CVS: cvs.openbsd.org: src

2022-08-29 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2022/08/29 23:46:52

Modified files:
sbin/unwind/libunbound: config.h 
sbin/unwind/libunbound/dns64: dns64.c 
sbin/unwind/libunbound/iterator: iter_delegpt.c iter_delegpt.h 
 iter_utils.c iter_utils.h 
 iterator.c iterator.h 
sbin/unwind/libunbound/libunbound: unbound.h 
sbin/unwind/libunbound/services: authzone.c listen_dnsport.c 
 mesh.c outside_network.c 
 outside_network.h 
sbin/unwind/libunbound/services/cache: dns.c dns.h infra.c 
sbin/unwind/libunbound/sldns: parse.c rrdef.c wire2str.c 
sbin/unwind/libunbound/util: config_file.c config_file.h 
 configlexer.c configlexer.lex 
 configparser.h configparser.y 
 iana_ports.inc module.h net_help.c 
 rtt.c rtt.h 
sbin/unwind/libunbound/util/data: msgreply.c 
sbin/unwind/libunbound/validator: val_secalgo.c val_sigcrypt.c 
  val_utils.c validator.c 

Log message:
sync to libunbound 1.16.2; heavy lifting by sthen



CVS: cvs.openbsd.org: src

2022-08-29 Thread Jason McIntyre
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2022/08/29 23:40:28

Modified files:
share/man/man8 : rc.subr.8 

Log message:
overriden -> overridden;



CVS: cvs.openbsd.org: src

2022-08-29 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2022/08/29 13:42:01

Modified files:
usr.bin/compress: main.c 

Log message:
Fix growth check in compress(1)/gzip(1)

If a compressed file is larger than its expanded version, compress(1) and
gzip(1) don't compress unless -f is given. As found by gkoehler, the check
is not quite correct for very small files or files with sufficiently random
data. Fix the check so that slight growth still triggers the check.

ok millert



CVS: cvs.openbsd.org: src

2022-08-29 Thread Kenneth R Westerback
CVSROOT:/cvs
Module name:src
Changes by: k...@cvs.openbsd.org2022/08/29 13:39:10

Modified files:
sbin/fdisk : gpt.c 

Log message:
Print warning when a GPT partition start or end is outside the
usable LBA area of the device the GPT is currently inhabiting.

Makes GPT display as informative as MBR display.

In passing, eliminate possible underflow in partition size
calculation.

ok deraadt@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Antoine Jacoutot
CVSROOT:/cvs
Module name:src
Changes by: ajacou...@cvs.openbsd.org   2022/08/29 13:37:32

Modified files:
etc/rc.d   : rc.subr 

Log message:
When using logger(1), also log the message to standard error so we don't
have to check syslog when running in debug mode (`-d').



CVS: cvs.openbsd.org: src

2022-08-29 Thread Antoine Jacoutot
CVSROOT:/cvs
Module name:src
Changes by: ajacou...@cvs.openbsd.org   2022/08/29 13:14:25

Modified files:
etc/rc.d   : bgpd httpd iked nfsd relayd sshd vmd 

Log message:
Use rc_configtest.



CVS: cvs.openbsd.org: src

2022-08-29 Thread Antoine Jacoutot
CVSROOT:/cvs
Module name:src
Changes by: ajacou...@cvs.openbsd.org   2022/08/29 13:14:02

Modified files:
etc/rc.d   : rc.subr 
share/man/man8 : rc.subr.8 

Log message:
Introduce the rc_configtest() function.
By default it just returns "0" but can be overriden by rc.d scripts to check
that the daemon configuration is valid when running "start", "reload" and
"restart".



CVS: cvs.openbsd.org: src

2022-08-29 Thread Stefan Sperling
CVSROOT:/cvs
Module name:src
Changes by: s...@cvs.openbsd.org2022/08/29 13:01:52

Modified files:
sys/dev: softraid.c 

Log message:
Examine RAID-1C-specific softraid(4) meta-data when checking for
a key disk which is associated with a RAID-1C volume.

ok jsing@, style tweak + ok kn@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Klemens Nanni
CVSROOT:/cvs
Module name:src
Changes by: k...@cvs.openbsd.org2022/08/29 12:54:43

Modified files:
usr.sbin/installboot: efi_softraid.c i386_softraid.c 
  sparc64_softraid.c 

Log message:
softraid: make verbose messages -n/nowrite aware

Using installboot(8) in dry-run mode aka. -vn (verbose + nowrite) and first
reading "would install" followed by an "installing" made me uneasy.

Luckily, nothing was written in dry-run mode, it's just that the
softraid specific code fails to honour -n/nowrite.

So make sure it does and pull the printf out of `if (!nowrite)' so we
see the "would install" messages in dry-run mode in the first place.

Output diff for root on CRYPTO softraid on biosboot(8/amd64) to illustrate:

-# installboot -nv sd1
+# ./obj/installboot -nv sd1
would install bootstrap on /dev/rsd1c
using first-stage /usr/mdec/biosboot, second-stage /usr/mdec/boot
sd1: softraid volume with 1 disk(s)
+sd1: would install boot loader on softraid volume
/usr/mdec/boot is 6 blocks x 16384 bytes
-sd0a: installing boot blocks on /dev/rsd0c, part offset 144
+sd0a: would install boot blocks on /dev/rsd0c, part offset 144
master boot record (MBR) at sector 0
partition 3: type 0xA6 offset 64 size 488392001
/usr/mdec/biosboot will be written at sector 64

OK jsing



CVS: cvs.openbsd.org: src

2022-08-29 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2022/08/29 12:54:06

Modified files:
lib/libcrypto/bn: bn_bpsw.c 

Log message:
missing period



CVS: cvs.openbsd.org: src

2022-08-29 Thread Klemens Nanni
CVSROOT:/cvs
Module name:src
Changes by: k...@cvs.openbsd.org2022/08/29 12:42:28

Modified files:
regress/usr.sbin: Makefile 
regress/usr.sbin/installboot: Makefile 

Log message:
Hook up installboot(8) tests on i386

Passes like amd64 as both use MBR/biosboot(8) at the moment.



CVS: cvs.openbsd.org: src

2022-08-29 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2022/08/29 12:28:35

Modified files:
usr.sbin/rpki-client: main.c 

Log message:
Simplify load_skiplist()

Instead of copy-pasting valid_uri(), we can call the real thing. That's
also not ideal since we actually check for an FQDN, but it's a bit
simpler.

ok claudio



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 12:20:33

Modified files:
regress/usr.sbin/bgpd/unittests: rde_decide_test.c 

Log message:
Adjust rde_decide_test.c since struct aspath changed.



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 12:19:22

Modified files:
usr.sbin/bgpctl: output.c output_json.c 

Log message:
aspath_refs is gone, adjust code



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 12:18:55

Modified files:
usr.sbin/bgpd  : bgpd.h rde.c rde.h rde_attr.c rde_rib.c 

Log message:
Instead of a global aspath cache copy the aspath attribute per rde_aspath
struct. It uses a bit more memory but improves performance a lot on really
big systems because aspath_get() becomes a very hot function.
OK tb@



CVS: cvs.openbsd.org: xenocara

2022-08-29 Thread Greg Steuck
CVSROOT:/cvs
Module name:xenocara
Changes by: gne...@cvs.openbsd.org  2022/08/29 12:11:41

Modified files:
app/xlockmore/xlock: passwd.c 

Log message:
Properly support style in passwd\nOK matthieu



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martijn van Duren
CVSROOT:/cvs
Module name:src
Changes by: mart...@cvs.openbsd.org 2022/08/29 12:10:48

Modified files:
usr.sbin/snmpd : application_agentx.c 

Log message:
Clean up a couple of log lines.

OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martijn van Duren
CVSROOT:/cvs
Module name:src
Changes by: mart...@cvs.openbsd.org 2022/08/29 12:05:08

Modified files:
usr.sbin/snmpd : application.c 

Log message:
Allow overlapping regions (if subtree claim flag is set) when the backends
are identical.

OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 12:04:52

Modified files:
usr.sbin/bgpd  : rde_attr.c 

Log message:
Use fatal("%s", __func__); instead of fatal("function_name");
OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martijn van Duren
CVSROOT:/cvs
Module name:src
Changes by: mart...@cvs.openbsd.org 2022/08/29 12:02:37

Modified files:
usr.sbin/snmpd : application.c 

Log message:
Make sure oidbuf is initialized when we hit the overlap case.

OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Stefan Sperling
CVSROOT:/cvs
Module name:src
Changes by: s...@cvs.openbsd.org2022/08/29 11:59:12

Modified files:
sys/dev/pci: if_iwm.c if_iwx.c 

Log message:
Fix integer overflows in iwm(4) and iwx(4) firmware file parsers.

Found by hshoexer and gerhard@, and reported to me by Christian Ehrhardt.

ok gerhard@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2022/08/29 11:24:56

Modified files:
share/man/man7 : hier.7 

Log message:
Not all binaries in /sbin are static...



CVS: cvs.openbsd.org: src

2022-08-29 Thread Mark Kettenis
CVSROOT:/cvs
Module name:src
Changes by: kette...@cvs.openbsd.org2022/08/29 11:13:58

Modified files:
sys/arch/arm64/arm64: machdep.c 

Log message:
Put printing the EFI memory map behind and #ifdef.

ok deraadt@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Frederic Cambus
CVSROOT:/cvs
Module name:src
Changes by: fcam...@cvs.openbsd.org 2022/08/29 11:05:39

Modified files:
distrib/notes/armv7: prep 

Log message:
Mention installation using the framebuffer console on armv7.

It is possible to install OpenBSD/armv7 using the framebuffer console on
systems supporting the simplefb(4) driver, such as the Cubieboard2.

OK miod@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2022/08/29 11:00:30

Modified files:
sbin/dhcpleased: Makefile 
sbin/mountd: Makefile 
sbin/nfsd  : Makefile 
sbin/pflogd: Makefile 
sbin/resolvd   : Makefile 
sbin/slaacd: Makefile 
sbin/unwind: Makefile 

Log message:
Dynamically link these /sbin daemons: dhcpleased, mountd, nfsd, pflogd,
resolvd, slaacd, unwind.
The mitigation story is way better: syscalls are in a randomly located
libc, and every syscall stub is randomly located inside that due to
random relinking.  As opposed to fixed offset inside a release binary.
There is one known consequence: /usr nfs mounting must use statically
configured IP addresses.
ok kettenis florian, others



CVS: cvs.openbsd.org: src

2022-08-29 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2022/08/29 10:53:46

Modified files:
sys/kern   : exec_elf.c 

Log message:
If ld.so loading fails inside execve, uprintf a message to report this
before the SIGABRT kills the process.  This clarifies the failure mode
(and resolution to take) when a dynamic executable is run while /usr
isn't mounted.  ok miod kettenis



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 10:44:47

Modified files:
usr.sbin/bgpd  : rde.c rde.h rde_community.c 

Log message:
Switch the DB of communities collections to a RB tree instead of an
undersized hash table.
OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 10:43:07

Modified files:
usr.sbin/bgpd  : rde.c rde.h rde_rib.c 

Log message:
Switch rde_aspath to a RB tree instead of a hash table.
OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Stuart Henderson
CVSROOT:/cvs
Module name:src
Changes by: st...@cvs.openbsd.org   2022/08/29 10:05:00

Modified files:
usr.sbin/unbound: Makefile.in config.h.in configure configure.ac 
usr.sbin/unbound/cachedb: cachedb.c 
usr.sbin/unbound/daemon: cachedump.c daemon.c remote.c stats.c 
 worker.c 
usr.sbin/unbound/dns64: dns64.c 
usr.sbin/unbound/doc: Changelog README example.conf.in 
  libunbound.3.in unbound-anchor.8.in 
  unbound-checkconf.8.in 
  unbound-control.8.in unbound-host.1.in 
  unbound.8.in unbound.conf.5.in 
usr.sbin/unbound/edns-subnet: subnetmod.c subnetmod.h 
usr.sbin/unbound/ipsecmod: ipsecmod.c 
usr.sbin/unbound/iterator: iter_delegpt.c iter_delegpt.h 
   iter_utils.c iter_utils.h iterator.c 
   iterator.h 
usr.sbin/unbound/libunbound: unbound.h 
usr.sbin/unbound/services: authzone.c listen_dnsport.c mesh.c 
   outside_network.c outside_network.h 
usr.sbin/unbound/services/cache: dns.c dns.h infra.c 
usr.sbin/unbound/sldns: parse.c rrdef.c wire2str.c 
usr.sbin/unbound/smallapp: unbound-control.c 
usr.sbin/unbound/util: config_file.c config_file.h 
   configlexer.lex configparser.y 
   iana_ports.inc module.h net_help.c rtt.h 
usr.sbin/unbound/util/data: msgreply.c 
usr.sbin/unbound/validator: val_secalgo.c val_sigcrypt.c 
val_utils.c validator.c 

Log message:
merge updates



CVS: cvs.openbsd.org: src

2022-08-29 Thread Stuart Henderson
CVSROOT:/cvs
Module name:src
Changes by: st...@cvs.openbsd.org   2022/08/29 10:03:51

Log message:
import unbound 1.16.2, ok florian@ tb@ also tested by Alex Holst

Status:

Vendor Tag: NLNETLABS
Release Tags:   UNBOUND_1_16_2

U src/usr.sbin/unbound/ac_pkg_swig.m4
U src/usr.sbin/unbound/config.guess
C src/usr.sbin/unbound/config.h.in
U src/usr.sbin/unbound/ax_pthread.m4
U src/usr.sbin/unbound/acx_python.m4
C src/usr.sbin/unbound/configure.ac
U src/usr.sbin/unbound/acx_nlnetlabs.m4
C src/usr.sbin/unbound/Makefile.in
C src/usr.sbin/unbound/configure
U src/usr.sbin/unbound/install-sh
N src/usr.sbin/unbound/SECURITY.md
U src/usr.sbin/unbound/README.md
U src/usr.sbin/unbound/LICENSE
U src/usr.sbin/unbound/systemd.m4
U src/usr.sbin/unbound/README-Travis.md
U src/usr.sbin/unbound/config.sub
U src/usr.sbin/unbound/aclocal.m4
U src/usr.sbin/unbound/ltmain.sh
U src/usr.sbin/unbound/validator/val_nsec.c
U src/usr.sbin/unbound/validator/val_nsec3.h
U src/usr.sbin/unbound/validator/validator.h
U src/usr.sbin/unbound/validator/val_anchor.h
C src/usr.sbin/unbound/validator/val_utils.c
C src/usr.sbin/unbound/validator/validator.c
U src/usr.sbin/unbound/validator/val_neg.h
U src/usr.sbin/unbound/validator/autotrust.c
U src/usr.sbin/unbound/validator/val_kentry.h
C src/usr.sbin/unbound/validator/val_sigcrypt.c
U src/usr.sbin/unbound/validator/val_kcache.h
U src/usr.sbin/unbound/validator/val_nsec.h
U src/usr.sbin/unbound/validator/val_anchor.c
U src/usr.sbin/unbound/validator/val_utils.h
C src/usr.sbin/unbound/validator/val_secalgo.c
U src/usr.sbin/unbound/validator/val_kcache.c
U src/usr.sbin/unbound/validator/val_secalgo.h
U src/usr.sbin/unbound/validator/val_nsec3.c
U src/usr.sbin/unbound/validator/val_neg.c
U src/usr.sbin/unbound/validator/autotrust.h
U src/usr.sbin/unbound/validator/val_kentry.c
U src/usr.sbin/unbound/validator/val_sigcrypt.h
U src/usr.sbin/unbound/services/modstack.c
U src/usr.sbin/unbound/services/view.h
U src/usr.sbin/unbound/services/localzone.c
U src/usr.sbin/unbound/services/mesh.h
C src/usr.sbin/unbound/services/listen_dnsport.c
U src/usr.sbin/unbound/services/view.c
U src/usr.sbin/unbound/services/listen_dnsport.h
C src/usr.sbin/unbound/services/outside_network.c
C src/usr.sbin/unbound/services/authzone.c
U src/usr.sbin/unbound/services/rpz.h
U src/usr.sbin/unbound/services/modstack.h
U src/usr.sbin/unbound/services/outbound_list.c
U src/usr.sbin/unbound/services/outbound_list.h
C src/usr.sbin/unbound/services/outside_network.h
U src/usr.sbin/unbound/services/rpz.c
U src/usr.sbin/unbound/services/localzone.h
C src/usr.sbin/unbound/services/mesh.c
U src/usr.sbin/unbound/services/authzone.h
U src/usr.sbin/unbound/services/cache/infra.h
C src/usr.sbin/unbound/services/cache/dns.c
C src/usr.sbin/unbound/services/cache/dns.h
U src/usr.sbin/unbound/services/cache/rrset.c
C src/usr.sbin/unbound/services/cache/infra.c
U src/usr.sbin/unbound/services/cache/rrset.h
U src/usr.sbin/unbound/iterator/iter_resptype.h
U src/usr.sbin/unbound/iterator/iter_fwd.c
C src/usr.sbin/unbound/iterator/iter_utils.c
C src/usr.sbin/unbound/iterator/iterator.c
U src/usr.sbin/unbound/iterator/iter_scrub.h
U src/usr.sbin/unbound/iterator/iter_resptype.c
C src/usr.sbin/unbound/iterator/iter_delegpt.c
U src/usr.sbin/unbound/iterator/iter_fwd.h
U src/usr.sbin/unbound/iterator/iter_hints.h
U src/usr.sbin/unbound/iterator/iter_scrub.c
U src/usr.sbin/unbound/iterator/iter_donotq.h
U src/usr.sbin/unbound/iterator/iter_priv.c
U src/usr.sbin/unbound/iterator/iter_hints.c
C src/usr.sbin/unbound/iterator/iterator.h
U src/usr.sbin/unbound/iterator/iter_priv.h
U src/usr.sbin/unbound/iterator/iter_donotq.c
C src/usr.sbin/unbound/iterator/iter_utils.h
C src/usr.sbin/unbound/iterator/iter_delegpt.h
U src/usr.sbin/unbound/doc/requirements.txt
C src/usr.sbin/unbound/doc/unbound-checkconf.8.in
U src/usr.sbin/unbound/doc/FEATURES
C src/usr.sbin/unbound/doc/Changelog
U src/usr.sbin/unbound/doc/README.tests
C src/usr.sbin/unbound/doc/example.conf.in
C src/usr.sbin/unbound/doc/libunbound.3.in
C src/usr.sbin/unbound/doc/unbound.conf.5.in
U src/usr.sbin/unbound/doc/README.DNS64
U src/usr.sbin/unbound/doc/README.svn
U src/usr.sbin/unbound/doc/control_proto_spec.txt
U src/usr.sbin/unbound/doc/TODO
C src/usr.sbin/unbound/doc/unbound-host.1.in
C src/usr.sbin/unbound/doc/unbound.8.in
C src/usr.sbin/unbound/doc/unbound-anchor.8.in
U src/usr.sbin/unbound/doc/LICENSE
C src/usr.sbin/unbound/doc/README
U src/usr.sbin/unbound/doc/unbound.doxygen
U src/usr.sbin/unbound/doc/CREDITS
C 

CVS: cvs.openbsd.org: src

2022-08-29 Thread Mark Kettenis
CVSROOT:/cvs
Module name:src
Changes by: kette...@cvs.openbsd.org2022/08/29 09:42:25

Modified files:
sys/arch/arm64/dev: acpipci.c 

Log message:
Work around MSI and INTx issues on Qualcomm SC8280XP.  This makes the NVMe
work on the Lenovo x13s.

ok dv@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Mark Kettenis
CVSROOT:/cvs
Module name:src
Changes by: kette...@cvs.openbsd.org2022/08/29 09:40:27

Modified files:
sys/dev/pci: pcidevs.h pcidevs_data.h 

Log message:
regen



CVS: cvs.openbsd.org: src

2022-08-29 Thread Mark Kettenis
CVSROOT:/cvs
Module name:src
Changes by: kette...@cvs.openbsd.org2022/08/29 09:39:55

Modified files:
sys/dev/pci: pcidevs 

Log message:
Add Qualcomm SC8280XP PCIe.

ok dv@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 08:58:15

Modified files:
usr.sbin/bgpctl: output.c output_json.c 

Log message:
report pending update and withdraw routes in the show neighbor output.
OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2022/08/29 08:57:27

Modified files:
usr.sbin/bgpd  : rde.c session.h 

Log message:
Export pending update and withdraw as part of struct peer_stats.
OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Alexander Bluhm
CVSROOT:/cvs
Module name:src
Changes by: bl...@cvs.openbsd.org   2022/08/29 08:43:56

Modified files:
sys/netinet: ip_input.c 

Log message:
Do not calculate the output protocol checksum in the IP input path.
This logic was introduced in 2013 when pf checksum fixup was
temporarily removed.  After restoring the pf bahavior in 2016, it
should not be necessary anymore.
OK claudio@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martijn van Duren
CVSROOT:/cvs
Module name:src
Changes by: mart...@cvs.openbsd.org 2022/08/29 07:25:18

Modified files:
usr.sbin/snmpd : application.c 

Log message:
When there are two overlapping regions handled by the same backend we might
traverse back in the tree; Make sure this doesn't happen.

OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martijn van Duren
CVSROOT:/cvs
Module name:src
Changes by: mart...@cvs.openbsd.org 2022/08/29 07:23:32

Modified files:
usr.sbin/snmpd : application.c 

Log message:
When a backend disappears while handling a request, make sure that the
outstanding requests are handled by the next backend, instead of leaking
memory.

OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martijn van Duren
CVSROOT:/cvs
Module name:src
Changes by: mart...@cvs.openbsd.org 2022/08/29 07:19:05

Modified files:
usr.sbin/snmpd : application.c application.h 

Log message:
Let snmpd check a response package against the requested searchrange end.

If the returned OID is beyond the searchrange end we have two cases:
- If the backend supports searchranges (agentx) we generate a GENERR and
close the connection.
- If the backend doesn't support searchranges (legacy and maybe a future
snmp proxy) we simply fix-up the result.

OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martijn van Duren
CVSROOT:/cvs
Module name:src
Changes by: mart...@cvs.openbsd.org 2022/08/29 06:17:24

Modified files:
lib/libagentx  : agentx.c 

Log message:
Fix a case where EndOfMibView wasn't honoured.

OK tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2022/08/29 05:51:05

Modified files:
etc: rc 

Log message:
mount /usr earlier, to satisfy dynamically-linked daemons in /sbin better
(there will be more soon)



CVS: cvs.openbsd.org: src

2022-08-29 Thread Martin Pieuchot
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2022/08/29 05:09:31

Modified files:
sys/uvm: uvm_swap.c uvmexp.h 

Log message:
Use a rwlock and a mutex to serialize access to global swap variables.

Adapted from NetBSD by tb@.

ok tb@, kn@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Moritz Buhl
CVSROOT:/cvs
Module name:src
Changes by: mb...@cvs.openbsd.org   2022/08/29 03:50:38

Modified files:
sys/netinet: tcp_usrreq.c 

Log message:
Sendmsg could crash in tcp_output due to a missing check after the
introduction of tcp_send.
OK mvs@, bluhm@, gnezdo@
Reported-by: syzbot+e859fd353c90eeac2...@syzkaller.appspotmail.com



CVS: cvs.openbsd.org: src

2022-08-29 Thread Vitaliy Makkoveev
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2022/08/29 02:08:17

Modified files:
sys/kern   : uipc_usrreq.c 
sys/net: pfkeyv2.c rtsock.c 
sys/netinet: ip_divert.c raw_ip.c tcp_usrreq.c tcp_var.h 
 udp_usrreq.c 
sys/netinet6   : ip6_divert.c raw_ip6.c 
sys/sys: protosw.h 

Log message:
Move PRU_RCVOOB request to (*pru_rcvoob)().

ok bluhm@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Alexander Bluhm
CVSROOT:/cvs
Module name:src
Changes by: bl...@cvs.openbsd.org   2022/08/29 01:51:45

Modified files:
sys/dev/dt : dt_prov_static.c 
sys/net: if_enc.c if_mpe.c if_mpip.c if_mpw.c if_pppx.c 
 if_var.h route.c rtsock.c 
sys/netinet: in.c 
sys/netinet6   : in6.c nd6_nbr.c 
sys/sys: refcnt.h 

Log message:
Use struct refcnt for interface address reference counting.
There was a crash due to use after free of the ifa although it is
ref counted.  As ifa_refcnt was a simple integer increment, there
may be a path where multiple CPUs access it concurrently.  So change
to struct refcnt which is MP safe and provides dt(4) leak debugging.
Link level address for IPsec enc(4) and various MPLS interfaces is
special.  There ifa is part of struct sc.  Use refcount anyway and
add a panic to detect use after free.
bug report stsp@; OK mvs@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Jonathan Gray
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2022/08/29 01:35:40

Removed files:
sys/arch/macppc/include: ipkdb.h kbio.h 
sys/arch/powerpc/include: ipkdb.h 

Log message:
remove unused macppc headers
ok miod@ mpi@ gnezdo@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Kenneth R Westerback
CVSROOT:/cvs
Module name:src
Changes by: k...@cvs.openbsd.org2022/08/29 01:19:14

Modified files:
sbin/fdisk : part.c 

Log message:
Print warning when an MBR partition starts or extends past the
end of the device the MBR is currently inhabiting.

Prompted by some interesting MBR's from France, verbiage
suggestion from deraadt@, ok miod@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2022/08/29 00:49:24

Modified files:
lib/libcrypto/err: err.c err.h 

Log message:
Provide ERR_R_INIT_FAIL.

Needed for an upcoming change.

ok tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2022/08/29 00:48:58

Modified files:
lib/libcrypto/asn1: asn1.h asn1_err.c 

Log message:
Provide ASN1_R_TYPE_NOT_PRIMITIVE.

Needed for an upcoming change.

ok tb@



CVS: cvs.openbsd.org: src

2022-08-29 Thread Jonathan Gray
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2022/08/29 00:08:04

Modified files:
lib/libcrypto/ec: ecp_nistz256.c 
sys/arch/alpha/alpha: trap.c 
sys/arch/i386/pci: ali1543.c 
sys/crypto : sha2.c 
sys/dev/ic : adwlib.c 
sys/dev/isa: gus.c 
sys/dev/pci: if_mtd_pci.c if_tht.c pciide_natsemi_reg.h 
 pciide_opti_reg.h yds.c 
sys/dev/sbus   : cs4231.c 
sys/miscfs/fuse: fuse_device.c 

Log message:
static const, not const static

c99 6.11.5:
"The placement of a storage-class specifier other than at the beginning
of the declaration specifiers in a declaration is an obsolescent
feature."

ok miod@ tb@