CVS: cvs.openbsd.org: src

2024-07-28 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/28 09:31:22

Modified files:
bin/csh: csh.c proc.c sem.c 

Log message:
block SIGHUP in the same places where SIGCHLD is blocked to protect
the process lists, because the SIGHUP handler looks at them (and
it is very difficult to rewrite the that handler a different way)
ok millert



CVS: cvs.openbsd.org: src

2024-07-26 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/26 21:26:12

Modified files:
sys/dev/mii: miidevs.h 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-26 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/26 21:26:04

Modified files:
sys/dev/mii: miidevs 

Log message:
shorten strings by removing pointless information
ok jsg



CVS: cvs.openbsd.org: xenocara

2024-07-25 Thread Theo de Raadt
CVSROOT:/cvs
Module name:xenocara
Changes by: dera...@cvs.openbsd.org 2024/07/25 19:40:41

Modified files:
distrib/sets/lists/xserv: md.powerpc64 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-25 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/25 19:38:59

Modified files:
distrib/sets/lists/base: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-21 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/21 10:19:25

Modified files:
sys/arch/amd64/amd64: vector.S 

Log message:
A few manual ret-cleans.  Seeing as these pertain to interrupt servicing,
the stack utilization ends up near the the deep end of the stack where,
retcleans are useful. tested for a while in snaps
ok bluhm



CVS: cvs.openbsd.org: src

2024-07-19 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/19 08:32:56

Modified files:
distrib/sets/lists/comp: md.armv7 

Log message:
sync



Re: CVS: cvs.openbsd.org: src

2024-07-18 Thread Theo de Raadt
Todd C. Miller  wrote:

> CVSROOT:  /cvs
> Module name:  src
> Changes by:   mill...@cvs.openbsd.org 2024/07/18 09:38:57
> 
> Modified files:
>   lib/libc/sys   : link.2 
> 
> Log message:
> The source of a link (name1) may not be a directory.
> 
> POSIX says this is implementation-dependent; OpenBSD does not allow
> it.  OK guenther@
> 


it's so dumb.


Where is the code in cp(1) to handle the filesystem being a graph?

Why is that code also missing in find(1)?

Is that code in rsync?

It's nowhere.  Programs expect the filesystem to be a tree, not a graph.



CVS: cvs.openbsd.org: src

2024-07-18 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/18 05:21:10

Modified files:
distrib/sets/lists/comp: md.landisk 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-17 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/17 08:57:59

Modified files:
distrib/sets/lists/comp: md.macppc 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-17 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/17 05:20:24

Modified files:
usr.sbin/radiusd/radiusd: Makefile 
usr.sbin/radiusd/radiusd_eap2mschap: Makefile 
usr.sbin/radiusd/radiusd_standard: Makefile 

Log message:
minor repairs



CVS: cvs.openbsd.org: src

2024-07-16 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/16 02:25:47

Modified files:
distrib/sets/lists/base: mi 
distrib/sets/lists/comp: md.octeon 
distrib/sets/lists/man: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-15 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/15 23:01:10

Modified files:
bin/ed : ed.h io.c main.c 

Log message:
Fix the SIGHUP signal race.  ed's "event loop" operates a getchar(); check
the hup flag before and after that call, when the buffer structures are stable
for write_file() to work.  Remove the hup handling from the SPL0() macro,
because this is run in at least one place during structure instability.
The SIGINT handler, which uses siglongjmp(), is also trusting the SPL1/SPL0
dance more than it should.
ok millert



CVS: cvs.openbsd.org: src

2024-07-14 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/14 03:41:43

Modified files:
distrib/sets/lists/comp: mi 

Log message:
sync



CVS: cvs.openbsd.org: www

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/07/12 09:27:48

Modified files:
.  : hackathons.html 

Log message:
accuracy



CVS: cvs.openbsd.org: www

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/07/12 08:57:29

Modified files:
.  : hackathons.html 

Log message:
re-align columns



CVS: cvs.openbsd.org: src

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/12 08:30:27

Modified files:
bin/dd : dd.c extern.h misc.c position.c 

Log message:
refactor the signal handlers for clarity, inverting the situation:
the signal handler was calling a big function which is shared between
multiple contexts -- that hides the rule that this big function has
signal safe requirements (which it fails).  now, the signal handler
contains all the code, and everyone else calls the signal handler function
as a regular function, from their (normal) contexts.
the signal handler context is the most strict, so this pattern is better.
ok florian



CVS: cvs.openbsd.org: src

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/12 07:10:58

Modified files:
sys/arch/amd64/amd64: mptramp.S 

Log message:
manual ret-clean; ok mlarkin



CVS: cvs.openbsd.org: src

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/12 05:01:40

Modified files:
lib/libc/gen   : signal.3 
lib/libc/sys   : sigaction.2 

Log message:
Improve signal handlers guidance.
ok beck kettenis, earlier versions jmc



CVS: cvs.openbsd.org: src

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/12 02:21:07

Modified files:
distrib/sets/lists/base: md.arm64 
distrib/sets/lists/comp: md.arm64 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/12 01:22:44

Modified files:
bin/dd : misc.c 

Log message:
annotate broken signal handler



CVS: cvs.openbsd.org: src

2024-07-12 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/12 01:15:28

Modified files:
usr.bin/openssl: speed.c 

Log message:
use sigaction() to setup SIGARLM so we can set SA_RESTART, and
remove the re-arming in the handler.  Better than using siginterrupt(),
and avoids the errno saving requirement in the handler also.
ok guenther millert



CVS: cvs.openbsd.org: src

2024-07-11 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/11 06:15:25

Modified files:
distrib/sets/lists/comp: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-11 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/11 03:41:07

Modified files:
distrib/sets/lists/comp: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-11 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/11 01:40:03

Modified files:
sys/arch/macppc/stand/ofwboot: Makefile 

Log message:
umoddi3.c is now needed for libz



CVS: cvs.openbsd.org: src

2024-07-10 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/10 04:34:40

Modified files:
distrib/sets/lists/base: mi 
distrib/sets/lists/man: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-09 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/09 05:21:44

Modified files:
usr.bin/openssl: speed.c 

Log message:
do not need to force bss values to 0



CVS: cvs.openbsd.org: src

2024-07-09 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/09 05:15:58

Modified files:
sys/arch/amd64/amd64: vmm_support.S 

Log message:
do a manual ret-clean operation inside the vmm_dispatch_intr asm code
ok mlarkin



CVS: cvs.openbsd.org: src

2024-07-09 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/09 01:51:09

Modified files:
usr.bin/openssl: speed.c 

Log message:
KNF a pile of else if blocks; ok tb



CVS: cvs.openbsd.org: src

2024-07-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/02 10:18:45

Modified files:
distrib/sets/lists/man: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-07-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/02 10:18:11

Modified files:
usr.sbin/radiusd: Makefile Makefile.inc 
usr.sbin/radiusd/radiusd_bsdauth: Makefile 
usr.sbin/radiusd/radiusd_radius: Makefile 
usr.sbin/radiusd/radiusd_standard: Makefile 

Log message:
minor cleanups, especially DPADD



CVS: cvs.openbsd.org: src

2024-07-01 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/01 12:52:22

Modified files:
usr.bin/openssl: speed.c 

Log message:
signal handler must use the save_errno dance, and massage a variable
of type 'volatile sig_atomic_t'
ok tb



CVS: cvs.openbsd.org: src

2024-07-01 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/07/01 12:43:50

Modified files:
usr.bin/bgplg  : misc.c 

Log message:
missing save_errno dance inside non-terminal signal handler



CVS: cvs.openbsd.org: src

2024-06-30 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/30 12:17:10

Modified files:
distrib/special/gzip: Makefile 
sys/arch/amd64/stand/boot: Makefile 
sys/arch/amd64/stand/cdboot: Makefile 
sys/arch/amd64/stand/efiboot: Makefile.common 
sys/arch/amd64/stand/pxeboot: Makefile 
sys/arch/arm64/stand/efiboot: Makefile 
sys/arch/armv7/stand/efiboot: Makefile 
sys/arch/i386/stand/boot: Makefile 
sys/arch/i386/stand/cdboot: Makefile 
sys/arch/i386/stand/pxeboot: Makefile 
sys/arch/riscv64/stand/efiboot: Makefile 
sys/lib/libz   : Makefile zutil.h 

Log message:
we don't need the NOBYFOUR space-savings option anymore, that codepath
was replaced a while ago.
ok tb



CVS: cvs.openbsd.org: src

2024-06-30 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/30 11:30:54

Modified files:
distrib/sets/lists/base: mi 
distrib/sets/lists/man: mi 
etc: Makefile 
sbin   : Makefile 
Removed files:
etc/examples   : dhclient.conf 
sbin/dhclient  : Makefile bpf.c clparse.c conflex.c dhclient.8 
 dhclient.c dhclient.conf.5 dhclient.leases.5 
 dhcp.h dhcpd.h dhctoken.h dispatch.c kroute.c 
 log.c log.h options.c packet.c parse.c 
 privsep.c privsep.h 

Log message:
delete dhclient(8).  ipv4 dhcp leases have been acquired by the
always-running-in-background dhcpleased(8) for a while, which is
activated per-interface with "ifconfig $if autoconf', or
"ifconfig $if inet autoconf", or with "inet autoconf" in /etc/hostname.$if
dhclient(8) has done execve(3) of ifconfig(8) to handle this for a while,
so everyone has moved to the dhcpleased(8) method
ok florian



CVS: cvs.openbsd.org: www

2024-06-28 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/06/28 12:10:48

Modified files:
.  : innovations.html 

Log message:
comments on -fret-clean for amd64



CVS: cvs.openbsd.org: src

2024-06-26 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/26 17:16:52

Modified files:
usr.bin/ssh: sshd-session.c 

Log message:
Instead of using possibly complex ssh_signal(), write all the parts
of the grace_alarm_handler() using the exact things allowed by the
signal-safe rules.  This is a good rule of thumb: Handlers should
be written to either set a global volatile sig_atomic_t inspected
from outside, and/or directly perform only safe operations listed
in our sigaction(2) manual page.
ok djm markus



CVS: cvs.openbsd.org: src

2024-06-26 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/26 17:14:14

Modified files:
usr.bin/ssh: scp.c sftp.c 

Log message:
save_errno wrappers inside two small signal handlers that perform
system calls, for systems with libc that do perform libc sigtramps.
ok djm markus



CVS: cvs.openbsd.org: src

2024-06-24 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/24 08:39:28

Modified files:
lib/libc/sys   : swapctl.2 

Log message:
changing EINVAL from "has no associated size" to "has insufficient size"
does a better job of covering the case of partition not configured
(size = 0) or other too-small decision the kernel may make



CVS: cvs.openbsd.org: src

2024-06-22 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/22 11:19:05

Modified files:
lib/libc/sys   : sigaltstack.2 

Log message:
lower parts of the manual page clearly say why using malloc() to
allocate sigaltstack regions is bad... so the example code should
not use malloc()...
ok semarie



CVS: cvs.openbsd.org: src

2024-06-22 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/22 06:38:32

Modified files:
share/man/man4/man4.i386: pcibios.4 

Log message:
delete ancient netbsd pcibios tweaking trash



CVS: cvs.openbsd.org: src

2024-06-22 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/22 06:26:17

Modified files:
sys/sys: exec_elf.h 

Log message:
correct elfcore_procinfo naming (in comments)



CVS: cvs.openbsd.org: src

2024-06-17 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/17 19:31:48

Modified files:
distrib/arm64/iso: Makefile 

Log message:
grow the iso again



CVS: cvs.openbsd.org: src

2024-06-09 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/09 11:24:19

Modified files:
distrib/alpha/iso: Makefile 
distrib/amd64/iso: Makefile 
distrib/arm64/iso: Makefile 
distrib/hppa/iso: Makefile 
distrib/i386/iso: Makefile 
distrib/macppc/iso: Makefile 
distrib/octeon/iso: Makefile 
distrib/powerpc64/iso: Makefile 
distrib/riscv64/iso: Makefile 
distrib/sparc64/iso: Makefile 

Log message:
include BUILDINFO file in the iso/img files; requested by florian for 
sysupgrade changes



CVS: cvs.openbsd.org: src

2024-06-07 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/07 07:23:30

Modified files:
usr.bin/ssh: srclimit.c 

Log message:
avoid shadowing issues which some compilers won't accept
ok djm



CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/06 23:17:34

Modified files:
sys/arch/amd64/conf: Makefile.amd64 

Log message:
ret-clean is compatible with unhibernate again, due to a fix in
LLVM X86RetClean.cpp
issue observed by mglocker, diagnosed by mlarkin, kettenis, guenther.



CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/06 23:16:32

Modified files:
gnu/llvm/llvm/lib/Target/X86: X86RetClean.cpp 

Log message:
Inside LLVM, Functions become marked with exposesReturnsTwice() if they
call a setjmp-type function (protyped with __attribute__((returns_twice)).

LLVM anticipates the longjmp type function will perform a direct branch
back (rather of a push;ret combo, almost certainly due to CET
shadow-stack coherency difficulties).  Since we have CET/IBT enforced,
LLVM makes that direct branch legal by placing an endbr64 immediately
after the callq.  Where I was placing the ret-clean sequence... this blows
up badly, in unhibernate / resume situations.

In the Functions marked exposesReturnsTwice(), skip doing ret-clean.
(placing the ret-clear after that endbr64 is much more difficult)
observed by mglocker, diagnosed by mlarkin, kettenis, guenther.



CVS: cvs.openbsd.org: src

2024-06-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/05 14:19:26

Modified files:
sys/arch/amd64/conf: Makefile.amd64 

Log message:
disable -fret-clean in the kernel until the returns_twice situation is handled



CVS: cvs.openbsd.org: src

2024-06-03 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/03 11:58:33

Modified files:
sbin/dhcpleased: engine.c frontend.c log.h parse.y 
sbin/slaacd: engine.c frontend.c 

Log message:
more sleepy florian knf issues



CVS: cvs.openbsd.org: src

2024-06-03 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/03 09:53:26

Modified files:
sbin/dhcp6leased: dhcp6leased.c engine.c frontend.c parse.y 

Log message:
more whitespace and knf



CVS: cvs.openbsd.org: src

2024-06-03 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/03 08:11:31

Modified files:
distrib/sets/lists/base: mi 
distrib/sets/lists/man: mi 

Log message:
sort



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 21:41:47

Modified files:
sys/kern   : kern_pledge.c 

Log message:
avoid shadowing a local variable in a lower scope



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 12:47:17

Modified files:
usr.sbin/crunchgen: crunchgen.c 

Log message:
ugh, another typo; spotted by naddy



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 12:01:37

Modified files:
usr.sbin/crunchgen: crunchgen.c 

Log message:
oops typo



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 10:00:07

Modified files:
distrib/amd64/iso: Makefile 

Log message:
Grow amd64 install*.{iso,img} because -fret-clean *.tgz sets are a tiny
bit bigger.



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 09:55:36

Modified files:
usr.sbin/crunchgen: crunchgen.c 

Log message:
Due to growth, crunchgen must also try to block -fret-clean, so also use
COPTS+=-fno-ret-clean



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 09:54:03

Modified files:
distrib/special: Makefile.inc 

Log message:
Due to growth we can't allow -fret-clean behaviour in distrib/special,
so use COPTS+=-fno-ret-clean



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 09:42:19

Added files:
gnu/llvm/llvm/lib/Target/X86: X86RetClean.cpp 

Log message:
add -fret-clean option (amd64 and i386 only at first), defaulting to off.
This causes the caller to cleans the return address off the stack after
a callq completes.  The option is best used in low-level libraries (such as
libc), because libc contains low-level system call stubs.  The option
reduces hints (found on the stale parts of the stack) about libc.so's mapping
location, and together with random-relinking, relro got/pic, and xonly
makes some exploit methods more difficult.
ok mortimer, mlarkin, much discussion with kettenis, in snaps for 2 weeks.



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 09:40:43

Modified files:
gnu/llvm/clang/include/clang/Driver: Options.td 
gnu/llvm/clang/lib/Driver/ToolChains: Clang.cpp 
gnu/llvm/llvm/lib/Target/X86: X86.h X86TargetMachine.cpp 
gnu/usr.bin/clang/libLLVMX86CodeGen: Makefile 
share/man/man1 : clang-local.1 

Log message:
add -fret-clean option (amd64 and i386 only at first), defaulting to off.
This causes the caller to cleans the return address off the stack after
a callq completes.  The option is best used in low-level libraries (such as
libc), because libc contains low-level system call stubs.  The option
reduces hints (found on the stale parts of the stack) about libc.so's mapping
location, and together with random-relinking, relro got/pic, and xonly
makes some exploit methods more difficult.
ok mortimer, mlarkin, much discussion with kettenis, in snaps for 2 weeks.



CVS: cvs.openbsd.org: src

2024-06-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/06/02 09:31:57

Modified files:
sys/kern   : kern_pledge.c 
sys/uvm: uvm_map.c 
sys/sys: syscall_mi.h 

Log message:
pledge, MAP_STACK, and pinsyscall failures have been providing failure
visibility with kernel printf(9) (thus, onto console and into dmesg) since
the start of development.  I want to reduce the dmesg spam, and bring
this more into the attention of the user who ran the command, so let's
try using uprintf(9) which puts it onto the active foreground tty (yes,
there maybe cases where there is no tty, but that's ok.  I'll admit
I've considered deleting the logging messages entirely)
tested in snaps for a week



CVS: cvs.openbsd.org: src

2024-05-27 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/27 07:27:06

Modified files:
distrib/sets/lists/comp: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-05-24 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/24 12:15:12

Modified files:
distrib/sets/lists/comp: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-05-24 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/24 10:35:12

Modified files:
distrib/sets/lists/base: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-05-17 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/17 00:11:55

Modified files:
libexec/ld.so  : util.h 

Log message:
use SIGKILL instead of 9; ok guenther



CVS: cvs.openbsd.org: src

2024-05-17 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/17 00:11:17

Modified files:
usr.bin/ssh: misc.c 

Log message:
-Werror was turned on (probably just for development), and this is a
simple way to satisfy older gcc.



CVS: cvs.openbsd.org: src

2024-05-16 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/16 18:33:57

Modified files:
distrib/sets/lists/base: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-05-16 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/16 18:33:43

Modified files:
etc: rc 

Log message:
run the sshd-session link kit also



CVS: cvs.openbsd.org: src

2024-05-16 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/16 18:33:25

Modified files:
usr.bin/ssh/sshd-session: Makefile 

Log message:
construct and install a relink-kit for sshd-session
ok djm



CVS: cvs.openbsd.org: src

2024-05-15 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/15 11:09:26

Modified files:
distrib/sets/lists/comp: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-05-06 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/05/06 18:44:02

Modified files:
distrib/sets/lists/comp: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-04-29 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/29 15:32:10

Modified files:
sys/arch/powerpc64/conf: GENERIC 

Log message:
em(4) will work



CVS: cvs.openbsd.org: src

2024-04-28 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/28 07:12:31

Modified files:
distrib/sets/lists/man: mi 

Log message:
sync



Re: CVS: cvs.openbsd.org: src

2024-04-17 Thread Theo de Raadt
There's a long history of using loX interfaces for such things.

What might make sense is to restrict it on lo0 ?

>On Tue, Apr 16, 2024 at 08:37:49AM -0600, Florian Obser wrote:
>> CVSROOT: /cvs
>> Module name: src
>> Changes by:  flor...@cvs.openbsd.org 2024/04/16 08:37:49
>> 
>> Modified files:
>>  sys/netinet6   : in6.c 
>> 
>> Log message:
>> Destination addresses make no sense on loopback interfaces.
>> 
>> While here use (variable & FLAG) or !(variable & FLAG) consistently in
>> in6_update_ifa().
>> 
>> Discussed with claudio
>> OK denis
>
>This change introduced 15 regress failures, all related to inet6.
>
>   https://regress.basename.se/
>
>Excerpt from sys/net/mpath showing the symptom:
>
>   doas -n /sbin/ifconfig lo19 inet6 fc00::19 alias
>   ifconfig: lo19: SIOCIFAFATTACH: Invalid argument
>   ifconfig: SIOCAIFADDR: Invalid argument
>
>



CVS: cvs.openbsd.org: www

2024-04-10 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/10 14:23:56

Modified files:
.  : plus75.html 

Log message:
consistancy



CVS: cvs.openbsd.org: www

2024-04-10 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/10 07:06:40

Modified files:
.  : plus74.html 

Log message:
a missing link



CVS: cvs.openbsd.org: www

2024-04-09 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/09 20:18:14

Modified files:
.  : plus75.html 

Log message:
oops



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 12:01:56

Modified files:
lib/libpcap: bpf_image.c etherent.c gencode.c inet.c 
 nametoaddr.c optimize.c scanner.l 

Log message:
ANSI functions; ok tb



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 08:16:05

Modified files:
sys/uvm: uvm_mmap.c 

Log message:
delete msyscall stub



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 08:15:37

Modified files:
sys/sys: syscall.h syscallargs.h 
sys/kern   : init_sysent.c syscalls.c 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 08:15:13

Modified files:
sys/kern   : syscalls.master 

Log message:
msyscall(2) goes away



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 07:55:26

Modified files:
sys/kern   : kern_pledge.c 

Log message:
noone calls msyscall() anymore.



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 07:51:47

Modified files:
libexec/ld.so  : Makefile library.c library_mquery.c syscall.h 

Log message:
ld.so should stop calling msyscall(2), since it is fully neutered and
about to be removed.  Please be careful building through this, you need
a kernel at least March 29th or so to build through it, otherwise use
snapshots to cross over.
ok various people



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 06:58:49

Modified files:
sys/uvm: uvm_mmap.c 

Log message:
On machines lacking xonly support hardware, we emulate xonly in the
copyin(9) layer below system calls, using a 4-entry lookup; the 4th
entry is libc.so text. We were assuming, or rather insisting, that
on all our architectures libc.so text is treated as xonly, even if
the linker was behind in it's game.
Since msyscall(2) is gone, kernel no longer has information about the
start,len of libc.so text segment.  But we can instead use the (same)
start,len range of pinsyscalls() instead for this purpose.
ld.so is passing the same text-range to the kernel in this position.
regression tests run by anton discovered that libc.so text had become
copyin-readable.
ok kettenis



CVS: cvs.openbsd.org: src

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/05 06:51:15

Modified files:
sys/uvm: uvm_mmap.c 

Log message:
Esure the base,len range provided by ld.so is definately in the map.
Being outside the map doesn't seem like it can do anything bad.
Discussed with kettenis



CVS: cvs.openbsd.org: www

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/05 06:38:51

Modified files:
.  : index.html 

Log message:
point to right errata file



CVS: cvs.openbsd.org: www

2024-04-05 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/05 06:16:50

Modified files:
.  : plus.html 
Added files:
.  : plus75.html 

Log message:
more parts of the roll



CVS: cvs.openbsd.org: www

2024-04-04 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/04 20:10:25

Modified files:
.  : 75.html 

Log message:
fix date



CVS: cvs.openbsd.org: www

2024-04-04 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/04 20:00:52

Modified files:
.  : 75.html index.html 
Added files:
images : King_of_Kings-s.gif King_of_Kings.jpg 
 puffy75.gif 

Log message:
7.5 release, it is Apr 5 somewhere



CVS: cvs.openbsd.org: src

2024-04-03 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/03 09:21:03

Modified files:
distrib/sets/lists/comp: gcc.alpha gcc.hppa gcc.landisk 

Log message:
sync



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 22:36:53

Modified files:
lib/libc/gen   : syslog_r.c 

Log message:
Reading https://github.com/Geal/rust-syslog/issues/79, I came to a
related conclusion that our syslog_r should not stomp on errno.
The errno being returned from sendsyslog() isn't exactly compatible
with the what a legacy syslog_r() would do here anyways, and it is
better to just be void and non-stomping;
ok millert bluhm



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 06:22:38

Modified files:
usr.bin/ssh: ssh-pkcs11.c 

Log message:
Oops, incorrect hex conversion spotted by claudio.  While here try to
improve how it reads a bit better.  Surprising the regression tests
didn't spot this error, maybe it fails to roundtrip the values.



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 04:02:08

Modified files:
usr.bin/ssh: misc.c 

Log message:
for parse_ipqos(), use strtonum() instead of mostly idiomatic strtoul(),
but wow it's so gross.
ok djm



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 03:56:58

Modified files:
usr.bin/ssh: misc.c 

Log message:
can shortcut by returning strtonum() value directly; ok djm



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 03:52:14

Modified files:
usr.bin/ssh: misc.c 

Log message:
rewrite convtime() to use a isdigit-scanner and strtonum() instead of
strange strtoul can might be fooled by garage characters.
passes regress/usr.bin/ssh/unittests/misc
ok djm



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 03:32:28

Modified files:
usr.bin/ssh: ssh-pkcs11.c 

Log message:
Replace non-idiomatic strtoul(, 16) to parse a region of 2-character
hex sequences with a low-level replacement designed just for the task.
ok djm



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 03:29:31

Modified files:
usr.bin/ssh: addr.c 

Log message:
Use strtonum() instead of severely non-idomatic strtoul()
In particular this will now reject trailing garbage, ie. '12garbage'.
ok djm



CVS: cvs.openbsd.org: www

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:www
Changes by: dera...@cvs.openbsd.org 2024/04/02 02:45:41

Modified files:
.  : innovations.html 

Log message:
mention msyscall(2) in more detail, and then that it is being removed.
Should these manual page links use a release tag or something??



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 02:39:17

Modified files:
sys/sys: exec.h proc.h 
sys/kern   : exec_elf.c exec_subr.c init_main.c kern_exec.c 
sys/uvm: uvm.h uvm_extern.h uvm_map.c uvm_map.h 
 uvm_mmap.c 

Log message:
Delete the msyscall mechanism entirely, since mimmutable+pinsyscalls has
replaced it with a more strict mechanism, which happens to be lockless O(1)
rather than micro-lock O(1)+O(log N).  Also nop-out the sys_msyscall(2) guts,
but leave the syscall around for a bit longer so that people can build through
it, since ld.so(1) still wants to call it.



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 02:27:22

Modified files:
sys/kern   : sys_process.c 

Log message:
remove useless whitespace; from Jia Tan



CVS: cvs.openbsd.org: src

2024-04-02 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2024/04/02 02:21:04

Modified files:
etc: rc 

Log message:
also relink ssh-agent



  1   2   3   4   5   6   7   8   9   10   >