summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-08-07Do not hardcode the key length.Martin Pieuchot
2020-08-07- Do better work in ifmedia_updKevin Lo
- Eliminate the redundant bits of code for MTU handling; From Brad
2020-08-07Do not force line width to grid width because it may need to be largerNicholas Marriott
to accomodate a wide character. GitHub issue 2336.
2020-08-07default to -march=i586 on i386Jonathan Gray
llvm 9 and later take more care not to inline cmpxchg8b/cx8 with -march=i486 instead calling __atomic_* functions. This in turn breaks the build of a large number of ports. To avoid having to add a lock or conditionally building individual ports with -march=i586 change the default so 64 bit atomics will always be available. ok patrick@ sthen@ deraadt@
2020-08-07timeout(9): remove unused interfaces: timeout_add_ts(9), timeout_add_bt(9)cheloha
These two interfaces have been entirely unused since introduction. Remove them and thin the "timeout" namespace a bit. Discussed with mpi@ and ratchov@ almost a year ago, though I blocked the change at that time. Also discussed with visa@. ok visa@, mpi@
2020-08-06delete another word to improve the wording; suggested by jmc@Ingo Schwarze
2020-08-03Import LLVM 10.0.0 release including clang, lld and lldb.Patrick Wildt
ok hackroom tested by plenty
2020-08-06Delete commented out code.tobhe
2020-08-06Allow pf(4) to divert packets from bridge(4) to local socket.Alexander Bluhm
joint work markus@ patrick@ bluhm@
2020-08-06Avoid reading one byte before the path buffer.Christian Weisgerber
This happens when there's only one component (e.g. "/foo"). This bug has been present since June 1990 when it was commited to mountd.c SCCS version 5.9. Note: the bug is on the second changed line, the first line is changed for visual consistency. From CheriBSD via FreeBSD ok millert@ deraadt@
2020-08-06timeout(9): fix miscellaneous remote kcov(4) bugscheloha
Commit v1.77 introduced remote kcov support for timeouts. We need to tweak a few things to make our support more correct: - Set to_process for barrier timeouts to the calling thread's parent process. Currently it is uninitialized, so during timeout_run() we are passing stack garbage to kcov_remote_enter(9). - Set to_process to NULL during timeout_set_flags(9). If in the future we forget to properly initialize to_process before reaching timeout_run(), we'll pass NULL to kcov_remote_enter(9). anton@ says this is harmless. I assume it is also preferable to passing stack garbage. - Save a copy of to_process on the stack in timeout_run() before calling to_func to ensure that we pass the same process pointer to kcov_remote_leave(9) upon return. The timeout may be freely modified from to_func, so to_process may have changed when we return. Tested by anton@. ok anton@
2020-08-06Wow, the indentation is totally messed up, to the point where compilersTheo de Raadt
complain (actually useful this time) ok millert
2020-08-06Explain the purpose of CMAC_resume(3) in more detail.Ingo Schwarze
Triggered by jmc@ apparently misunderstanding the intention of the text and fixing a grammatical error in a way that wasn't ideal, so i guess he wouldn't have been the only one to find the previous version hard to understand. OK jmc@
2020-08-06Remove duplicate comment.Marcus Glocker
ok mpi@
2020-08-06Remove defines for `netisr' bits which are not used anymore.mvs
ok mpi@
2020-08-06mention sdhc* at fdt?Jonathan Gray
2020-08-05Don't compare pointers against zero.Marcus Glocker
Reported by Peter J. Philipp. ok mvs@ deraadt@
2020-08-05Use PFKEYV2_LIFETIME_CURRENT instead of magic number.tobhe
ok patrick@
2020-08-05Move TPMR section above TRUNK to sort alphabeticallykn
Reminded by jmc
2020-08-05Document tpmr ioctls and synopsiskn
Add missing TPMR section to ifconfig(8) by moving the commands from the driver's manual to it (copy/paste) and document the ioctl(2) interface in tpmr(4). Indenting tpmr's first EXAMPLE while here; from jmc. OK jmc
2020-08-05Get the default values for font height and width in wsfontload(8) usingFrederic Cambus
the WSDISPLAYIO_GETSCREENTYPE ioctl. This ensures that they always match the currently loaded font metrics. Previously, wsfontload(8) hardcoded the default height and width values for the font to be loaded as 12x22 when using framebuffer consoles, and as 8x16 when in text mode. The 12x22 value wasn't correct in case we felt back to the smaller 8x16 font for screen widths smaller than 960px, and wasn't valid anymore since we replaced Gallant 12x22 by Spleen 12x24 on all architectures but sparc64. OK jcs@, mpi@
2020-08-05Allow the WSDISPLAYIO_GETSCREENTYPE ioctl on the tty*cfg device, passingFrederic Cambus
it back to tty*0. This is needed to restore working defaults in wsfontload(8). OK jcs@, mpi@
2020-08-05Document the p argument of vgonel(9) and vrecycle(9).Tim van der Molen
Spotted by schwarze@, discussed with kn@ and schwarze@
2020-08-05Revert r1.614 of net/if.c. Modifications of `ifnet' list must still bemvs
done under both the KERNEL_LOCK() and NET_LOCK().
2020-08-05drm: hold gem reference until object is no longer accessedJonathan Gray
From Steve Cohen 5aa4eb5a6d915cf00bf104ddd76e1adbc3dabdc4 in linux 5.7.y/5.7.13 8490d6a7e0a0a6fab5c2d82d57a3937306660864 in mainline linux
2020-08-05drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()Jonathan Gray
From Peilin Ye dd4672ba579a78f14dab65062d95c16f0835947b in linux 5.7.y/5.7.13 543e8669ed9bfb30545fd52bc0e047ca4df7fb31 in mainline linux
2020-08-05drm/amd/display: Clear dm_state for fast updatesJonathan Gray
From Mazin Rezk ee27c88788b88c9c1c75e3a9ce580c79c2dba009 in linux 5.7.y/5.7.13 fde9f39ac7f1ffd799a96ffa1e06b2051f0898f1 in mainline linux
2020-08-05Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"Jonathan Gray
From Alex Deucher f53aaf88742ccee0e9aa4ed7d700ceeb434d9a7a in linux 5.7.y/5.7.13 87004abfbc27261edd15716515d89ab42198b405 in mainline linux
2020-08-05Change searching to behave more like emacs and so that regex searchingNicholas Marriott
doesn't overlap when searching forwards.
2020-08-05Print tpmr(4) memberskn
tpmr is a trivial bridge and has no specific ioctls, so to distinguish it from the rest we must rely on the interface name; assuming that it is tpmr because neither is_bridge() nor is_switch() return success is not possible due to the way ifconfig is designed: it runs all *_status() commands for all interface types. OK dlg
2020-08-05Merge switch_status() into bridge_status()kn
This is to reduce duplicate code and prepare for bridge_status() to cover all bridge like interfaces: bridge(4), switch(4) and tpmr(4). OK dlg
2020-08-05sigh, some duplication, but at least put things into the canonical orderTheo de Raadt
2020-08-05build installXX.{img,iso} files are like miniroot, but contain the setsTheo de Raadt
in a X.X/powerpc64 directory. Like miniroot, these skip the "boot -> bsd.rd" sequence, and boot bsd.rd directly because of disk-discovery issues not yet resolved in the boot code. with debugging help from gkoehler and kettenis
2020-08-05MTREE is not usedTheo de Raadt
2020-08-04add cd9660, msdos, and inet6 supportTheo de Raadt
2020-08-04Validate input given to ioctl(SIOCAIFADDR_IN6) like NetBSD already does.anton
Fixes a bunch of panics reported by syzkaller. ok florian@ Reported-by: syzbot+02f2e07964a89ab65ea4@syzkaller.appspotmail.com Reported-by: syzbot+c26b058a499ce38f689f@syzkaller.appspotmail.com Reported-by: syzbot+62af76d8cb7c09ac017c@syzkaller.appspotmail.com Reported-by: syzbot+d70144b3ae2ec068e318@syzkaller.appspotmail.com Reported-by: syzbot+3c87ca9873bfd0492f5c@syzkaller.appspotmail.com Reported-by: syzbot+323549177062adb80f84@syzkaller.appspotmail.com Reported-by: syzbot+e745c1c29d960337ce14@syzkaller.appspotmail.com Reported-by: syzbot+91da988a445013baf925@syzkaller.appspotmail.com Reported-by: syzbot+747cbcbbed6318542061@syzkaller.appspotmail.com Reported-by: syzbot+ca5efa23e00130bc8000@syzkaller.appspotmail.com Reported-by: syzbot+731ab8c9a0342ace4189@syzkaller.appspotmail.com Reported-by: syzbot+6c80b815a0ff8f09be69@syzkaller.appspotmail.com Reported-by: syzbot+7939d2c4bc9a5dfa707a@syzkaller.appspotmail.com Reported-by: syzbot+e893fb0259640a314d06@syzkaller.appspotmail.com Reported-by: syzbot+b6a3447070ae8ffcb125@syzkaller.appspotmail.com Reported-by: syzbot+23c0824b688f28c79c1b@syzkaller.appspotmail.com Reported-by: syzbot+6cc72412d8ddcf87f8a1@syzkaller.appspotmail.com
2020-08-04Initialize per-pmap lock.Mark Kettenis
2020-08-04Pack multiple packets into one xfer as possible. Given this is a 5x-7xKevin Lo
TX improvement. It's all Jonathon's code so assert his copyright. Submitted by Jonathon Fletcher. Tested by jcs@, Mikolaj Kucharski, Jonathon Fletcher and myself. ok jmatthew@
2020-08-04Cleanup aead_ctxKinichiro Inoguchi
ok jsing@ tb@
2020-08-04On POWER9 use the "darn" instruction and feed its output as entropy intoMark Kettenis
the random subsystem. ok deraadt@
2020-08-04We have `pipexinq' and `pipexoutq' mbuf(9) queues to store pipex(4)mvs
related mbufs. Each mbuf(9) passed to these queues stores the pointer to corresponding pipex(4) session referenced as `m_pkthdr.ph_cookie'. When session was destroyed its reference can still be in these queues so we have use after free issue while pipexintr() dereference it. I removed `pipexinq', `pipexoutq' and pipexintr(). This not only allows us to avoid issue described above, but also removes unnecessary context switch in packet processing. Also it makes code simpler. ok mpi@ yasuoka@
2020-08-04Also ignore SIGQUIT so it can't be used to kill the client when locked.Nicholas Marriott
2020-08-03Only parse a client's status_request in the CHTheo Buehler
A client should only send a status_request as part of the CH. Pointed out by Michael Forney ok inoguchi jsing
2020-08-03Ensure clients only send a status_request in the CHTheo Buehler
The current code might cause a client to send a status_request containing a CertificateStatusRequest with its certificate. This makes no sense. Pointed out by Michael Forney ok inoguchi jsing
2020-08-03Correctly handle server requests for an OCSP responseTheo Buehler
According to RFC 8446, 4.4.2.1, a server may request that a client present an OCSP response with its certificate by sending an empty status_request extension as part of the certificate request. The current code expects a full CertificateStatus structure, which is only sent if the server sends an OCSP response with its certificate. This causes interoperability issues with Go's TLS server and with newer GnuTLS where we would abort the handshake with a decode_error alert and length mismatch error. Issue reported and diagnosed by Michael Forney Problem also found by Mikolaj Kucharski and inoguchi. ok inoguchi jsing
2020-08-03add more scsi devices, observed by gkoehlerTheo de Raadt
2020-08-03grow to cope with clang10Theo de Raadt
2020-08-03syncPatrick Wildt
2020-08-03Bump libc++ and libc++abi majors due to floating point typePatrick Wildt
changes with LLVM 10. found by kettenis@ ok deraadt@
2020-08-03Remove LLVM 8.0.1 files.Patrick Wildt
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-19 21:23:44 +0000