summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-08-31refuse to add verify-required (PINful) FIDO keys to ssh-agent untilDamien Miller
the agent supports them properly
2020-08-31Delete my leftover comment.gkoehler
This comment was from my commit of 2020-05-02, > Don't make an illegal adde. Avoids fatal error on PowerPC. When we merged LLVM 10, we got upstream's fix for the illegal adde problem, and this comment became the only difference in this file between us and upstream. Found by Brad Smith.
2020-08-31Add RCS IDs to the few files that are missing them;Damien Miller
from Pedro Martelletto
2020-08-30Remove duplicate definition of _null_auth.mortimer
ok millert@ deraadt@
2020-08-30Fix multiple variable definitions to avoid errors with -fno-common.mortimer
ok millert@
2020-08-30Don't include "net/netisr.h" header. It's not needed here.mvs
ok yasuoka@
2020-08-30pppac(4) uses per cpu counters for collect `ifnet' statistics, but inmvs
pipex(4) layer this `ifnet' still uses `if_data'. Also pppx(4) doesn't use per cpu counters but `if_data'. Add per cpu counters to pppx(4) and pipex(4). This finishes interface statistics collecting mess. ok yasuoka@
2020-08-30Compactify SDEV_/ADEV_ flags & quirks to eliminate the gaps in bit use and thusKenneth R Westerback
allow shrinking the names arrays.
2020-08-30Reorganize the interrupt handler code to avoid a potential bogus KASSERT,Mark Kettenis
handle the priority levels better and guarantee ordering of restoring the priority level after running an interrupt handler and checking for a new interrupt.
2020-08-30Lock all kernel PTE entries into the page tables, even "managed" onesMark Kettenis
entered by pmap_enter(9). Otherwise kernel stack pages get evicted and that doesn't end well. We probably only need to lock in wired pages and I will probably revisit this at some later stage. tested by deraadt@
2020-08-30Allow multiple global options.tobhe
2020-08-30syncTheo de Raadt
2020-08-30If no replies are received for a while due to connectivity issuesOtto Moerbeek
go into unsynced mode. The existing code to check if we're unsycned is only done on receiving an ntp packet which does not happen if there are connectivity issues. Prodded by naddy@ ok @florian
2020-08-30Start replacing the existing TLSv1.2 record layer.Joel Sing
This takes the same design/approach used in TLSv1.3 and provides an opaque struct that is self contained and cannot reach back into other layers. For now this just implements/replaces the writing of records for DTLSv1/TLSv1.0/TLSv1.1/TLSv1.2. In doing so we stop copying the plaintext into the same buffer that is used to transmit to the wire. ok inoguchi@ tb@
2020-08-30add missing wakeup for the unlikely dying caseanton
2020-08-30use unique wait messages with msleep_nsec()anton
2020-08-30Add regress test case for make/varmodifiers.c r1.48Theo Buehler
(Fix :S with anchors and replacement)
2020-08-30Fix :S with anchors and replacementTheo Buehler
gnezdo noticed that :S/old_string/new_string/ variable modifiers such as :S/^sth/&/ and :S/sth$/&/ with an anchor in the old_string and an & in the new_string don't work as documented (and expected) since they replace & with old_string including the anchors. This is because get_spatternarg() deals with skipping the anchors in pattern->lhs only after having replaced any '&' in the buffer that will eventually become new_string with pattern->lhs. Fix this by moving the logic of skipping the anchors from get_spatternarg() into common_get_patternarg() so it is done before & is handled. ok millert
2020-08-30avoid a invalid pointer deref in hvn_stop()Jonathan Gray
intr_barrier() now uses the argument so directly call sched_barrier(NULL) which is what intr_barrier() used to do until recently. problem reported by and fix tested by Andre Stoebe
2020-08-30PLL1(CPU_PLL) stability improvement for Allwinner H3/H2+SASANO Takayoshi
Due to unstable of PLL1, sometimes the system has hanged up especially at boot. This is observed at Allwinner H3/H2+ processor. To solve the problem, PLL1 setting procedure is same as Linux. 1. change clock source to 24MHz 2. wait 1usec (new) 3. disable PLL1 (new) 4. set new NKMP value, but M should be 1 5. re-enable PLL1 (new) 6. wait PLL1 stable (modified) 7. change clock source to PLL1 8. wait 1usec (new) Once disable PLL1 before setting NKMP is very important. And, sometimes LOCK flag is set even if PLL has not locked yet so wait for PLL is modified with simple delay() by the value of PLL_STABLE_TIME_REG1 register. Not only Allwinner H3/H2+ but also all (i.e. A64) Allwinner processors datasheet has "If the clock source is changed, at most to wait for 8 present running clock cycles." sentence at CPU clock source selection field of CPU/AXI configuration register. But this is ambiguous that _who_ should do _what_ during that cycles. It is unclear that changing clock source itself invoke PLL1 unstability. For safety, added 1usec wait after changing clock source like Linux. ok by kettenis@, thanks to adr at sdf dot org
2020-08-30old keys are boringTheo de Raadt
2020-08-30signify key for 6.9 baseTheo de Raadt
2020-08-29Use SO_REUSEADDR on the listening socketsJeremie Courreges-Anglas
Lets unwind(8) run when another name server listens on the wildcard address. Conflict with unbound(8) spotted by sthen@, ok florian@ deraadt@
2020-08-29Add 'enforcesingleikesa' test.tobhe
2020-08-29More recent MMC specificiations add READ(12)/WRITE(12). So add cd_cmd_rw12()Kenneth R Westerback
and let cdstart() use it if the requested i/o is unable to fit into a READ(10). Certainly better than silently truncating the i/o into a READ(10)/WRITE(10).
2020-08-29Use ISSET() to check b_flags for B_READ.Kenneth R Westerback
2020-08-29Missing u_int -> u_int32_t chunks from previous.Kenneth R Westerback
2020-08-29Use u_int32_t for nsecs, making it crystal clear that the valuesKenneth R Westerback
are expected to fit into a 4-byte field.
2020-08-29Only fall back on using the first potential root disk as the boot disk ifMark Kettenis
the boot kernel didn't hand us a valid bootduid. ok visa@
2020-08-29Mark certain sections with debug information as "allocated" such that theyMark Kettenis
get picked up by ddb. This makes the "pp" and "show struct" commands that depends on CTF work. ok gkoehler@
2020-08-29Before clearing the kcov descriptor associated with a thread make sureanton
no other thread is currently within a remote section. Otherwise, the remote subsystem could end up in a broken state where it doesn't reset the necessary bits upon leaving the remote section. Therefore introduce the kr_barrier() routine which waits until all ongoing remote sections have been left. Also, extend the scope of the mutex to also cover fields of struct kcov_dev. This is necessary to ensure correctness. Reported-by: syzbot+64122a5f01be1b1abb96@syzkaller.appspotmail.com
2020-08-29Prepare to extend the scope of the kcov remote mutex by renaming it toanton
something more generic. It will soon cover the whole kcov subsystem.
2020-08-29Missing prototype for a currently unused function.Florian Obser
Reported upstream.
2020-08-29sync to libunbound-1.11.0Florian Obser
all heavy lifting done by sthen in unbound testing benno
2020-08-29typo; pointed out by Matthias (mpfr AT fn.de), thanks!Florian Obser
2020-08-29define OPENSSL_NO_SSL_TRACE in opensslfeatures.hKinichiro Inoguchi
ok jsing@ tb@
2020-08-29Have [cd|sd]_cmd_rw[6|10|12|16] return the length of the created command andKenneth R Westerback
have the caller assign it to xs->cmdlen. Pass in xs->cmd instead of xs. A slightly cleaner API that provides the potential of detecting and reacting to a failure to create the desired command.
2020-08-28Shuffle [cd|sd]start code into closer alignment. Move the initialization of theKenneth R Westerback
xs fields to a more convenient location, shrinking upcoming diffs. Nuke some Captain Obvious comments.
2020-08-28Abstract cd_cmd_rw6() and cd_cmd_rw10() a la sd_cmd_rw6() and sd_cmd_rw10().Kenneth R Westerback
2020-08-28Implement mktime() function for compatibility with mawk and gawk.Todd C. Miller
This is the only missing time function compared to those two implementations. Doc changes OK jmc@
2020-08-28Nuke CDF_ANCIENT, SDF_ANCIENT SDEV_ONLYBIG and bogus check of SID_RelAdr inKenneth R Westerback
favour of simply using the device's claimed SCSI level of support. Except of course for ATAPI/USB devices which often don't claim anything. Keep assuming they are at least SCSI-2. Use consistant tests in sdminphys/cdminphys/sdstart/cdstart.
2020-08-28Make fdt root node's model property readable through sysctl hw.productVisa Hankala
2020-08-28Rename ikev2_*_sa() functions to make clear they handle Child SAs.tobhe
ok patrick@
2020-08-28Make sure not to pass NULL to explicit_bzero().tobhe
Fixes CID 1496732. ok patrick@
2020-08-28Add missing #if's to fix build without bpf(4).mvs
ok deraadt@
2020-08-28Fix a few more typos in man9. Pointed out by jmc@, thanks!Frederic Cambus
2020-08-28free the correct object when a remote subsystem already is presentanton
2020-08-28Ensure that address/mask mismatches are flagged at config-check time.Darren Tucker
ok djm@
2020-08-28Check that the addresses supplied to Match Address and MatchDarren Tucker
LocalAddress are valid when parsing in config-test mode. This will catch address/mask mismatches before they cause problems at runtime. Found by Daniel Stocker, ok djm@
2020-08-27Use p2p_rtrequest()kn
Although technically a point-to-multipoint interface, point-to-point semantics apply/fit when installing local routes, e.g. configuring IPv6 addresses on it. This is to fix SIOCGNBRINFO_IN6 and thus ndp(8). Report and diff from Matt Dunwoodie <ncon at noconroy dot net>, thanks! OK tobhe