rpki-client: report on non-canonically ordered addresses in ROAs
This adds a warning (under verbose) if the ROAIPAddress families contain
out of order elements. It also warns (always) if IPv6 comes before IPv4.
The JSON output for ROAs in filemode grows a new noncanonical boolean.
ok job
Remove redundant evtimer_pending() and signal_pending() checks
event_del() has no effect when an event is not pending, so there is no
need to check its state before deleting timer and signal events in
ldapd, radiusd, and vmd.
These are mechanical cleanups with no change in event scheduling or
callback behaviour.
Reads OK florian@
Remove redundant evtimer_pending() checks in routing daemons
event_del() has no effect when an event is not pending, so there is no
need to check its state before deleting timers in dvmrpd, eigrpd, ldpd,
ospf6d, ospfd, and ripd.
These are mechanical cleanups with no change in timer or protocol
behaviour.
Reads OK florian@
Remove redundant evtimer_pending() check in tcpbench
event_del() has no effect when an event is not pending, so there is no
need to check its state before deleting the slice timer.
This is a mechanical cleanup with no change in timer behaviour.
Reads OK florian@
Remove redundant evtimer_pending() checks before evtimer_del()
event_del() has no effect when an event is not pending, so there is no
need to check its state before deleting an initialized timer.
This is a mechanical cleanup with no change in timer behaviour.
OK florian@
When unveil was used with a chroot environment it was possible for
unveil_find_cover to loop forever because it was missing a check for the
rootvnode. This would only happen if references existed to directories
outside the chroot, which correct chroot code must not do.
ok deraadt
httpd: only rekey TLS tickets for the first server on a socket
With several TLS servers on the same address + port and
"tls ticket lifetime" option set, httpd died on the first ticket rekey.
The parent started a rekey timer for every server, but only the first
one on a socket exists as a struct server in the server processes.
Start the rekey timer only for that server.
Reported by James J. Lippard on bugs@ and stsp@, thanks!
ok stsp@, kirill@
yesterday's "MFC php changes from -current, to make tomorrow's RCE CVEs
easier to handle" accidentally dropped /usr/local/bin/{php,phar,phpize}
symlinks; correct
All uses of send_softint are of the form (ih->ih_pil, ih). Drop the first
argument since it can be easily obtained from the second one. Also drop the
check for a NULL ih as this will never happen.
lang/deno: Update to 2.9.8
This release removes emSign ECC Root CA - G3 from the trusted certificate
authorities (via webpki-root-certs 1.0.10)
Added a patch to make the system cert store the default, for good measure
