Module name: src
Changes by: espie@cvs.openbsd.org 2014/08/10 04:01:03

Modified files:
usr.sbin/pkg_add/OpenBSD: ArcCheck.pm Ustar.pm

Log message:
if pkg_create is run as non-root, restory correct group/owner to root/bin.

also, remove write permissions without explicit modes. Allows fake installs
to keep directories/files writable while producing correct package.

Module name: src
Changes by: espie@cvs.openbsd.org 2014/08/10 04:03:46

Modified files:
usr.sbin/pkg_add/OpenBSD: Ustar.pm

Log message:
Ouch... fuck cvs

Module name: src
Changes by: espie@cvs.openbsd.org 2014/08/10 04:04:39

Modified files:
usr.sbin/pkg_add/OpenBSD: Ustar.pm

Log message:
comment what's going on

Module name: src
Changes by: espie@cvs.openbsd.org 2014/08/10 04:10:21

Modified files:
share/man/man5 : bsd.port.mk.5

Log message:
Document SUBST_*

Module name: src
Changes by: ratchov@cvs.openbsd.org 2014/08/10 04:25:04

Modified files:
usr.bin/aucat : wav.c

Log message:
initialize mmcpos, found by guenther

Module name: src
Changes by: ratchov@cvs.openbsd.org 2014/08/10 04:25:35

Modified files:
usr.bin/aucat : dev.c

Log message:
typo in debug message

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/10 05:00:36

Modified files:
sys/dev/usb : ehci.c ohci.c uhci.c usbdi.c xhci.c

Log message:
Set and check for XFER_BUSY in the common methods instead of doing it
in every HC driver.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/10 05:18:57

Modified files:
sys/dev/usb : ehci.c ohci.c uhci.c usb.c usbdi.h usbf_subr.c
xhci.c

Log message:
Since USB xfer pools are accessed in interrupt context, initialize them
with the correct ipl to prevent your CPU from locking against itself.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/10 05:21:49

Modified files:
sys/dev/usb : xhci.c

Log message:
Merge xhci_device_setup() into xhci_pipe_init() there's no reason to
have a separate function anymore, it is just a wrapper around the "set
address" command.

Module name: src
Changes by: jmc@cvs.openbsd.org 2014/08/10 05:23:02

Modified files:
share/man/man5 : bsd.port.mk.5

Log message:
some Ev fixes;

Module name: src
Changes by: jasper@cvs.openbsd.org 2014/08/10 05:26:07

Modified files:
usr.sbin/pkg_add: package.5

Log message:
zap trailing whitespace

Module name: src
Changes by: sf@cvs.openbsd.org 2014/08/10 06:28:09

Modified files:
share/man/man4 : vio.4

Log message:
Note that qemu 1.7.2 has the VLAN bug fix, too

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/10 06:48:43

Modified files:
sys/dev/usb : uhidev.c

Log message:
sizeof() a pointer of the right struct to appease clang.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/10 06:58:49

Modified files:
sys/dev/usb : usb_subr.c

Log message:
Do not allocate space for the whole structure when we just want to store
a pointer, found by clang.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/10 07:32:14

Modified files:
sys/dev/usb : uhub.c

Log message:
Ask for the descriptor size corresponding to the number of ports present
in the hub, not from some random value from the stack.

Module name: src
Changes by: jsing@cvs.openbsd.org 2014/08/10 08:42:56

Modified files:
lib/libssl/src/ssl: d1_clnt.c d1_meth.c d1_srvr.c s23_clnt.c
s23_lib.c s23_meth.c s23_srvr.c s3_clnt.c
s3_meth.c s3_srvr.c ssl.h ssl_lib.c
ssl_locl.h ssl_sess.c t1_clnt.c t1_meth.c
t1_srvr.c

Log message:
Since we no longer need to support SSLv2-style cipher lists, start
unravelling the maze of function pointers and callbacks by directly
calling ssl3_{get,put}_cipher_by_char() and removing the
ssl_{get,put}_cipher_by_char macros.

Prompted by similar changes in boringssl.

ok guenther.

Module name: src
Changes by: jsing@cvs.openbsd.org 2014/08/10 08:57:04

Modified files:
lib/libssl/src/ssl: s3_lib.c

Log message:
Remove disabled (weakened export and non-ephemeral DH) cipher suites from
the cipher list. This reduces code size, saves data segment space and
prevents them from being turned back on at runtime by flipping a bit in
memory.

ok guenther@

Module name: src
Changes by: rpe@cvs.openbsd.org 2014/08/10 08:59:22

Modified files:
distrib/miniroot: install.sh upgrade.sh

Log message:
{ foo ; bar ; } -> { foo; bar; }

OK krw@

Module name: src
Changes by: jsing@cvs.openbsd.org 2014/08/10 09:06:15

Modified files:
lib/libssl/src/ssl: s3_lib.c

Log message:
Tweak cipher list comments and add missing cipher value comments.

Module name: src
Changes by: rpe@cvs.openbsd.org 2014/08/10 10:32:28

Modified files:
distrib/miniroot: install.sh install.sub

Log message:
Convert if foo; then bar; fi blocks to foo && bar but leave out enable_network()
because it shares code&style with /etc/netstart. No functional change.

with feedback and OK krw@ halex@

Module name: src
Changes by: tedu@cvs.openbsd.org 2014/08/10 10:36:13

Modified files:
regress/lib/libutil/bcrypt_pbkdf: bcrypt_pbkdf_test.c

Log message:
guenther wants a copyright

Module name: src
Changes by: jmc@cvs.openbsd.org 2014/08/10 11:15:18

Modified files:
usr.sbin/sysmerge: sysmerge.8 sysmerge.sh

Log message:
- add -p to SYNOPSIS
- the argument to -s is not optional

ok ajacoutot

Module name: src
Changes by: rpe@cvs.openbsd.org 2014/08/10 14:54:17

Modified files:
distrib/miniroot: install.sub

Log message:
[] -> [[]]

OK krw@
"well ok" halex@

Module name: src
Changes by: zhuk@cvs.openbsd.org 2014/08/10 15:09:26

Modified files:
share/man/man5 : port-modules.5

Log message:
Improve variables listing in x11/kde4 module description.

Module name: src
Changes by: bluhm@cvs.openbsd.org 2014/08/10 15:55:18

Modified files:
usr.sbin/relayd: relay_http.c

Log message:
There was a race in relayd that caused connections to hang. It
happend with non-persistent PUT connections that had a very short
body. If the whole body was read from the client before the
connection to the server was set up, the event callback was not
called. Do the regular checks after relay_connect() succeeded.
OK reyk@

Module name: src
Changes by: bluhm@cvs.openbsd.org 2014/08/10 17:44:20

Modified files:
sys/kern : kern_sig.c

Log message:
Write the core file of a non-suid process into the current directory
even if sysctl kern.nosuidcoredump has been set to 2 or 3. This
allows a regular user to debug his programs again.
OK guenther@ deraadt@

Module name: www
Changes by: tedu@cvs.openbsd.org 2014/08/10 18:10:21

Modified files:
. : errata54.html errata55.html

Log message:
openssl 1.0.1i fixes

Module name: src
Changes by: jsing@cvs.openbsd.org 2014/08/10 19:06:22

Modified files:
lib/libssl/src/ssl: s3_lib.c ssl_locl.h ssl_sess.c

Log message:
Provide a ssl3_get_cipher_by_id() function that allows ciphers to be looked
up by their ID. For one, this avoids an ugly mess in ssl_sess.c, where the
cipher value is manually written into a buffer, just so the cipher can be
located using ssl3_get_cipher_by_char().

ok bcook@ miod@

Module name: src
Changes by: jsing@cvs.openbsd.org 2014/08/10 19:10:42

Modified files:
lib/libssl/src/ssl: s3_clnt.c ssl3.h ssl_lib.c

Log message:
Currently, ssl3_put_char_by_bytes(NULL, NULL) is just a long handed way
of writing "2". Add a define for the SSL3_CIPHER_VALUE_SIZE (rather than
using a less-readable hardcoded constant everywhere) and replace the
ssl3_put_char_by_bytes(NULL, NULL) calls with it.

ok bcook@ miod@

Module name: src
Changes by: schwarze@cvs.openbsd.org 2014/08/10 22:18:19

Modified files:
regress/usr.bin/mandoc: Makefile.inc
regress/usr.bin/mandoc/man/TH: case.out_lint emptydate.out_lint
noTH.out_lint twoargs.out_lint
regress/usr.bin/mandoc/man/TP: eof.out_ascii eof.out_lint
regress/usr.bin/mandoc/man/nf: dupe.out_lint
regress/usr.bin/mandoc/mdoc/An: break.in break.out_ascii
regress/usr.bin/mandoc/mdoc/At: invalid.out_lint
regress/usr.bin/mandoc/mdoc/Bd: badargs.out_lint
regress/usr.bin/mandoc/mdoc/Bf: badargs.out_lint
regress/usr.bin/mandoc/mdoc/Bl: badargs.out_lint bareTa.out_lint
column.in column.out_ascii
emptyhead.out_lint
emptyitem.out_lint
emptytag.out_lint
notype.out_lint
regress/usr.bin/mandoc/mdoc/Dt: badarch.out_lint badsec.out_lint
case.out_lint dupe.in
dupe.out_ascii dupe.out_lint
order.out_lint
regress/usr.bin/mandoc/mdoc/Nm: Makefile badNAME.out_ascii
badNAME.out_lint
badNAMEuse.out_ascii
badNAMEuse.out_lint
emptyNAME.out_ascii
emptyNAMEuse.out_ascii
regress/usr.bin/mandoc/mdoc/Sh: first.out_lint order.out_lint
regress/usr.bin/mandoc/mdoc/St: badargs.out_lint
regress/usr.bin/mandoc/roff/de: escname.out_lint
regress/usr.bin/mandoc/roff/nr: escname.out_lint
regress/usr.bin/mandoc/roff/string: name.out_lint

Log message:
start catching up with recent code changes, but no new files yet

Module name: src
Changes by: miod@cvs.openbsd.org 2014/08/10 22:45:19

Modified files:
lib/libssl/src/ssl: ssl2.h

Log message:
Remove now-unused SSL2_STATE as well as ssl2-specific state machine values.
ok guenther@ jsing@

Module name: src
Changes by: miod@cvs.openbsd.org 2014/08/10 22:46:42

Modified files:
lib/libssl/src/ssl: s3_srvr.c

Log message:
Unchecked memory allocation and potential leak upon error in
ssl3_get_cert_verify().
ok guenther@ jsing@

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/08/11 00:30:39

Modified files:
usr.sbin/sysmerge: sysmerge.8

Log message:
Move a sentence to the corresponding option description.

from jmc@

Module name: src
Changes by: jmc@cvs.openbsd.org 2014/08/11 02:21:55

Modified files:
usr.sbin/ldapd : ldapd.8

Log message:
add a caveat about databases;
From: Matthew Weigel

ok gilles

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/08/11 03:03:27

Modified files:
usr.sbin/sysmerge: sysmerge.8 sysmerge.sh

Log message:
Steal stripcom() from /etc/rc to parse sysmerge.ignore.

Module name: www
Changes by: gilles@cvs.openbsd.org 2014/08/11 03:25:55

Modified files:
opensmtpd : index.html

Log message:
replace outdated mirror

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/11 03:47:56

Modified files:
usr.sbin/arp : arp.c
usr.sbin/ndp : ndp.c

Log message:
Do not try to delete RTF_LOCAL entries. Such routes are automatically
created /deleted by the kernel when an IP address is added/removed
on/from an interface and should not be manipulated by userland tools.

ok henning@, jca@

Module name: src
Changes by: gilles@cvs.openbsd.org 2014/08/11 03:50:51

Modified files:
usr.sbin/smtpd : table_api.c

Log message:
missing memset in table_api.c (currently only used by pluggable tables)

diff from Martijn van Duren

Module name: www
Changes by: dlg@cvs.openbsd.org 2014/08/11 04:00:45

Modified files:
. : 56.html

Log message:
mpath was enabled this release.

Module name: src
Changes by: jsing@cvs.openbsd.org 2014/08/11 04:46:19

Modified files:
lib/libssl/src/ssl: ssl_lib.c

Log message:
Check the return value of sk_SSL_CIPHER_new_null(), since it allocates
memory and can return NULL.

ok miod@

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/11 05:50:41

Modified files:
sys/netinet : if_ether.c

Log message:
Convert ARP llinfo allocation to pool(9).

ok henning@, dlg@

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/11 05:59:05

Modified files:
sys/net : route.c rtsock.c

Log message:
Put back the checks about RTF_LOCAL routes now that userland tools are
aware of them.

Original commit message was:

Reserve the highest route priority for kernel-managed routes and prevent
userland from playing with the local and broadcast flags.

ok claudio@

Module name: src
Changes by: dlg@cvs.openbsd.org 2014/08/11 06:37:36

Modified files:
sys/kern : subr_pool.c

Log message:
bring back r1.131:

take the pools mutex when copying stats out of it in the sysctl
path so we are guaranteed a consistent snapshot.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/11 06:45:45

Modified files:
sys/dev/cardbus: if_fxp_cardbus.c if_re_cardbus.c
if_rl_cardbus.c if_xl_cardbus.c
sys/dev/eisa : if_ep_eisa.c
sys/dev/isa : if_ec.c if_ef_isapnp.c if_eg.c if_el.c
if_ep_isa.c if_ep_isapnp.c if_ie.c if_lc_isa.c
if_ne_isa.c if_ne_isapnp.c if_sm_isa.c if_we.c
sys/dev/pcmcia : if_cnw.c if_ep_pcmcia.c if_malo.c
if_sm_pcmcia.c if_xe.c
sys/dev/sbus : be.c if_gem_sbus.c if_hme_sbus.c if_ti_sbus.c
qe.c

Log message:
Fewer <netinet/in_systm.h>

Module name: src
Changes by: jmc@cvs.openbsd.org 2014/08/11 06:57:14

Modified files:
share/man/man5 : login.conf.5

Log message:
document "tc";
From: Edward

ok millert

Module name: src
Changes by: ajacoutot@cvs.openbsd.org 2014/08/11 07:25:23

Modified files:
etc/rc.d : rc.subr

Log message:
Make it possible to pass arguments to _rc_parse_conf().

ok robert@

Module name: src
Changes by: bcook@cvs.openbsd.org 2014/08/11 07:29:43

Modified files:
lib/libcrypto/crypto/arch/amd64: Makefile.inc
lib/libssl/src/crypto/engine: eng_rsax.c
lib/libssl/src/crypto/evp: e_rc4_hmac_md5.c

Log message:
Guard RSA / RC4-5 ASM when NO_ASM is not defined

Most assembly blocks remain inactive if OPENSSL_NO_ASM is not defined,
only enabling inline assembly, but the RSA / RC4-5 blocks (used only in
amd64 systems) turn on implicitly. Guard these two as well.

This simplifies enabling just inline ASM in portable, no effective
change in OpenBSD.

Module name: src
Changes by: dlg@cvs.openbsd.org 2014/08/11 07:31:42

Modified files:
sys/kern : subr_pool.c

Log message:
bring back r1.132:

provide a pool_count global so we can figure out how many pools there are
active without having to walk the global pool_list.

Module name: src
Changes by: mpi@cvs.openbsd.org 2014/08/11 07:51:07

Modified files:
sys/net : if.c
sys/netinet : if_ether.c
sys/netinet6 : nd6.c

Log message:
Use the RTF_LOCAL flag instead of abusing the RTF_LLINFO flag when
adding local route entries.

This hack made sense when we didn't have the RTF_LOCAL flag, but since
some months it is set on every local route.

Module name: src
Changes by: deraadt@cvs.openbsd.org 2014/08/11 09:26:33

Modified files:
usr.sbin/httpd : server_fcgi.c

Log message:
make a few variables more local