;list</a> |
Sponsored&nbsp;by&nbsp;<a href="http://www.korelogic.com/">KoreLogic</a>
</center>
</body>
</html>

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/27 15:53:04

Modified files:
usr.bin/mandoc : term_ps.c

Log message:
code readability; no functional change

Module name: src
Changes by: espie@cvs.openbsd.org 2014/07/27 16:17:33

Modified files:
usr.sbin/pkg_add/OpenBSD: Log.pm

Log message:
ensure log stuff happens, even without context

Module name: src
Changes by: espie@cvs.openbsd.org 2014/07/27 16:18:36

Modified files:
usr.sbin/pkg_add/OpenBSD: PkgCheck.pm

Log message:
- log libraries in a proper way
- mark wanted libraries, then run the db check.
Gives you a way to figure out when locate db are behind wrt pkgs

Module name: src
Changes by: espie@cvs.openbsd.org 2014/07/27 16:19:18

Modified files:
usr.sbin/pkg_add/OpenBSD: State.pm

Log message:
make sure makewhatis shows error messages without unsightly CODE() refs

Module name: src
Changes by: guenther@cvs.openbsd.org 2014/07/27 17:46:51

Modified files:
usr.sbin/openssl: Makefile

Log message:
Link dependencies on libssl and libcrypto were missing.
OPENSSL_NO_RC5 is #defined in the #includes, so it's not needed here.

ok deraadt@

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/07/27 17:52:06

Modified files:
usr.sbin/httpd : Makefile

Log message:
turn of -Werror, unless you are sure both gcc work...

</pre>
</pre><br><center>
<a href="?q=configure">Configure</a> |

<a href="?q=about">About</a> |
<a href="?q=news">News</a> |
<a href="mailto:webguy@marc.info?subject=Add%20a%20list%20to%20MARC">Add&nbsp;a&nbsp;list</a> |
Sponsored&nbsp;by&nbsp;<a href="http://www.korelogic.com/">KoreLogic</a>
</center>
</body>
</html>

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/07/27 17:52:06

Modified files:
usr.sbin/httpd : Makefile

Log message:
turn of -Werror, unless you are sure both gcc work...

Module name: src
Changes by: bcook@cvs.openbsd.org 2014/07/27 22:17:07

Modified files:
regress/lib/libc/arc4random-fork: arc4random-fork.c

Log message:
remove non-portable __progname extern from arc4random unit test.

ok @deraadt

Module name: src
Changes by: guenther@cvs.openbsd.org 2014/07/27 22:23:12

Modified files:
lib/libssl/src/ssl: d1_srvr.c s3_srvr.c ssl_locl.h

Log message:
The RSA, DH, and ECDH temporary key callbacks expect the number of keybits
for the key (expressed in RSA key bits, which makes *no sense* for ECDH) as
their second argument, not zero.

(jsing@ notes that the RSA callback is only invoked for 'export' ciphers,
which have been removed from LibreSSL, and for the SSL_OP_EPHEMERAL_RSA
option, which is makes the application non-compliant. More fuel for the
tedu fire...)

jasper@ noted the breakage and bisected it down to the diff that broke this
ok jsing@ miod@

Module name: src
Changes by: guenther@cvs.openbsd.org 2014/07/27 22:28:43

Modified files:
libexec/ld.so/alpha: ldasm.S

Log message:
_dl_sigprocmask() works better when it actually saves the returned sigmask

asm suggestion from kettenis@
tested by miod@, suffering under the brain-destroying summer heat

Module name: src
Changes by: rpe@cvs.openbsd.org 2014/07/27 23:42:26

Modified files:
distrib/miniroot: install.sub

Log message:
Change detection of unconfigured vlan interfaces from using flags to
looking for vlan id and parent interface. This avoids the creation of
unconfigured vlan interface every time /install is restarted.

Noted by and OK miod@
OK krw@
Positive feedback sthen@ claudio@

Module name: src
Changes by: kettenis@cvs.openbsd.org 2014/07/28 00:21:29

Modified files:
sys/arch/sparc64/dev: machfb.c

Log message:
Hardware supported by machfb(4) needs the aperture (for now) so make ramdisks
print a message to that extent such that the install scripts can do their
magic.

ok miod@, deraadt@

Module name: src
Changes by: kettenis@cvs.openbsd.org 2014/07/28 08:12:14

Modified files:
distrib/miniroot: install.sub

Log message:
Avoid matching a particular driver for "aperture needed" detection.
On sparc64 we also need to match machfb(4) in addition to vgafb(4) so let's
just match any driver.

ok halex@, deraadt@

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/07/28 09:00:27

Modified files:
sys/dev/pci : vga_pci.c vga_pci_common.c
sys/arch/macppc/pci: vgafb.c
sys/arch/sparc64/dev: machfb.c vgafb.c

Log message:
Limit the "aperture needed" printf to ramdisks via RAMDISK_HOOKS.
Originally with SMALL_KERNEL until sebastia@ pointed out that not
all ramdisks are built with SMALL_KERNEL.
ok deraadt@ kettenis@

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/07/28 09:40:08

Modified files:
usr.bin/ssh : sftp-server.8 sshd_config.5

Log message:
some systems no longer need /dev/log;
issue noticed by jirib;
ok deraadt

Module name: src
Changes by: tobias@cvs.openbsd.org 2014/07/28 10:40:32

Modified files:
sbin/dhclient : packet.c
usr.sbin/dhcrelay: packet.c

Log message:
merge dhcpd's packet.c revision 1.7:

Fix very hard to reach DoS attack vector, which would involve more than
8 billion network packets. Mixture of many many malformed and proper
packets could result in a division by zero.

ok krw@