asn1_multi: rework creation of the returned stack
Currently, the ASN1_TYPE ret is created up front and further populated
via a possibly failing call to ASN1_STRING_type_new(). On failure, the
incomplete ret is returned, indicating success to the caller, which may
or may not fail later.
Instead, create the inner ASN1_STRING first, then the ASN1_TYPE. Use
setter API with proper ownership transfer rather than fiddling with
deeply nested ASN1 structures. This way we only succeed if everything
actually succeeded.
ok kenjiro
asn1_multi: plug leak if sk_ASN1_TYPE_push() fails
If the push of typ onto sk fails, the exit path does not free it.
Fix that and avoid function nesting when calling ASN1_generate_v3().
Prompted by a similar fix in OpenSSL
ok kenjiro
IANA has allocated a non-vendor codepoint for ssh-mldsa44-ed25519,
so use it instead of the vendored "@openssh.com" name.
Note: this replaces the vendored name, which was only marked as
experimental and not enabled by default.cw
If you have ssh-mldsa44-ed25519 at openssh.com keys manually configured
in sshd, then you will need to remove them from sshd_config and
restart.
drm: apple: Switch back to drm_atomic_helper_commit_tail_rpm()
From Janne Grunau
bd8ce96f6e76b98940352b18fe735a7943471ed7 in AsahiLinux/linux
This implictly gets rid of drm_atomic_helper_wait_for_flip_done()
and makes graphical output on Apple Silicon machines noticably
snappier.
ok kettenis@ jsg@
mark net/barrier BROKEN, old software wants old devel/gtest
Their CMake goo includes bundles missing from the autogenerated tarball,
there is no knob to disable tests, we don't run them (NO_TEST=yes),
but instead nuke the CMake goo and hope for system gtest to work,
which now fails due to newer devel/gtest requiring C++17.
barrier is C++14, its last release is five years old and we're behind,
upstream's last commit was four years ago...