Remove extra parenthesis.
add a size argument to free. will be used soon, but for now default to 0.
after discussions with beck deraadt kettenis.
add a size argument to free. will be used soon, but for now default to 0.
after discussions with beck deraadt kettenis.
Wrap "thread_private.h" with #ifdef __OpenBSD__ so that other systems
can copy this file (plus chacha_private.h) directly and reuse it
trivially.  Well, as long as they have a getentropy() as well..
ok beck
revert bogus free changes in not kernel files. got a little trigger happy.
Protocol checksums have been recalculated on reinjection for a while
now, so there is no need to calculate them before sending them to
userspace.

ok henning@
Remove the redundant csum_flag variable and just set the checksum flag
in the pkthdr directly.

ok henning@
guenther (who also should have been credited in previous free size commits)
noticed that i missed committing one file.
sync
msgbuf_write() <= 0 for a few more daemons.

ok claudio@
Make the BLOCK_CIPHER_{generic,custom} macros expand to more readable struct
definitions using C99 field initializers. No functional change.
In openssl_startup(), call SSL_library_init() and SSL_load_error_strings().
This allows us to remove the ERR_load_crypto_strings() call, along with
the various SSL_load_error_strings() and OpenSSL_add_ssl_algorithms()
calls scattered around the place.

ok beck@
Fix error in previous.
so, pkg_check can now troll thru the whole file system. Either use
a full pkglocatedb, or the system locate dbs...
@endfake died a while ago
Provide ssl_version_string() function, which uses one of those modern C
constructs (a switch statement) and returns the appropriate string defined
by SSL_TXT_* for the given version, including support for DTLSv1 and
DTLSv1-bad. Use this function in SSL_get_version() and SSL_SESSION_print().

ok beck@
rename variable to better indicate it's meaning
finish killing old experiment, less confusing code
undocument -Q
security check in quirks