summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-12-03Remove redundant field of definition checkTheo Buehler
This will allow us to get rid of EC_GROUP_method_of() in the near future. ok djm
2024-12-03Add more checks for router keysJob Snijders
OK tb@
2024-12-03Remove the FUSE hack in ufs_ihashget() it is no longer needed.Claudio Jeker
FUSE switched away from the horrible ufs inode abuse and so this is no longer reached. OK millert@ tb@ miod@
2024-12-03Improve description of KbdInteractiveAuthentication. Based on bz#3658,Darren Tucker
fixes jmc@ ok markus@ djm@.
2024-12-03Only set the SO_RCVBUF and SO_SNDBUF on the socketpair to what we want.Claudio Jeker
Do not retry if that fails hoping for a different result. OK tb@ kn@
2024-12-03Revert the new rwlock implementation for now.Claudio Jeker
vfs_busy() uses RW_SLEEPFAIL in a broken way. It is possible that the object holding the rwlock is freed while other processes are sleeping on this lock. This worked before by luck and no longer does now since part of the struct needs to be updated after the sleep. vfs_busy() needs to be fixed but that will take a bit of time. OK dlg@
2024-12-03M-1 to M-7 for 7 preset layouts; from bunkmateJason McIntyre
ok nicm
2024-12-03refer to glob(7) rather than fnmatch(3);Jason McIntyre
from evan silberman ok sthen semarie millert nicm
2024-12-03Add /rib/in and /rib/out as endpoints to query the Adj-RIB-In and Adj-RIB-OutClaudio Jeker
respectively. Also fix the rib query parameter to properly work. bgpctl calls this table. OK sthen@
2024-12-03support FIDO tokens that return no attestation data, e.g. recentDamien Miller
WinHello. From Michael Braun via GHPR542
2024-12-03Add missing wakeup & cleanup in error path.Martin Pieuchot
ok tb@
2024-12-03Use uvm_pagewait() rather than re-rolling it.Martin Pieuchot
ok miod@, tb@
2024-12-03glob patterns described in glob(7) not fnmatch(3);Jason McIntyre
from evan silberman ok sthen semarie millert
2024-12-02Have pkg_add run ldconfig after each updateset if the list of sharedStuart Henderson
libraries was changed. Before @tag we used to execute programs directly as part of many updates (rebuilding desktop databases, icon cache, etc) but those are now usually deferred until the end of the run, leaving some executables not able to be run until pkg_add finishes. From espie.
2024-12-02Check in bgpctl show rib commands if the table / rib passed isClaudio Jeker
Adj-RIB-Out and in that case set F_CTL_ADJ_OUT on the request. With this 'bgpctl show rib out' and 'bgpctl show rib table Adj-RIB-Out' return the same results. OK tb@
2024-12-02Remove the ASPA imsg size workaround now that imsg are large enough toClaudio Jeker
handle MAX_ASPA_SPAS_COUNT (10k) entries. OK tb@
2024-12-02Bump imsg size like bgpd just did.Claudio Jeker
OK tb@
2024-12-02Bump imsg size up to MAX_BGPD_IMSGSIZE (128k) to support extended messagesClaudio Jeker
and more. OK tb@
2024-12-02If AS0 TALs are provided, by default omit VRPs derived from such AS0 TALsJob Snijders
AS0 TALs represent unmitigated operational risks: what if the RIR by accident marks some IP space as 'unassigned'? APNIC notes in their limitation of liability statement: """ Depending on router configuration, errors in the AS0 ROA could cause unintended interruption to routing with other networks. For this reason, it is strongly recommended that the AS0 ROA is used for advisory and/ or alerting purposes only, and not for automatic filtering of BGP routes. """ https://www.apnic.net/community/security/resource-certification/apnic-limitations-of-liability-for-rpki-2/ Guard usage of AS0 TALs behind new '-0' option OK deraadt@ tb@
2024-12-02unbreakDamien Miller
2024-12-02Remove global queue_buf which is no longer used.Claudio Jeker
OK compiler
2024-12-02prefer AES-GCM to AES-CTR; ok deraadt markusDamien Miller
2024-12-01Fix typo in commentMarcus Glocker
2024-12-01-o[arg] must not have spaces between option and argument; OK jmcKlemens Nanni
getopt(3) says so and, e.g. 'mrouted -d 1' must be 'mrouted -d1' to work. dhcpd(8) and sed(1) got this right, our multicast programs did not.
2024-12-01upd(4): add PercentLoad sensorLandry Breuil
Reports the % of the available UPS power drawed by output outlets. tested by sthen@, matthieu@ and Walter Alejandro Iglesias ok sthen@ as part of a larger diff
2024-12-01Properly document TCP_SACK_ENABLE socket option.Pascal Stumpf
This used to be documented in options(4), but was deleted there in 2017. Reinstate the same text here. ok jmc@
2024-11-30Meant to split the sentence in twoTheo Buehler
2024-11-30Be a bit more precise on the error conditions of CMS_get1_{certs,crls}()Theo Buehler
2024-11-30Explain how to free the stack returned by CMS_get1_{certs,crls}()Theo Buehler
with job
2024-11-30Inline trivial EC point methodsTheo Buehler
Like most of the "group" methods these are shared between Montgomery curves and simple curves. There's no point in five methods hanging off the EC_METHODS struct whne they can just as well be inlined in the public API. It makes all files involved shorter... ok jsing
2024-11-30uvideo.4: add Jabra PanaCast 20 as known to workkirill
OK mglocker@
2024-11-30sys/uvideo: add quirk for Jabra PanaCast 20kirill
Jabra PanaCast 20 needs uvideo_vs_negotiation between usbd_set_interface and usbd_open_pipe, otherwise it doesn't work with error: ioctl VIDIOC_DQBUF: Invalid argument OK mglocker@
2024-11-30Regenkirill
2024-11-30sys/dev/usb/usbdevs: add Jabra PanaCast 20, to be used in quirkskirill
OK mglocker@
2024-11-30Get BNs Z coordinates from the BN_CTXTheo Buehler
While there likely won't be enough BNs already available in the ctx, and thus it won't greatly reduce the amount of allocated BNs, it simplifies the exit path quite a bit. review feedback from jsing
2024-11-30Improve ec_points_make_affine()Theo Buehler
It is unclear how the original code was supposed to work. It clearly missed a few corner cases (like handling points at infinity correctly) and the badly mangled comment that was supposed to display a binary search tree didn't help at all. Instead do something much more straightforward: multiply all the non-zero Z coordinates of the points not at infinity together, keeping track of the intermediate products. Then do a single expensive modular inversion before working backwards to compute all the inverses. Then the transformation from Jacobian coordinates to affine coordiantes (x, y, z) -> (x/z^2, y/z^3, 1) becomes cheap. A little bit of care has to be taken for Montgomery curves but that's very simple compared to the mess that was there before. ok jsing This is a cleaned up version of: commit 0fe73d6c3641cb175871463bdddbbea3ee0b62ae Author: Bodo Moeller <bodo@openssl.org> Date: Fri Aug 1 17:18:14 2014 +0200 Simplify and fix ec_GFp_simple_points_make_affine (which didn't always handle value 0 correctly). Reviewed-by: emilia@openssl.org
2024-11-30openssl speed: stop trying to use small curvesTheo Buehler
secp160r1 and nistp192 are no longer available in libcrypto. Should have been committed along with disabling these curves, but was missed. ok jsing
2024-11-30Don't leak the abuf on error in PKCS7_dataFinal()Theo Buehler
ok beck miod
2024-11-30use a more readable explanation of directory creation;Jason McIntyre
from evan silberman, tweaked by millert ok sthen (pre-tweak)
2024-11-29undo unneccessary \*([GL]t sequences; balance that by adding Sq;Jason McIntyre
from evan silberman
2024-11-29Add support for read/write of xmm/ymm registers to lldb.Anton Lindqvist
ok kettenis@, robert@
2024-11-29Remove X9.42 DH rudimentsTheo Buehler
In the unlikely event that we should ever decide to implement this after a quarter century of not needing it, we can readily put this back. Until then this is dead weight. prompted by a question by djm ok jsing
2024-11-29Provide an example of signing with HMAC-SHA256 or Ed25519Ingo Schwarze
because that makes it easier to see the big picture of how EVP_PKEY_new_raw_private_key(3) is supposed to be used. Feedback and OK tb@.
2024-11-29Mark six EVP_PKEY control constants as intentionally undocumentedIngo Schwarze
that are only intended for internal use, do very little (only validity checking), are unused in the wild, and marked obsolete in OpenSSL 3.
2024-11-29Mark nine unused EVP constants as intentionally undocumented.Ingo Schwarze
Fix related indentation while here.
2024-11-29Remove weird pad member that was never set to zero after malloc() soTheo Buehler
the weird thing it was supposed to be doing couldn't possibly work. ok jsing
2024-11-29Also call pmap_extract() before entering a page ahead for lower layer faults.Martin Pieuchot
As for the upper layer, call pmap_update() only if, at least, a page has been entered. ok tb@, kettenis@
2024-11-29When paging ahead, delay calling pmap_extract() after checking for a valid page.Martin Pieuchot
While here call pmap_update() only if, at least, a page has been entered. ok tb@, kettenis@
2024-11-29Garbage collect the unused imsg_hdr in imsg_close()Theo Buehler
ok claudio
2024-11-29Import regenerated moduli.Darren Tucker