CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 03:34:21 Modified files: usr.sbin/httpd : server_http.c Log message: Add braces. Style-only change.

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 03:36:31 Modified files: usr.sbin/httpd : httpd.h server.c server_file.c Log message: Adjust the read/write watermarks according to the TCP send buffer. This fixes sending of large files.

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 03:40:04 Modified files: usr.sbin/httpd : server.c Log message: Bring back the last read (done) / last write (done) messages instead of just done to simplify connection debugging.

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 05:24:12 Modified files: usr.sbin/httpd : server.c server_file.c Log message: The watermark exposed a bug in server_write that broke keep-alive support. Instead of calling server_close from

CVS: cvs.openbsd.org: src

2014-08-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2014/08/06 06:29:43 Modified files: usr.sbin/httpd : logger.c Log message: avoid displaying a NULL pointer ok deraadt@ reyk@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 06:56:58 Modified files: usr.sbin/httpd : logger.c parse.y server.c Log message: spacing

CVS: cvs.openbsd.org: src

2014-08-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2014/08/06 07:40:18 Modified files: usr.sbin/httpd : server_fcgi.c Log message: Content-Length and Content-Type are transmitted as CONTENT_LENGTH and CONTENT_TYPE environment variables to cgi scripts,

CVS: cvs.openbsd.org: src

2014-08-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2014/08/06 09:08:04 Modified files: usr.sbin/httpd : httpd.h server.c server_fcgi.c server_http.c Log message: http POST support with OK reyk@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2014/08/06 09:15:16 Modified files: sys/arch/alpha/mcbus: mcbus.c Log message: fix an off by one ok deraadt@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2014/08/06 09:40:40 Modified files: sys/arch/vax/if: if_qe.c sgec.c Log message: Correct some dma cleanup error paths. While the index variables were correct the arrays of dma handles they indexed were

CVS: cvs.openbsd.org: src

2014-08-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2014/08/06 10:01:44 Modified files: lib/libssl/src/crypto/evp: encode.c Log message: Allow B64_EOF to follow a base64 padding character. This restores previous behaviour that allows a PEM block to be fed

CVS: cvs.openbsd.org: src

2014-08-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2014/08/06 10:09:02 Modified files: usr.sbin/httpd : httpd.h parse.y server.c Log message: Configure the default SSL ciphers as HIGH:!aNULL. ok deraadt@ reyk@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2014/08/06 10:10:02 Modified files: usr.sbin/httpd : server.c Log message: Also clean up the public key when it is no longer needed. ok deraadt@ reyk@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2014/08/06 10:11:34 Modified files: usr.sbin/httpd : parse.y Log message: Provide configuration options that allow the SSL certificate, key and ciphers to be specified for each server. ok deraadt@ reyk@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Antoine Jacoutot
CVSROOT:/cvs Module name:src Changes by: ajacou...@cvs.openbsd.org 2014/08/06 10:13:48 Modified files: distrib/zaurus/ramdisk: install.md Log message: sysctl machdep.ztsscale has been unused for 7 years, so stop handling it. s/TAB/SPACE for the wsconsctl.conf

CVS: cvs.openbsd.org: src

2014-08-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2014/08/06 10:31:09 Modified files: usr.sbin/httpd : httpd.conf.5 Log message: Document the SSL configuration for httpd (partly based on relayd.conf(5)).

CVS: cvs.openbsd.org: xenocara

2014-08-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:xenocara Changes by: j...@cvs.openbsd.org2014/08/06 11:00:09 Modified files: lib/libpciaccess/src: openbsd_pci.c Log message: calloc the pci_sys struct before probing for PCI. As the functions check if the member pointers are NULL but not the

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 12:21:14 Modified files: usr.sbin/httpd : config.c httpd.conf.5 httpd.h parse.y server_http.c Log message: Limit the body size in client requests (eg. POST data) to 1M

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 12:38:11 Modified files: usr.sbin/httpd : server.c server_fcgi.c Log message: Use memset(buf instead of memset(buf. Pointed out by deraadt@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 12:40:15 Modified files: usr.sbin/httpd : server_fcgi.c Log message: Always zero-out the fcgi record header for STDIN data. OK florian@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Philip Guenther
CVSROOT:/cvs Module name:src Changes by: guent...@cvs.openbsd.org2014/08/06 13:31:30 Modified files: sys/nfs: nfs_kq.c Log message: Support NOTE_EOF for kqueue EVFILT_READ filters on NFS files. committing for jsg@, ok reyk@ tedu@ guenther@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Miod Vallat
CVSROOT:/cvs Module name:src Changes by: m...@cvs.openbsd.org2014/08/06 14:11:09 Modified files: lib/libssl/src/ssl: d1_srvr.c Log message: Prevent a possible use after free by mimicing the s3_srvr.c fixes contributed by Adam Langley close to three years ago, which

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 14:29:54 Modified files: etc/examples : httpd.conf usr.sbin/httpd : httpd.conf.5 parse.y Log message: Change grammar to remove a shift/reduce conflict that was introduced with the ssl

CVS: cvs.openbsd.org: src

2014-08-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2014/08/06 14:56:23 Modified files: usr.sbin/httpd : server_fcgi.c Log message: If the very first fcgi STDOUT record has length 0 the cgi script didn't send anything back. This is an internal server error.

CVS: cvs.openbsd.org: src

2014-08-06 Thread Reyk Floeter
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2014/08/06 15:08:47 Modified files: usr.sbin/httpd : server_fcgi.c Log message: Write STDERR from the CGI to the web server error log as intended. OK florian@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Doug Hogan
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2014/08/06 16:33:08 Modified files: usr.sbin/httpd : httpd.8 Log message: Mention how httpd responds to SIGHUP and SIGUSR1. Description from reyk@

CVS: cvs.openbsd.org: src

2014-08-06 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2014/08/06 17:16:16 Modified files: lib/libssl/src/ssl: t1_lib.c Log message: merge fix for CVE-2014-3510 basically a missing s-hit check ok guenther

CVS: cvs.openbsd.org: src

2014-08-06 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2014/08/06 19:24:10 Modified files: lib/libssl/src/ssl: s3_clnt.c Log message: merge CVE-2014-3510; Fix DTLS anonymous EC(DH) denial of service

CVS: cvs.openbsd.org: www

2014-08-06 Thread Nick Holland
CVSROOT:/cvs Module name:www Changes by: n...@cvs.openbsd.org2014/08/06 19:51:34 Modified files: faq: faq10.html faq14.html faq5.html faq6.html faq8.html upgrade48.html upgrade55.html Log message: more - cvsweb.openbsd.org for,

CVS: cvs.openbsd.org: src

2014-08-06 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2014/08/06 22:49:53 Modified files: lib/libssl/src/ssl: s23_srvr.c Log message: Fix CVE-2014-3511; TLS downgrade, verbatim diff