[Swan-commit] Changes to ref refs/heads/master

2018-02-06 Thread D. Hugh Redelmeier
New commits:
commit d915dc115b0990a9610fc4d9ad2c0f67a34d62b6
Author: D. Hugh Redelmeier 
Date:   Tue Feb 6 23:36:52 2018 -0500

grammar: replace "which" by "that" where it is a defining or restrictive 
pronoun.

Although not mandatory, this distiction is recommended by many
authorities (eg. Strunk and White, APA Publication Manual, and
Fowler).  The copyright for Fowler and Fowler's "The King's English"
has expired so it can be found online (it's a bit of a tough slog but
I find it entertaining):



Several other improvements were discovered at the same time.

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2018-02-06 Thread Paul Wouters
New commits:
commit 97310eb46aafbc3fc1aa700be1bfcd213cae773e
Merge: ada93a1 6709422
Author: Paul Wouters 
Date:   Tue Feb 6 16:26:51 2018 -0500

Merge branch 'master' of vault.libreswan.fi:/srv/src/libreswan

commit ada93a11d3e143b4500e0f58fcabd0c8a72f90c6
Author: Paul Wouters 
Date:   Tue Feb 6 11:32:49 2018 -0500

pluto: Add new IANA allocation for INTERNAL_DNSSEC_TA (26)

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2018-02-06 Thread Paul Wouters
New commits:
commit 67094225352e0d3e8c310add3de1b41cae16ae8e
Author: Paul Wouters 
Date:   Tue Feb 6 13:37:15 2018 -0500

updated CHANGES

commit e635f5065424bd5300fd8400c47cf9d1546286b7
Author: Paul Wouters 
Date:   Tue Feb 6 13:28:19 2018 -0500

addconn: Fix auto=route and auto=start processing

It was calling route before up, which prevented route
from being called again after up. This caused missing
routes for modecfgclient configurations which would fail
with auto=start but work with auto=add with ipsec auto --up

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2018-02-06 Thread Tuomo Soini
New commits:
commit d93d17e0904d122c9de3f7c6a8bcc30b1031afbd
Author: Tuomo Soini 
Date:   Tue Feb 6 21:04:30 2018 +0200

update changes

commit 6ae8d5999062ff9864163f4fce2650e8cbc8a94b
Author: Tuomo Soini 
Date:   Tue Feb 6 21:01:08 2018 +0200

_updown.netkey: fix bug#318 vti interface gets down on previous initiator 
if roles switch

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2018-02-06 Thread Andrew Cagney
New commits:
commit e73412320c9de7d8adf12f44f9cf876c3459fff2
Author: Andrew Cagney 
Date:   Tue Feb 6 11:40:17 2018 -0500

packets: rename open_output_pbs() -> open_output_struct_pbs()

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2018-02-06 Thread Andrew Cagney
New commits:
commit 5fbf2f539a933ff4e4b1081fd164017225c50d08
Author: Andrew Cagney 
Date:   Tue Feb 6 11:11:23 2018 -0500

xauth: eliminate unnecessary indirection in IKEv1 callback path

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit


[Swan-commit] Changes to ref refs/heads/master

2018-02-06 Thread Andrew Cagney
New commits:
commit 6640bfe7a76727650e3e23f9c685e27f6cc88186
Author: Andrew Cagney 
Date:   Fri Feb 2 20:53:37 2018 -0500

xauth: purge free(xauth) and callback code from xauth_abort() (fix double 
free)

The fork-callback (xauth_pam_child_cleanup()), which is "always" called,
is responsible for freeing the context parameter / xauth struct.  Freeing
the xauth struct early, in xauth_abort(), causes a use-after-free and
double-free. See cda486a95acc829c7461c7e6e66d6dd322fc3eec.
("always"?  During shutdown, because exit() is called directly from an
event handler, the fork-callback doesn't get a chance to run.  Oops.)

Since glibc's pthreads are no longer being used, the hack in
xauth_abort() to callback early because pthread cancel was broken
isn't needed (remember it is using kill(SIGKILL)).

___
Swan-commit mailing list
Swan-commit@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-commit