summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-02-26touch pcidevs again to generated new rcs ids in headersjan
advince from sthen@
2021-02-26Only support #iommu-cells = <1> for now to make sure the correct stream IDMark Kettenis
is passed to the IOMMU device driver. ok patrick@
2021-02-26Increase the amount of RX buffers given to the bwfm(4) chip. We haave seenPatrick Wildt
this already on previous chips, which only started giving us packets when handing over at least 128 of them. Apparently some now require 256, which seems to get the Apple M1's WiFi going.
2021-02-26Add aplcpie(4), a (minimal) driver for the PCIe host bridge on Apple M1 SoCs.Mark Kettenis
ok patrick@
2021-02-26Add missing PCI product IDs for x710 10GBase-T into ixl(4)jan
OK phessler
2021-02-26only store the current time on address table entries if it changes.David Gwynne
this avoids unecessary writes to memory. it helps a little bit with a single nettq, but we get a lot more of a boost in pps when running concurrently. thanks to hrvoje for testing.
2021-02-26Add a couple of format variables for active and last window index.Nicholas Marriott
2021-02-26Some more improvements from Joachim Wiberg's version of mg.Mark Lumsden
check before using variable in list remove unnecessary variable declaration check value of adjustname() add a '< 0' return value of snprintf
2021-02-26syncTheo de Raadt
2021-02-26remove this KEX fuzzer; it's awkward to use and doesn't play niceDamien Miller
with popular fuzzing drivers like libfuzzer. AFAIK nobody has used it but me.
2021-02-26remove some unused functions in slaacdJonathan Gray
ok florian@
2021-02-26tpmr can use the eth64 bits too.David Gwynne
2021-02-26try do a better job of filtering 802.1 reserved group addresses.David Gwynne
if the bridge is supposed to carry vlan packets, assuming it's an s-vlan component and should allow certain group addresses to cross between "customer" bridges. i should probably let some of these groups fall back through to the calling ether_input rather than drop them.
2021-02-26Fix Typo, ok jcaDaniel Jakots
2021-02-26use uint64_ts for ethernet addresses in the src/dst bits of rules.David Gwynne
2021-02-26use a uint64_t for the ethernet address in the etherbridge table.David Gwynne
testing has shown up to a 30% improvement in the veb forwarding rate with this change. an earlier diff was tested by hrvoje popovski tested on amd64 and sparc64
2021-02-26Some improvements from Joachim Wiberg's version of mg.Mark Lumsden
check value of adjustname() use int for return value of snprintf
2021-02-26add some helpers for working with ethernet addresses as uint64_tDavid Gwynne
the main bits are ether_addr_to_e64 and ether_e64_to addr for loading an ethernet address into a uin64_t and visa versa. there's also some macros for testing if an address in a uint64_t is multicast, broadcast, anyaddr, or if it's an 802.1q reserved multicast group address. the reason for this functionality is once you have an ethernet address as a uint64_t, operations like compares, bit tests, and so on are fast and easy. tested on amd64 and sparc64
2021-02-26Add my copyright since I added most of the contentDaniel Jakots
2021-02-26Increase the buffer size for the ioctl response buffers to the same asPatrick Wildt
used in the wifi firmware to ensure responses can be received.
2021-02-26a bit more debugging behind #ifdef DEBUG_SKDamien Miller
2021-02-26gcc is more strict about union declsTheo de Raadt
ok dlg
2021-02-26Indicate hostready signal to inform the firmware that the rings have beenPatrick Wildt
initialized.
2021-02-26Refactor bwfm(4) firmware loading. The PCIe backend will need to be ablePatrick Wildt
to load the CLM blob like the SDIO backend already does. Additionally it is also helpful for the PCIe backend to try a file named after the device tree compatible. Thus refactor the SDIO code and make it available for both SDIO and PCIe.
2021-02-26Fix prio2fifo mapping table.Patrick Wildt
2021-02-25The firmware replaces the last 32-bit on RAM with a shared DRAM address.Patrick Wildt
While the for-loop checks that thie value has changed since we wrote to it, the timeout-condition checked for non-zero, which is wrong. This means that we didn't realize the firmware wasn't started. While there, make sure the shared DRAM address is inside the chip's address space.
2021-02-25Some newer chips have two D11/802.11 cores, and we need to reset both atPatrick Wildt
the same time.
2021-02-25Support for version 7 of the bwfm(4) PCIe interface. The size of the itemsPatrick Wildt
on the rx/tx complete rings has increased slightly to accomodate possible new features.
2021-02-25Add some infrastructure in the PCI chipset tag for pci_probe_device_hook()Patrick Wildt
so that we can provide IOMMU-hooked bus DMA tags for each PCI device. ok kettenis@
2021-02-25mention that FIX_CRLF_FILES is rooted in WRKDIST, pointed out by espie@.Stuart Henderson
mention that shell wildcards may be used.
2021-02-25wrong annotationMarc Espie
2021-02-25make the timing of FIX_CRLF_FILES explicitMarc Espie
2021-02-25Add a framework for IOMMUs.Mark Kettenis
ok patrick@
2021-02-25document FIX_CRLF_FILES.Stuart Henderson
2021-02-25ftp: prevent double free() in error pathChristian Weisgerber
Reported by bentley@; ok bentley@ jca@
2021-02-25Constify cipher API.tobhe
ok markus@
2021-02-25Typofixkn
2021-02-25Fix two bugs in the legacy verifierTheo Buehler
To integrate the new X.509 verifier, X509_verify_cert() was refactored. The code building chains in the legacy verifier was split into a separate function. The first bug is that its return value was treated as a Boolean although it wasn't. Second, the return alone is not enough to decide whether to carry on the validation or not. Slightly rearrange things to restore the behavior of the legacy verifier prior to this refactoring. Issue found and test case provided by Anton Borowka and jan. ok jan jsing
2021-02-25Update regress to match TLS versions change.Joel Sing
2021-02-25Only use TLS versions internally (rather than both TLS and DTLS versions).Joel Sing
DTLS protocol version numbers are the 1's compliment of human readable TLS version numbers, which means that newer versions decrease in value and there is no direct mapping between TLS protocol version numbers and DTLS protocol version numbers. Rather than having to deal with this internally, only use TLS versions internally and map between DTLS and TLS protocol versions when necessary. Rename functions and variables to use 'tls_version' when they contain a TLS version (and never a DTLS version). ok tb@
2021-02-25Rename depth to num_untrusted so it identifies what it actually represents.Joel Sing
ok tb@
2021-02-25Avoid passing last and depth to x509_verify_cert_error() on ENOMEM.Joel Sing
In x509_verify_ctx_set_xsc_chain(), an ENOMEM case is currently passing the last certificate and depth (which is no longer actually depth) to x509_verify_cert_error(). Given we've hit an ENOMEM situation, neither of these are useful so remove both. ok tb@
2021-02-25- Make use of the fact that we know how the chunks are aligned, andOtto Moerbeek
write 8 bytes at the time by using a uint64_t pointer. For an allocation a max of 4 such uint64_t's are written spread over the allocation. For pages sized and larger, the first page is junked in such a way. - Delayed free of a small chunk checks the corresponiding way. - Pages ending up in the cache are validated upon unmapping or re-use. In snaps for a while
2021-02-25split off the large module documentations, so that port-modules is less ofMarc Espie
a monster. okay sthen@
2021-02-25Prevent zero size devices from attachingjan
This also fixes two NULL ptr derefs in later code path. OK patick@, krw@
2021-02-25s/PubkeyAcceptedKeyTypes/PubkeyAcceptedAlgorithms/Damien Miller
2021-02-25we don't have to cast to caddr_t when calling m_copydata anymore.David Gwynne
the first cut of this diff was made with coccinelle using this spatch: @rule@ type caddr_t; expression m, off, len, cp; @@ -m_copydata(m, off, len, (caddr_t)cp) +m_copydata(m, off, len, cp) i had fix it's opinionated idea of formatting by hand though, so i'm not sure it was worth it. ok deraadt@ bluhm@
2021-02-25let m_copydata use a void * instead of caddr_tDavid Gwynne
i'm not a fan of having to cast to caddr_t when we have modern inventions like void *s we can take advantage of. ok claudio@ mvs@ bluhm@
2021-02-25enable veb(4), it's time for wider testing.David Gwynne
apart from the semantic differences between bridge(4) and veb(4), the only missing bits in veb(4) is the transparent ipsec interception support, and spanning tree.
2021-02-25Fix SMALL buildkn
OK deraadt
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-30 09:50:03 +0000