Re: [patch] httpd static gzip compression

Stuart Henderson, 2021-11-04 14:44:44 +: > On 2021/11/04 08:27, Theo de Raadt wrote: > > > Does any other program work this way? > > > > Where you request one filename, and it gives you another? > > Some of the webservers do, for language selection etc. Sometimes it's > useful. Fortunately t

[patch] usr.bin/file: crash due to misplaced "strength" parameter

Hi, file(1) crashes if the magic file contains a misplaced "strength" parameter. A simple example to reproduce it: $ cat ~/.magic !:strength * 2 0 string \037\235 compress'd data Index: usr.bin/file/magic-load.c === RCS file: /cvs/

packages-specs(7): minor typos

Two little fixes in packages-specs(7). diff --git share/man/man7/packages-specs.7 share/man/man7/packages-specs.7 index 8154206c7..9b3d7b5e7 100644 --- share/man/man7/packages-specs.7 +++ share/man/man7/packages-specs.7 @@ -71,7 +71,7 @@ In case there are substantial changes in the package, a pat

Re: new option for rcctl ls

Stuart Henderson, 2021-10-21 16:45:47 +0100: > Sometimes I find it useful to list daemons which are set to 'disabled' > but are actually running. Either those where I have started them by hand > forgotten to enable in rc.conf.local, or to check for services which > shouldn't be running but which ar

www: fix canonical meta links

A minor patch that makes canonical links match their actual page URLs. Index: ddb.html === RCS file: /cvs/www/ddb.html,v retrieving revision 1.22 diff -u -r1.22 ddb.html --- ddb.html3 Feb 2021 22:52:03 - 1.22 +++ ddb.htm

wg(4): add history section

Documented in which release wg(4) has been added (as per ). Index: share/man/man4/wg.4 === RCS file: /cvs/src/share/man/man4/wg.4,v retrieving revision 1.9 diff -u -r1.9 wg.4 --- share/man/man4/wg.

Re: OpenBSD 6.2 (up2date with syspatch) - HANGING

rel and stable here. Eat it”. //mxb > 21 dec. 2017 kl. 23:19 skrev Maxim Bourmistrov : > > > Fixed in HEAD?! - my ass. Whom puts HEAD into prod?! Not me any more, that's > for sure. > IS LIKE DROPPING A TURBO ENGINE INTO CAR WITH NO WHEELS. > > I can dig into this

Re: OpenBSD 6.2 (up2date with syspatch) - HANGING

; 21 dec. 2017 kl. 23:07 skrev Maxim Bourmistrov : > > Solved?1 > > What abt OPTIONS in relay_http.c ? > Solved? > Maybe in HEAD.(?) > I have to hand-rolle this in src for 6.2 to have it working. > —> toread=0; > You know. > > //mxb > >> 21 dec.

Re: OpenBSD 6.2 (up2date with syspatch) - HANGING

Solved?1 What abt OPTIONS in relay_http.c ? Solved? Maybe in HEAD.(?) I have to hand-rolle this in src for 6.2 to have it working. —> toread=0; You know. //mxb > 21 dec. 2017 kl. 22:40 skrev Janne Johansson : > > 2017-12-21 21:58 GMT+01:00 Maxim Bourmistrov <mailto:m...@alu

Re: relayd/ctl alternative control socket

But what about people not running relay on rdomain, but rather just want to run separate instances of relayd ? > 28 nov. 2017 kl. 16:06 skrev Sebastian benoit > : > > Hi, > > your diff looks good, but i would rather do it the way bgpd/bgpctl do it: > > there the default is /var/run/bgpd.so

Re: relayd: 6.1-stable and relay_http.c rev 1.58

size 0, to read -2 relay_splice: session 1: splice dir 2, nothing to read -2 relay web_test, session 1 (1 active), 0, 172.17.2.21 -> 172.16.1.30:80, done, OPTIONS //mxb > 27 nov. 2017 kl. 20:20 skrev Maxim Bourmistrov : > > Here is setup which reproduces this problem. Also exists in 6.2.

Re: relayd: 6.1-stable and relay_http.c rev 1.58

ONS GET GET With the rev. current for 6.2: relay web_test, session 1 (1 active), 0, 172.17.2.21 -> 172.16.1.30:80, done, OPTIONS //mxb > 22 okt. 2017 kl. 21:02 skrev Maxim Bourmistrov : > > >> 22 okt. 2017 kl. 20:16 skrev Maxim Bourmistrov : >> >> Hey, >>

Re: relayd: 6.1-stable and relay_http.c rev 1.58

> 22 okt. 2017 kl. 20:16 skrev Maxim Bourmistrov : > > Hey, > with rev 1.58 OPTIONS in relay_http.c got broken > or at least logic inside relay_read_http(). > Quick fix it to cre->toread=0 and break, but this is probably not what should > be there. > > In my tes

relayd: 6.1-stable and relay_http.c rev 1.58

Hey, with rev 1.58 OPTIONS in relay_http.c got broken or at least logic inside relay_read_http(). Quick fix it to cre->toread=0 and break, but this is probably not what should be there. In my test case, from the client side I do an OPTIONS request, followed by a couple of GET. GET in the middle

Re: Document hostctl commands for XenServer

icient. >> >> But this quote from Maxim fuels doubts: >> >> :: I don't know whether XenServer actually cares about what >> :: version is reported, but if it does, this would be tied >> :: to features supported by xen, xbf, and xnf drivers. &g

Re: Document hostctl commands for XenServer

On Fri, Jul 21, 2017 at 9:14 AM, Mike Belopuhov wrote: > Hi, > > Together with Maxim Khitrov we have figured out what needs to > be set for XenServer (that's a Citrix product based on Xen) to > "recognize" the OpenBSD VM and let it do things like reboot and >

Re: [patch] fake pv drivers installation on xen

On Mon, Jul 17, 2017 at 3:40 PM, Mike Belopuhov wrote: > On Mon, Jul 17, 2017 at 14:32 -0400, Maxim Khitrov wrote: >> On Wed, Jan 18, 2017 at 2:16 PM, Dinar Talypov wrote: >> > I use Xenserver 7.0 with xencenter management console. >> > without it doesn't allow

Re: [patch] fake pv drivers installation on xen

On Wed, Jan 18, 2017 at 2:16 PM, Dinar Talypov wrote: > I use Xenserver 7.0 with xencenter management console. > without it doesn't allow shutdown or reboot. > Anyway I'll try with hostctl. > > Thanks. Were you able to get this working with hostctl? I'm running OpenBSD 6.1 amd64 on XenServer 7.0.

relayd - multiple instances

Hello, Are there plans for relayd to run multiple instances? Eg. dropping socket to a configurable location. Regards

Re: relayd: incomplete response from a TLS-accelerated apache

Compiling relayd with -DDEBUG=3 and watching the output gave me nothing. No errors what so ever about out of buffers or something else. However, removing 'socket buffer 65536’ solved my problem. Br > 8 maj 2017 kl. 13:27 skrev Maxim Bourmistrov : > > Hey, > I investigate a

relayd: incomplete response from a TLS-accelerated apache

Hey, I investigate a problem were TLS-asselerated machine response is incomplete. I was able to reproduce this on OpenBSD 5.9, 6.0 and 6.1. Test on 5.8 is about to be. Following env I have: relay1: relayd machine web1: apache 2.2.31 serving the request client1: requester relay1 is configured fo

Re: OpenBSD 6.1: relayd does not start more than 3 processes

> 5 maj 2017 kl. 15:55 skrev Maxim Bourmistrov : > > >> 5 maj 2017 kl. 14:41 skrev Hiltjo Posthuma : >> >> On Fri, May 05, 2017 at 12:30:56PM +0200, Maxim Bourmistrov wrote: >>> >>> Hey, >>> on OpenBSD 6.0-stable I have following configura

Re: OpenBSD 6.1: relayd does not start more than 3 processes

> 5 maj 2017 kl. 14:41 skrev Hiltjo Posthuma : > > On Fri, May 05, 2017 at 12:30:56PM +0200, Maxim Bourmistrov wrote: >> >> Hey, >> on OpenBSD 6.0-stable I have following configuration for relayd: >> >> snip——— >> interva

OpenBSD 6.1: relayd does not start more than 3 processes

Hey, on OpenBSD 6.0-stable I have following configuration for relayd: snip——— interval 10 timeout 1200 prefork 15 log all —— Respective login.conf to spawn more relayd procs: relayd:\ :maxproc-max=31:\ :maxproc-cur=15:\ :openfiles=65536:\

OSPFd stucks in EXCHG/EXSTA

Hey, ospfd on 6.0-stable stucks in EXCHG/EXSTA while neighboring with Dell N3048 switch. According to some documentation around, this is due to MTU mismatch. This is not in my case. N3048: system jumbo mtu 1512 obsd: trunk1: flags=8943 mtu 1500 lladdr 00:25:90:78:62:b6 descript

Re: pfctl interprets "# ... \" as multi-line comment and can skip rules

I use the following script to reload pf rules. It allows me to check that what I wrote was interpreted as I intended: #!/bin/sh test "$(id -u)" -eq 0 || exec sudo -- "$0" "$@" old=$(mktemp /tmp/pf-reload.) || exit trap "rm $old" EXIT pfctl -sr > $old || exit pfctl -f /etc/pf.conf; rc=$?

Re: [patch] sys_execve: clean up code that prepares args and env

Ping? On Wed, Dec 16, 2015 at 9:55 PM, Maxim Pugachev wrote: > Ping? > > On Sat, Dec 12, 2015 at 8:38 PM, Maxim Pugachev wrote: >> Hi, >> >> This patch removes copypasted code that prepares args and env in exec >> system call. >

Re: [patch] kern/exec_script: return error when the shell name is not specified

Ping? On Thu, Dec 17, 2015 at 8:18 PM, Ted Unangst wrote: > Maxim Pugachev wrote: >> Ping? >> >> On Sun, Dec 13, 2015 at 12:28 AM, Maxim Pugachev >> wrote: >> > Hi, >> > >> > In a case when the shell name is not specified (i.e. just &qu

Re: [patch] malloc: size that was passed to free() should land into the same bucket

On Thu, Dec 17, 2015 at 9:01 PM, Ted Unangst wrote: > Maxim Pugachev wrote: >> On Sun, Dec 13, 2015 at 10:38 PM, Ted Unangst wrote: >> > Maxim Pugachev wrote: >> >> Currently two checks in free() function confirm the correctness of >> >> freedsize argume

Re: Allocation type in kern/exec_elf.c

On Thu, Dec 17, 2015 at 8:21 PM, Ted Unangst wrote: > Maxim Pugachev wrote: >> Hey all, >> >> I'm wondering, why an allocation type in kern/exec_elf.c is equal to >> M_TEMP? For instance, kern/exec_script.c and kern/kern_exec.c allocate >> memory as M_EX

Re: [patch] kern/exec_script: avoid invalid free() in a case of error

Ping? On Sun, Dec 13, 2015 at 9:45 PM, Maxim Pugachev wrote: > Hi, > > In exec_script_makecmds function, when EXEC_HASFD flag was set, but > copystr/copyinstr returns an error, we need to set *tmpsap to NULL to > terminate a loop (under "fail" label) correct

Re: [patch] kern/exec_script: return error when the shell name is not specified

Ping? On Sun, Dec 13, 2015 at 12:28 AM, Maxim Pugachev wrote: > Hi, > > In a case when the shell name is not specified (i.e. just "#!" without > a path), don't run the heavy logic that checks shell, simply return > ENOENT. > > Also, as a tiny improvement: a

Re: [patch] sys_execve: clean up code that prepares args and env

Ping? On Sat, Dec 12, 2015 at 8:38 PM, Maxim Pugachev wrote: > Hi, > > This patch removes copypasted code that prepares args and env in exec > system call. > > > Index: sys/kern/kern_exec.c > === >

Allocation type in kern/exec_elf.c

Hey all, I'm wondering, why an allocation type in kern/exec_elf.c is equal to M_TEMP? For instance, kern/exec_script.c and kern/kern_exec.c allocate memory as M_EXEC, and it looks more reasonable to me. What's the reason for this? Thanks in advance.

Re: [patch] malloc: add info about the largest consumers of memory

>> Index: sys/kern/kern_malloc.c >> === >> RCS file: /cvs/src/sys/kern/kern_malloc.c,v >> retrieving revision 1.128 >> diff -u -p -r1.128 kern_malloc.c >> --- sys/kern/kern_malloc.c 14 Mar 2015 03:38:50 - 1.128 >> +++ sys

Re: [patch] malloc: size that was passed to free() should land into the same bucket

On Sun, Dec 13, 2015 at 10:38 PM, Ted Unangst wrote: > Maxim Pugachev wrote: >> Currently two checks in free() function confirm the correctness of >> freedsize argument. I think that it's better to check that provided >> freedsize fall into the same bucket that was recor

[patch] kern/exec_script: avoid invalid free() in a case of error

Hi, In exec_script_makecmds function, when EXEC_HASFD flag was set, but copystr/copyinstr returns an error, we need to set *tmpsap to NULL to terminate a loop (under "fail" label) correctly. Index: sys/kern/exec_script.c === RCS fil

Re: [patch] malloc: size that was passed to free() should land into the same bucket

>> Ping? > > You're not being ignored. I have pinged the tedu for you :) Great, thank you, Bob :)

Re: [patch] malloc: size that was passed to free() should land into the same bucket

On Wed, Dec 9, 2015 at 9:26 PM, Maxim Pugachev wrote: > Hi, > > Currently two checks in free() function confirm the correctness of > freedsize argument. I think that it's better to check that provided > freedsize fall into the same bucket that was recorded in kmemusage >

Re: [patch] malloc: add info about the largest consumers of memory

On Wed, Dec 9, 2015 at 8:03 PM, Maxim Pugachev wrote: > Hi, > > This patch adds additional informational to ddb's "show malloc" > command about the largest consumers of memory. Ping?

[patch] kern/exec_script: return error when the shell name is not specified

Hi, In a case when the shell name is not specified (i.e. just "#!" without a path), don't run the heavy logic that checks shell, simply return ENOENT. Also, as a tiny improvement: avoid a loop when calculating shell's args length. Index: sys/kern/exec_script.c ==

[patch] sys_execve: clean up code that prepares args and env

Hi, This patch removes copypasted code that prepares args and env in exec system call. Index: sys/kern/kern_exec.c === RCS file: /cvs/src/sys/kern/kern_exec.c,v retrieving revision 1.173 diff -u -p -r1.173 kern_exec.c --- sys/kern/k

[patch] malloc: size that was passed to free() should land into the same bucket

Hi, Currently two checks in free() function confirm the correctness of freedsize argument. I think that it's better to check that provided freedsize fall into the same bucket that was recorded in kmemusage struct: it covers both cases. Index: sys/kern/kern_malloc.c ==

[patch] malloc: add info about the largest consumers of memory

Hi, This patch adds additional informational to ddb's "show malloc" command about the largest consumers of memory. This is my first patch for OpenBSD, so I will be very grateful for any comments. Thanks in advance! Index: sys/kern/kern_malloc.c ==

Re: sndiod_flags=NO in /etc/rc.conf on recent snapshots

On Wed, Nov 18, 2015 at 12:02 AM, Theo de Raadt wrote: >> I only just noticed that, trying to watch a video while having a web >> browser open at the same time, I don't get any sound. >> >> Only going through recent daily insecurity emails, had I found out that: >> >> sndiod_flags= >> >> in /e

Re: /var/tmp in current

On Tue, Nov 18, 2014 at 7:43 AM, Theo de Raadt wrote: >> /var/tmp has been changed to be a symlink to /tmp. Traditionally, >> the difference between /tmp and /var/tmp has been that the former is >> cleaned after a reboot, while the latter isn't. Making /var/tmp a >> symlink to /tmp means it'

Re: traceroute TOS

Thanks, useful(at least for me). On Apr 5, 2011, at 5:57 PM, Stuart Henderson wrote: > On 2011/04/05 16:51, Stuart Henderson wrote: >> if -t is used, display a notice when the TOS changes en-route. >> ok? > > oh, it's better with a (contrived) example: > > $ traceroute -nt 7 naiad > traceroute to

Re: Allegations regarding OpenBSD IPSEC

Theo, this thread is DEAD. Drop it. No one believes in "backdoors" planted into OpenBSD. I se commits - you dig all over the place. If "backdoor" existed, then it is gone cause of this digging. Without proof its just a plain BS. P.S. I lost my interest for a while ago now. On Dec 17, 2010, at

Re: rt2661_select_antenna()-diff

typo, noted. I will not spam this list with a new diff. On 6 jun 2009, at 18.12, Maxim Bourmistrov wrote: Hello, diff below adds missing antenna selection to rt2661. rt2x00.serialmonkey.com used as reference. //maxim Index: rt2661.c

rt2661_select_antenna()-diff

Hello, diff below adds missing antenna selection to rt2661. rt2x00.serialmonkey.com used as reference. //maxim Index: rt2661.c === RCS file: /cvs/src/sys/dev/ic/rt2661.c,v retrieving revision 1.48 diff -u -p -r1.48 rt2661.c

login_paswd.c: cosmetic diff

This diff just adds endpwdnet() info login_passwd.c This is probably not needed as we will exit() anyway later on. diff-- --- login_passwd.c.orig Tue Aug 1 12:12:10 2006 +++ login_passwd.c Sat May 9 13:54:32 2009 @@ -57