summaryrefslogtreecommitdiff
path: root/external/apache2
AgeCommit message (Collapse)Author
2021-11-22cgdconfig(8): Add an argon2id password-based key generation methodnia
This provides an extra level of side-channel and cracking resistance compared to the pre-existing pkcs5_pbkdf2/sha1 method used for password-based disk encryption. Several new keygen parameters are supported: memory (integer, in kilobytes) parallelism (integer, usually the number of CPU cores) version (integer, usually 19...) We do our best to calibrate these automatically when the paramsfile is initially generated. lgtm riastradh@
2021-11-01Remove theagc
COPTS.*+= -Wno-error=.* lines for building argon2 sources, by fixing the problems at source. Addresses Rin Okuyama's concerns on tech-userlevel/tech-crypto in Message-ID: <f1eab199-3607-bb05-15cc-033e38721ba4@gmail.com>
2021-10-17Teach argon2 about explicit_memset(3). Should be upstreamed.nia
2021-10-12Fix release builds with MKARGON2=yesnia
This changes argon2 from a separately built library into a private dependency of libcrypt and removes the argon2(1) utility (we already have pwhash(1)). Giving libcrypt more library dependencies complicates things (e.g. libcrypt is a dependency of openssl). pthreads support gets disabled in argon2 for similar reasons. For testing argon2, we rely on the libcrypt test suite.
2021-05-30Remove files no longer used by 249b40b558955afe5ac2b549edcf2d7f859c8cc9joerg
2021-05-30Update LLVM build system for 249b40b558955afe5ac2b549edcf2d7f859c8cc9joerg
This enables the use of modules for a significant build performance gain when building with clang as host compiler or when using HAVE_LLVM=yes. Switch libc++ to using the copy from the mono-repo.
2021-05-30Import libc++ 249b40b558955afe5ac2b549edcf2d7f859c8cc9joerg
2021-05-30Import LLVM 249b40b558955afe5ac2b549edcf2d7f859c8cc9.joerg
2021-05-30Import clang 249b40b558955afe5ac2b549edcf2d7f859c8cc9.joerg
2021-04-25MACHINE_CPU is always mips (no functional change)christos
2021-04-13more GCC 10 fixes.mrg
mDNSResponder: another wrong return local address dhcp: ignore a seemingly impossible stringop overflow hpacel: avoid maybe uninitialised error that is wrong. rsh: avoid impossible malloc(0) udf: cast pointers through (uintptr_t) to fool invalid boundary checks
2020-10-20Add NetBSD/aarch64eb support to */config.guess for self-building and mknative.rin
XXX Instead of patching each file, it would be better to maintain single config.*'s as done in pkgsrc... Patch provided by ryo@. OK mrg@.
2020-09-07Disable an init-list-lifetime warning from gcc-9.christos
2020-09-07apply some GCC 9 -Wno-error*mrg
2020-09-06add support for new GCC 9 warnings that may be too much to fixmrg
right now. new address-of-packed-member and format-overflow warnings have new GCC_NO_ADDR_OF_PACKED_MEMBER amd GCC_NO_FORMAT_OVERFLOW variables to remove these warnings. apply to a bunch of the tree. mostly, these are real bugs that should be fixed, but in many cases, only by removing the 'packed' attribute from some structure that doesn't really need it. (i looked at many different ones, and while perhaps 60-80% were already properly aligned, it wasn't clear to me that the uses were always coming from sane data vs network alignment, so it doesn't seem safe to remove packed without careful research for each affect struct.) clang already warned (and was not erroring) for many of these cases, but gcc picked up dozens more.
2020-07-22mdnsd: Make the unable to parse resolv.conf message informativeroy
resovconf will SIGHUP mdnsd when resolv.conf changes so this message should not be an error.
2020-07-21mdnsd: starting and stopping are informational messagesroy
2020-07-21mdnsd: Treat EADDRNOTAVAIL as a transient errorroy
2020-06-09Build and install llvm-symbolizer for MKLLVM=yeskamil
llvm-symbolizer is an alternative for GNU addr2line(1), heavily used by the LLVM sanitizers. Do not install it as tools as it is not necessary as of today in that stage.
2020-02-23Fix harmless syntax error.joerg
2020-02-19Revert last. It was objected to pre-commit, there is no actual errorjoerg
analysis or report and there is existing logic supposed to handle this.
2020-02-19Disable HAVE_TERMINFO and HAVE_TERMIOS_H for ./build.sh tools buildkamil
These headers enable optional features and are not portable to all host Operating Systems. Speculative fix for certain Linux distributions.
2020-01-19Build radeon and nouveau drivers on evbarm.jmcneill
2019-11-28Use -fno-strict-aliasing unconditionally for the cross compiler.joerg
2019-11-18Build some more LLVM components for Gallium. Switch it to -Wl,-z,defsjoerg
2019-11-18Use a big hammer and disabling strict aliasing for the tools build orjoerg
when using GCC.
2019-11-16Build libclangAST with -O1 when the host compiler is GCC 7 to avoidjoerg
miscompiles.
2019-11-14For gcc < 9 disable stringop-overflow warnings - they are broken.martin
2019-11-11Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)joerg
2019-11-08Import 01f3a59fb3e2542fce74c768718f594d0debd0da from the LLVM mono-repo:joerg
clang (without test/, unittests/, www/) llvm (without test/, unittests/)
2019-10-21adding argon2 support to libcrypt. argon2 user authentication nowjhigh
available via MKARGON2=yes (3 variants supported; argon2id recommended) before using, please read argon2 paper at https://github.com/P-H-C/phc-winner-argon2
2019-10-09Fix date.wiz
2019-10-09added backend support for argon2 password schemejhigh
2019-07-04Get the very generically-named put_uint32(), etc. out of the applicationthorpej
namespace. These symbols are not intended to be used outside of the dns_sd library.
2018-12-09Don't hard-code the pathchristos
2018-11-19It is not an error if we did not find any IPv4 interfaces. It couldchristos
be the case we never have V4 interfaces (in a V6 system) so this is bogus. The code was recently changed to ignore loopback interfaces. If mdnsd was started too early, this means that no interfaces would be found (since interfaces down, with no addresses, or tentative are ignored). I put back the loopback interfaces yesterday to avoid this error, but this seems like the left hand not knowing what the right hand does because whoever removed the loopback interfaces from the list, did not read the 'self discovery' comment and the special code that deals with loopback in this file. Nevertheless, I think it is better to ignore the loopback interfaces in the long run, but it is ok to keep them around since the code is handling them just fine (and works both with and without them).
2018-11-18Use our getifaddrs versionchristos
2018-11-18print the path of the unix socket we could not create.christos
2018-11-18NFC: Fix commit message: Include the loopback so that we don't return anchristos
empty address list before addresses are configured.
2018-11-18Add a simpler version to do interface enumeration that uses getifaddrs(3)christos
2018-05-02initialize addr to 0.christos
2018-04-11Add the missing lock.christos
2018-04-11Add the location of the last lock to help debugging.christos
2018-04-11instead of short-circuiting the test, set auto target host on by default.christos
2018-04-08remove format checker; cannot work because of %#a (ip address printing).christos
2018-04-07show how to turn on debugging.christos
2018-04-07put back handling for SIOCGIFAFLAG_IN -- should not matter.christos
2018-04-07When we advertise interfaces, don't skip if we are not autotargetting serviceschristos
yet. It is the chicken and the egg problem.
2018-04-07Allow overriding checking for debug functionschristos
2018-03-03Fix Reproducible builds by obeying MDNS_VERSIONSTR_NODTS in all cases.christos
Reported by wiz@