Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-05-03 | document example for shr(3) | spew | |
2016-05-03 | add "snake" tracing effect to mole | spew | |
2016-05-02 | fix e2 production to match regexp(6) and do it right this time | spew | |
2016-05-02 | libregexp: reverting this shit. this is clearly broken. | cinap_lenrek | |
2016-05-02 | libregexp/regcomp.c: fix parser for e2 production (thanks, spew) | stanley lieber | |
2016-05-01 | just use wait in "system" call for awk, get rid of unix dependent status ↵ | spew | |
code divisor | |||
2016-05-01 | null terminate await buffer for proper tokenize call | spew | |
2016-05-01 | use rc in awk, remove awk from APEDIRS in cmd mkfile | ben | |
2016-05-02 | /lib/ndb/common: update ip addresses for [BCHL].ROOT-SERVERS.NET | cinap_lenrek | |
2016-05-02 | awk: dont require sed to build awk | cinap_lenrek | |
2016-05-02 | awk: bring back ENVIRON[] support | cinap_lenrek | |
2016-05-01 | acid: don't get fooled by spaces in convflt() | cinap_lenrek | |
2016-05-01 | pc: use fpsave() instead of fpenv() to capture fp exception context | cinap_lenrek | |
2016-05-01 | libregex: fix sed regression (thans spew) | cinap_lenrek | |
I introduced a regression in sed that currently has screwed up /sys/lib/man/secindex. The issue is that sed 's/$/ foo/g' will actually replace the newline character with foo instead of just appending at the end of the line. This only makes a difference when sed is operating on a multiple line record. The effect is a record like: foo bar baz becomes: foo foobar foo baz foo instead of foo foo bar foo baz foo | |||
2016-04-30 | upas/bayes/dump.c: regcomp.h is now located in this directory. | stanley lieber | |
2016-04-30 | awk: temporarily fix for NaN() exceptions on 386 | cinap_lenrek | |
problem is NaN() produces a SNaN, not a QNaN... and on the 387, storing 80 bit SNaN in register to a 64-bit memory destination traps. SNaN/QNaN encoding is machine specific. mips has the qiet/signaling bit inverted. disabling fp exception in main() now, but that sucks. i think the best solution would be to not even call strtod() in is_number() but just write a regex or a little state machine that will only accept numbers without nan and ±inf. that might even make it faster and is more robust than relying on the os's strtod() details. | |||
2016-04-29 | ape/libsec: fix nuke target to remove /$objtype/lib/ape/libsec.a instead of ↵ | cinap_lenrek | |
/$objtype/lib/libsec.a | |||
2016-04-29 | handle NaN in awk (thanks spew) | aiju | |
2016-04-28 | awk: fix mkfile for cross-compiles (thanks, spew) | stanley lieber | |
2016-04-28 | remove ape/regexp.h, remove leftover #pragma lib oldlibregexp.$O from ↵ | cinap_lenrek | |
upas/bayes/regexp.h | |||
2016-04-28 | merge | cinap_lenrek | |
2016-04-28 | closed spew branch | cinap_lenrek | |
2016-04-28 | fix printing a char from an empty string | ben | |
2016-04-28 | fix printing a char from a string that starts with a rune | ben | |
2016-04-28 | fix unsigned printing for awk | ben | |
2016-04-28 | merge default | ben | |
2016-04-28 | get rid of size printing | ben | |
2016-04-27 | check program size | ben | |
2016-04-28 | rune(2): add Runeerror reencoding considerations in BUGS section (thanks aiju) | cinap_lenrek | |
2016-04-27 | better memory management of threads (thanks knuth) | ben | |
2016-04-27 | merge in master | ben | |
2016-04-27 | use Beof for awk port | ben | |
2016-04-27 | remove ape regexp library, add utility for awk native port | ben | |
2016-04-27 | libjson: add slack space to literal string buffer to handle bad runes ↵ | cinap_lenrek | |
(thanks mischief) if the input string contains invalid utf-8, runetochar() produces unicode replacement characters that can overflow the literal buffer. as the overflow check is done after runetochar(), add UTFmax bytes of slack space avoiding the issue. | |||
2016-04-26 | remove old libregexp files; add headers for upas/bayes | ben | |
2016-04-26 | New libregexp and APE ported to native | ben | |
2016-04-26 | abaco(1): remove readweb | cinap_lenrek | |
2016-04-25 | made abaco's gui respect $font and made readweb respect most installations | Matthew Veety | |
2016-04-22 | rsa: rename getkey() to getrsakey(), document rsa2csr in rsa(8) | cinap_lenrek | |
2016-04-22 | libsec: implement server side SCSV preventing silly client fallbacks | cinap_lenrek | |
silly clients (web*) reconnect when the handshake failed with a lower protocol version, which allows downgrade attacks (POODLE). but instead of stopping this madness, they invented a new magic TLSID to indicate to the server that this connection attempt is a retry, and rely on the server to notice and stop them from sabotaging themselfs. | |||
2016-04-21 | libsec: order tlshand cipher suits by: keyexchange>=cipher>=hash, ignore ↵ | cinap_lenrek | |
client preference client preference is usualy crazy, so just ignore it. we always want the diffie hellman suits before static rsa and prefer chacha over aes-gcm. | |||
2016-04-21 | rsagen: increase default key size to 2048 bits | cinap_lenrek | |
2016-04-21 | libsec: remove affine coordinate point operations from ecc | cinap_lenrek | |
we now just do point addtion in jacobian coordinate system, and convert the result to affine when s->z == nil. | |||
2016-04-20 | libsec: implement elliptic curve group operations in jacobian coordinate system | cinap_lenrek | |
2016-04-20 | rcpu: make sure not to leak /env/fn#server and /env/fn#aanserver for ↵ | cinap_lenrek | |
drawterm (thanks mischief) | |||
2016-04-18 | libsec: implement server side ECDHE key exchange with secp256r1, move DH ↵ | cinap_lenrek | |
state in TlsSec structure, simplify implement ECDHE key exchange with secp256r1 on the server side, providing perfect forward secrecy (tho slowly). it is easier to just keep the ECDH/DH state in the TlsSec structure, which fits better with the grouping of the functions. we do the cleanup in tlsConnectionFree() now, so a lot of error handling logic could go away. reinvestigated some error paths and removed the ones that cannot error. move functions to fit the logical grouping. combine the code for signing handshake hashes (for client certs) and DH parameters. provide digestDHparams() function to be shared between server and client code. | |||
2016-04-18 | webfs: fix memory leak of serverName in tlswrap() | cinap_lenrek | |
2016-04-17 | rsa(8): provide example for converting OpenSSL generated PEM file to factotum | cinap_lenrek | |
2016-04-17 | libsec: massive cleanup of tlshand.c | cinap_lenrek | |
don't pass or generate sessionID's. this was never used nor actually implemented and leaks the process pid. get rid of version and random field duplications, move TlsSec structure into TlsConnection. make msgRecv() clear the message first, get rid of unneccesary msgClear() calls. | |||
2016-04-16 | libsec: fix memory leak of RSApub, avoid parsing certificate twice to ↵ | cinap_lenrek | |
extract rsa public key instead of letting factotum_rsa_open() parse the certificate, we pass in the rsa public key which is then matched against the factotum keyring. this avoids parsing the x509 certificate twice. the sec->rsapub was not freed, so free it in tlsSecClose() |