CVS: cvs.openbsd.org: src

2018-12-07 Thread Ingo Schwarze
CVSROOT:/cvs
Module name:src
Changes by: schwa...@cvs.openbsd.org2018/12/07 16:21:31

Modified files:
bin/ln : symlink.7 

Log message:
format a pair of dashes as "\(em" rather than "--",
and a normal hyphen as "-" rather than "\-"



CVS: cvs.openbsd.org: src

2018-12-07 Thread Anton Lindqvist
CVSROOT:/cvs
Module name:src
Changes by: an...@cvs.openbsd.org   2018/12/07 14:59:57

Modified files:
usr.sbin/vmctl : vmctl.8 

Log message:
zap trailing whitespace



CVS: cvs.openbsd.org: src

2018-12-07 Thread Patrick Wildt
CVSROOT:/cvs
Module name:src
Changes by: patr...@cvs.openbsd.org 2018/12/07 14:33:28

Modified files:
sys/arch/arm/cortex: ampintc.c 
sys/arch/arm64/dev: agintc.c ampintc.c 
sys/arch/armv7/marvell: mvmpic.c 

Log message:
For shared interrupts we need to make sure that we register
with the lowest IPL.  Once we actually run the IRQ handler
we raise to the highest IPL.  Fixes a crash seen when having
a network card in the PCIe slot of the MacchiatoBin.

ok ccardenas@



Re: CVS: cvs.openbsd.org: src

2018-12-07 Thread Jason McIntyre
On Fri, Dec 07, 2018 at 12:29:38PM -0700, Jason McIntyre wrote:
> CVSROOT:  /cvs
> Module name:  src
> Changes by:   j...@cvs.openbsd.org2018/12/07 12:29:38
> 
> Modified files:
>   usr.sbin/ifstated: ifstated.conf.5 
> 
> Log message:
> "every" is in seconds; from ross l richardson
> 

sorry, change was ok tom



CVS: cvs.openbsd.org: src

2018-12-07 Thread Jason McIntyre
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2018/12/07 12:29:38

Modified files:
usr.sbin/ifstated: ifstated.conf.5 

Log message:
"every" is in seconds; from ross l richardson



CVS: cvs.openbsd.org: www

2018-12-07 Thread Daniel Jakots
CVSROOT:/cvs
Module name:www
Changes by: d...@cvs.openbsd.org2018/12/07 11:53:46

Modified files:
faq/ports  : ports.html 

Log message:
Link the actual guide instead of the whole FAQ

ok tj@



CVS: cvs.openbsd.org: xenocara

2018-12-07 Thread Daniel Jakots
CVSROOT:/cvs
Module name:xenocara
Changes by: d...@cvs.openbsd.org2018/12/07 11:53:06

Modified files:
.  : 3RDPARTY 

Log message:
Move some links to https

There may still be a redirect but matthieu@ prefers generic URL as they
should be more stable

ok matthieu@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Daniel Jakots
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2018/12/07 11:07:55

Modified files:
share/man/man1 : dpb.1 

Log message:
Reordering

- Uppercase options come before lowercase ones
- Sort alphabetically some parameters

>From Matthew Martin
"if it's just reordering, you don't need my okay, go ahead" -- espie@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Martin Pieuchot
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2018/12/07 09:23:57

Modified files:
sbin/iked  : pfkey.c 

Log message:
Make sure the TAP extension is only added to the vector when needed.

Fix a problem reported by Mark Patruck and dhill@

ok markus@, dhill@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Martin Pieuchot
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2018/12/07 09:21:19

Modified files:
sys/sys: mount.h 
sys/kern   : vfs_subr.c 

Log message:
free(9) sizes for netcred.

ok visa@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Martin Pieuchot
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2018/12/07 09:19:40

Modified files:
sys/net: if_bridge.c if_bridge.h if_switch.c 

Log message:
Stop passing `sc' when it isn't needed and use `ifp' where it's good
enough.

ok sthen@, visa@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Martin Pieuchot
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2018/12/07 09:17:51

Modified files:
sys/net: bridgestp.c 

Log message:
Remove useless spl protection.

ok visa@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Ingo Schwarze
CVSROOT:/cvs
Module name:src
Changes by: schwa...@cvs.openbsd.org2018/12/07 08:30:31

Modified files:
regress/usr.bin/sed: sedtest.expected sedtest.sh 

Log message:
Test that "b" and "t" (branch) commands can be followed by a semicolon
and another command.  Related to compile.c rev. 1.50.

millert@ OK'ed this diff without seeing it before it even occurred to me
that i might write it - but i guess below regress/, that's fair enough.



CVS: cvs.openbsd.org: src

2018-12-07 Thread Ingo Schwarze
CVSROOT:/cvs
Module name:src
Changes by: schwa...@cvs.openbsd.org2018/12/07 07:45:40

Modified files:
usr.bin/sed: compile.c 

Log message:
As an extension to POSIX, for consistency with our behaviour for
the "b" and "t" commands with a label, and for compatibility with
GNU sed, also accept ";" followed by another command after "b"
and "t" commands without a label: branch to the end of the script
instead of erroring out.  Parsing is unchanged.

Missing feature reported by Lars dot Nooden at gmail dot com on bugs@.
OK martijn@ millert@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Gilles Chehade
CVSROOT:/cvs
Module name:src
Changes by: gil...@cvs.openbsd.org  2018/12/07 07:18:17

Modified files:
usr.sbin/smtpd : smtp_session.c 

Log message:
properly handle EAI_NODATA and EAI_NONAME in fc-rdns lookups

ok eric@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Henning Brauer
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2018/12/07 05:52:47

Modified files:
usr.sbin/dhcpd : pfutils.c 

Log message:
I noticed the "pf table handler" process not going away on dhcpd restart,
looked at the error handling here, and oh my.
If opening /dev/pf on startup fails, don't just warn and move on, but bail.
If chroot (or the chdir after) fail, don't just warn and move on, bail.
If dropping privileges fails, the last thing we want to do is to just move
on with root privs, having warned or not.
If the pipe to the parent process is closed, that almost certainly means
that the parent process went away, and it absolutely certainly means that
the table handler process has no meaningful reason to exist any more, thus
bail.
ok florian ccardenas krw



CVS: cvs.openbsd.org: www

2018-12-07 Thread Theo Buehler
CVSROOT:/cvs
Module name:www
Changes by: t...@cvs.openbsd.org2018/12/07 05:01:52

Modified files:
faq: current.html 

Log message:
fix typo in previous



CVS: cvs.openbsd.org: src

2018-12-07 Thread Stuart Henderson
CVSROOT:/cvs
Module name:src
Changes by: st...@cvs.openbsd.org   2018/12/07 04:54:04

Modified files:
etc: unbound.conf 

Log message:
Remove public resolver IP addresses, just provide a neutral "documentation
prefix" address instead - there are so many available with varying
policies that this isn't a good place to list them (and might imply
some kind of recommendation which is not intended).

Particularly prompted by several on the previous list (he.net and opendns)
strip RRSIG from results which cause DNSSEC failures now that validation
is enabled in the example config as noticed by solene@.

While there, shrink qname-minimisation comment to match other nearby
comments, and drop dns64 example which is quite a specialist use case
and not really needed in this basic example.



CVS: cvs.openbsd.org: src

2018-12-07 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2018/12/07 03:01:06

Modified files:
sys/netinet6   : nd6_nbr.c 

Log message:
We are not going to send a neighbor advertisement from a non-master
carp interface. Move the check to the beginning of the function to
make it clear that there are no other side effects happening.
OK claudio



CVS: cvs.openbsd.org: www

2018-12-07 Thread Theo Buehler
CVSROOT:/cvs
Module name:www
Changes by: t...@cvs.openbsd.org2018/12/07 02:59:02

Modified files:
faq: current.html 

Log message:
whitespace and html validation ('<<' and '>>' need escaping)



CVS: cvs.openbsd.org: www

2018-12-07 Thread Florian Obser
CVSROOT:/cvs
Module name:www
Changes by: flor...@cvs.openbsd.org 2018/12/07 02:22:23

Modified files:
faq: current.html 

Log message:
unbound(8): DNSSEC validation enabled in default configuration



CVS: cvs.openbsd.org: src

2018-12-07 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2018/12/07 02:21:08

Modified files:
etc: unbound.conf 

Log message:
Enable DNSSEC validation.
Requested by & OK claudio
Input & OK sthen
OK job, solene
Various commenting that they run with validation since a long time
without issues.



CVS: cvs.openbsd.org: src

2018-12-07 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2018/12/07 01:42:14

Modified files:
sbin/iked  : util.c 

Log message:
Make sure that the prefixlen returned by mask2prefixlen6 is never bigger
than 128 also fail hard when the mask is non contiguous.
OK remi@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2018/12/07 01:40:55

Modified files:
usr.sbin/eigrpd: util.c 
usr.sbin/ldpd  : util.c 
usr.sbin/snmpd : kroute.c 

Log message:
Be more strict in converting a netmask into a prefixlen. Make sure
the prefixlen is never bigger than 128 for inet6.
OK remi@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2018/12/07 01:37:24

Modified files:
sys/sys: mbuf.h 
share/man/man9 : mbuf.9 

Log message:
All the references to the M_ALIGN and MH_ALIGN macros are gone.
Time to bring them behind the shed and free them. Use m_align() instead.
OK mpi@ henning@ florian@ kn@



CVS: cvs.openbsd.org: src

2018-12-07 Thread Eric Faurot
CVSROOT:/cvs
Module name:src
Changes by: e...@cvs.openbsd.org2018/12/07 01:05:59

Modified files:
usr.sbin/smtpd : lka.c pony.c smtpd.c smtpd.h 
usr.sbin/smtpd/smtpd: Makefile 
Added files:
usr.sbin/smtpd : cert.c 

Log message:
Refactor certificate initialization and verification.
Factorize code duplicated in smtp_session.c and mta_session.c
Implement a simple callback interface, with proper request management
and simplified imsg protocol.

Only add the necessary parts for now.
Exisiting code path will be adapted later.

input from gilles@ sunil@
ok gilles@