CVS: cvs.openbsd.org: src

2023-03-03 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2023/03/03 23:25:42

Modified files:
usr.bin/openssl: req.c 

Log message:
openssl/req: garbage collect a pointless EVP_MD_CTX_init()

Before do_sign_init(), the ctx is always allocated by EVP_MD_CTX_new()
aka calloc(). There is no point in doing EVP_MD_CTX_init(), aka bzero().

ok jsing



CVS: cvs.openbsd.org: src

2023-03-03 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2023/03/03 20:22:59

Modified files:
usr.bin/ssh: channels.c channels.h 

Log message:
Use time_t instead of u_int for remaining x11 timeout checks for 64bit
time_t safety.  From Coverity CIDs 405197 and 405028, ok djm@



CVS: cvs.openbsd.org: src

2023-03-03 Thread Scott Soule Cheloha
CVSROOT:/cvs
Module name:src
Changes by: chel...@cvs.openbsd.org 2023/03/03 17:00:25

Modified files:
usr.bin/tee: tee.c 

Log message:
tee(1): explicitly check read(2) return value for 0 and -1



CVS: cvs.openbsd.org: src

2023-03-03 Thread Scott Soule Cheloha
CVSROOT:/cvs
Module name:src
Changes by: chel...@cvs.openbsd.org 2023/03/03 13:16:44

Modified files:
sys/kern   : kern_clock.c 
sys/conf   : param.c 
sys/sys: kernel.h 

Log message:
initclocks: don't reinitialize ticks, jiffies at runtime

Various drivers use ticks/jiffies before initclocks().  It isn't
generally safe to reinitialize them at runtime.  Hoist the conditional
definition of HZ from param.c into sys/kernel.h so we can see it from
kern_clock.c and statically initialize ticks/jiffies to the desired
offset.

With this change, timeouts scheduled before initclocks() do not all
fire immediately during the first softclock().

With input from kettenis@.

Link: https://marc.info/?l=openbsd-tech&m=167753870803378&w=2



CVS: cvs.openbsd.org: src

2023-03-03 Thread Alexander Bluhm
CVSROOT:/cvs
Module name:src
Changes by: bl...@cvs.openbsd.org   2023/03/03 09:22:57

Modified files:
etc: daily 

Log message:
Process accounting and lastcomm(1) can detect execve(2) violations
of pinsyscall(2) policy.  Report such findings in daily mail like
other security violations.  User has to turn on accounting=YES in
rc.conf.local to utilize this feature.
OK deraadt@



CVS: cvs.openbsd.org: src

2023-03-03 Thread Job Snijders
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/03/03 09:19:05

Modified files:
usr.sbin/rpki-client: filemode.c 

Log message:
In filemode, print the certification path towards the Trust Anchor

with and OK tb@



CVS: cvs.openbsd.org: xenocara

2023-03-03 Thread Theo Buehler
CVSROOT:/cvs
Module name:xenocara
Changes by: t...@cvs.openbsd.org2023/03/03 08:26:54

Modified files:
.  : README 

Log message:
Zap a stray space to tickle the git conversion.



CVS: cvs.openbsd.org: src

2023-03-03 Thread Claudio Jeker
CVSROOT:/cvs
Module name:src
Changes by: clau...@cvs.openbsd.org 2023/03/03 06:03:29

Modified files:
usr.sbin/tcpdump: tcpdump.c 

Log message:
Use EXTRACT_16BITS() in default_print() instead of handrolling it.
OK bluhm@



CVS: cvs.openbsd.org: src

2023-03-03 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2023/03/03 03:23:42

Modified files:
usr.bin/ssh: packet.c 

Log message:
Ensure ms_remain is always initialized, similar to what we do in
ssh_packet_write_wait.  bz#2687, from jjelen at redhat.com.



CVS: cvs.openbsd.org: src

2023-03-03 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2023/03/03 02:48:51

Modified files:
usr.bin/ssh: clientloop.c 

Log message:
Check for non-NULL before string comparison.  From jjelen at redhat.com
via bz#2687.



CVS: cvs.openbsd.org: src

2023-03-03 Thread Jonathan Gray
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/03/03 01:08:15

Modified files:
sbin/route : route.8 

Log message:
namservers -> nameservers