Module name: src
Changes by: tobias@cvs.openbsd.org 2014/07/28 10:45:35

Modified files:
sbin/dhclient : options.c
usr.sbin/dhcpd : options.c

Log message:
Fix memory exhaustion occurring on DHCP options with 0 length.

halex@ and krw@ pointed out that a NULL check before free can go, too.

ok deraadt@, halex@, krw@

Module name: www
Changes by: tobias@cvs.openbsd.org 2014/07/28 10:48:23

Modified files:
. : errata54.html errata55.html security.html

Log message:
fix dates of last two security fixes.

ok deraadt@

Module name: src
Changes by: tedu@cvs.openbsd.org 2014/07/28 11:57:18

Modified files:
lib/libcrypto/crypto: Makefile
lib/libssl/src/apps: progs.h
Removed files:
lib/libssl/src/crypto/srp: srp.h srp_grps.h srp_lcl.h srp_lib.c
srp_vfy.c

Log message:
Remove SRP code. It contains a bug (this should not surprise anyone), but
the details are under embargo. The original plan was to wait for the
embargo to lift, but we've been waiting for quite some time, and there's no
indication of when or even if it will end. No sense in dragging this out
any longer.

The SRP code has never been enabled in OpenBSD, though I understand it is
in use by some other people. However, in light of this and other issues,
we're officially saying SRP is outside the scope of libressl. (For now.)

Module name: src
Changes by: miod@cvs.openbsd.org 2014/07/28 12:31:39

Modified files:
sys/arch/sparc/dev: dma.c dmavar.h if_le.c

Log message:
On SPARCbook systems, the ledma device node has a `cable-selection' property
specifying which media the on-board interface uses. We already query it to
set up proper register values; extend this to be able to pass a default
media to the le(4) child.

This makes SPARCbook system default to AUI without needing for a manual media
change.

tested by sebastia@

Module name: src
Changes by: bluhm@cvs.openbsd.org 2014/07/28 14:30:01

Modified files:
sys/kern : subr_log.c

Log message:
I/O ktrace of sendsyslog(2) did not work. As uiomove() adjusts
iov_len to 0, we need a propper length calculation. While there,
use -1 for the file descriptor because 0 is reserved for stdin.
OK deraadt@ guenther@

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/07/28 14:35:32

Modified files:
distrib/sets/lists/base: md.alpha md.amd64 md.armish md.armv7
md.aviion md.hppa md.hppa64 md.i386
md.landisk md.loongson md.luna88k
md.macppc md.octeon md.sgi md.socppc
md.sparc md.sparc64 md.vax md.zaurus
distrib/sets/lists/comp: mi

Log message:
sync

Module name: src
Changes by: krw@cvs.openbsd.org 2014/07/28 16:18:31

Modified files:
usr.sbin/smtpd : enqueue.c

Log message:
Last (known) msgbuf_write() vs EOF fix.

ok gilles@ deraadt@

Module name: src
Changes by: miod@cvs.openbsd.org 2014/07/28 20:57:09

Modified files:
distrib/notes/alpha: contents
distrib/notes/amd64: contents
distrib/notes/aviion: contents
distrib/notes/hppa: contents
distrib/notes/i386: contents
distrib/notes/loongson: contents
distrib/notes/macppc: contents
distrib/notes/octeon: contents
distrib/notes/sgi: contents
distrib/notes/socppc: contents
distrib/notes/sparc: contents
distrib/notes/sparc64: contents
distrib/notes/vax: contents
distrib/notes/zaurus: contents

Log message:
update sets sizes

Module name: src
Changes by: blambert@cvs.openbsd.org 2014/07/29 02:51:49

Modified files:
lib/libssl/src/apps: ca.c

Log message:
Fix a usage string; the proper spelling of 'alot' is 'a lot'.

ok bcook@

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/29 06:16:36

Modified files:
usr.sbin/httpd : httpd.h server.c

Log message:
Move configurable TCP options into struct server_config.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/07/29 06:18:41

Modified files:
sys/net : route.c route.h rtsock.c

Log message:
Revert the checks about RTF_LOCAL routes.

Even if in the end we would like to be more strict about what userland
can do with kernel-managed route entries, most of the tools out there
are not yet ready for this. Since RTF_LOCAL routes are for the moment
just like RTF_LLINFO routes without expire timer, allow userland tools
to remove/modify them. In case they are missing, the good old cloning
mechanism will recreate what you need.

bluhm@ and deraadt@ agree.

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/07/29 06:56:41

Modified files:
sys/conf : newvers.sh

Log message:
move to -release mode

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/07/29 06:57:08

Modified files:
sys/conf : GENERIC

Log message:
disable POOL_DEBUG for release

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/29 10:17:28

Modified files:
etc/examples : httpd.conf
usr.sbin/httpd : httpd.conf.5 httpd.h parse.y server_file.c

Log message:
Add extended directory index options: "[no] index" and "[no] auto index".
The option "directory auto index" implements basic directory listing
and is turned off by default.

ok deraadt@

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/29 10:38:34

Modified files:
usr.sbin/httpd : server.c

Log message:
The inflight decremented message should only be printed with DEBUG.

Module name: src
Changes by: tobias@cvs.openbsd.org 2014/07/29 12:21:30

Modified files:
sbin/dhclient : Tag: OPENBSD_5_5 options.c
usr.sbin/dhcpd : Tag: OPENBSD_5_5 options.c

Log message:
Fix memory exhaustion occurring on DHCP options with 0 length.

halex@ and krw@ pointed out that a NULL check before free can go, too.

ok deraadt@, halex@, krw@, jasper@

Module name: src
Changes by: tobias@cvs.openbsd.org 2014/07/29 12:23:07

Modified files:
sbin/dhclient : Tag: OPENBSD_5_4 options.c
usr.sbin/dhcpd : Tag: OPENBSD_5_4 options.c

Log message:
Fix memory exhaustion occurring on DHCP options with 0 length.

halex@ and krw@ pointed out that a NULL check before free can go, too.

ok deraadt@, halex@, krw@, jasper@

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/30 01:09:38

Modified files:
usr.sbin/httpd : server_file.c

Log message:
Reserve an extra file descriptor per connection instead of per
request. This fixes fd accounting with persistent connections and
reduces the complexity of the implementation.

ok benno@

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/30 03:51:40

Modified files:
usr.sbin/httpd : httpd.conf.5

Log message:
Small fix and clarification

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/30 04:05:14

Modified files:
etc/examples : httpd.conf
usr.sbin/httpd : config.c httpd.conf.5 httpd.h parse.y server.c
server_http.c

Log message:
Add "location" keyword to specify path-specific configuration in
servers, for example auto index for a sub-directory only. Internally,
a "location" is just a special type of a "virtual" server.

Module name: src
Changes by: espie@cvs.openbsd.org 2014/07/30 06:44:26

Modified files:
usr.sbin/pkg_add/OpenBSD: PkgAdd.pm

Log message:
prepare for post 5.6 packages, recognize special case where timestamp exist.
(specifically, this is a nop for 5.6, but it will allow changes to packages
without needing anything in pkg_add)

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/07/30 07:18:59

Modified files:
etc/rc.d : rc.subr

Log message:
Fix evil typo (multicast_hosts -> multicast_host).

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/30 07:49:48

Modified files:
usr.sbin/httpd : config.c httpd.h parse.y server.c server_http.c

Log message:
Make "location" work with name-based virtual servers.

Module name: www
Changes by: reyk@cvs.openbsd.org 2014/07/30 09:38:40

Modified files:
. : bank-donation.html

Log message:
With SEPA, there's no need to mention the legacy German bank details anymore.

ok deraadt@

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/07/30 10:29:05

src/libexec/tradcpp

Update of /cvs/src/libexec/tradcpp
In directory cvs.openbsd.org:/tmp/cvs-serv31611/tradcpp

Log Message:
Directory /cvs/src/libexec/tradcpp added to the repository

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/07/30 10:33:11

Added files:
libexec/tradcpp: Makefile array.c array.h config.h directive.c
directive.h eval.c eval.h files.c files.h
inlinedefs.h macro.c macro.h main.c mode.h
output.c output.h place.c place.h tradcpp.1
utils.c utils.h version.h

Log message:
Add tradcpp 0.4, a standalone traditional whitespace preserving cpp
by David A. Holland of NetBSD.

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/07/30 10:34:24

Modified files:
libexec : Makefile

Log message:
descend into tradcpp

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/07/30 10:46:17

Modified files:
usr.bin/calendar: pathnames.h

Log message:
switch to tradcpp

Module name: xenocara
Changes by: jsg@cvs.openbsd.org 2014/07/30 10:48:32

Modified files:
app/xrdb : Makefile.bsd-wrapper

Log message:
switch to tradcpp
fixes whitespace issues with auxcpp reported by Allan Streib

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/07/30 10:54:09

Modified files:
usr.sbin/sysmerge: sysmerge.sh

Log message:
Properly warn when an example changes and the corresponding file is found
under /etc.

issue reported by Nathanael Rensen
"fine" deraadt@

> CVSROOT: /cvs
> Module name: src
> Changes by: ajacoutot@cvs.openbsd.org 2014/07/30 10:54:09
>
> Modified files:
> usr.sbin/sysmerge: sysmerge.sh
>
> Log message:
> Properly warn when an example changes and the corresponding file is found
> under /etc.
>
> issue reported by Nathanael Rensen
> "fine" deraadt@

and ok rpe@

--
Antoine

Module name: www
Changes by: tobias@cvs.openbsd.org 2014/07/30 11:06:25

Modified files:
. : errata54.html errata55.html

Log message:
release dhcp errata

ok deraadt@

Module name: xenocara
Changes by: todd@cvs.openbsd.org 2014/07/30 11:10:27

Modified files:
app/xdm/config : OpenBSD_15bpp.xpm OpenBSD_1bpp.xpm
OpenBSD_4bpp.xpm OpenBSD_8bpp.xpm

Log message:
puffy 5.6

Module name: src
Changes by: jsg@cvs.openbsd.org 2014/07/30 11:21:50

Modified files:
libexec : Makefile

Log message:
unhook auxcpp

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/07/30 11:45:13

Modified files:
distrib/sets/lists/base: mi
distrib/sets/lists/man: mi

Log message:
sync

Module name: xenocara
Changes by: miod@cvs.openbsd.org 2014/07/30 12:27:25

Modified files:
distrib/sets/lists/xbase: mi

Log message:
tantrum sync

Module name: xenocara
Changes by: matthieu@cvs.openbsd.org 2014/07/30 13:57:08

Modified files:
. : MODULES 3RDPARTY

Log message:
update

Module name: xenocara
Changes by: matthieu@cvs.openbsd.org 2014/07/30 14:06:30

Modified files:
distrib/notes : README.amd64 README.i386 README.loongson
README.luna88k README.sgi README.sparc
README.sparc64

Log message:
Various updates for 5.6:
- remove the discussion about aperture driver on i386/amd64; it is
handled by the installer
- change references to rc.conf to rc.conf.local(8)

Module name: www
Changes by: sthen@cvs.openbsd.org 2014/07/30 15:57:19

Modified files:
faq/pf : authpf.html nat.html pools.html rdr.html
shortcuts.html tables.html

Log message:
Switch example addresses to the prefixes reserved for documentation in rfc5737.
From Sevan Janiyan, nick@ ok

Module name: src
Changes by: florian@cvs.openbsd.org 2014/07/31 03:23:53

Modified files:
usr.sbin/httpd : Makefile httpd.h server_http.c
Added files:
usr.sbin/httpd : server_fcgi.c

Log message:
Put in first stab at fastcgi. Very early work in progress. Putting it
in now so that we can quickly work on it in tree. Requested by reyk@.
deraadt@ is OK with this according to reyk@.

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/31 03:34:57

Modified files:
usr.sbin/httpd : config.c httpd.conf.5 httpd.h parse.y
server_http.c

Log message:
Add a configuration variable "fastcgi" to enable it per server or location.

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/31 07:28:15

Modified files:
usr.sbin/httpd : config.c httpd.h parse.y server_file.c

Log message:
Rename the "docroot" variable to "path" because it will be used for
either files or the fastcgi socket (and there's no need to use a union yet).

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/31 08:18:38

Modified files:
usr.sbin/httpd : config.c httpd.conf.5 httpd.h parse.y
server_fcgi.c

Log message:
Allow to specify a non-default fastcgi socket.

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/31 08:25:14

Modified files:
usr.sbin/httpd : httpd.h server.c server_fcgi.c server_file.c

Log message:
One bufferevent can be shared by file and fcgi.

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/07/31 08:57:41

Modified files:
etc/rc.d : rc.subr

Log message:
In debug mode, properly sort and drop duplicates so that we don't end
up with a confusing output like:
multicast_host >NO<
<...>
multicast_host >YES<

Also properly evaluate values _after_ running _rc_quirks() because these
can modify flags.

ok robert@ halex@

Module name: src
Changes by: pelikan@cvs.openbsd.org 2014/07/31 11:37:52

Modified files:
sys/ufs/ext2fs : ext2fs_bswap.c ext2fs_dinode.h ext2fs_inode.c
ext2fs_vfsops.c

Log message:
use proper on-disk inode size: no more, no less.

Reported by Roman Yakovlev, thanks!

"do it now" deraadt

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/31 11:55:09

Modified files:
usr.sbin/httpd : httpd.h server_fcgi.c server_file.c
server_http.c

Log message:
some fastcgi improvements:
- DPRINTF instead of log_info for internal debugging.
- submit QUERY_STRING, if it exists
- use a proper function to create an HTTP header.
- use server_file_error() to detect EOF and fastcgi stream errors.
- disable keep-alive/persist for now until we have a reliable way to
get the content length from the cgi response or support chunked
encoding.

"Cool, jep" florian@

Module name: src
Changes by: reyk@cvs.openbsd.org 2014/07/31 12:07:11

Modified files:
usr.sbin/httpd : httpd.h server_fcgi.c server_http.c

Log message:
Only write the HTTP header for the first fastcgi chunk.

Module name: src
Changes by: jasper@cvs.openbsd.org 2014/07/31 12:14:46

Modified files:
sys/dev/ic : aac.c

Log message:
unbreak aac(4) by re-adding uvm_extern.h for ptoa()

ok deraadt@ sthen@

Module name: src
Changes by: pelikan@cvs.openbsd.org 2014/07/31 13:11:39

Modified files:
sys/ufs/ext2fs : ext2fs_vfsops.c

Log message:
always use the little-endian copy of a superblock.

Damn those memcpy-wrapping macros!

"do it" deraadt