Re: unbound SERVFAIL *: all the configured stub or forward servers failed, at zone .

2021-03-09 Thread Greg Steuck
Thanks Stuart! Stuart Henderson writes: > On 2021/03/09 07:41, Greg Steuck wrote: >> ... which goes on for hours until I wake my desktop machine (lenny). I >> know this doesn't sound related, but I observed this multiple times and >> see no better correlation. The two machines are connected to

Re: mg: Fix Coverity Scan warning: Insecure data handling

2021-03-09 Thread Mark Lumsden
Thanks Todd. I'll pass your analysis on to Joachim. Date: Tue, 09 Mar 2021 14:14:33 -0700 From: Todd C. Miller To: Mark Lumsden Cc: tech@openbsd.org Subject: Re: mg: Fix Coverity Scan warning: Insecure data handling On Tue, 09 Mar 2021 20:14:19 +, Mark Lumsden wrote: Here is a diff

Update en_US.UTF-8.src to Unicode Version 13.0.0

2021-03-09 Thread Andrew Hewus Fresh
With the update to perl v5.32, we get Unicode 13 in base, which means we can update the table. This is the mechanical change from running the gen_ctype_utf8.l script. https://www.unicode.org/versions/Unicode13.0.0 Comments, OK? Index: share/locale/ctype/gen_ctype_utf8.pl

mg: Fix Coverity Scan warning: Insecure data handling

2021-03-09 Thread Mark Lumsden
Here is a diff from Joachim Wiberg's version of mg. "The strlcpy() function is guaranteed to never copy more than 'len - 1' bytes, so there is no need to check if we copied more. This is a bogus warning since the introduction of strlcpy()." Tested and seems reasonable. ok? Index: cinfo.c

Re: mg: Fix Coverity Scan warning: Insecure data handling

2021-03-09 Thread Theo de Raadt
Todd C. Miller wrote: > On Tue, 09 Mar 2021 20:14:19 +, Mark Lumsden wrote: > > > Here is a diff from Joachim Wiberg's version of mg. > > > > "The strlcpy() function is guaranteed to never copy more than 'len - 1' > > bytes, so there is no need to check if we copied more. This is a bogus >

Clear status line after killing or switching buffers

2021-03-09 Thread Mark Lumsden
From Joachim Wiberg's version of mg. "This patch makes sure to clear the status/echo line after killing and switching buffers by name. Otherwise the kill/switch prompt lingers" ok? It also adds back a CVS tag on the first line of buffer.c that I inadvertantly removed a while back. Index:

Re: quiz: Fix multi-line questions (trailing newline)

2021-03-09 Thread Todd C . Miller
On Tue, 09 Mar 2021 22:04:42 +0100, Christian Weisgerber wrote: > Thanks a lot for figuring this out! I finally got around to looking > at your patch. Once we have nul-terminated lines, appdstr() can > be replaced with realloc() and strlcat(). I don't think your use of qlen is safe since it is

Re: mg: Fix Coverity Scan warning: Insecure data handling

2021-03-09 Thread Todd C . Miller
On Tue, 09 Mar 2021 20:14:19 +, Mark Lumsden wrote: > Here is a diff from Joachim Wiberg's version of mg. > > "The strlcpy() function is guaranteed to never copy more than 'len - 1' > bytes, so there is no need to check if we copied more. This is a bogus > warning since the introduction of

Re: quiz: Fix multi-line questions (trailing newline)

2021-03-09 Thread Christian Weisgerber
Alex Karle: > Looking deeper, there is a bug in quiz(6) for datfiles with multi-line > answers. > > Specifically, the following quiz.db line: > > foo:\ > bar > > Is parsed into "foo:bar\n", which made it impossible to get right (since > the comparison was expecting a newline).

Re: unbound SERVFAIL *: all the configured stub or forward servers failed, at zone .

2021-03-09 Thread Greg Steuck
I have weak evidence that my network connection may be disappearing as my persistent ssh connections fall off during the same time. The cable modem is probably playing some stupid games. Greg Steuck writes: > ... until starting to fail with: > > Mar 9 00:53:18 alix unbound: [40947:0] error:

ifconfig.8: document veb(4)

2021-03-09 Thread Klemens Nanni
Simple addition of VEB right before BRIDGE. All text is copied from other already existing sections, i.e. link flag handling from TPMR and the rest from BIDGE. Contrary to BRIDGE, I deliberately added a synopsis for VEB such that there's a simple overwie, especially since veb(4) currently does

LibreSSL: extend the max. no. of SANs for avoid OOM error

2021-03-09 Thread Jan Klemkow
Hi, The verification of the https://ugos.ugm.ac.id certificate contains 2032 subject alt names which leads to the following error in LibreSSL. # openssl s_client -connect ugos.ugm.ac.id:443 ... verify error:num=17:out of memory ... The following diff sets the maximum number of SANs to the next

Re: systat(1) sticky help

2021-03-09 Thread Martijn van Duren
I send out an earlier version of this diff to Anindya with some positive feedback. Instead of claiming another binding, why not make help, order and view a toggle? I see no reason why this information should disappear on the next input. Seems to work fine in my testing. OK? martijn@ On Thu,

Re: unbound SERVFAIL *: all the configured stub or forward servers failed, at zone .

2021-03-09 Thread Stuart Henderson
On 2021/03/09 07:41, Greg Steuck wrote: > This setup worked for months until recently becoming temperamental. It > would run for a few hours: > > Mar 8 23:17:00 alix unbound: [40947:0] info: start of service (unbound > 1.13.0). > > ... until starting to fail with: > > Mar 9 00:53:18 alix

Re: ksh: [vi.c] "clear-screen" bug + patch

2021-03-09 Thread Todd C . Miller
On Tue, 09 Mar 2021 17:53:06 +0100, Benjamin Baier wrote: > Ping I think that in do_clear_screen() full should not be set unless neednl is 0. That is, we should only print the entire prompt if the screen was actually cleared. Otherwise looks good to me. - todd Index: bin/ksh/vi.c

Re: ksh: [vi.c] "clear-screen" bug + patch

2021-03-09 Thread Benjamin Baier
Ping On Sat, 21 Nov 2020 18:59:25 +0200 Πάτερος Πέτρος wrote: > Hello everyone, > > I am sending this because of an issue I had with a ported version of > your ksh(1) on Linux (you can find the port at > https://github.com/ibara/oksh), but everything I say here are also > tested on a VM

rpki-client simplify enqueue from MFT files

2021-03-09 Thread Claudio Jeker
Only .crl files need to be parsed first (the other file depend on the certificate revocation list to be present). Instead of many loops over the same fileset just do it twice. First for .crl and then for the other known file types. This should save some CPU cycles. -- :wq Claudio Index: main.c

unbound SERVFAIL *: all the configured stub or forward servers failed, at zone .

2021-03-09 Thread Greg Steuck
I configured unbound running on my LAN router (alix) to forward all requests over TLS to a bunch of places with: forward-zone: name: "." forward-tls-upstream: yes # Quad9 forward-addr: 2620:fe::fe@853#dns.quad9.net forward-addr: 9.9.9.9@853#dns.quad9.net forward-addr:

net80211: new Tx rate adaptation module (iwn + iwm)

2021-03-09 Thread Stefan Sperling
This implements a new rate adaptation module for net80211, called "RA", which resulted from a long discussion and exchanges of various diffs between Christian Ehrhardt and myself, targeting problems with MiRA. Tests with any of the various iwn(4) and iwm(4) devices are very welcome. The iwn and

Re: A curious case of disappearing iwx

2021-03-09 Thread Mark Kettenis
> Date: Mon, 8 Mar 2021 10:15:35 +0100 > From: Stefan Sperling > > On Sun, Mar 07, 2021 at 05:14:08PM -0800, Greg Steuck wrote: > > I had an iwx working fine (modulo known issues) for a bit on amd64 current: > > > > iwx0 at pci0 dev 20 function 3 "Intel Wi-Fi 6 AX201" rev 0x00, msix > > iwx0:

Re: sendsyslog kernel buffer

2021-03-09 Thread Alexander Bluhm
On Mon, Mar 08, 2021 at 11:55:30PM +0300, Vitaliy Makkoveev wrote: > This silently drops message if copyin() fails. Could we count them as > `logstash_dropped??? too? No, as there is no message. Userland made something wrong. At least that is how I understand one of visa@'s remarks. The

Re: Read `ps_single' once

2021-03-09 Thread Martin Pieuchot
On 08/03/21(Mon) 12:37, Claudio Jeker wrote: > On Mon, Mar 08, 2021 at 12:11:54PM +0100, Martin Pieuchot wrote: > [...] > > This diff targets a specific problem which is to make sure `ps_single' > > dereferences are coherent if this value is being modified w/o KERNEL_LOCK(). > > It doesn't

Re: A curious case of disappearing iwx

2021-03-09 Thread Stefan Sperling
On Sun, Mar 07, 2021 at 05:14:08PM -0800, Greg Steuck wrote: > I had an iwx working fine (modulo known issues) for a bit on amd64 current: > > iwx0 at pci0 dev 20 function 3 "Intel Wi-Fi 6 AX201" rev 0x00, msix > iwx0: hw rev 0x350, fw ver 48.1335886879.0, address xxx > > Then for no discernible

Re: malloc cache changes

2021-03-09 Thread Otto Moerbeek
On Tue, Mar 09, 2021 at 09:12:03AM +0100, Otto Moerbeek wrote: > Hi, > > I just committed a malloc change that is interesting. It has been in > snaps already for a while. > > It changes the malloc cache to be a little more friendly to the > kernel, mallocs tendency to split large allocations

malloc cache changes

2021-03-09 Thread Otto Moerbeek
Hi, I just committed a malloc change that is interesting. It has been in snaps already for a while. It changes the malloc cache to be a little more friendly to the kernel, mallocs tendency to split large allocations into page-sized ones was giving the kernel a hard time in some cases. By