summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-02-08Remove unnecessary duplicate check.Nicholas Marriott
2017-02-08Improve some of the logging on resize.Nicholas Marriott
2017-02-08Due to non-blocking sockets, tls_handshake() could wait in a busyAlexander Bluhm
loop. Use an additional poll(2) during the handshake and also respect the -w timeout option there. From Shuo Chen; OK beck@
2017-02-08Now pcexmem(4) and pcexio(4) are attached at cbus(4), we do not need toKenji Aoyama
include "pcex.h" here.
2017-02-08Remove the ipsec protocol callbacks which all do the same. ImplementAlexander Bluhm
it in ipsec_common_input_cb() instead. The code that was copied to ah6_input_cb() is now in ip6_ours() so we can call it directly. OK mpi@
2017-02-08Pass the physical address to the end of symbols to the kernel. FromPatrick Wildt
armv7 we inherited the mechanism to manually modify the kernel symbol table to change the value of esym. We don't use this, but instead use the virtual address that is passed to the kernel. This change makes us only work on and hand out physical addresses. Bump the efiboot version to make this ABI change more visible.
2017-02-08Retry BS->ExitBootServices() if it fails, like on amd64. Also we needPatrick Wildt
to make sure to pass the current mapkey to prove EFI that we know the current memory map and its constraints. Otherwise EFI can choose to only partially exit until we pass the correct key. As we already use the memory map to allocate memory for the kernel, split the previous function into one simply retrieving the table and another one who uses the map to allocate memory. At some point it would be nice to actually pass the table to the kernel since its data is more reliable than the FDT only. While there, sync a bit of style with the amd64 version.
2017-02-08Log size of output buffer as well.Nicholas Marriott
2017-02-08Trying to avoid the occasional newline by saving the last cell on screenNicholas Marriott
is not actually helping us much and just adds complexity, so don't bother.
2017-02-08Tweak how much we expand lines by.Nicholas Marriott
2017-02-08Remove event watermarks, don't work well enough to be worth it.Nicholas Marriott
2017-02-08fix a mixup of lengths of addresses and lengths in the aen_start sglDavid Gwynne
basically use htolem64 to set the address and htolem32 for the length, not the other way round. lucky this is mostly run on x86. found by Jon Kloske
2017-02-08the splvm() in pool_gc_pages is unecessary now.David Gwynne
all pools set their ipls unconditionally now, so there isn't a need to second guess them. pointed out by and ok jmatthew@
2017-02-08In exec_elf.c: expand ELFNAME(), ELFNAME2(), and ELFNAMEEND() exceptPhilip Guenther
leaving out the size, so that ELFNAME2(exec,makecmds) becomes exec_elf_makecmds instead of exec_elf{32,64}_makecmds and then delete the ELFNAME2() and ELFNAMEEND() macros. Move the prototypes for functions local to exec_elf.c to there from exec_elf.h. Simplify the SMALL_KERNEL conditionals around the ELF coredump code. Change exec_conf.c to use the size-generic names and macros Remove exec_elf{32,64}.c and just build exec_elf.c; delete the _KERN_DO_ELF and _KERN_DO_ELF64 #defines. ok jca@, encouragement from deraadt@ and tom@
2017-02-08Move ELF_AUX_ENTRIES from exec_elf.h to exec_elf.c; it's totally internalPhilip Guenther
and not something we guarantee to userspace ok jca@
2017-02-08Change ELFNAME(read_from)'s buf parameter to be void*, eliminating a castPhilip Guenther
from all but one call ok jca@
2017-02-08elf{32,64}_check_brand() isn't used; delete itPhilip Guenther
ok jca@
2017-02-08Provide size-generic ELF_NO_ADDR in <sys/exec_elf.h> and use that insteadPhilip Guenther
of ELFDEFNNAME(NO_ADDR) ok jca@
2017-02-08Use ELF_ST_{BIND,TYPE} instead of ELFDEFNNAME(ST_{BIND,TYPE})Philip Guenther
ok jca@
2017-02-08Retry BS->ExitBootServices() if it fails.YASUOKA Masahiko
Reported by Ryan, pulse.purge at gmail.com
2017-02-08Move a pointer deref to after a NULL test.Jonathan Gray
ok krw@
2017-02-08Test for NULL before dereferencing a pointer not after.Jonathan Gray
ok krw@
2017-02-08Remove an uneeded NULL test which was after a deref.Jonathan Gray
ok mpi@ henning@ sashan@
2017-02-07Since the instruction cache does not in any way snoop the data cachePatrick Wildt
we need to make sure to clean the data and invalidate the instruction cache upon entering a page with pmap_enter(). Since it is possible that pmap_enter() does not directly enter the page, we need to do the same dance in the pmap fault fixup code. Every new writeable mapping or write removes a page's flag to mark it unflushed. The next time pmap_enter() is called or a fault happens on that VA, it has to be flushed and invalidated again. This was heavily discussed with Dale Rahn. On the Pine64 and Raspberry Pi 3 we have been very lucky to not run into any cache issues, especially with the instruction cache. The AMD Seattle seems to be a different kind of beast where we actually have to care about these things. This finally brings the machine into userland.
2017-02-07Remove deprecated SSH1 options RSAAuthentication andDarren Tucker
RhostsRSAAuthentication from regression test sshd_config.
2017-02-07Use percpu counters for icmpJonathan Matthew
ok dlg@ a while ago some input from jca@ who wrote the same diff
2017-02-07Error propagation does neither make sense for ip input path nor forAlexander Bluhm
asynchronous callbacks. Make the IPsec functions void, there is already a counter in the error path. OK mpi@
2017-02-07For consistency sake, apply the inner shareable attribute to the bootstrapPatrick Wildt
pagetables as well. Also replace the number for write-back with a proper define.
2017-02-07The default frequency we chose for the generic timer does not always ringPatrick Wildt
true. Instead, unless overwritten by the device tree, we should ask the generic timer for its frequency. This fixes time on my AMD Seattle and should improve time management on QEMU as well.
2017-02-07syncTheo Buehler
2017-02-07There are 1023 possible values for the interrupts, but our masks limitPatrick Wildt
these currently to 255. Thus making it impossible to use higher IRQs than that. The AMD Seattle SoC though seems to provide 448 IRQs, which is kind of out of bounds, so raise them to the proper values. This makes interrupts work on that machine.
2017-02-07Do not clear the scroll region, instead set it to the scroll region weNicholas Marriott
actually want.
2017-02-07IPsec packets could be dropped unaccounted if output after cryptoAlexander Bluhm
failed. Add a counter for that case. OK dhill@
2017-02-07Remove a debugging leftover.Nicholas Marriott
2017-02-07Ox on its own line;Jason McIntyre
2017-02-07Reduce the per-packet allocation costs for crypto operations (cryptop)Patrick Wildt
by pre-allocating two cryptodesc objects and storing them in an array instead of a linked list. If more than two cryptodesc objects are required use mallocarray to fetch them. Adapt the drivers to the new API. This change results in one pool-get per ESP packet instead of three. It also simplifies softraid crypto where more cryptodesc objects are allocated than used. From, with and ok markus@, ok bluhm@ "looks sane" mpi@
2017-02-07DECSLRM in xterm(1) appears to have a quirk where it can generate anNicholas Marriott
extra scroll of the entire terminal; issuing DECSTBM first prevents this. Do that for now.
2017-02-07Adapt regex in syslogd test to the new shiny libssl error messages.Alexander Bluhm
2017-02-07Revert previous; the implementation is incorrect since it assumes that theJoel Sing
provided error code matches the error that is currently on the top of the error stack.
2017-02-07No longer need to unlock the netlock since the upper layer is doing it.Martin Pieuchot
Found by Hrvoje Popovski.
2017-02-07Update to terminfo-20170128.Nicholas Marriott
2017-02-07The return code of crp_callback is never checked, so it is notAlexander Bluhm
useful to propagate the error. When an error occurs in an asynchronous network path, incrementing a counter is the right thing. There are four places where an error is not accounted, just add a comment for now. OK mpi@ visa@
2017-02-07Enable the short slot time feature in 802.11n mode.Stefan Sperling
ok mpi@
2017-02-07Unfortunately DECFRA does not handle default colours properly (it doesNicholas Marriott
not reset colours when in SGR 0), so we can't use it without more trouble than it is worth. Abandon the idea for now.
2017-02-07Remove unused variable in C source to make the test compile and pass.Alexander Bluhm
2017-02-07Include <netinet/in.h> to get in_addr_t and in_port_t compiled.Alexander Bluhm
2017-02-07/tmp/cvsspEkokReyk Floeter
2017-02-07Improve parsing of the HTTP request lineReyk Floeter
Make sure that the beginning of a new request starts with an alphabetic character. This is a quick way to detect non-ASCII requests (eg. TLS on port 80). The full validation of the request method is done once the input line is read. Make sure that non-terminated lines do not exceed the SERVER_MAXHEADERLENGTH which is 8k. As the current read watermark is set to 64k, this means that the limit check is triggered after max. 64k of input, depending on the TCP read buffer. OK benno@ jsing@
2017-02-07Fix Xr: syspatch(1) -> syspatch(8)Theo Buehler
2017-02-07Make the 'incomplete header' message debug onlyMike Belopuhov
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-10 18:24:57 +0000