CVS commit: [netbsd-7] src/crypto/external/bsd/openssl/dist

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 09:13:01 UTC 2014

Modified Files:
src/crypto/external/bsd/openssl/dist [netbsd-7]: CHANGES Configure
Makefile NEWS README e_os.h makevms.com openssl.spec
src/crypto/external/bsd/openssl/dist/apps [netbsd-7]: makeapps.com
s_client.c
src/crypto/external/bsd/openssl/dist/crypto [netbsd-7]: LPdir_vms.c
LPdir_win.c Makefile crypto-lib.com ebcdic.h install-crypto.com
opensslconf.h opensslv.h ossl_typ.h
src/crypto/external/bsd/openssl/dist/crypto/aes/asm [netbsd-7]:
aesni-x86_64.pl
src/crypto/external/bsd/openssl/dist/crypto/asn1 [netbsd-7]: a_strex.c
src/crypto/external/bsd/openssl/dist/crypto/bn [netbsd-7]: bn_exp.c
bn_nist.c exptest.c
src/crypto/external/bsd/openssl/dist/crypto/bn/asm [netbsd-7]:
x86_64-gcc.c
src/crypto/external/bsd/openssl/dist/crypto/dsa [netbsd-7]: dsa_ameth.c
src/crypto/external/bsd/openssl/dist/crypto/ec [netbsd-7]: ec.h
ec2_smpl.c ec_ameth.c ec_asn1.c ecp_mont.c ecp_nist.c ecp_smpl.c
ectest.c
src/crypto/external/bsd/openssl/dist/crypto/err [netbsd-7]: openssl.ec
src/crypto/external/bsd/openssl/dist/crypto/evp [netbsd-7]: Makefile
e_aes.c evp_enc.c
src/crypto/external/bsd/openssl/dist/crypto/md5/asm [netbsd-7]:
md5-x86_64.pl
src/crypto/external/bsd/openssl/dist/crypto/modes [netbsd-7]: modes.h
src/crypto/external/bsd/openssl/dist/crypto/ocsp [netbsd-7]: ocsp_vfy.c
src/crypto/external/bsd/openssl/dist/crypto/pkcs7 [netbsd-7]: pkcs7.h
src/crypto/external/bsd/openssl/dist/crypto/pqueue [netbsd-7]: pqueue.h
src/crypto/external/bsd/openssl/dist/crypto/rsa [netbsd-7]: Makefile
rsa.h rsa_err.c rsa_oaep.c rsa_pk1.c rsa_sign.c
src/crypto/external/bsd/openssl/dist/crypto/stack [netbsd-7]:
safestack.h
src/crypto/external/bsd/openssl/dist/doc/apps [netbsd-7]: dgst.pod
src/crypto/external/bsd/openssl/dist/doc/crypto [netbsd-7]:
BIO_s_accept.pod EVP_DigestInit.pod EVP_DigestVerifyInit.pod
EVP_EncryptInit.pod EVP_PKEY_set1_RSA.pod EVP_PKEY_sign.pod
src/crypto/external/bsd/openssl/dist/doc/ssl [netbsd-7]:
SSL_CTX_set_tmp_dh_callback.pod
src/crypto/external/bsd/openssl/dist/engines [netbsd-7]:
makeengines.com
src/crypto/external/bsd/openssl/dist/ssl [netbsd-7]: Makefile d1_both.c
d1_lib.c d1_srtp.c dtls1.h s23_clnt.c s23_srvr.c s2_lib.c s3_cbc.c
s3_clnt.c s3_enc.c s3_lib.c s3_pkt.c s3_srvr.c srtp.h ssl-lib.com
ssl.h ssl3.h ssl_err.c ssl_lib.c t1_enc.c t1_lib.c tls1.h
src/crypto/external/bsd/openssl/dist/test [netbsd-7]: Makefile
maketests.com tests.com testssl
src/crypto/external/bsd/openssl/dist/util [netbsd-7]: mk1mf.pl mkdef.pl
ssleay.num
Added Files:
src/crypto/external/bsd/openssl/dist/crypto [netbsd-7]:
constant_time_locl.h

Log Message:
Pullup the following revisions, requested by spz in ticket #147:

crypto/external/bsd/openssl/dist/CHANGES1.2 (patch)
crypto/external/bsd/openssl/dist/Configure  1.9 (patch)
crypto/external/bsd/openssl/dist/Makefile   1.3 (patch)
crypto/external/bsd/openssl/dist/NEWS   1.2 (patch)
crypto/external/bsd/openssl/dist/README 1.2 (patch)
crypto/external/bsd/openssl/dist/apps/makeapps.com 1.2  (patch)
crypto/external/bsd/openssl/dist/apps/s_client.c 1.7(patch)
crypto/external/bsd/openssl/dist/crypto/LPdir_vms.c 1.2 (patch)
crypto/external/bsd/openssl/dist/crypto/LPdir_win.c 1.2 (patch)
crypto/external/bsd/openssl/dist/crypto/Makefile 1.2(patch)
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-x86_64.pl 1.2 (patch)
crypto/external/bsd/openssl/dist/crypto/asn1/a_strex.c 1.2  (patch)
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-gcc.c 1.2 (patch)
crypto/external/bsd/openssl/dist/crypto/bn/bn_exp.c 1.7 (patch)
crypto/external/bsd/openssl/dist/crypto/bn/bn_nist.c 1.2(patch)
crypto/external/bsd/openssl/dist/crypto/bn/exptest.c 1.2(patch)
crypto/external/bsd/openssl/dist/crypto/constant_time_locl.h 1.1(patch)
crypto/external/bsd/openssl/dist/crypto/crypto-lib.com 1.2  (patch)
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_ameth.c 1.2 (patch)
crypto/external/bsd/openssl/dist/crypto/ebcdic.h 1.2(patch)
crypto/external/bsd/openssl/dist/crypto/ec/ec.h 1.2 (patch)
crypto/external/bsd/openssl/dist/crypto/ec/ec2_smpl.c 1.2   (patch)
crypto/external/bsd/openssl

CVS commit: [netbsd-7] src/usr.sbin/sysinst

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 09:14:51 UTC 2014

Modified Files:
src/usr.sbin/sysinst [netbsd-7]: menus.mi

Log Message:
Pull up following revision(s) (requested by snj in ticket #149):
usr.sbin/sysinst/menus.mi: revision 1.7
Make the option to abort pkgsrc fetching/extraction actually work.
Previously, if the network was not set up and you couldn't fetch
pkgsrc, you'd get stuck here, unable to make it back to the parent
menu.


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.4.4.1 src/usr.sbin/sysinst/menus.mi

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/doc

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 09:15:59 UTC 2014

Modified Files:
src/doc [netbsd-7]: CHANGES-7.0

Log Message:
Tickets #147 and #149


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.58 -r1.1.2.59 src/doc/CHANGES-7.0

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/dev/ic

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 09:39:33 UTC 2014

Modified Files:
src/sys/dev/ic: dwc_gmac_reg.h

Log Message:
Add more bits and comments, parts from jmcneill.


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.7 src/sys/dev/ic/dwc_gmac_reg.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/sys/kern

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 10:02:59 UTC 2014

Modified Files:
src/sys/kern [netbsd-7]: vfs_vnode.c

Log Message:
Pull up following revision(s) (requested by hannken in ticket #150):
sys/kern/vfs_vnode.c: revision 1.39
When creating a vnode with vcache_get() mark the vnode VI_CHANGING until
it is fully initialised.  It may be on the specnode list before it is
fully initialised and revoking it then would panic.
Should prevent the panic from PR kern/49171 (panic when closing a pty).


To generate a diff of this commit:
cvs rdiff -u -r1.37 -r1.37.2.1 src/sys/kern/vfs_vnode.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/doc

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 10:04:00 UTC 2014

Modified Files:
src/doc [netbsd-7]: CHANGES-7.0

Log Message:
Ticket #150


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.59 -r1.1.2.60 src/doc/CHANGES-7.0

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src

2014-10-19 Thread Justin Cormack
Module Name:src
Committed By:   justin
Date:   Sun Oct 19 11:17:44 UTC 2014

Modified Files:
src/lib/libc/stdio: fseeko.c
src/tests/lib/libc/stdio: t_open_memstream.c

Log Message:
Add negative offset checks to fseeko

These were not strictly needed before, as lseek would error on negative
arguments, but having added open_memstream we have a virtual file pointer
that assumes that it gets sane values, so we get an assertion triggered
on a negative value. Best to check in one place rather than at all the
relevant points.


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 src/lib/libc/stdio/fseeko.c
cvs rdiff -u -r1.1 -r1.2 src/tests/lib/libc/stdio/t_open_memstream.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/dev/ic

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 11:37:17 UTC 2014

Modified Files:
src/sys/dev/ic: dwc_gmac_reg.h

Log Message:
Add more comments


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.8 src/sys/dev/ic/dwc_gmac_reg.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/dev/ic

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 11:45:01 UTC 2014

Modified Files:
src/sys/dev/ic: dwc_gmac.c

Log Message:
Add more MAC filter setup, some DMA burst configuration (from jmcneill),
actually enable RX interrupts (spotted by jmcneill), add RX handling
code and debug code.


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 src/sys/dev/ic/dwc_gmac.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/dev/ic

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 13:04:24 UTC 2014

Modified Files:
src/sys/dev/ic: dwc_gmac.c

Log Message:
fix inverted logic with AWIN_GMAC_MAC_CONF_MIISEL bit; my cubieboard2 can talk 
to the network now!


To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 src/sys/dev/ic/dwc_gmac.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/dev/ic

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 13:15:23 UTC 2014

Modified Files:
src/sys/dev/ic: dwc_gmac.c

Log Message:
only set PR bit in frame filter if IFF_PROMISC is set, and set PM bit if 
IFF_ALLMULTI is set


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 src/sys/dev/ic/dwc_gmac.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/external/bsd/wpa/dist/wpa_supplicant

2014-10-19 Thread Joerg Sonnenberger
Module Name:src
Committed By:   joerg
Date:   Sun Oct 19 14:13:02 UTC 2014

Modified Files:
src/external/bsd/wpa/dist/wpa_supplicant: ctrl_iface.c events.c
wpa_supplicant.c

Log Message:
Fix format strings to match argument types.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.5 -r1.2 \
src/external/bsd/wpa/dist/wpa_supplicant/ctrl_iface.c
cvs rdiff -u -r1.1.1.6 -r1.2 \
src/external/bsd/wpa/dist/wpa_supplicant/events.c \
src/external/bsd/wpa/dist/wpa_supplicant/wpa_supplicant.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/sys

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 15:22:00 UTC 2014

Modified Files:
src/sys/arch/arm/broadcom [netbsd-7]: bcm2835_vcaudio.c
src/sys/external/bsd/vchiq/dist/interface/vchiq_arm [netbsd-7]:
vchiq_shim.c

Log Message:
Pull up following revision(s) (requested by skrll in ticket #151):
sys/external/bsd/vchiq/dist/interface/vchiq_arm/vchiq_shim.c: revision 
1.5
sys/arch/arm/broadcom/bcm2835_vcaudio.c: revision 1.4
sys/arch/arm/broadcom/bcm2835_vcaudio.c: revision 1.5
sys/arch/arm/broadcom/bcm2835_vcaudio.c: revision 1.6
sys/arch/arm/broadcom/bcm2835_vcaudio.c: revision 1.7
use a fixed frequency (48kHz) and configure the audio server at attach time, 
instead of at the beginning of playback
improved playback error handling, and get rid of junk+silence insertion at the 
beginning of playback
expose vchi_get_peer_version
capture peer version; if less than 2, bail out as bulk mode is not supported. 
report the peer version with "audioctl version"
Some improvements that make playback mostly reliable for me - the final
piece of the jigaw is probably in vchiq:
- prefill vchiq with a number (currently 2) blocks of audio before
   starting
- use a kthread as workqueue isn't suited to our usage.
- don't drain on stopping as for some reason it leaves data behind.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.3.4.1 src/sys/arch/arm/broadcom/bcm2835_vcaudio.c
cvs rdiff -u -r1.4 -r1.4.2.1 \
src/sys/external/bsd/vchiq/dist/interface/vchiq_arm/vchiq_shim.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/doc

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 15:24:07 UTC 2014

Modified Files:
src/doc [netbsd-7]: CHANGES-7.0

Log Message:
Tickets #148 and #151


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.60 -r1.1.2.61 src/doc/CHANGES-7.0

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/evbarm/conf

2014-10-19 Thread Nick Hudson
Module Name:src
Committed By:   skrll
Date:   Sun Oct 19 15:27:33 UTC 2014

Modified Files:
src/sys/arch/evbarm/conf: BPI

Log Message:
More stuff works


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 src/sys/arch/evbarm/conf/BPI

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/arm/allwinner

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 15:37:25 UTC 2014

Modified Files:
src/sys/arch/arm/allwinner: awin_reg.h

Log Message:
add A31 GMAC module base and clk reg offset


To generate a diff of this commit:
cvs rdiff -u -r1.37 -r1.38 src/sys/arch/arm/allwinner/awin_reg.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/arm/allwinner

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 15:38:54 UTC 2014

Modified Files:
src/sys/arch/arm/allwinner: awin_io.c

Log Message:
different offset for A31 GMAC


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.22 src/sys/arch/arm/allwinner/awin_io.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch

2014-10-19 Thread Joerg Sonnenberger
Module Name:src
Committed By:   joerg
Date:   Sun Oct 19 15:41:05 UTC 2014

Modified Files:
src/sys/arch/amd64/include: Makefile.inc
src/sys/arch/i386/include: Makefile.inc

Log Message:
Disable SSE and AVX for kernel modules too.


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 src/sys/arch/amd64/include/Makefile.inc
cvs rdiff -u -r1.2 -r1.3 src/sys/arch/i386/include/Makefile.inc

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/arm/allwinner

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 16:09:28 UTC 2014

Modified Files:
src/sys/arch/arm/allwinner: awin_gige.c

Log Message:
add some A31 initialization and a new phy-type of gmii


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.14 src/sys/arch/arm/allwinner/awin_gige.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/sys/arch

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 16:11:06 UTC 2014

Modified Files:
src/sys/arch/amd64/include [netbsd-7]: Makefile.inc
src/sys/arch/i386/include [netbsd-7]: Makefile.inc

Log Message:
Pull up following revision(s) (requested by joerg in ticket #152):
sys/arch/amd64/include/Makefile.inc: revision 1.5
sys/arch/i386/include/Makefile.inc: revision 1.3
Disable SSE and AVX for kernel modules too.


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.4.14.1 src/sys/arch/amd64/include/Makefile.inc
cvs rdiff -u -r1.2 -r1.2.2.1 src/sys/arch/i386/include/Makefile.inc

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-7] src/doc

2014-10-19 Thread Martin Husemann
Module Name:src
Committed By:   martin
Date:   Sun Oct 19 16:12:22 UTC 2014

Modified Files:
src/doc [netbsd-7]: CHANGES-7.0

Log Message:
Ticket #152


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.61 -r1.1.2.62 src/doc/CHANGES-7.0

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS import: src/crypto/external/bsd/openssh/dist

2014-10-19 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Sun Oct 19 16:28:40 UTC 2014

Update of /cvsroot/src/crypto/external/bsd/openssh/dist
In directory ivanova.netbsd.org:/tmp/cvs-serv3513

Log Message:
Changes since OpenSSH 6.6
=

Potentially-incompatible changes

 * sshd(8): The default set of ciphers and MACs has been altered to
   remove unsafe algorithms. In particular, CBC ciphers and arcfour*
   are disabled by default.

   The full set of algorithms remains available if configured
   explicitly via the Ciphers and MACs sshd_config options.

 * sshd(8): Support for tcpwrappers/libwrap has been removed.

 * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
   using the curve25519-sha...@libssh.org KEX exchange method to fail
   when connecting with something that implements the specification
   correctly. OpenSSH 6.7 disables this KEX method when speaking to
   one of the affected versions.

New Features

 * Major internal refactoring to begin to make part of OpenSSH usable
   as a library. So far the wire parsing, key handling and KRL code
   has been refactored. Please note that we do not consider the API
   stable yet, nor do we offer the library in separable form.

 * ssh(1), sshd(8): Add support for Unix domain socket forwarding.
   A remote TCP port may be forwarded to a local Unix domain socket
   and vice versa or both ends may be a Unix domain socket.

 * ssh(1), ssh-keygen(1): Add support for SSHFP DNS records for
   ED25519 key types.

 * sftp(1): Allow resumption of interrupted uploads.

 * ssh(1): When rekeying, skip file/DNS lookups of the hostkey if it
   is the same as the one sent during initial key exchange; bz#2154

 * sshd(8): Allow explicit ::1 and 127.0.0.1 forwarding bind
   addresses when GatewayPorts=no; allows client to choose address
   family; bz#

 * sshd(8): Add a sshd_config PermitUserRC option to control whether
   ~/.ssh/rc is executed, mirroring the no-user-rc authorized_keys
   option; bz#2160

 * ssh(1): Add a %C escape sequence for LocalCommand and ControlPath
   that expands to a unique identifer based on a hash of the tuple of
   (local host, remote user, hostname, port). Helps avoid exceeding
   miserly pathname limits for Unix domain sockets in multiplexing
   control paths; bz#2220

 * sshd(8): Make the "Too many authentication failures" message
   include the user, source address, port and protocol in a format
   similar to the authentication success / failure messages; bz#2199

 * Added unit and fuzz tests for refactored code. These are run
   automatically in portable OpenSSH via the "make tests" target.

Bugfixes

 * sshd(8): Fix remote forwarding with the same listen port but
   different listen address.

 * ssh(1): Fix inverted test that caused PKCS#11 keys that were
   explicitly listed in ssh_config or on the commandline not to be
   preferred.

 * ssh-keygen(1): Fix bug in KRL generation: multiple consecutive
   revoked certificate serial number ranges could be serialised to an
   invalid format. Readers of a broken KRL caused by this bug will
   fail closed, so no should-have-been-revoked key will be accepted.

 * ssh(1): Reflect stdio-forward ("ssh -W host:port ...") failures in
   exit status. Previously we were always returning 0; bz#2255

 * ssh(1), ssh-keygen(1): Make Ed25519 keys' title fit properly in the
   randomart border; bz#2247

 * ssh-agent(1): Only cleanup agent socket in the main agent process
   and not in any subprocesses it may have started (e.g. forked
   askpass). Fixes agent sockets being zapped when askpass processes
   fatal(); bz#2236

 * ssh-add(1): Make stdout line-buffered; saves partial output getting
   lost when ssh-add fatal()s part-way through (e.g. when listing keys
   from an agent that supports key types that ssh-add doesn't);
   bz#2234

 * ssh-keygen(1): When hashing or removing hosts, don't choke on
   @revoked markers and don't remove @cert-authority markers; bz#2241

 * ssh(1): Don't fatal when hostname canonicalisation fails and a
   ProxyCommand is in use; continue and allow the ProxyCommand to
   connect anyway (e.g. to a host with a name outside the DNS behind
   a bastion)

 * scp(1): When copying local->remote fails during read, don't send
   uninitialised heap to the remote end.

 * sftp(1): Fix fatal "el_insertstr failed" errors when tab-completing
   filenames with  a single quote char somewhere in the string;
   bz#2238

 * ssh-keyscan(1): Scan for Ed25519 keys by default.

 * ssh(1): When using VerifyHostKeyDNS with a DNSSEC resolver, down-
   convert any certificate keys to plain keys and attempt SSHFP
   resolution.  Prevents a server from skipping SSHFP lookup and
   forcing a new-hostkey dialog by offering only certificate keys.
 
 * sshd(8): Avoid crash at exit via NULL pointer reference; bz#2225

 * Fix some strict-alignment errors.

Portable OpenSSH

 * Portable OpenSSH now supports building against libressl-portable.

 * Portable OpenSSH

CVS commit: src/crypto/external/bsd/openssh

2014-10-19 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Sun Oct 19 16:30:59 UTC 2014

Modified Files:
src/crypto/external/bsd/openssh: Makefile.inc
src/crypto/external/bsd/openssh/bin: Makefile.inc
src/crypto/external/bsd/openssh/bin/sshd: Makefile
src/crypto/external/bsd/openssh/dist: LICENCE OVERVIEW PROTOCOL
PROTOCOL.agent PROTOCOL.certkeys PROTOCOL.mux README addrmatch.c
atomicio.c atomicio.h auth-bsdauth.c auth-chall.c auth-krb5.c
auth-options.c auth-options.h auth-pam.c auth-pam.h auth-passwd.c
auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth-skey.c auth.c auth.h
auth1.c auth2-chall.c auth2-gss.c auth2-hostbased.c auth2-kbdint.c
auth2-krb5.c auth2-none.c auth2-passwd.c auth2-pubkey.c auth2.c
authfd.c authfd.h authfile.c authfile.h blocks.c bufaux.c bufbn.c
bufec.c buffer.c buffer.h canohost.c canohost.h chacha.c channels.c
channels.h cipher-3des1.c cipher-bf1.c cipher-chachapoly.c
cipher-ctr-mt.c cipher.c cipher.h cleanup.c clientloop.c
clientloop.h compat.c compat.h compress.c compress.h crc32.c
crc32.h deattack.c deattack.h dh.c dh.h digest-libc.c
digest-openssl.c dispatch.c dispatch.h dns.c dns.h ed25519.c
fatal.c fe25519.c fmt_scaled.c fmt_scaled.h ge25519.c getpeereid.c
getpeereid.h getrrsetbyname.c getrrsetbyname.h groupaccess.c
groupaccess.h gss-genr.c gss-serv-krb5.c gss-serv.c hash.c hmac.c
hostfile.c hostfile.h includes.h kex.c kex.h kexc25519.c
kexc25519c.c kexc25519s.c kexdh.c kexdhc.c kexdhs.c kexecdh.c
kexecdhc.c kexecdhs.c kexgex.c kexgexc.c kexgexs.c key.c key.h
krl.c ldapauth.c ldapauth.h log.c log.h mac.c mac.h match.c match.h
md-sha256.c misc.c misc.h moduli moduli.5 moduli.c monitor.c
monitor.h monitor_fdpass.c monitor_fdpass.h monitor_mm.c
monitor_mm.h monitor_wrap.c monitor_wrap.h msg.c msg.h mux.c
myproposal.h namespace.h nchan.c nchan.ms nchan2.ms openssh2netbsd
packet.c packet.h pathnames.h pkcs11.h poly1305.c progressmeter.c
progressmeter.h random.h readconf.c readconf.h readpass.c
readpassphrase.3 readpassphrase.c readpassphrase.h roaming.h
roaming_client.c roaming_common.c roaming_dummy.c roaming_serv.c
rsa.c rsa.h sandbox-rlimit.c sc25519.c scp.1 scp.c servconf.c
servconf.h serverloop.c serverloop.h session.c session.h
sftp-client.c sftp-client.h sftp-common.c sftp-common.h sftp-glob.c
sftp-server-main.c sftp-server.8 sftp-server.c sftp.1 sftp.c sftp.h
smult_curve25519_ref.c ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c
ssh-dss.c ssh-ecdsa.c ssh-ed25519.c ssh-gss.h ssh-keygen.1
ssh-keygen.c ssh-keyscan.1 ssh-keyscan.c ssh-keysign.8
ssh-keysign.c ssh-pkcs11-client.c ssh-pkcs11-helper.8
ssh-pkcs11-helper.c ssh-pkcs11.c ssh-pkcs11.h ssh-rsa.c ssh.1 ssh.c
ssh.h ssh1.h ssh2.h ssh_config ssh_config.5 sshbuf-getput-basic.c
sshbuf-getput-crypto.c sshbuf-misc.c sshbuf.c sshbuf.h sshconnect.c
sshconnect.h sshconnect1.c sshconnect2.c sshd.8 sshd.c sshd_config
sshd_config.5 ssherr.c sshkey.c sshlogin.c sshlogin.h sshpty.c
sshpty.h sshtty.c strtonum.c ttymodes.c ttymodes.h uidswap.c
uidswap.h umac.c umac.h uuencode.c uuencode.h verify.c version.h
xmalloc.c xmalloc.h
src/crypto/external/bsd/openssh/lib: Makefile shlib_version
Removed Files:
src/crypto/external/bsd/openssh/dist: auth2-jpake.c jpake.c jpake.h
schnorr.c schnorr.h

Log Message:
merge openssh-6.7


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 src/crypto/external/bsd/openssh/Makefile.inc
cvs rdiff -u -r1.2 -r1.3 src/crypto/external/bsd/openssh/bin/Makefile.inc
cvs rdiff -u -r1.9 -r1.10 src/crypto/external/bsd/openssh/bin/sshd/Makefile
cvs rdiff -u -r1.2 -r1.3 src/crypto/external/bsd/openssh/dist/LICENCE \
src/crypto/external/bsd/openssh/dist/OVERVIEW \
src/crypto/external/bsd/openssh/dist/README \
src/crypto/external/bsd/openssh/dist/auth-bsdauth.c \
src/crypto/external/bsd/openssh/dist/auth-pam.h \
src/crypto/external/bsd/openssh/dist/auth-passwd.c \
src/crypto/external/bsd/openssh/dist/auth2-krb5.c \
src/crypto/external/bsd/openssh/dist/cleanup.c \
src/crypto/external/bsd/openssh/dist/compress.h \
src/crypto/external/bsd/openssh/dist/crc32.c \
src/crypto/external/bsd/openssh/dist/crc32.h \
src/crypto/external/bsd/openssh/dist/deattack.c \
src/crypto/external/bsd/openssh/dist/deattack.h \
src/crypto/external/bsd/openssh/dist/dh.h \
src/crypto/external/bsd/openssh/dist/dispatch.c \
src/crypto/external/bsd/openssh/dist/dispatch.h \
src/crypto/external/bsd/openssh/dist/fatal

CVS commit: src/etc/rc.d

2014-10-19 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Sun Oct 19 16:33:01 UTC 2014

Modified Files:
src/etc/rc.d: sshd

Log Message:
Add new keytype, replace duplicated code with loop


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.23 src/etc/rc.d/sshd

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/doc

2014-10-19 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Sun Oct 19 16:38:21 UTC 2014

Modified Files:
src/doc: 3RDPARTY CHANGES

Log Message:
new OpenSSH


To generate a diff of this commit:
cvs rdiff -u -r1.1159 -r1.1160 src/doc/3RDPARTY
cvs rdiff -u -r1.1993 -r1.1994 src/doc/CHANGES

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/distrib/sets/lists

2014-10-19 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Sun Oct 19 16:35:09 UTC 2014

Modified Files:
src/distrib/sets/lists/base: ad.aarch64 ad.arm ad.mips ad.powerpc
ad.riscv md.amd64 md.sparc64 shl.mi
src/distrib/sets/lists/debug: ad.aarch64 ad.arm ad.mips ad.powerpc
ad.riscv md.amd64 md.sparc64 shl.mi

Log Message:
bump libssh


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 src/distrib/sets/lists/base/ad.aarch64
cvs rdiff -u -r1.59 -r1.60 src/distrib/sets/lists/base/ad.arm
cvs rdiff -u -r1.54 -r1.55 src/distrib/sets/lists/base/ad.mips
cvs rdiff -u -r1.23 -r1.24 src/distrib/sets/lists/base/ad.powerpc
cvs rdiff -u -r1.6 -r1.7 src/distrib/sets/lists/base/ad.riscv
cvs rdiff -u -r1.250 -r1.251 src/distrib/sets/lists/base/md.amd64
cvs rdiff -u -r1.238 -r1.239 src/distrib/sets/lists/base/md.sparc64
cvs rdiff -u -r1.719 -r1.720 src/distrib/sets/lists/base/shl.mi
cvs rdiff -u -r1.9 -r1.10 src/distrib/sets/lists/debug/ad.aarch64
cvs rdiff -u -r1.48 -r1.49 src/distrib/sets/lists/debug/ad.arm
cvs rdiff -u -r1.44 -r1.45 src/distrib/sets/lists/debug/ad.mips
cvs rdiff -u -r1.24 -r1.25 src/distrib/sets/lists/debug/ad.powerpc
cvs rdiff -u -r1.6 -r1.7 src/distrib/sets/lists/debug/ad.riscv
cvs rdiff -u -r1.68 -r1.69 src/distrib/sets/lists/debug/md.amd64
cvs rdiff -u -r1.67 -r1.68 src/distrib/sets/lists/debug/md.sparc64
cvs rdiff -u -r1.78 -r1.79 src/distrib/sets/lists/debug/shl.mi

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/lib/libc/gen

2014-10-19 Thread Nicolas Joly
Module Name:src
Committed By:   njoly
Date:   Sun Oct 19 16:47:51 UTC 2014

Modified Files:
src/lib/libc/gen: utime.3

Log Message:
Do not use hard-coded values with ENAMETOOLONG, use symbolic constants
instead.


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.22 src/lib/libc/gen/utime.3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/crypto/external/bsd/openssh/dist

2014-10-19 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Sun Oct 19 16:31:47 UTC 2014

Added Files:
src/crypto/external/bsd/openssh/dist: bcrypt_pbkdf.c blf.h blowfish.c

Log Message:
add new files


To generate a diff of this commit:
cvs rdiff -u -r0 -r1.1 src/crypto/external/bsd/openssh/dist/bcrypt_pbkdf.c \
src/crypto/external/bsd/openssh/dist/blf.h \
src/crypto/external/bsd/openssh/dist/blowfish.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/arm/allwinner

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 17:01:40 UTC 2014

Modified Files:
src/sys/arch/arm/allwinner: awin_gige.c

Log Message:
use correct gating reg on A31


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 src/sys/arch/arm/allwinner/awin_gige.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/compat/linux/common

2014-10-19 Thread Maxime Villard
Module Name:src
Committed By:   maxv
Date:   Sun Oct 19 17:33:59 UTC 2014

Modified Files:
src/sys/compat/linux/common: linux_uselib.c

Log Message:
Resource leak.

Found by my code scanner.

Tested by njoly@; ok njoly@ rmind@ on tech-kern@.


To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 src/sys/compat/linux/common/linux_uselib.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-6-0] src/sys/compat/freebsd

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 19:36:59 UTC 2014

Modified Files:
src/sys/compat/freebsd [netbsd-6-0]: freebsd_sysctl.c

Log Message:
Pull up following revision(s) (requested by maxv in ticket #1168):
sys/compat/freebsd/freebsd_sysctl.c: revision 1.17
I'm not sure reading from an unsanitized userland pointer is a good idea.
Some users might be tempted to give 0x01, in which case the kernel will
crash.


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.15.28.1 src/sys/compat/freebsd/freebsd_sysctl.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-6-1] src/sys/compat/freebsd

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 19:40:55 UTC 2014

Modified Files:
src/sys/compat/freebsd [netbsd-6-1]: freebsd_sysctl.c

Log Message:
Pull up following revision(s) (requested by maxv in ticket #1168):
sys/compat/freebsd/freebsd_sysctl.c: revision 1.17
I'm not sure reading from an unsanitized userland pointer is a good idea.
Some users might be tempted to give 0x01, in which case the kernel will
crash.


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.15.36.1 src/sys/compat/freebsd/freebsd_sysctl.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-6] src/sys/compat/freebsd

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 19:42:01 UTC 2014

Modified Files:
src/sys/compat/freebsd [netbsd-6]: freebsd_sysctl.c

Log Message:
Pull up following revision(s) (requested by maxv in ticket #1168):
sys/compat/freebsd/freebsd_sysctl.c: revision 1.17
I'm not sure reading from an unsanitized userland pointer is a good idea.
Some users might be tempted to give 0x01, in which case the kernel will
crash.


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.15.22.1 src/sys/compat/freebsd/freebsd_sysctl.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-6-0] src/doc

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 19:46:56 UTC 2014

Modified Files:
src/doc [netbsd-6-0]: CHANGES-6.0.7

Log Message:
ticket 1168


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.1 -r1.1.2.2 src/doc/CHANGES-6.0.7

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-6] src/doc

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 19:46:44 UTC 2014

Modified Files:
src/doc [netbsd-6]: CHANGES-6.2

Log Message:
ticket 1168


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.135 -r1.1.2.136 src/doc/CHANGES-6.2

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-6-1] src/doc

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 19:47:09 UTC 2014

Modified Files:
src/doc [netbsd-6-1]: CHANGES-6.1.6

Log Message:
ticket 1168


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.1 -r1.1.2.2 src/doc/CHANGES-6.1.6

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-5] src/crypto/dist/openssl

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 20:04:09 UTC 2014

Modified Files:
src/crypto/dist/openssl/apps [netbsd-5]: s_client.c
src/crypto/dist/openssl/crypto [netbsd-5]: LPdir_vms.c LPdir_win.c
Makefile
src/crypto/dist/openssl/crypto/bn [netbsd-5]: bn_exp.c exptest.c
src/crypto/dist/openssl/crypto/bn/asm [netbsd-5]: x86_64-gcc.c
src/crypto/dist/openssl/crypto/dsa [netbsd-5]: dsa_ameth.c
src/crypto/dist/openssl/crypto/ec [netbsd-5]: ec.h ec_ameth.c ec_asn1.c
ec_key.c ecp_smpl.c
src/crypto/dist/openssl/crypto/err [netbsd-5]: openssl.ec
src/crypto/dist/openssl/crypto/evp [netbsd-5]: Makefile evp_enc.c
src/crypto/dist/openssl/crypto/pkcs7 [netbsd-5]: pkcs7.h
src/crypto/dist/openssl/crypto/rsa [netbsd-5]: Makefile rsa.h rsa_err.c
rsa_oaep.c rsa_pk1.c rsa_sign.c
src/crypto/dist/openssl/doc/apps [netbsd-5]: s_client.pod
src/crypto/dist/openssl/doc/crypto [netbsd-5]: BIO_s_accept.pod
EVP_DigestInit.pod EVP_DigestVerifyInit.pod EVP_EncryptInit.pod
EVP_PKEY_set1_RSA.pod EVP_PKEY_sign.pod
src/crypto/dist/openssl/doc/ssl [netbsd-5]: SSL_CTX_set_mode.pod
SSL_CTX_set_tmp_dh_callback.pod
src/crypto/dist/openssl/ssl [netbsd-5]: Makefile s23_clnt.c s23_srvr.c
s2_lib.c s3_clnt.c s3_enc.c s3_lib.c s3_pkt.c s3_srvr.c ssl-lib.com
ssl.h ssl3.h ssl_err.c ssl_lib.c t1_enc.c t1_lib.c tls1.h
src/crypto/dist/openssl/test [netbsd-5]: Makefile

Log Message:
Apply patch (requested by spz in ticket #1927):
Apply OpenSSL security fixes derived from the diff between
OpenSSL 1.0.0n and 1.0.0o, fixing CVE-2014-3567, CVE-2014-3568,
and adding POODLE mitigation via support for TLS_FALLBACK_SCSV.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.11 -r1.1.1.11.4.1 \
src/crypto/dist/openssl/apps/s_client.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.26.1 \
src/crypto/dist/openssl/crypto/LPdir_vms.c
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.4.1 \
src/crypto/dist/openssl/crypto/LPdir_win.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.4.1 src/crypto/dist/openssl/crypto/Makefile
cvs rdiff -u -r1.3 -r1.3.4.1 src/crypto/dist/openssl/crypto/bn/bn_exp.c
cvs rdiff -u -r1.4 -r1.4.4.1 src/crypto/dist/openssl/crypto/bn/exptest.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.24.1 \
src/crypto/dist/openssl/crypto/bn/asm/x86_64-gcc.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.8.1 \
src/crypto/dist/openssl/crypto/dsa/dsa_ameth.c
cvs rdiff -u -r1.6 -r1.6.4.1 src/crypto/dist/openssl/crypto/ec/ec.h
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.8.1 \
src/crypto/dist/openssl/crypto/ec/ec_ameth.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.18.1 \
src/crypto/dist/openssl/crypto/ec/ec_asn1.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.26.1 \
src/crypto/dist/openssl/crypto/ec/ec_key.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.26.1 \
src/crypto/dist/openssl/crypto/ec/ecp_smpl.c
cvs rdiff -u -r1.1.1.7 -r1.1.1.7.4.1 \
src/crypto/dist/openssl/crypto/err/openssl.ec
cvs rdiff -u -r1.1.1.5 -r1.1.1.5.4.1 \
src/crypto/dist/openssl/crypto/evp/Makefile
cvs rdiff -u -r1.1.1.8 -r1.1.1.8.18.1 \
src/crypto/dist/openssl/crypto/evp/evp_enc.c
cvs rdiff -u -r1.8 -r1.8.4.1 src/crypto/dist/openssl/crypto/pkcs7/pkcs7.h
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.4.1 \
src/crypto/dist/openssl/crypto/rsa/Makefile
cvs rdiff -u -r1.14 -r1.14.4.1 src/crypto/dist/openssl/crypto/rsa/rsa.h
cvs rdiff -u -r1.7 -r1.7.4.1 src/crypto/dist/openssl/crypto/rsa/rsa_err.c
cvs rdiff -u -r1.1.1.7 -r1.1.1.7.26.1 \
src/crypto/dist/openssl/crypto/rsa/rsa_oaep.c
cvs rdiff -u -r1.1.1.3 -r1.1.1.3.38.1 \
src/crypto/dist/openssl/crypto/rsa/rsa_pk1.c
cvs rdiff -u -r1.5 -r1.5.4.1 src/crypto/dist/openssl/crypto/rsa/rsa_sign.c
cvs rdiff -u -r1.8 -r1.8.4.1 src/crypto/dist/openssl/doc/apps/s_client.pod
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.38.1 \
src/crypto/dist/openssl/doc/crypto/BIO_s_accept.pod
cvs rdiff -u -r1.6 -r1.6.26.1 \
src/crypto/dist/openssl/doc/crypto/EVP_DigestInit.pod \
src/crypto/dist/openssl/doc/crypto/EVP_EncryptInit.pod
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.8.1 \
src/crypto/dist/openssl/doc/crypto/EVP_DigestVerifyInit.pod \
src/crypto/dist/openssl/doc/crypto/EVP_PKEY_sign.pod
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.38.1 \
src/crypto/dist/openssl/doc/crypto/EVP_PKEY_set1_RSA.pod
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.38.1 \
src/crypto/dist/openssl/doc/ssl/SSL_CTX_set_mode.pod
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.38.1 \
src/crypto/dist/openssl/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod
cvs rdiff -u -r1.3 -r1.3.4.1 src/crypto/dist/openssl/ssl/Makefile
cvs rdiff -u -r1.1.1.10 -r1.1.1.10.4.1 src/crypto/dist/openssl/ssl/s23_clnt.c
cvs rdiff -u -r1.6.4.1 -r1.6.4.2 src/crypto/dist/openssl/ssl/s23_srvr.c
cvs rdiff -u -r1.12 -r1.12.4.1 src/crypto/dist/openssl/ssl/s2_lib.c
cvs rdiff -u -r1.12.4.5 -r1.12.4.6 src/crypto/dist/openssl/ssl/s3_clnt.c
cvs rdiff -u -r1.1.1.12.4.2 -r1.1.1.12.4.3 \
src/crypto/dist/openssl/ss

CVS commit: [netbsd-5] src/crypto/dist/openssl

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 20:05:07 UTC 2014

Added Files:
src/crypto/dist/openssl/crypto [netbsd-5]: constant_time_locl.h
constant_time_test.c
src/crypto/dist/openssl/doc/crypto [netbsd-5]: CMS_add1_signer.pod
src/crypto/dist/openssl/test [netbsd-5]: constant_time_test.c

Log Message:
Apply patch (requested by spz in ticket #1927):
Apply OpenSSL security fixes derived from the diff between
OpenSSL 1.0.0n and 1.0.0o, fixing CVE-2014-3567, CVE-2014-3568,
and adding POODLE mitigation via support for TLS_FALLBACK_SCSV.


To generate a diff of this commit:
cvs rdiff -u -r0 -r1.1.2.1 \
src/crypto/dist/openssl/crypto/constant_time_locl.h \
src/crypto/dist/openssl/crypto/constant_time_test.c
cvs rdiff -u -r0 -r1.1.2.1 \
src/crypto/dist/openssl/doc/crypto/CMS_add1_signer.pod
cvs rdiff -u -r0 -r1.1.2.1 src/crypto/dist/openssl/test/constant_time_test.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-5] src/doc

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 20:09:14 UTC 2014

Modified Files:
src/doc [netbsd-5]: CHANGES-5.3

Log Message:
1927


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.71 -r1.1.2.72 src/doc/CHANGES-5.3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-5-1] src/doc

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 20:10:28 UTC 2014

Modified Files:
src/doc [netbsd-5-1]: CHANGES-5.1.5

Log Message:
1927


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.18 -r1.1.2.19 src/doc/CHANGES-5.1.5

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: [netbsd-5-1] src/crypto/dist/openssl

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 20:10:12 UTC 2014

Modified Files:
src/crypto/dist/openssl/apps [netbsd-5-1]: s_client.c
src/crypto/dist/openssl/crypto [netbsd-5-1]: LPdir_vms.c LPdir_win.c
Makefile
src/crypto/dist/openssl/crypto/bn [netbsd-5-1]: bn_exp.c exptest.c
src/crypto/dist/openssl/crypto/bn/asm [netbsd-5-1]: x86_64-gcc.c
src/crypto/dist/openssl/crypto/dsa [netbsd-5-1]: dsa_ameth.c
src/crypto/dist/openssl/crypto/ec [netbsd-5-1]: ec.h ec_ameth.c
ec_asn1.c ec_key.c ecp_smpl.c
src/crypto/dist/openssl/crypto/err [netbsd-5-1]: openssl.ec
src/crypto/dist/openssl/crypto/evp [netbsd-5-1]: Makefile evp_enc.c
src/crypto/dist/openssl/crypto/pkcs7 [netbsd-5-1]: pkcs7.h
src/crypto/dist/openssl/crypto/rsa [netbsd-5-1]: Makefile rsa.h
rsa_err.c rsa_oaep.c rsa_pk1.c rsa_sign.c
src/crypto/dist/openssl/doc/apps [netbsd-5-1]: s_client.pod
src/crypto/dist/openssl/doc/crypto [netbsd-5-1]: BIO_s_accept.pod
EVP_DigestInit.pod EVP_DigestVerifyInit.pod EVP_EncryptInit.pod
EVP_PKEY_set1_RSA.pod EVP_PKEY_sign.pod
src/crypto/dist/openssl/doc/ssl [netbsd-5-1]: SSL_CTX_set_mode.pod
SSL_CTX_set_tmp_dh_callback.pod
src/crypto/dist/openssl/ssl [netbsd-5-1]: Makefile s23_clnt.c
s23_srvr.c s2_lib.c s3_clnt.c s3_enc.c s3_lib.c s3_pkt.c s3_srvr.c
ssl-lib.com ssl.h ssl3.h ssl_err.c ssl_lib.c t1_enc.c t1_lib.c
tls1.h
src/crypto/dist/openssl/test [netbsd-5-1]: Makefile
Added Files:
src/crypto/dist/openssl/crypto [netbsd-5-1]: constant_time_locl.h
constant_time_test.c
src/crypto/dist/openssl/doc/crypto [netbsd-5-1]: CMS_add1_signer.pod
src/crypto/dist/openssl/test [netbsd-5-1]: constant_time_test.c

Log Message:
Apply patch (requested by spz in ticket #1927):
Apply OpenSSL security fixes derived from the diff between
OpenSSL 1.0.0n and 1.0.0o, fixing CVE-2014-3567, CVE-2014-3568,
and adding POODLE mitigation via support for TLS_FALLBACK_SCSV.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.11 -r1.1.1.11.12.1 \
src/crypto/dist/openssl/apps/s_client.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.34.1 \
src/crypto/dist/openssl/crypto/LPdir_vms.c
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.12.1 \
src/crypto/dist/openssl/crypto/LPdir_win.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.12.1 src/crypto/dist/openssl/crypto/Makefile
cvs rdiff -u -r0 -r1.1.4.2 \
src/crypto/dist/openssl/crypto/constant_time_locl.h \
src/crypto/dist/openssl/crypto/constant_time_test.c
cvs rdiff -u -r1.3 -r1.3.12.1 src/crypto/dist/openssl/crypto/bn/bn_exp.c
cvs rdiff -u -r1.4 -r1.4.12.1 src/crypto/dist/openssl/crypto/bn/exptest.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.32.1 \
src/crypto/dist/openssl/crypto/bn/asm/x86_64-gcc.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.16.1 \
src/crypto/dist/openssl/crypto/dsa/dsa_ameth.c
cvs rdiff -u -r1.6 -r1.6.12.1 src/crypto/dist/openssl/crypto/ec/ec.h
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.16.1 \
src/crypto/dist/openssl/crypto/ec/ec_ameth.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.26.1 \
src/crypto/dist/openssl/crypto/ec/ec_asn1.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.34.1 \
src/crypto/dist/openssl/crypto/ec/ec_key.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.34.1 \
src/crypto/dist/openssl/crypto/ec/ecp_smpl.c
cvs rdiff -u -r1.1.1.7 -r1.1.1.7.12.1 \
src/crypto/dist/openssl/crypto/err/openssl.ec
cvs rdiff -u -r1.1.1.5 -r1.1.1.5.12.1 \
src/crypto/dist/openssl/crypto/evp/Makefile
cvs rdiff -u -r1.1.1.8 -r1.1.1.8.26.1 \
src/crypto/dist/openssl/crypto/evp/evp_enc.c
cvs rdiff -u -r1.8 -r1.8.12.1 src/crypto/dist/openssl/crypto/pkcs7/pkcs7.h
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.12.1 \
src/crypto/dist/openssl/crypto/rsa/Makefile
cvs rdiff -u -r1.14 -r1.14.12.1 src/crypto/dist/openssl/crypto/rsa/rsa.h
cvs rdiff -u -r1.7 -r1.7.12.1 src/crypto/dist/openssl/crypto/rsa/rsa_err.c
cvs rdiff -u -r1.1.1.7 -r1.1.1.7.34.1 \
src/crypto/dist/openssl/crypto/rsa/rsa_oaep.c
cvs rdiff -u -r1.1.1.3 -r1.1.1.3.46.1 \
src/crypto/dist/openssl/crypto/rsa/rsa_pk1.c
cvs rdiff -u -r1.5 -r1.5.12.1 src/crypto/dist/openssl/crypto/rsa/rsa_sign.c
cvs rdiff -u -r1.8 -r1.8.12.1 src/crypto/dist/openssl/doc/apps/s_client.pod
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.46.1 \
src/crypto/dist/openssl/doc/crypto/BIO_s_accept.pod
cvs rdiff -u -r0 -r1.1.4.2 \
src/crypto/dist/openssl/doc/crypto/CMS_add1_signer.pod
cvs rdiff -u -r1.6 -r1.6.34.1 \
src/crypto/dist/openssl/doc/crypto/EVP_DigestInit.pod \
src/crypto/dist/openssl/doc/crypto/EVP_EncryptInit.pod
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.16.1 \
src/crypto/dist/openssl/doc/crypto/EVP_DigestVerifyInit.pod \
src/crypto/dist/openssl/doc/crypto/EVP_PKEY_sign.pod
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.46.1 \
src/crypto/dist/openssl/doc/crypto/EVP_PKEY_set1_RSA.pod
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.46.1 \
src/crypto/dist/openssl/doc/ssl/SS

CVS commit: [netbsd-5-2] src/crypto/dist/openssl

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 20:11:09 UTC 2014

Modified Files:
src/crypto/dist/openssl/apps [netbsd-5-2]: s_client.c
src/crypto/dist/openssl/crypto [netbsd-5-2]: LPdir_vms.c LPdir_win.c
Makefile
src/crypto/dist/openssl/crypto/bn [netbsd-5-2]: bn_exp.c exptest.c
src/crypto/dist/openssl/crypto/bn/asm [netbsd-5-2]: x86_64-gcc.c
src/crypto/dist/openssl/crypto/dsa [netbsd-5-2]: dsa_ameth.c
src/crypto/dist/openssl/crypto/ec [netbsd-5-2]: ec.h ec_ameth.c
ec_asn1.c ec_key.c ecp_smpl.c
src/crypto/dist/openssl/crypto/err [netbsd-5-2]: openssl.ec
src/crypto/dist/openssl/crypto/evp [netbsd-5-2]: Makefile evp_enc.c
src/crypto/dist/openssl/crypto/pkcs7 [netbsd-5-2]: pkcs7.h
src/crypto/dist/openssl/crypto/rsa [netbsd-5-2]: Makefile rsa.h
rsa_err.c rsa_oaep.c rsa_pk1.c rsa_sign.c
src/crypto/dist/openssl/doc/apps [netbsd-5-2]: s_client.pod
src/crypto/dist/openssl/doc/crypto [netbsd-5-2]: BIO_s_accept.pod
EVP_DigestInit.pod EVP_DigestVerifyInit.pod EVP_EncryptInit.pod
EVP_PKEY_set1_RSA.pod EVP_PKEY_sign.pod
src/crypto/dist/openssl/doc/ssl [netbsd-5-2]: SSL_CTX_set_mode.pod
SSL_CTX_set_tmp_dh_callback.pod
src/crypto/dist/openssl/ssl [netbsd-5-2]: Makefile s23_clnt.c
s23_srvr.c s2_lib.c s3_clnt.c s3_enc.c s3_lib.c s3_pkt.c s3_srvr.c
ssl-lib.com ssl.h ssl3.h ssl_err.c ssl_lib.c t1_enc.c t1_lib.c
tls1.h
src/crypto/dist/openssl/test [netbsd-5-2]: Makefile
Added Files:
src/crypto/dist/openssl/crypto [netbsd-5-2]: constant_time_locl.h
constant_time_test.c
src/crypto/dist/openssl/doc/crypto [netbsd-5-2]: CMS_add1_signer.pod
src/crypto/dist/openssl/test [netbsd-5-2]: constant_time_test.c

Log Message:
Apply patch (requested by spz in ticket #1927):
Apply OpenSSL security fixes derived from the diff between
OpenSSL 1.0.0n and 1.0.0o, fixing CVE-2014-3567, CVE-2014-3568,
and adding POODLE mitigation via support for TLS_FALLBACK_SCSV.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.11 -r1.1.1.11.2.1 \
src/crypto/dist/openssl/apps/s_client.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.38.1 \
src/crypto/dist/openssl/crypto/LPdir_vms.c
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.2.1 \
src/crypto/dist/openssl/crypto/LPdir_win.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.2.1 src/crypto/dist/openssl/crypto/Makefile
cvs rdiff -u -r0 -r1.1.6.2 \
src/crypto/dist/openssl/crypto/constant_time_locl.h \
src/crypto/dist/openssl/crypto/constant_time_test.c
cvs rdiff -u -r1.3 -r1.3.2.1 src/crypto/dist/openssl/crypto/bn/bn_exp.c
cvs rdiff -u -r1.4 -r1.4.2.1 src/crypto/dist/openssl/crypto/bn/exptest.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.36.1 \
src/crypto/dist/openssl/crypto/bn/asm/x86_64-gcc.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.6.1 \
src/crypto/dist/openssl/crypto/dsa/dsa_ameth.c
cvs rdiff -u -r1.6 -r1.6.2.1 src/crypto/dist/openssl/crypto/ec/ec.h
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.6.1 \
src/crypto/dist/openssl/crypto/ec/ec_ameth.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.30.1 \
src/crypto/dist/openssl/crypto/ec/ec_asn1.c
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.38.1 \
src/crypto/dist/openssl/crypto/ec/ec_key.c
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.38.1 \
src/crypto/dist/openssl/crypto/ec/ecp_smpl.c
cvs rdiff -u -r1.1.1.7 -r1.1.1.7.2.1 \
src/crypto/dist/openssl/crypto/err/openssl.ec
cvs rdiff -u -r1.1.1.5 -r1.1.1.5.2.1 \
src/crypto/dist/openssl/crypto/evp/Makefile
cvs rdiff -u -r1.1.1.8 -r1.1.1.8.30.1 \
src/crypto/dist/openssl/crypto/evp/evp_enc.c
cvs rdiff -u -r1.8 -r1.8.2.1 src/crypto/dist/openssl/crypto/pkcs7/pkcs7.h
cvs rdiff -u -r1.1.1.4 -r1.1.1.4.2.1 \
src/crypto/dist/openssl/crypto/rsa/Makefile
cvs rdiff -u -r1.14 -r1.14.2.1 src/crypto/dist/openssl/crypto/rsa/rsa.h
cvs rdiff -u -r1.7 -r1.7.2.1 src/crypto/dist/openssl/crypto/rsa/rsa_err.c
cvs rdiff -u -r1.1.1.7 -r1.1.1.7.38.1 \
src/crypto/dist/openssl/crypto/rsa/rsa_oaep.c
cvs rdiff -u -r1.1.1.3 -r1.1.1.3.50.1 \
src/crypto/dist/openssl/crypto/rsa/rsa_pk1.c
cvs rdiff -u -r1.5 -r1.5.2.1 src/crypto/dist/openssl/crypto/rsa/rsa_sign.c
cvs rdiff -u -r1.8 -r1.8.2.1 src/crypto/dist/openssl/doc/apps/s_client.pod
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.50.1 \
src/crypto/dist/openssl/doc/crypto/BIO_s_accept.pod
cvs rdiff -u -r0 -r1.1.6.2 \
src/crypto/dist/openssl/doc/crypto/CMS_add1_signer.pod
cvs rdiff -u -r1.6 -r1.6.38.1 \
src/crypto/dist/openssl/doc/crypto/EVP_DigestInit.pod \
src/crypto/dist/openssl/doc/crypto/EVP_EncryptInit.pod
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.6.1 \
src/crypto/dist/openssl/doc/crypto/EVP_DigestVerifyInit.pod \
src/crypto/dist/openssl/doc/crypto/EVP_PKEY_sign.pod
cvs rdiff -u -r1.1.1.1 -r1.1.1.1.50.1 \
src/crypto/dist/openssl/doc/crypto/EVP_PKEY_set1_RSA.pod
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.50.1 \
src/crypto/dist/openssl/doc/ssl/SSL_CTX_set_mode.po

CVS commit: [netbsd-5-2] src/doc

2014-10-19 Thread Soren Jacobsen
Module Name:src
Committed By:   snj
Date:   Sun Oct 19 20:11:59 UTC 2014

Modified Files:
src/doc [netbsd-5-2]: CHANGES-5.2.3

Log Message:
1927


To generate a diff of this commit:
cvs rdiff -u -r1.1.2.19 -r1.1.2.20 src/doc/CHANGES-5.2.3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/dev/ic

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 22:31:33 UTC 2014

Modified Files:
src/sys/dev/ic: dwc_gmac.c

Log Message:
if we read an insane mac address from the chip, dont attach


To generate a diff of this commit:
cvs rdiff -u -r1.13 -r1.14 src/sys/dev/ic/dwc_gmac.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/evbarm/awin

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 22:34:55 UTC 2014

Modified Files:
src/sys/arch/evbarm/awin: awin_machdep.c

Log Message:
allow awge mac address to be overriden by uEnv bootargs; set 
awge0.mac-address=XX:XX:XX:XX:XX:XX


To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 src/sys/arch/evbarm/awin/awin_machdep.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/evbarm/awin

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 22:37:08 UTC 2014

Modified Files:
src/sys/arch/evbarm/awin: awin_machdep.c

Log Message:
add some hummingbird A31 motg pins


To generate a diff of this commit:
cvs rdiff -u -r1.18 -r1.19 src/sys/arch/evbarm/awin/awin_machdep.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/evbarm/conf

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 22:38:01 UTC 2014

Modified Files:
src/sys/arch/evbarm/conf: HUMMINGBIRD_A31

Log Message:
enable awge


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 src/sys/arch/evbarm/conf/HUMMINGBIRD_A31

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/arm/allwinner

2014-10-19 Thread Jared D. McNeill
Module Name:src
Committed By:   jmcneill
Date:   Sun Oct 19 23:18:22 UTC 2014

Modified Files:
src/sys/arch/arm/allwinner: awin_io.c

Log Message:
add SDMMC1 SDMMC2 and SDMM3 for A31


To generate a diff of this commit:
cvs rdiff -u -r1.22 -r1.23 src/sys/arch/arm/allwinner/awin_io.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/crypto/external/bsd/openssh

2014-10-19 Thread Christos Zoulas
Module Name:src
Committed By:   christos
Date:   Mon Oct 20 03:05:13 UTC 2014

Modified Files:
src/crypto/external/bsd/openssh/dist: auth.h compat.c mac.c
monitor_wrap.c monitor_wrap.h packet.c sshconnect2.c umac.c
src/crypto/external/bsd/openssh/lib: Makefile
Added Files:
src/crypto/external/bsd/openssh/dist: umac128.c

Log Message:
- remove some more jpake remnants.
- try to fix umac; probably still broken on hosts that require strict
  alignment, but it is still a start.


To generate a diff of this commit:
cvs rdiff -u -r1.8 -r1.9 src/crypto/external/bsd/openssh/dist/auth.h
cvs rdiff -u -r1.7 -r1.8 src/crypto/external/bsd/openssh/dist/compat.c
cvs rdiff -u -r1.9 -r1.10 src/crypto/external/bsd/openssh/dist/mac.c \
src/crypto/external/bsd/openssh/dist/monitor_wrap.c
cvs rdiff -u -r1.6 -r1.7 src/crypto/external/bsd/openssh/dist/monitor_wrap.h
cvs rdiff -u -r1.13 -r1.14 src/crypto/external/bsd/openssh/dist/packet.c
cvs rdiff -u -r1.16 -r1.17 src/crypto/external/bsd/openssh/dist/sshconnect2.c
cvs rdiff -u -r1.5 -r1.6 src/crypto/external/bsd/openssh/dist/umac.c
cvs rdiff -u -r0 -r1.1 src/crypto/external/bsd/openssh/dist/umac128.c
cvs rdiff -u -r1.14 -r1.15 src/crypto/external/bsd/openssh/lib/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/ufs/chfs

2014-10-19 Thread Maxime Villard
Module Name:src
Committed By:   maxv
Date:   Mon Oct 20 06:41:52 UTC 2014

Modified Files:
src/sys/ufs/chfs: chfs_vfsops.c

Log Message:
Memory leak.

Found by my code scanner.

ok christos@


To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 src/sys/ufs/chfs/chfs_vfsops.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/compat/common

2014-10-19 Thread Maxime Villard
Module Name:src
Committed By:   maxv
Date:   Mon Oct 20 06:56:38 UTC 2014

Modified Files:
src/sys/compat/common: vfs_syscalls_30.c

Log Message:
Memory leak, triggerable from root only.

Found by my code scanner.

ok christos@


To generate a diff of this commit:
cvs rdiff -u -r1.34 -r1.35 src/sys/compat/common/vfs_syscalls_30.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.