uncm(4) update from Jan Schreiber and Mikolaj Kucharski
- remove unneeded splnet() calls
- during Tx, drop packets which are too big for a single NTB
- validate NCM_FORMAT before using this device-supplied value
- use the ifqueue(9) API to enqueue packets
- be more spec-compliant while checking wNdpOutAlignment
- close the control pipe before calling usb_rem_wait_task(9), not after
Correct the description: the argument is effectively boolean,
and the only values that can be set are 0 and 3.
Minor polishing while here: use .Xr the first time "sysctl" occurs,
use .Rv below RETURN VALUES, add a few .Xrs below SEE ALSO,
and use the standard section name "CAVEATS" rather than "WARNING".
OK miod@; triggered by a question from Alejandro Colomar <alx at kernel.org>
rpki-client: close directory fds in process_start()
After changing the working directory to the cache directory, none of the
children needs access to either of the two directory fds in the parent.
Also close the cachefd when it is no longer needed in the main process to
match what was done to the output directory. Apart from some consistency,
the benefit of doing this is less obvious to me.
discussed with claudio and deraadt
ok claudio
update to py3-twisted-26.4.0
disable gireactor test which kills the test runner (at least in no X +
PORTS_PRIVSEP environment) to allow following tests to run
ocspcheck: limit HTTP response body size
Reject OCSP response bodies larger than 20 KB before growing the body
buffer. A responder could otherwise stream data indefinitely and cause
ocspcheck to exhaust memory.
From Frank Denis, also reported by Aziz ELBELAYCHY
ok tb@
ocspcheck: limit HTTP response header size
Reject response headers that would exceed 64 KB before growing the
header buffer. A responder could otherwise stream data without a
header terminator and cause ocspcheck to allocate memory indefinitely.
From Frank Denis, also reported by Aziz ELBELAYCHY
ok tb@
