summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-10-18Disallow tables and interface address pools for rdr-to, nat-to andReyk Floeter
route-to with any other scheduling algorithms than round-robin or least-states. Before this change, pfctl accepted and loaded invalid address pools, eg. "rdr-to <table> source-hash", but it is not supported by the kernel and was silently ignored in operation. Also clarify the manpage a bit by mentioning that tables are only valid with round-robin or least-states. ok zinke@
2012-10-18simplify checkreplaywindow() API; make call/return code handling consistentMarkus Friedl
ok mikeb@
2012-10-18make oce_arm_{eq,cq} functions look like the other queueMike Belopuhov
manupulation functions in this file; do some minor style cleanup while here.
2012-10-18Wiring map entries with VM_PROT_NONE only waists RAM and bears noGerhard Roth
advantages. We shouln't do this. If the protection changes later on (and VM_MAP_WIREFUTURE was set), uvm_map_protect() will wire them. Found by Matthias Pitzl. ok miod@ markus@
2012-10-18Add support for stac/clac instructions to manipulate the flagJonathan Gray
that controls the behaviour of Intel's Supervisor Mode Access Prevention (SMAP) feature. 'looks correct' miod@ ok deraadt@
2012-10-18Move revarp code into #ifdef NFSCLIENT; saving space on some media.Theo de Raadt
Resurrect the rather silly "unplug my network device while I am doing nfs diskless revarp" safety code which was disabled due to a missing "ether.h" include, found by jsg ok jsg
2012-10-17use wakeup here, not wakeup_one - avoids problem of not waking up writersBob Beck
when there are more of them than size of queue waiting, and nothing else going on. ok miod@ kettenis@
2012-10-17syncTheo de Raadt
2012-10-17Document the 'boothowto hack' used to flag to (a few) DVACT_POWERDOWNTheo de Raadt
handlers how hard they should hit the hardware.
2012-10-17adjust wdog_register() signatureTheo de Raadt
pointed out by miod
2012-10-17Swap arguments to wdog_register() since it is nicer, and prepareTheo de Raadt
wdog_shutdown() for external usage.
2012-10-17Narrow the spltty/splx pair in com_activate to only enclose the minimumTheo de Raadt
operation which requires it.
2012-10-17cleanup more of the driver soft-state when suspending; in certainTheo de Raadt
async operational modes a timeout and some requests on a queue were still active helps a machine mlarkin has ok miod shadchin mlarkin
2012-10-17adjust comment explaining what the files are forTheo de Raadt
2012-10-17rename field msg -> evp.Eric Faurot
ok gilles@
2012-10-17Document the -P option. While there, remove reference to -T, it's incomplete,Eric Faurot
subject to changes and internal. feedback from jmc@ ok gilles@
2012-10-17add vldc;Jason McIntyre
2012-10-17Enable vldc(4) and vldcp(4).Mark Kettenis
2012-10-17Disable debug code.Mark Kettenis
2012-10-17vldc(4)Mark Kettenis
2012-10-17Rename hvctl(4) into vldcp(4) since this driver now handles other servicesMark Kettenis
as well.
2012-10-17consistency fix: we use "envelope-id" everywhere.Eric Faurot
ok gilles@
2012-10-17reword this sentence to avoid ambiguity;Jason McIntyre
original diff from dawe; guenther pointed out another interpretation while here, Fn -> Nm;
2012-10-17In sys_accept(), don't sleep between pulling the new socket from thePhilip Guenthe
queue and calling soaccept(), so that the socket can't get torn down by a TCP RST in the middle and trigger "panic: soaccept: !NOFDREF", as seen by halex@ Analysis, original diff, and ok bluhm@
2012-10-17If a thread calls __threxit() or _exit() immediately after anotherPhilip Guenthe
thread coredumps, the former thread needs to be released by the later single_thread_set(SINGLE_EXIT) call, even though its P_WEXIT flag is set. ok kettenis@
2012-10-17no need for the boot files on the ramdisk. the install script wasTheo de Raadt
already using the /mnt/usr/mdec/ copies
2012-10-17landisk was already using the installed usr/mdec/boot conditionally, butTheo de Raadt
would never hit the 'other case', so we can shorten the code.
2012-10-17use the baseXX installed goop in /mnt to install bootblocksTheo de Raadt
tested by krw
2012-10-17AH_BYTE_ORDER and AH_BIG_ENDIAN are holdovers from the old FreeBSDJonathan Gray
code, we test but don't define them. Replace with _BYTE_ORDER and _BIG_ENDIAN to make the iv show up properly for big endian bpf consumers. ok stsp@ reyk@
2012-10-17#if NWSDISPLAY > 0 not #if WSDISPLAY > 0Jonathan Gray
ok miod@
2012-10-16use the baseXX installed goop in /mnt to install bootblocksTheo de Raadt
tested by kettenis
2012-10-16Add support for multiple channels.Mark Kettenis
2012-10-16Add domain utilisation to status display.Mark Kettenis
2012-10-16Make sleep(3) and usleep(3) more consistent and remove extraneousTodd C. Miller
historic implementation details that get in the way of readability. Our usleep(3) does not return EINVAL for values >= 1,000,000 but still mention it in CAVEATS since some do. Portions adapted from FreeBSD. OK jmc@
2012-10-16some clarifications from Claus Assmann;Jason McIntyre
ok beck deraadt
2012-10-16use the baseXX /usr/mdec stuff post-install to put boot media on theTheo de Raadt
disk, rather than including it in the ramdisk tested by landry
2012-10-16consistent macros; Tim van der MolenJason McIntyre
2012-10-16use the baseXX /usr/mdec stuff post-install to put boot media on theTheo de Raadt
disk, rather than including it in the ramdisk tested by landry
2012-10-16explain what uses the mdec filesTheo de Raadt
2012-10-16Change the PCI memory extent to cover the whole 64-bit memory spaceMike Belopuhov
but reserve everything above 36 bits so that the erroneous extent allocation will fail but not panic the system. Fixes the notorious IBM x3100 panic where one of the PCI BARs is programmed with an incorrect 64 bit address. Idea and OK kettenis@, tested by Walter Souza, thanks!
2012-10-16MAX_RULEBUFFER_LEN is too small, bump it.Eric Faurot
discussed with gilles@
2012-10-16Prevent a possible buffer overflow in lka_expand_format() that can leadEric Faurot
to a server crash, and let the smtp session fail if that happens. spotted by todd@, discussed with eric@ and chl@ commited for gilles@
2012-10-16Remove uneeded <net/bpf.h> include which was never used as itJonathan Gray
was protected by #if NBPFILTER > 0 and "bpfilter.h" wasn't included.
2012-10-16#if SCSIDEBUG -> #ifdef SCSIDEBUGJonathan Gray
matches the rest of the scsi code.
2012-10-16As CMSG_ALIGN() can overflow the integer value, do the length checkAlexander Bluhm
with and without alignment. Bug found by Clement Lecigne <clemun AT gmail DOT com> OK claudio@
2012-10-16Cleanup.Bob Beck
- Whitespace KNF - Removal/fixing of old useless comments - Removal of unused counter - Removal of pointless test that had no effect ok krw@
2012-10-15tweak previous; ok ericJason McIntyre
2012-10-15Fix some function prototypes from Helmut Tessarek.Nicholas Marriott
2012-10-15Add support for recursive ftp upload. The mput command of the ftpAlexander Bluhm
client got the -r switch and -d depth option. From Jan Klemkow <j.klemkow AT wemelug DOT de> OK haesbaert@
2012-10-15Specify domains by name instead of by number.Mark Kettenis
Provide status of all domains if none specified.