CVS: cvs.openbsd.org: src

2023-12-18 Thread Martijn van Duren
CVSROOT:/cvs Module name:src Changes by: mart...@cvs.openbsd.org 2023/12/18 02:42:57 Modified files: usr.sbin/snmpd : application_internal.c Log message: Fix two memory leaks: - MIB_snmpInReadOnlys was tried to be registered twice, leading to a leak of the second

CVS: cvs.openbsd.org: src

2023-12-18 Thread Sebastian Benoit
CVSROOT:/cvs Module name:src Changes by: be...@cvs.openbsd.org 2023/12/18 02:51:06 Modified files: usr.sbin/rpki-client: version.h Log message: bump version

CVS: cvs.openbsd.org: src

2023-12-18 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2023/12/18 06:11:20 Modified files: sys/kern : uipc_socket.c uipc_socket2.c uipc_syscalls.c sys/netinet: in_pcb.h sys/sys: protosw.h Log message: Run bind(2) system call

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:46:56 Modified files: usr.bin/ssh: PROTOCOL.agent authfd.c authfd.h ssh-add.1 ssh-add.c ssh-agent.c ssh-pkcs11-client.c ssh-pkcs11.h Log

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:45:49 Modified files: usr.bin/ssh: PROTOCOL auth2.c kex.c kex.h monitor_wrap.c sshconnect2.c sshd.c Log message: add "ext-info-in-a...@openssh.com" extension

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:46:12 Modified files: usr.bin/ssh: ssh-agent.c Log message: apply destination constraints to all p11 keys Previously applied only to the first key returned from each token. ok markus@

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:48:44 Modified files: usr.bin/ssh: version.h Log message: openssh-9.6

CVS: cvs.openbsd.org: src

2023-12-18 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2023/12/18 07:56:35 Modified files: usr.bin/ssh: Tag: OPENBSD_7_4 PROTOCOL kex.c kex.h packet.c packet.h sshconnect2.c Log message: implement "strict key exchange" in ssh and

CVS: cvs.openbsd.org: src

2023-12-18 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2023/12/18 07:57:43 Modified files: usr.bin/ssh: Tag: OPENBSD_7_3 PROTOCOL kex.c kex.h packet.c packet.h sshconnect2.c Log message: implement "strict key exchange" in ssh and

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:45:17 Modified files: usr.bin/ssh: PROTOCOL kex.c kex.h packet.c packet.h sshconnect2.c Log message: implement "strict key exchange" in ssh and sshd This adds a

CVS: cvs.openbsd.org: www

2023-12-18 Thread Alexander Bluhm
CVSROOT:/cvs Module name:www Changes by: bl...@cvs.openbsd.org 2023/12/18 08:01:56 Modified files: . : errata73.html errata74.html Log message: Release ssh errata.

CVS: cvs.openbsd.org: src

2023-12-18 Thread Otto Moerbeek
CVSROOT:/cvs Module name:src Changes by: o...@cvs.openbsd.org2023/12/18 06:23:52 Modified files: sbin/dump : main.c Log message: Check if calloc calls succeeded; ok millert@

CVS: cvs.openbsd.org: www

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2023/12/18 08:07:18 Modified files: build : Makefile build/mirrors : openssh-ftp.html.head openssh: ftp.html index.html openbsd.html

CVS: cvs.openbsd.org: src

2023-12-18 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/12/18 06:12:43 Modified files: lib/libcrypto/evp: evp_pbe.c Log message: Clean up EVP_PBE_CipherInit() a little This is mostly stylistic cleanup, making the control flow a bit more obvious. There's

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:48:09 Modified files: usr.bin/ssh: ssh-agent.c Log message: ssh-agent: record failed session-bind attempts Record failed attempts to session-bind a connection and refuse signing

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:47:20 Modified files: usr.bin/ssh: channels.c channels.h Log message: stricter handling of channel window limits This makes ssh/sshd more strict in handling non-compliant peers that send

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:47:44 Modified files: usr.bin/ssh: ssh.c Log message: ban user/hostnames with most shell metacharacters This makes ssh(1) refuse user or host names provided on the commandline that

CVS: cvs.openbsd.org: www

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2023/12/18 08:04:58 Added files: openssh/txt: release-9.6 Log message: openssh-9.6 release notes

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:50:08 Modified files: regress/usr.bin/ssh: Makefile Added files: regress/usr.bin/ssh: agent-pkcs11-cert.sh Log message: regress test for agent PKCS#11-backed certificates

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 07:49:39 Modified files: regress/usr.bin/ssh: Makefile Added files: regress/usr.bin/ssh: agent-pkcs11-restrict.sh Log message: regress test for constrained PKCS#11 keys

CVS: cvs.openbsd.org: src

2023-12-18 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2023/12/18 06:30:44 Modified files: sys/netinet: if_ether.c Log message: Fix race between ifconfig destroy and ARP timer. After if_detach() has called if_remove(), if_get() will return NULL. Before

CVS: cvs.openbsd.org: www

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2023/12/18 08:32:02 Modified files: openssh/txt: release-9.6 Log message: typo

CVS: cvs.openbsd.org: www

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2023/12/18 08:32:20 Modified files: openssh: releasenotes.html Log message: typo

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 08:58:56 Modified files: usr.bin/ssh: ssh-agent.c Log message: match flag type (s/int/u_int)

CVS: cvs.openbsd.org: src

2023-12-18 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/12/18 14:15:00 Modified files: lib/libcrypto/cmac: cmac.c Log message: cmac: use block_size rather than bl This is purely mechanical apart from a single line wrap.

CVS: cvs.openbsd.org: src

2023-12-18 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2023/12/18 18:11:21 Modified files: sys/kern : uipc_socket.c Log message: soreceive() must not hold mutex when calling sblock(). In my recent commit I missed that sblock() may sleep while soreceive()

CVS: cvs.openbsd.org: www

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2023/12/18 15:30:48 Modified files: openssh: index.html Log message: fix link target

CVS: cvs.openbsd.org: src

2023-12-18 Thread Job Snijders
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2023/12/18 16:42:20 Modified files: usr.sbin/rpki-client: parser.c Log message: Rephrase some warnings related to Manifests Feedback from Tom Harrison (APNIC) with and OK tb@

CVS: cvs.openbsd.org: src

2023-12-18 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2023/12/18 10:19:07 Modified files: libexec/ld.so : loader.c Log message: correct section the SYS_kbind syscall pin record goes into noticed by gnezdo

CVS: cvs.openbsd.org: src

2023-12-18 Thread Martijn van Duren
CVSROOT:/cvs Module name:src Changes by: mart...@cvs.openbsd.org 2023/12/18 09:56:01 Modified files: usr.sbin/snmpd : parse.y Log message: Fix copy-paste error for setting source-address in trap receiver. OK jca@

CVS: cvs.openbsd.org: src

2023-12-18 Thread Martijn van Duren
CVSROOT:/cvs Module name:src Changes by: mart...@cvs.openbsd.org 2023/12/18 09:58:26 Modified files: usr.sbin/snmpd : parse.y Log message: Add a family argument to host(). This allows us to force a specific address family for source-address, which must be in line with

CVS: cvs.openbsd.org: src

2023-12-18 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2023/12/18 23:58:36 Modified files: sys/kern : syscalls.master Log message: the 4th argument of pinsyscalls() is now "number of pin elements", not "size of the storage of the pin elements"

CVS: cvs.openbsd.org: src

2023-12-18 Thread Otto Moerbeek
CVSROOT:/cvs Module name:src Changes by: o...@cvs.openbsd.org2023/12/18 23:59:28 Modified files: lib/libc/stdlib: malloc.c Log message: A small cleanup of malloc_bytes(), getting rid of a goto and a tiny bit of optimization; ok tb@ asou@

CVS: cvs.openbsd.org: src

2023-12-18 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2023/12/18 23:59:17 Modified files: sys/sys: syscall.h syscallargs.h sys/kern : init_sysent.c syscalls.c Log message: sync

CVS: cvs.openbsd.org: src

2023-12-18 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2023/12/18 23:41:14 Modified files: usr.bin/ssh: PROTOCOL Log message: correct section numbers; from Ed Maste

CVS: cvs.openbsd.org: src

2023-12-18 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2023/12/18 23:27:45 Modified files: libexec/ld.so : loader.c Log message: correct alignment placement

CVS: cvs.openbsd.org: src

2023-12-18 Thread Jason McIntyre
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2023/12/18 23:57:34 Modified files: usr.bin/ssh: ssh-add.1 ssh-add.c Log message: sort -C, and add to usage(); ok djm

CVS: cvs.openbsd.org: src

2023-12-18 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2023/12/18 23:57:12 Modified files: lib/libc/sys : pinsyscalls.2 Log message: pinsyscalls(2) has changed a little bit, and I can provide more advice for how it is used (in ld.so, it's not like anyone else

CVS: cvs.openbsd.org: src

2023-12-18 Thread Jason McIntyre
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2023/12/19 00:24:42 Modified files: lib/libc/sys : pinsyscalls.2 Log message: - new sentence, new line - zap an unused Pp