| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2017-12-31 | aux/wpa: get rid of custom Hfmt() routine, just use encodefmt. use %E for ↵ | cinap_lenrek | |
| mac addresses | |||
| 2017-12-30 | libsec: implement SPKI fingerprinting for okCertificate() | cinap_lenrek | |
| Instead of only using a hash over the whole certificate for white/black-listing, now we can also use a hash over the Subject Public Key Info (SPKI) field of the certificate which contians the public key algorithm and the public key itself. This allows certificates to be renewed independendtly of the public key. X509dump() now prints the public key thumbprint in addition to the certificate thumbprint. tlsclient will print the certificate when run with -D flag. okCertificate() will print the public key thumbprint in its error string when no match has been found. | |||
| 2017-12-30 | libsec: fix mistake: strnchr -> strchr | cinap_lenrek | |
| 2017-12-30 | libsec: avoid unneccesary memory copies and redundant code in x509 | cinap_lenrek | |
| getting rid of some functions that take Byte* and instead pass uchar* and length. keeping the signature and public key fields in CertX509 as Bits* allows ownership transfer by swapping pointers. use common code to copy CN from subject field. | |||
| 2017-12-29 | libsec: get rid of dummy data[1] in Bytes and Ints types (thanks pr) | cinap_lenrek | |
| 2017-12-29 | usbxhci: add missing pexit() in xhcirecover proc (thanks sam-d) | cinap_lenrek | |
| 2017-12-29 | wifi: revert rate adoption divider, breaks arpunks wifi | cinap_lenrek | |
| 2017-12-29 | /lib/bullshit: +converged | cinap_lenrek | |
| 2017-12-28 | devtls, devssl: avoid ~0UL comparsion (from drawterm) | cinap_lenrek | |
| 2017-12-28 | devmnt: use u32int for tagmask, simplify alloctag() | cinap_lenrek | |
| 2017-12-28 | wifi: don't implicitely update lastseen timestamp on nodelookup() | cinap_lenrek | |
| in case we continue to send traffic (like ping) with the ap gone, the sending would keep updating bss->lastseen which prevents the timeout to happen to switch bss. | |||
| 2017-12-28 | etheriwl, etherwpi: limit transmit queue buffer bloat to 48k (at 22Mbit ≅ ↵ | cinap_lenrek | |
| 20ms) | |||
| 2017-12-28 | wifi: don't assume Wifi.rates[] is sorted, return net data rate for mbps ↵ | cinap_lenrek | |
| (50% theoretical) | |||
| 2017-12-23 | arch(3): document #P/realmodemem file | cinap_lenrek | |
| 2017-12-23 | devvga: removing #v/vgabios, use /dev/realmodemem instead | cinap_lenrek | |
| 2017-12-23 | kernel: convert textmode cga screen contents to kmesg only once | cinap_lenrek | |
| screeninit() might be called again by devvga when switching to textmode, so only convert the text framebuffer to kmesg the first time. | |||
| 2017-12-23 | auth(8): auth/debug tests both dp9ik and p9sk1 | cinap_lenrek | |
| 2017-12-23 | kernel: remove Ipifc.mbps, unused. | cinap_lenrek | |
| 2017-12-22 | /lib/bullshit: blockchain | cinap_lenrek | |
| 2017-12-21 | ip/tinc: handle and set ethertype for ipv6 | cinap_lenrek | |
| 2017-12-19 | upas/fs: more bugs | cinap_lenrek | |
| 2017-12-19 | upas/fs: fix precedence bugs, compare digest pointer to nil | cinap_lenrek | |
| 2017-12-19 | ether8169: add Macv45 for RTL8111HN, rename Macv45 -> Macv42 (thanks qeed, ↵ | cinap_lenrek | |
| sam-d) | |||
| 2017-12-18 | nusb/ether: dont forward loopback packets on bridges, remove read ↵ | cinap_lenrek | |
| nonblocking hack | |||
| 2017-12-18 | devether: dont forward loopback packets on bridges | cinap_lenrek | |
| 2017-12-18 | devbridge: disable write blocking on ethernets | cinap_lenrek | |
| 2017-12-17 | bridge(3): clarify manpage, this is a layer2 bridge | cinap_lenrek | |
| yes, it peeks into IP packets to handle fragmentation when sending onto tunnel ports and does mss clamping. but it can carry arbitrary ethernet packets just fine (between ethernets). | |||
| 2017-12-17 | pc, pc64: add devbridge to kernel configuration | cinap_lenrek | |
| 2017-12-17 | devbridge: fix mss clamping | cinap_lenrek | |
| - use protocol constants from ip/ip.h and ip/ipv6.h - support mss clamping for ipv6 - fix padding bug on 64 bit machines (can't use sizeof(Tcphdr)) | |||
| 2017-12-17 | ip/tinc: handle single byte noop and end-of-option-list tcp options in ↵ | cinap_lenrek | |
| clampmss() | |||
| 2017-12-17 | wifi: use protocol constants from ip/ip.h and ip/ipv6.h for dmatproxy() | cinap_lenrek | |
| 2017-12-16 | wifi: matt damon wifi bridging support | cinap_lenrek | |
| 2017-12-15 | ether: allow spoofing of source mac address for bridges; used by vmx | cinap_lenrek | |
| to implement layer 2 bridges in userspace, we disable to auto filling of the source mac address when bridge mode is enabled on the connection. | |||
| 2017-12-13 | vmx(1): fix virtio network bloomfilter | aiju | |
| 2017-12-11 | /sys/man/*/*: fix perms (sorry) | stanley lieber | |
| 2017-12-11 | fortunes: Subject: [oss-security] nvi denial of service | stanley lieber | |
| 2017-12-11 | /sys/lib/rootstub | stanley lieber | |
| 2017-12-09 | devether: remove duplicated parseether() implementation (pull from libip) | cinap_lenrek | |
| 2017-12-09 | libflate: force non-empty huffman table in mkzprecode() for deflate | cinap_lenrek | |
| busybox gunzip fails on empty (offset) huffman tables, so force one entry. gzip states in a comment: The pkzip format requires that at least one distance code exists, and that at least one bit should be sent even if there is only one possible code. | |||
| 2017-12-05 | disk/edisk: allow printing and readonly inspection of hybrid MBR/GPT disks ↵ | cinap_lenrek | |
| (thanks aiju) dumping hybrid MBR/GPT disks is fine, which can sometimes be found on USB sticks. but prohibit editing. however, always barf on disks with dos partitions and missing protecive MBR partition entry. | |||
| 2017-12-04 | realemu: fix precedence bug in argconv() format routine (thanks dan cross) | cinap_lenrek | |
| 2017-12-04 | realemu: fix pit bcd mode | cinap_lenrek | |
| 2017-12-03 | plan9.ini(8): 9boot(8) is not a DOS program, remove outdated BUGS section | cinap_lenrek | |
| 2017-12-03 | devvga: properly handle physical screen size and panning | cinap_lenrek | |
| - remove arbitrary limits on screen size, just check with badrect() - post resize when physgscreenr is changed (actualsize ctl command) - preserve physgscreenr across softscreen flag toggle - honor panning flag on resize - fix nil dereference in panning ctl command when scr->gscreen == nil - use clipr when drawing vga plan 9 console (vgascreenwin()) | |||
| 2017-12-03 | screenlock: put position check back in grabmouse (thanks deuteron) | cinap_lenrek | |
| the check was there because changing te position causes another mouse event to get posted resulting in grabmouse spinning. | |||
| 2017-12-03 | screenlock: have keyboard activity reset blank timeout | cinap_lenrek | |
| 2017-12-03 | screenlock: avoid continuous blanking, draw fullscreen over border | cinap_lenrek | |
| 2017-12-03 | screenlock: some improvements | cinap_lenrek | |
| check for "needkey " error string from auth_userpasswd() in case no key is pesent in factotum. this used to be a common trap with stand alone machines that do not have an authentication server setup. indicate authentication in progress by drawing a white border. delete unneccesary cruft and simplify the code. | |||
| 2017-12-03 | libauth: replace proto=p9cr with new proto=dp9ik/p9sk1 role=login for ↵ | cinap_lenrek | |
| auth_userpasswd() | |||
| 2017-12-03 | auth/factotum: add role=login protocol variant to dp9ik/p9sk1 | cinap_lenrek | |
| the role=login protocol is ment to replace proto=p9cr in auth_userpasswd() from libauth to authenticate a user given a username and a password. in contrast to p9cr, it does not require an authentication server when user is the hostowner and its key is present in factotum. | |||
