summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-05-03document example for shr(3)spew
2016-05-03add "snake" tracing effect to molespew
2016-05-02fix e2 production to match regexp(6) and do it right this timespew
2016-05-02libregexp: reverting this shit. this is clearly broken.cinap_lenrek
2016-05-02libregexp/regcomp.c: fix parser for e2 production (thanks, spew)stanley lieber
2016-05-01just use wait in "system" call for awk, get rid of unix dependent status ↵spew
code divisor
2016-05-01null terminate await buffer for proper tokenize callspew
2016-05-01use rc in awk, remove awk from APEDIRS in cmd mkfileben
2016-05-02/lib/ndb/common: update ip addresses for [BCHL].ROOT-SERVERS.NETcinap_lenrek
2016-05-02awk: dont require sed to build awkcinap_lenrek
2016-05-02awk: bring back ENVIRON[] supportcinap_lenrek
2016-05-01acid: don't get fooled by spaces in convflt()cinap_lenrek
2016-05-01pc: use fpsave() instead of fpenv() to capture fp exception contextcinap_lenrek
2016-05-01libregex: fix sed regression (thans spew)cinap_lenrek
I introduced a regression in sed that currently has screwed up /sys/lib/man/secindex. The issue is that sed 's/$/ foo/g' will actually replace the newline character with foo instead of just appending at the end of the line. This only makes a difference when sed is operating on a multiple line record. The effect is a record like: foo bar baz becomes: foo foobar foo baz foo instead of foo foo bar foo baz foo
2016-04-30upas/bayes/dump.c: regcomp.h is now located in this directory.stanley lieber
2016-04-30awk: temporarily fix for NaN() exceptions on 386cinap_lenrek
problem is NaN() produces a SNaN, not a QNaN... and on the 387, storing 80 bit SNaN in register to a 64-bit memory destination traps. SNaN/QNaN encoding is machine specific. mips has the qiet/signaling bit inverted. disabling fp exception in main() now, but that sucks. i think the best solution would be to not even call strtod() in is_number() but just write a regex or a little state machine that will only accept numbers without nan and ±inf. that might even make it faster and is more robust than relying on the os's strtod() details.
2016-04-29ape/libsec: fix nuke target to remove /$objtype/lib/ape/libsec.a instead of ↵cinap_lenrek
/$objtype/lib/libsec.a
2016-04-29handle NaN in awk (thanks spew)aiju
2016-04-28awk: fix mkfile for cross-compiles (thanks, spew)stanley lieber
2016-04-28remove ape/regexp.h, remove leftover #pragma lib oldlibregexp.$O from ↵cinap_lenrek
upas/bayes/regexp.h
2016-04-28mergecinap_lenrek
2016-04-28closed spew branchcinap_lenrek
2016-04-28fix printing a char from an empty stringben
2016-04-28fix printing a char from a string that starts with a runeben
2016-04-28fix unsigned printing for awkben
2016-04-28merge defaultben
2016-04-28get rid of size printingben
2016-04-27check program sizeben
2016-04-28rune(2): add Runeerror reencoding considerations in BUGS section (thanks aiju)cinap_lenrek
2016-04-27better memory management of threads (thanks knuth)ben
2016-04-27merge in masterben
2016-04-27use Beof for awk portben
2016-04-27remove ape regexp library, add utility for awk native portben
2016-04-27libjson: add slack space to literal string buffer to handle bad runes ↵cinap_lenrek
(thanks mischief) if the input string contains invalid utf-8, runetochar() produces unicode replacement characters that can overflow the literal buffer. as the overflow check is done after runetochar(), add UTFmax bytes of slack space avoiding the issue.
2016-04-26remove old libregexp files; add headers for upas/bayesben
2016-04-26New libregexp and APE ported to nativeben
2016-04-26abaco(1): remove readwebcinap_lenrek
2016-04-25made abaco's gui respect $font and made readweb respect most installationsMatthew Veety
2016-04-22rsa: rename getkey() to getrsakey(), document rsa2csr in rsa(8)cinap_lenrek
2016-04-22libsec: implement server side SCSV preventing silly client fallbackscinap_lenrek
silly clients (web*) reconnect when the handshake failed with a lower protocol version, which allows downgrade attacks (POODLE). but instead of stopping this madness, they invented a new magic TLSID to indicate to the server that this connection attempt is a retry, and rely on the server to notice and stop them from sabotaging themselfs.
2016-04-21libsec: order tlshand cipher suits by: keyexchange>=cipher>=hash, ignore ↵cinap_lenrek
client preference client preference is usualy crazy, so just ignore it. we always want the diffie hellman suits before static rsa and prefer chacha over aes-gcm.
2016-04-21rsagen: increase default key size to 2048 bitscinap_lenrek
2016-04-21libsec: remove affine coordinate point operations from ecccinap_lenrek
we now just do point addtion in jacobian coordinate system, and convert the result to affine when s->z == nil.
2016-04-20libsec: implement elliptic curve group operations in jacobian coordinate systemcinap_lenrek
2016-04-20rcpu: make sure not to leak /env/fn#server and /env/fn#aanserver for ↵cinap_lenrek
drawterm (thanks mischief)
2016-04-18libsec: implement server side ECDHE key exchange with secp256r1, move DH ↵cinap_lenrek
state in TlsSec structure, simplify implement ECDHE key exchange with secp256r1 on the server side, providing perfect forward secrecy (tho slowly). it is easier to just keep the ECDH/DH state in the TlsSec structure, which fits better with the grouping of the functions. we do the cleanup in tlsConnectionFree() now, so a lot of error handling logic could go away. reinvestigated some error paths and removed the ones that cannot error. move functions to fit the logical grouping. combine the code for signing handshake hashes (for client certs) and DH parameters. provide digestDHparams() function to be shared between server and client code.
2016-04-18webfs: fix memory leak of serverName in tlswrap()cinap_lenrek
2016-04-17rsa(8): provide example for converting OpenSSL generated PEM file to factotumcinap_lenrek
2016-04-17libsec: massive cleanup of tlshand.ccinap_lenrek
don't pass or generate sessionID's. this was never used nor actually implemented and leaks the process pid. get rid of version and random field duplications, move TlsSec structure into TlsConnection. make msgRecv() clear the message first, get rid of unneccesary msgClear() calls.
2016-04-16libsec: fix memory leak of RSApub, avoid parsing certificate twice to ↵cinap_lenrek
extract rsa public key instead of letting factotum_rsa_open() parse the certificate, we pass in the rsa public key which is then matched against the factotum keyring. this avoids parsing the x509 certificate twice. the sec->rsapub was not freed, so free it in tlsSecClose()