sk-usbhid: skip unsupported key types in read_rks()
When enumerating resident keys, encountering a credential with an
unsupported COSE key type (not ES256 or EdDSA) caused the entire
enumeration to abort via goto out, discarding all valid keys.
Move the key type check before the per-credential allocation so
unsupported types can be skipped with continue instead. This
preserves all valid resident keys on the token.
Patch from Akhilesh Arora via GHPR657
Actually set pollfd.events correctly for socket type channels;
previously we were throwing away the events we computed if the
channel had a c->sock distinct from it's other read and write
fds. Fortunately, it appears that this case happens rarely, if
ever.
Reported by Darafei Praliaskouski via GHPR660
When pane-border-indicators is set to "both" or "arrows", only draw
arrows on the active floating pane and no other floating panes. Also
there is no need to loop in screen_redraw_cell_border if only checking
one pane.
Fix vmd(8) emulation for Linux guests.
The memory safety checks introduced in previous commit were too
strict and broke Linux guests running on top of vmd. Adapt the
checks to the variation of virtio 1.x that vmd implements.
virtio 1.x doesn't need page alignment. The used area offset needs
to just be 4 byte aligned for some sanity, but not really critical.
The descriptor table, available area, and used areas must be in
guest memory ranges and not spill out allowing guest access to host
memory by using hvaddr_mem() to check.
from dv@; OK mlarkin@; tested by jmatthew@ and Remi Bougard
ctime.3: remove warning about tm_zone and tm_gmtoff
These are standardized in posix 2024 via Austin Group Defect 1533. So they
won't go away or change anytime soon.
ok job millert
Clean up signature algorithm handling.
Now that we no longer support TLSv1.0 and TLSv1.1, SSL_USE_SIGALGS()
is always true - remove all of the code that handles the non-sigalgs
path, along with SSL_USE_SIGALGS() and the related flags.
Also remove SIGALG_RSA_PKCS1_MD5_SHA1 and references to it, since this
is also now unused.
ok kenjiro@ tb@
in the qwx newstate task, only attempt to reset the device if RUNNING
If we are not RUNNING then we are being called from qwx_stop(), and any
error recovery the init task would try to perform would at best be
pointless and might even cause problems.
devel/git-tools: new port (version 2025.08)
Assorted git-related scripts and tools:
- git-branches-rename: Batch renames branches with a matching prefix to
another prefix
- git-clone-subset: Clones a subset of a git repository
- git-find-uncommitted-repos: Recursively list repos with uncommitted
changes
- git-rebase-theirs: Resolve rebase conflicts and failed cherry-picks by
favoring 'theirs' version
- git-restore-mtime: Restore original modification time of files based
on the date of the most recent commit that modified them
- git-strip-merge: A git-merge wrapper that deletes files on a "foreign"
[4 lines not shown]
Fix use of wrong tailq pointers in qwx.
Fortunately, this was a non-issue on devices with single radios and
there are no multi-radio devices known to us so far.
With help from kevlo@ who spotted a case I had missed.
handle compiled-time unsupported options in servconf.h better; leave
a zero placeholder variable so we don't have #ifdef around their
absence elsehwere in the tree
the new configuration dump code emits configuration directives with
capitalisation (previously they were all lowercase), so make the tests
that consume them insensitive to case
