summaryrefslogtreecommitdiffstats
path: root/krl.h (unfollow)
Commit message (Collapse)AuthorFilesLines
2022-12-04upstream: Remove duplicate includes.dtucker@openbsd.org2-4/+2
Patch from AtariDreams via github PR#364. OpenBSD-Commit-ID: b9186638a05cb8b56ef7c0de521922b6723644ea
2022-12-04upstream: make struct sshbuf privatedjm@openbsd.org2-26/+27
and remove an unused field; ok dtucker OpenBSD-Commit-ID: c7a3d77c0b8c153d463398606a8d57569186a0c3
2022-12-02Restore ssh-agent permissions on exit.Darren Tucker1-0/+1
...enough that subsequent builds can overwrite ssh-agent if necessary.
2022-12-02upstream: Clean up ssh-add and ssh-agent logs.dtucker@openbsd.org1-1/+2
OpenBSD-Regress-ID: 9eda8e4c3714d7f943ab2e73ed58a233bd29cd2c
2022-12-02upstream: Log output of ssh-agent and ssh-adddtucker@openbsd.org1-4/+7
This should make debugging easier. OpenBSD-Regress-ID: 5974b02651f428d7e1079b41304c498ca7e306c8
2022-11-30upstream: Add void to client_repledge args to fix compiler warning. ok djm@dtucker@openbsd.org1-3/+3
OpenBSD-Commit-ID: 7e964a641ce4a0a0a11f047953b29929d7a4b866
2022-11-30upstream: tighten pledge(2) after session establishmentdjm@openbsd.org1-7/+87
feedback, ok & testing in snaps deraadt@ OpenBSD-Commit-ID: aecf4d49d28586dfbcc74328d9333398fef9eb58
2022-11-30upstream: New EnableEscapeCommandline ssh_config(5) optiondjm@openbsd.org5-9/+35
This option (default "no") controls whether the ~C escape is available. Turning it off by default means we will soon be able to use a stricter default pledge(2) in the client. feedback deraadt@ dtucker@; tested in snaps for a while OpenBSD-Commit-ID: 7e277595d60acb8263118dcb66554472257b387a
2022-11-30upstream: In channel_request_remote_forwarding the parameters formbuhl@openbsd.org1-7/+6
permission_set_add are leaked as they are also duplicated in the call. Found by CodeChecker. ok djm OpenBSD-Commit-ID: 4aef50fa9be7c0b138188814c8fe3dccc196f61e
2022-11-30Use -fzero-call-used-regs=used on clang 15.Darren Tucker1-12/+23
clang 15 seems to have a problem with -fzero-call-used-reg=all which causes spurious "incorrect signature" failures with ED25519. On those versions, use -fzero-call-used-regs=used instead. (We may add exceptions later if specific versions prove to be OK). Also move the GCC version check to match. Initial investigation by Daniel Pouzzner (douzzer at mega nu), workaround suggested by Bill Wendling (morbo at google com). bz#3475, ok djm@
2022-11-28Skip unit tests on slow riscv64 hardware.Darren Tucker1-0/+4
2022-11-28Rework how selfhosted tests interact with runners.Darren Tucker2-31/+34
Previously there was one runner per test target (mostly VMs). This had a few limitations: - multiple tests that ran on the same target (eg multiple build configs) were serialized on availability or that runner. - it needed manual balancing of VMs over host machines. To address this, make VMs that use ephemeral disks (ie most of them) all use a pool of runners with the "libvirt" label. This requires that we distinguish between "host" and "target" for those. Native runners and VMs with persistent disks (eg the constantly-updated snapshot ones) specify the same host and target. This should improve test throughput.
2022-11-27Run vmstartup from temp dir.Darren Tucker2-0/+2
This will allow us to create ephemeral disk images per-runner.
2022-11-27Make "config" in matrix singular and pass in env.Darren Tucker3-95/+98
This will allow the startup scripts to adapt their behaviour based on the type and config.
2022-11-27Add "libvirt" label to dfly30.Darren Tucker1-0/+2
2022-11-27Rename "os" in matrix to "target".Darren Tucker3-95/+98
This is in preparation to distinguish this from the host that the runner runs on in case where they are separate (eg VMs).
2022-11-26Remove unused self-hosted test targets.Darren Tucker1-5/+0
2022-11-26Remove explicit "default" test config argument.Darren Tucker2-2/+3
Not specifying the test config implicitly selects default args.
2022-11-23Add fallback for old platforms w/out MAP_ANON.Darren Tucker1-0/+10
2022-11-23If we haven't found it yet, recheck for sys/stat.h.Darren Tucker1-1/+8
On some very old platforms, sys/stat.h needs sys/types.h, however autoconf 2.71's AC_CHECK_INCLUDES_DEFAULT checks for them in the opposite order, which in combination with modern autoconf's "present but cannot be compiled" behaviour causes it to not be detected.
2022-11-11Add dfly62 test target.Darren Tucker1-0/+2
2022-11-11upstream: Handle dynamic remote port forwarding in escape commandline'sdtucker@openbsd.org1-3/+10
-R processing. bz#3499, ok djm@ OpenBSD-Commit-ID: 194ee4cfe7ed0e2b8ad0727f493c798a50454208
2022-11-10Remove seed passing over reexec.Darren Tucker2-42/+0
This was added for the benefit of platforms using ssh-rand-helper to prevent a delay on each connection as sshd reseeded itself. ssh-random-helper is long gone, and since the re-exec happens before the chroot the re-execed sshd can reseed itself normally. ok djm@
2022-11-09Skip reexec test on OpenSSL 1.1.1 specifically.Darren Tucker1-0/+5
OpenSSL 1.1.1 has a bug in its RNG that breaks reexec fallback, so skip that test. See bz#3483 for details.
2022-11-09upstream: Fix typo in fatal error message.dtucker@openbsd.org1-2/+2
Patch from vapier at chromium.org. OpenBSD-Commit-ID: 8a0c164a6a25eef0eedfc30df95bfa27644e35cf
2022-11-09upstream: Remove errant colon and simplify formatdtucker@openbsd.org1-3/+3
string in error messages. Patch from vapier at chromium.org. OpenBSD-Commit-ID: fc28466ebc7b74e0072331947a89bdd239c160d3
2022-11-09upstream: rename client_global_hostkeys_private_confirm() todjm@openbsd.org1-4/+4
client_global_hostkeys_prove_confirm(), as it handles the "hostkeys-prove00@openssh.com" message; no functional change OpenBSD-Commit-ID: 31e09bd3cca6eed26855b88fb8beed18e9bd026d
2022-11-09upstream: typo in commentdjm@openbsd.org1-2/+2
OpenBSD-Commit-ID: 39c58f41e0f32d1ff31731fa6f5bbbc3ad25084a
2022-11-08Defer seed_rng until after closefrom call.Darren Tucker1-2/+2
seed_rng will initialize OpenSSL, and some engine providers (eg Intel's QAT) will open descriptors for their own use. bz#3483, patch from joel.d.schuetze at intel.com, ok djm@
2022-11-08Fix comment text. From emaste at freebsd.org.Darren Tucker1-2/+2
2022-11-08Avoid assuming layout of fd_setPierre Ossman1-26/+12
POSIX doesn't specify the internal layout of the fd_set object, so let's not assume it is just a bit mask. This increases compatibility with systems that have a different layout. The assumption is also worthless as we already refuse to use file descriptors over FD_SETSIZE anyway. Meaning that the default size of fd_set is quite sufficient.
2022-11-08Shutdown any VM before trying to check out repo.Darren Tucker1-1/+1
In the case where the previous run did not clean up, the checkout will fail as it'll leave a stale mount.
2022-11-08Run vm startup and shutdown from runner temp dir.Darren Tucker2-0/+4
Should work even if the github workspace dir is on a stale sshfs mount.
2022-11-08Add valrind-5 test here too.Darren Tucker1-1/+1
2022-11-08Update checkout and upload actions.Darren Tucker4-9/+9
Update actions/checkout and actions/upload-artifact to main branch for compatibility with node.js v16.
2022-11-08Split out rekey test since it runs the longest.Darren Tucker2-3/+8
2022-11-07upstream: The IdentityFile option in ssh_config can also be used todtucker@openbsd.org1-2/+6
specify a public key file, as documented in ssh.1 for the -i option. Document this also for IdentityFile in ssh_config.5, for documentation completeness. From laalsaas at systemli.org via portable github PR#352, ok jmc@ djm@ OpenBSD-Commit-ID: 2f943be9f96e60ef81a9a4faa25b009999f9883b
2022-11-07upstream: Remove some set but otherwise unused variables, spotteddtucker@openbsd.org2-6/+5
in -portable by clang 16's -Wunused-but-set-variable. ok djm@ OpenBSD-Commit-ID: 3d943ddf2369b38fbf89f5f19728e7dc1daf3982
2022-11-07upstream: Check for and disallow MaxStartups values less than ordtucker@openbsd.org1-1/+5
equal to zero during config parsing, rather than faling later at runtime. bz#3489, ok djm@ OpenBSD-Commit-ID: d79c2b7a8601eb9be493629a91245d761154308b
2022-11-07upstream: fix parsing of hex cert expiry time; was checking whether thedjm@openbsd.org1-2/+2
start time began with "0x", not the expiry time. from Ed Maste OpenBSD-Commit-ID: 6269242c3e1a130b47c92cfca4d661df15f05739
2022-11-07Fix merge conflict.Darren Tucker1-7/+1
2022-11-07Branch-specific links for master status badges.Darren Tucker1-0/+6
2022-11-07Add CIFuzz status badge.Darren Tucker1-0/+1
2022-11-07Do not run CIFuzz on selfhosted tree.Darren Tucker1-1/+1
We already run it on the regular tree, no need to double up.
2022-11-07Whitespace change to trigger CIFuzz workflow.Darren Tucker1-0/+1
2022-11-07Run cifuzz workflow on the actions as regular CI.Darren Tucker1-1/+6