Re: First release of LibreSSL portable is available.

2014-07-12 Thread Marc Espie
On Fri, Jul 11, 2014 at 11:07:10PM +, Miod Vallat wrote: it. As expected, OPENSSL does the opposite and makes life harder for everyone. Hasn't this been the OpenSSL roadmap since the very beginning? Jury is still out as whether they did it on purpose, or whether it was just a

Re: [PATCH] libressl: add dummy egd functions

2014-07-12 Thread Miod Vallat
I didn't know what egd was up until today, but reading what it is I completely understand that consideration. However, this breaks a number of packages (wget, python, ruby). There's probably a simple solution: Just add dummy functions that always return -1 (which according to the docs means

battleship puffy

2014-07-12 Thread Ted Unangst
Thanks to the ever attentive eyes of mlarkin, who spotted some unused code to print a battleship in battleship. Diff below enables printing the battleship, changes the name to the S.S. Puffy, and adds my attempt at a tiny ascii blowfish to the side. OK? Index: bs.c

open up random mmap

2014-07-12 Thread Ted Unangst
As seen in FreeBSD ASLR, we can open things up on 64-bit platforms. effects: alpha: limit to 1GB (maxdsiz/brksiz) amd64 and sparc64: limit to 4gb (8gb maxdsiz) Index: uvm_map.c === RCS file: /cvs/src/sys/uvm/uvm_map.c,v retrieving

Re: First release of LibreSSL portable is available.

2014-07-12 Thread Bob Beck
On Fri, Jul 11, 2014 at 9:52 PM, tekk t...@parlementum.net wrote: Thanks Bob and all the other LibreSSL hackers. Thanks - While I seem to have been quasi defaulted into the public face for this thing (probably due to size and volume) I hope you can emphasize the all the other hackers. Yes, I've

[PATCH] main symbol in libcrypto causes trouble

2014-07-12 Thread Hanno Böck
Hi, I had a number of compilation problems with packages when linking to libressl that I could trace back to the appearance of a main symbol in libcrypto.so. I'm far from an expert in dynamic linking and so-files, but afaik libraries shouldn't have a main function symbol. It came from

Re: [PATCH] main symbol in libcrypto causes trouble

2014-07-12 Thread Philip Guenther
On Sat, Jul 12, 2014 at 10:20 AM, Hanno Böck ha...@hboeck.de wrote: I had a number of compilation problems with packages when linking to libressl that I could trace back to the appearance of a main symbol in libcrypto.so. Hmm, can you please provide a detailed example of one of these?

Re: sk(4): jumbo mbufs and rxring accounting

2014-07-12 Thread David Gwynne
how about this? Index: if_sk.c === RCS file: /cvs/src/sys/dev/pci/if_sk.c,v retrieving revision 1.168 diff -u -p -r1.168 if_sk.c --- if_sk.c 19 Apr 2014 18:29:39 - 1.168 +++ if_sk.c 12 Jul 2014 08:29:20 - @@

Re: [PATCH] main symbol in libcrypto causes trouble

2014-07-12 Thread Hanno Böck
On Sat, 12 Jul 2014 10:29:31 +0200 Philip Guenther guent...@gmail.com wrote: On Sat, Jul 12, 2014 at 10:20 AM, Hanno Böck ha...@hboeck.de wrote: I had a number of compilation problems with packages when linking to libressl that I could trace back to the appearance of a main symbol in

Re: [PATCH] main symbol in libcrypto causes trouble

2014-07-12 Thread Ted Unangst
On Sat, Jul 12, 2014 at 10:43, Hanno Böck wrote: On Sat, 12 Jul 2014 10:29:31 +0200 Philip Guenther guent...@gmail.com wrote: On Sat, Jul 12, 2014 at 10:20 AM, Hanno Böck ha...@hboeck.de wrote: I had a number of compilation problems with packages when linking to libressl that I could

Re: lynx: disable old protocols

2014-07-12 Thread Craig R. Skinner
On 2014-07-11 Fri 03:03 AM |, Theo de Raadt wrote: If lynx was removed from base, and only available in ports... how many of you would even know of it's existance and use it? Several times a week I use lynx for http or local html docs. If it wasn't in base, I'd install it/some similar

Re: lynx: disable old protocols

2014-07-12 Thread Shawn K. Quinn
On Fri, 2014-07-11 at 03:03 -0600, Theo de Raadt wrote: If lynx was removed from base, and only available in ports... how many of you would even know of it's existance and use it? Not only would I know of its existence and go install it to use, I would wonder out loud why the hell it's not in

Re: lynx: disable old protocols

2014-07-12 Thread Theo de Raadt
If there's a security hole related to gopher or bibp, let's fix it, let's not up and drop support for those protocols because of it. People do use these protocols even in 2014. let's is a contraction for let us. Basically the community must audit lynx, if they want it to remain in base. Those

Re: CVS: cvs.openbsd.org: src

2014-07-12 Thread Martijn van Duren
Hello tech@, I just saw the commit message below. Currently I use the source functionality to determine whether I'm in my home network or not and use it to customize sndiod_flags to redirect sound to my main server. Is there an alternative to dynamically change the rc.conf flags based on my

Re: CVS: cvs.openbsd.org: src

2014-07-12 Thread Stuart Henderson
On 2014/07/12 14:04, Martijn van Duren wrote: Hello tech@, I just saw the commit message below. Currently I use the source functionality to determine whether I'm in my home network or not and use it to customize sndiod_flags to redirect sound to my main server. Is there an alternative to

Re: First release of LibreSSL portable is available.

2014-07-12 Thread Jan Engelhardt
CCLD openssl ../crypto/.libs/libcrypto.so: undefined reference to `clock_gettime' collect2: ld returned 1 exit status make[1]: *** [openssl] Error 1 Setting LDFLAGS to -lrt fixes the issue. Rather than LDFLAGS, it should be in LDADD/LIBADD. --8-- Subject: build: resolve link-time failure

Re: lynx: disable old protocols

2014-07-12 Thread Landry Breuil
On Sat, Jul 12, 2014 at 06:11:16AM -0500, Shawn K. Quinn wrote: On Fri, 2014-07-11 at 03:03 -0600, Theo de Raadt wrote: If lynx was removed from base, and only available in ports... how many of you would even know of it's existance and use it? Not only would I know of its existence and go

Re: CVS: cvs.openbsd.org: src

2014-07-12 Thread Theo de Raadt
I am however curious about the rational behind this change. Does it solve any particular problem/risk? I seldomly use this style in my own scripts when I need to be able to dynamically determine variables at runtime. So it might be wise to know what hidden daemons I might be facing. The

crash, stopped at uao_reference+0x88: movq %rcx,0x8(%rax)

2014-07-12 Thread Stuart Henderson
trace - stopped at uao_reference+0x88: movq %rcx,0x8(%rax) uao_reference at ..+0x88 uao_set_swslot at ..+0x55 uvmpd_scan_inactive at ..+0x681 uvmpd_scan at ..+0x23c uvm_pageout at ..+0x5b active process is pagedaemon screenshots at

Re: faster malloc in threads

2014-07-12 Thread Ted Unangst
On Fri, Jul 11, 2014 at 08:11, Ted Unangst wrote: I also think there's one simple case that can be added: the MMAP call at the bottom of map(). On further inspection, I think this needed a slight reordering to be safe. I have also been seeing random munmap errors running jruby: java(3451) in

Re: sk(4): jumbo mbufs and rxring accounting

2014-07-12 Thread Brad Smith
On 12/07/14 4:32 AM, David Gwynne wrote: how about this? Now it attaches without error but tcpdump shows no traffic coming in at all and there is regular traffic on the segment from spanning tree, CARP, RA, etc. $ vmstat -iz interrupt total rate schizo0:pci_a

Re: lynx: disable old protocols

2014-07-12 Thread Shawn K. Quinn
On Sat, 2014-07-12 at 06:11 -0500, Shawn K. Quinn wrote: If it's code bloat, I'd like to know just how much code we're talking about. Unless we're going to try to put Lynx on install media (and I am definitely not suggesting that we do), 1.7 megabytes really isn't all that big (it's actually

Re: lynx: disable old protocols

2014-07-12 Thread Jorge Castillo
Maybe I (and the other users who actually give a shit about having non-crippled software) should have switched to BitRig (or NetBSD, or maybe even something else) already. Good luck, I won't miss you!

Re: sk(4): jumbo mbufs and rxring accounting

2014-07-12 Thread David Gwynne
i think i'll try to find the sk at work and wire it up. its just annoying cos im pretty sure its sr optics with sc connectors. thanks for testing. On 13 Jul 2014, at 4:45 am, Brad Smith b...@comstyle.com wrote: On 12/07/14 4:32 AM, David Gwynne wrote: how about this? Now it attaches

divert(4) icmp length fix

2014-07-12 Thread Lawrence Teo
divert_output() has a basic sanity check to ensure that the m_pkthdr.len for reinjected packets is not shorter than the minimum length based on the protocol: if (p_hdrlen m-m_pkthdr.len off + p_hdrlen) goto fail; off is the length of the IP header, and p_hdrlen is the