Instead of overwriting wide characters manually when combining, use the
normal cell write path. Fixes problems with overlapping wide characters
and those close to the last column.
rpki-client: shuffle things in nca.c into a more sensible order
This separates the ca_tree and the nca_hist_tree cleanly and prepares
for upcoming work.
based on a diff by/ok job
tmux: remove redundant event_del()/evtimer_del()
event_add(3) automatically replaces any pending timeout for an existing
event, making explicit event_del() / evtimer_del() calls immediately
before event_add() / evtimer_add() unnecessary.
OK nicm@
npppd: remove redundant evtimer_del() in macro
evtimer_add(3) (libevent) automatically replaces any pending timeout for
an existing event, making the explicit call to evtimer_del() before
evtimer_add() superfluous.
OK yasuoka@
uncm(4) update from Jan Schreiber and Mikolaj Kucharski
- remove unneeded splnet() calls
- during Tx, drop packets which are too big for a single NTB
- validate NCM_FORMAT before using this device-supplied value
- use the ifqueue(9) API to enqueue packets
- be more spec-compliant while checking wNdpOutAlignment
- close the control pipe before calling usb_rem_wait_task(9), not after
Correct the description: the argument is effectively boolean,
and the only values that can be set are 0 and 3.
Minor polishing while here: use .Xr the first time "sysctl" occurs,
use .Rv below RETURN VALUES, add a few .Xrs below SEE ALSO,
and use the standard section name "CAVEATS" rather than "WARNING".
OK miod@; triggered by a question from Alejandro Colomar <alx at kernel.org>
rpki-client: close directory fds in process_start()
After changing the working directory to the cache directory, none of the
children needs access to either of the two directory fds in the parent.
Also close the cachefd when it is no longer needed in the main process to
match what was done to the output directory. Apart from some consistency,
the benefit of doing this is less obvious to me.
discussed with claudio and deraadt
ok claudio
ocspcheck: limit HTTP response body size
Reject OCSP response bodies larger than 20 KB before growing the body
buffer. A responder could otherwise stream data indefinitely and cause
ocspcheck to exhaust memory.
From Frank Denis, also reported by Aziz ELBELAYCHY
ok tb@
ocspcheck: limit HTTP response header size
Reject response headers that would exceed 64 KB before growing the
header buffer. A responder could otherwise stream data without a
header terminator and cause ocspcheck to allocate memory indefinitely.
From Frank Denis, also reported by Aziz ELBELAYCHY
ok tb@
ocspcheck: remove disabled HTTP test program
Remove the unused main() function at the end of http.c. It has been
excluded from the build with #if 0.
Pointed out by tb@
ok tb@
ocspcheck: select TLS based on the OCSP URL scheme
Preserve the URL scheme when parsing the OCSP responder address and pass
it to the HTTP client. Previously, the client selected TLS only when
the port was 443, so an https:// URL with a different port sent the
OCSP request in cleartext.
Use the scheme for the verbose connection message as well.
Reported by Aziz ELBELAYCHY
ok tb@
