Branch :
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
| b38ea368 | 2020-07-14 09:52:46 | Remove hyphen | ||
| 53fa2216 | 2020-07-14 09:49:42 | Add single space between pem and ... | ||
| f354b939 | 2020-07-14 09:46:17 | Add manual for openssl(1) certhash ok jmc@ | ||
| b7fdcd16 | 2020-07-13 14:03:52 | Cast to uschar when storing a char in an int that will be used as an index. Fixed as crash reported by Jan Stary when the input char has the high bit set and FS is a regex. | ||
| 9beba1fe | 2020-07-13 10:10:10 | Do not dereference NULL environment variable value, GitHub issue 2304. | ||
| c63a98fb | 2020-07-13 07:04:17 | Clarify /tmp permissions and use, GitHub issue 2300. | ||
| a2111520 | 2020-07-10 12:25:57 | Clean up s_client.c - Remove space between '*' and pointer variable. - Add function prototype. - Move callback function to bottom. - Move typedef struct to up. | ||
| 5042ef37 | 2020-07-10 12:05:52 | Change variable bio_c_out from global to local ok tb@ | ||
| 6369f9f8 | 2020-07-09 14:09:19 | Wrap long lines and put space in front of label in s_client.c | ||
| 6dcdcd8f | 2020-07-09 13:07:46 | Remove c_ prefix from s_client_config member | ||
| 10281ad2 | 2020-07-09 12:48:19 | Convert openssl(1) s_client option handling suggestions and ok beck@ jsing@ tb@ | ||
| d4d64747 | 2020-07-09 10:42:24 | Avoid NULL deref in regexec when searching for empty lines. Report & tweak from Hiltjo Posthuma | ||
| 09dd33a6 | 2020-07-08 16:05:27 | Clarify that csh's -f flag is not just about .cshrc. We don't need to be too specific about this in su(1), leave the details for csh(1). OK jca@ | ||
| 2c7f03ce | 2020-07-08 15:36:35 | Simplify csh vs other shells setup code ok millert@ | ||
| 3b2e3894 | 2020-07-08 10:35:06 | Teach su -l -f how to start a regular shell for non-csh shells su -l does nice things like reset the environment and change the home directory, but it also always starts the user's shell as a login shell (argv[0] == '-'). This is a problem for su -l consumers like rc.d, where e.g. /root/.profile is read by the shell before starting a daemon as root. This tends to blow up if the admin introduces side effects to /root/.profile (or /etc/profile). csh supports an -f flag to skip reading .cshrc and .login, and su already has special support for it. Similarly, teach su -l -f how to start a regular shell (not a login shell) for non-csh shells. Discussion started by robert@ during p2k19 and revived by ajacoutot@, help and ok kn@ millert@ | ||
| 0761eee7 | 2020-07-07 02:47:21 | correct recently broken comments | ||
| 277ea09d | 2020-07-06 17:11:29 | in 2014 I added this annotation: /* XXX floating point printf in signal handler */ our snprintf is reentrant safe except for floating point. Break the double apart into integer.integer notation, to avoid that. ok kettenis millert | ||
| 75fa0b37 | 2020-07-06 16:27:59 | Use mnemonic KERN_PROC_ALL not literal zero No object change. | ||
| 9764651b | 2020-07-06 10:07:02 | Do not eliminate redundant clears, the code is wrong and doing it correctly wouldn't be worth it. GitHub issue 2298. | ||
| d3c4e94b | 2020-07-06 09:14:20 | Add a way for control mode clients to subscribe to a format and be notified of changes rather than having to poll. GitHub issue 2242. | ||
| 7dbc9071 | 2020-07-06 07:27:39 | Always send xterm-style keys for M-Left and M-Right. GitHub issue 2296. | ||
| ab45bcde | 2020-07-06 07:09:50 | add kstat(8), the userland side of kstat(4). this currently just dumps all the kstats it can find and prints out their current values. in the future i want to be able to pass what kstats im intersted in as arguments, and tell it to poll stats and show rates instead of current values when appropriate. | ||
| 5bde2954 | 2020-07-05 23:59:45 | some language improvements; ok markus | ||
| fedaf9c8 | 2020-07-04 14:24:02 | kill-window -a cannot just walk the list of windows because if renumber-windows is on, the window it wants to keep could be moved. Change to renumber afterwards and also behave better if the window is linked into the session twice. GitHub issue 2287. | ||
| 5fbde59f | 2020-07-04 11:23:35 | Avoid malloc(3) calls in signal handler Fetch aborts through SIGINT (^C) print a message with fputs(3), but this calls malloc() on its own, which is not supported from interrupt handler context. Fix it by using write(2) which avoids further memory allocations. While here, merge abortfile() into the identical aborthttp() with a more generic "fetch aborted." message for simplicity. Spotted with vm.malloc_conf=SU and ^C on a port's "make fetch" causing ftp(49660) in malloc(): recursive call Abort trap (core dumped) OK jca (who came up with using write(2) independently) | ||
| 7413ba97 | 2020-07-04 10:18:49 | Fix a double free in error paths Consistently disarm the SIGINT handler on error, else a SIGINT can lead to taking twice the cleanup path. Initial report by naddy@, ok tb@ | ||
| 48a839a8 | 2020-07-03 10:12:26 | update setproctitle after re-exec; ok djm | ||
| 161d8759 | 2020-07-03 10:11:33 | keep ignoring HUP after fork+exec; ok djm | ||
| 1f30ac4a | 2020-07-03 10:10:17 | don't exit the listener on send_rexec_state errors; ok djm | ||
| e62bf3fe | 2020-07-03 07:25:18 | put back the mux_ctx memleak fix, but only for channels of type SSH_CHANNEL_MUX_LISTENER; Specifically SSH_CHANNEL_MUX_PROXY channels should not have this structure freed. | ||
| 7f46b878 | 2020-07-03 07:17:35 | revert r1.399 - the lifetime of c->mux_ctx is more complex; simply freeing it here causes other problems | ||
| 5fa80ee2 | 2020-07-03 07:07:50 | Missing word, from annihilannic at hotmail dot com, GitHub issue 2288. | ||
| 93695d2e | 2020-07-03 07:02:37 | avoid tilde_expand_filename() in expanding ~/.ssh/rc - if sshd is in chroot mode, the likely absence of a password database will cause tilde_expand_filename() to fatal; ok dtucker@ | ||
| 340c217a | 2020-07-03 07:00:12 | Check if client is NULL before using it, GitHub issue 2295. | ||
| 15cdcbfc | 2020-07-03 06:46:41 | when redirecting sshd's log output to a file, undo this redirection after the session child process is forked(); ok dtucker@ | ||
| f9b867c0 | 2020-07-03 06:29:57 | start ClientAliveInterval bookkeeping before first pass through select() loop; fixed theoretical case where busy sshd may ignore timeouts from client; inspired by and ok dtucker | ||
| f9fc3af8 | 2020-07-03 05:09:06 | Only reset the serveralive check when we receive traffic from the server and ignore traffic from a port forwarding client, preventing a client from keeping a connection alive when it should be terminated. Based on a patch from jxraynor at gmail.com via openssh-unix-dev and bz#2265, ok djm@ | ||
| 61af28a8 | 2020-07-03 05:08:41 | fix memory leak of mux_ctx; patch from Sergiy Lozovsky via bz3189 ok dtucker | ||
| e0053a0b | 2020-07-02 19:06:22 | Update awk to July 2, 2020 version. | ||
| 35e6b843 | 2020-07-01 16:28:31 | free kex in ssh_packet_close; ok djm semarie | ||
| 642fe9d3 | 2020-07-01 13:32:27 | Fix regression with changed SUBSEP in subscript in version 20191024. The length of SUBSEP needs to be rechecked after calling execute(), in case SUBSEP itself has been changed. From tim@ | ||
| ad6e151f | 2020-07-01 13:26:54 | Fix concatenation regression introduced in version 20201024. Concatenation evaluated both sides of the expression before doing its work, which, since assign() evaluates to the cell being assigned to, meant that expressions like "print (a = 1) (a = 2)" would print "22" rather than "12". From Tim van der Molen | ||
| 08542baa | 2020-07-01 05:57:52 | update currency exchanges rates; | ||
| 9b9b25be | 2020-06-30 19:26:40 | Fix two minor issues in snmpc_parseagent. | ||
| 3b3b4fa8 | 2020-06-30 14:27:02 | Fix potential out-of-bounds copy; spotted by Jakub Jirasek, Secunia Research at Flexera. ok deraadt@ | ||
| ab2c7ff4 | 2020-06-29 19:16:59 | Support the "powerpc64" architecture name. The first file using it in .Dt was just committed by kettenis@. | ||
| 8cfec971 | 2020-06-29 15:53:28 | Replace TAILQ concatenation loop with TAILQ_CONCAT As a result remove unneeded variables OK @nicm | ||
| c80f17de | 2020-06-28 08:21:27 | Add powerpc64 bits. From drahn@ | ||
| 4f3fcc39 | 2020-06-28 05:21:38 | Allow switching between alternate devices (-F option) with sndioctl(1) | ||
| 49f67e12 | 2020-06-28 05:17:25 | Add a new SIOCTL_SEL control type to select one of a predefined set of mutually exclusive values. It's the same as SIOCTL_LIST except that exactly one list element may be selected. | ||
| 42fb2d3d | 2020-06-27 14:04:58 | Improve description of field splitting and document FS special cases. OK jmc@ kn@ | ||
| 4736eae8 | 2020-06-27 13:39:09 | Replace TAILQ concatenation loops with TAILQ_CONCAT OK djm@ | ||
| b4edb009 | 2020-06-27 10:23:10 | Check for no pane border status line separately from top/bottom. | ||
| 483f88ea | 2020-06-27 10:19:59 | Fix 0x Unicode character parsing, GitHub issue 2286. | ||
| 7ee3686f | 2020-06-27 01:09:57 | Add missing scroll keys to help page, name default signale for kill command The order of commands is not in sync between help page and manual, but I refrained from reordering to avoid churn. OK millert | ||
| 54161677 | 2020-06-26 21:50:06 | Document that FS is applied at the time the input line is read. Previously, our awk suffered from a bug where FS was applied too late. This fix has the potential to cause problems for awk scripts written to the old (buggy) behavior. The current behavior is consistent with other awk implementations such as mawk and gawk. | ||
| 859f4dcd | 2020-06-26 20:55:55 | Remove duplicate initialisation Those are global variables are (zero) initialised as such already and machine_init() is called only once upon startup. OK mvs | ||
| 143054fa | 2020-06-26 19:51:14 | Switch cdio's default CDDB database to gnudb.gnudb.org:8880. The freedb.org CD track database has been discontinued. Retire cddb/888 from /etc/services. Nothing uses this any longer. gnudb.org uses the "cddbp-alt" port of 8880, but we don't need a services(5) entry for a single site. ok deraadt@ | ||
| 115bd590 | 2020-06-26 15:57:39 | Update awk to June 25, 2020 version. | ||
| 0b359418 | 2020-06-26 15:50:06 | Update awk to June 12, 2020 version. | ||
| f1abb718 | 2020-06-26 11:26:01 | backout 1.293 fix kex mem-leak in ssh_packet_close at markus request the change introduced a NULL deref in sshpkt_vfatal() (uses of ssh->kex after calling ssh_packet_clear_keys()) | ||
| c0c93af8 | 2020-06-26 07:28:46 | Fix merging of files that lack newlines for diff(3), OpenRCS, and OpenCVS. Merges with a file that lacks newlines (\n) were triggering a fatal error. This could be easily reproduced with merge(1) and diff3(1): $ echo foo > foo $ echo bar > bar $ echo -n baz > baz $ merge -p foo bar baz merge: failed to merge $ diff3 -E foo bar baz 1a ======= diff3prog: logic error $ Fix this by properly handling short reads from the third file argument. Only the third file argument triggered the problem. The other input files were already handled correctly. ok millert@ | ||
| bb29c683 | 2020-06-26 05:42:16 | avoid spurious error message when ssh-keygen creates files outside ~/.ssh; with dtucker@ | ||
| fa5ce6d1 | 2020-06-26 05:16:38 | handle EINTR in waitfd() and timeout_connect() helpers; bz#3071; ok dtucker@ | ||
| e6d0367b | 2020-06-26 05:04:07 | allow "ssh-add -d -" to read keys to be deleted from stdin bz#3180; ok dtucker@ | ||
| 9f201044 | 2020-06-26 05:03:36 | constify a few things; ok dtucker (as part of another diff) | ||
| 2f0dab92 | 2020-06-26 05:02:03 | Defer creation of ~/.ssh by ssh(1) until we attempt to write to it so we don't leave an empty .ssh directory when it's not needed. Use the same function to replace the code in ssh-keygen that does the same thing. bz#3156, ok djm@ | ||
| e9de182e | 2020-06-26 04:45:11 | Expand path to ~/.ssh/rc rather than relying on it being relative to the current directory, so that it'll still be found if the shell startup changes its directory. Since the path is potentially longer, make the cmd buffer that uses it dynamically sized. bz#3185, with & ok djm@ | ||
| 9602517c | 2020-06-25 20:38:41 | Remove unused "remaining" member in struct handle Only ever set or decremented since import with machine.c r1.1 (1997); While here, simplify the skip semantics behind the scroll functionality. OK millert | ||
| 24952465 | 2020-06-25 08:56:02 | Silently ignore -a or -b if the window index doesn't exist and create using that index (this is how it used to work), reported by Romain Francoise. | ||
| 2ef60407 | 2020-06-24 23:56:01 | Remove obsolete comment about "extra nulls" Those were removed in r1.39 in 2004. | ||
| 6da97446 | 2020-06-24 19:19:03 | replace mixerctl with sndioctl; from benjamin baier ratchov says it's good | ||
| 5756a0dd | 2020-06-24 15:12:09 | fix kex mem-leak in ssh_packet_close; ok djm | ||
| ee5a30bc | 2020-06-24 15:10:38 | fix ssh -O proxy w/mux which got broken by no longer making ssh->kex optional in packet.c revision 1.278 ok djm@ | ||
| 0f0c3a74 | 2020-06-24 15:09:53 | support loading big sshd_config files w/o realloc; ok djm | ||
| 1078c5cb | 2020-06-24 15:08:53 | allow sshd_config longer than 256k; ok djm | ||
| 727cc923 | 2020-06-24 15:07:33 | only call sshkey_xmss_init() once for KEY_XMSS_CERT; ok djm | ||
| 6088410e | 2020-06-23 21:39:19 | Fix COMMAND description There is no code anymore that puts angle brackets around swapped out processes, machine.c r1.54 removed this in 2006. Typo in first diff spotted by Matthew Martin, OK jmc (who also pointed out the CVS commit) | ||
| 95d22dee | 2020-06-23 19:12:47 | Remove redundant NULL check For the sake of simplicity and to reflect that the process list is always sorted (default is "cpu"), even if not explicitly requested; this makes it easier to argue about the code around sort order and its selection. OK millert | ||
| 4cbae565 | 2020-06-23 16:54:40 | When parsing a character class don't increment openclass for a literal '['. This allows expressions like '/[[/[]/' to parse which are also allowed by gawk. | ||
| 236e997d | 2020-06-23 14:10:43 | Correctly redraw pane border bottom line when the status line is on and at the bottom, reported by Kaushal Modi. | ||
| 3f317fb6 | 2020-06-23 05:23:26 | Use xvasprintf not vasprintf. | ||
| 385c31a1 | 2020-06-22 23:44:27 | some clarifying comments | ||
| 4b10dfa3 | 2020-06-22 13:38:43 | change "East Tupelo" reference to just "Tupelo"; from carson chittom | ||
| a0c9473e | 2020-06-22 13:17:54 | Document "s" command OK jmc | ||
| 0484a20f | 2020-06-22 13:17:00 | Remove ^Z mention Suspending systat with ^Z is done by the shell iff job control is enabled, not systat itself. Try "set +m" to disable job control or start systat in a terminal without a shell, e.g. "xterm -e systat", to confirm ^Z doing nothing in these cases. OK jmc | ||
| c8e8385e | 2020-06-22 06:37:38 | updated argument name for -P in first synopsis was missed in previous; | ||
| 81f80cbb | 2020-06-22 06:36:40 | supply word missing in previous; | ||
| c25c45ac | 2020-06-22 05:58:35 | Add support for FIDO webauthn (verification only). webauthn is a standard for using FIDO keys in web browsers. webauthn signatures are a slightly different format to plain FIDO signatures - this support allows verification of these. Feedback and ok markus@ | ||
| 4d740d45 | 2020-06-22 05:56:23 | refactor ECDSA-SK verification a little ahead of adding support for FIDO webauthn signature verification support; ok markus@ | ||
| d5e61526 | 2020-06-22 05:54:10 | support for RFC4648 base64url encoding; ok markus | ||
| 3d7583bd | 2020-06-22 05:53:26 | better terminology for permissions; feedback & ok markus@ | ||
| 4c17521e | 2020-06-22 05:52:05 | better terminology for permissions; feedback & ok markus@ | ||
| 9568abe4 | 2020-06-22 01:02:30 | plug the wireguard ioctls in. | ||
| a223afa9 | 2020-06-21 05:59:56 | add neil peart; from matthew j. c. clarke | ||
| 3f8a9645 | 2020-06-20 09:59:48 | Avoid one uninitialized warning in file_get() | ||
| 4b701285 | 2020-06-19 07:21:42 | Correct synopsis and usage for the options accepted when passing a command to ssh-agent. ok jmc@ | ||
| 92a7c86f | 2020-06-18 23:34:19 | check public host key matches private; ok markus@ (as part of previous diff) | ||
| 158bd5dc | 2020-06-18 23:33:38 | avoid spurious "Unable to load host key" message when sshd can load a private key but no public counterpart; with & ok markus@ | ||
| 3f192e30 | 2020-06-18 08:41:56 | The redraw callback could be fired with a NULL pane if it updates while in a mode, problem reported by Martin Vahlensieck. |