summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-09-08Mention that EC_KEY_get0_public_key returns a public key.Theo Buehler
wording from jmc
2020-09-08Add RK3308 temperature sensors.Jonathan Matthew
ok kettenis@
2020-09-08Add RK3328 PWM, also found in the RK3308.Jonathan Matthew
ok kettenis@
2020-09-07Add a proper VSID allocation scheme for userland segments.Mark Kettenis
2020-09-07Add 'run-ping-fail' subtest. Make sure to clean up left over statetobhe
before running tests.
2020-09-07Garbage collect renew_ticket in tls_decrypt_ticketTheo Buehler
This is only set in one place and read in one place to set the badly named tlsext_ticket_expected flag. It seems preferable to set this flag directly, thus simplifying the logic. This slightly changes the behavior in that this flag is now set earlier, but this seems preferable anyway. Any error between the old and the new position where the flag is set is either fatal (so the connection will be closed) or a decrypt error (so the flag will be set). discussed with jsing
2020-09-07sync a couple of minor fixes (no API/ABI change) to bring libfido2Damien Miller
in line with upstream 1.5.0
2020-09-06Add RK3308 clocksJonathan Matthew
ok kettenis@
2020-09-06amd64: add tsc_delay(), a delay(9) implementation based on the TSCcheloha
In preparation for running the lapic timer in oneshot mode on amd64 we need a replacement for lapic_delay(). Using the lapic timer itself to implement delay(9) when the timer is not running in periodic mode is complicated if not outright impossible. Meanwhile, the i8254 provides our only other amd64 delay(9) implementation and it is an extremely slow clock. On my 2GHz machine, gettick() takes ~20 microseconds to complete *without* mutex contention. On a VM it is even slower, as you must exit the VM for each inb() and outb(). So, add tsc_delay() and use it when we have a constant/invariant TSC. The TSC is a 64-bit "up-counter" so the implementation is simple. Given how slow the i8254 is on modern machines, we may want to add an HPET delay(9) implementation as a fallback for machines where the TSC drifts. The HPET itself is pretty slow, but not as slow as the i8254. Discussed with kettenis@, Mike Larkin, and naddy@. Tweaked by kettenis@. ok kettenis@
2020-09-06Drop redundant else for readability.tobhe
2020-09-06Remove snmpe_dispatch_parent.Martijn van Duren
It's an empty stub and proc.c will put implement proc_dispatch_null if not set, which does the exact same thing. OK denis@
2020-09-06Move definiton of struct token_types *tt to init.c from header file.mortimer
Makes it build with -fno-common. ok deraadt
2020-09-06replace duplicated sizeofa marco with predefined nitemsjan
OK martijn@
2020-09-06Split "trap receiver" into its own trap_address struct and clean up theMartijn van Duren
code surrounding this struct and struct address. No functional change intended, except that trap receiver's source-address may now be a resolvable hostname. Tweaks and OK jan@
2020-09-06After .ti, there are many reasons why the offset may change, so settingIngo Schwarze
it back later requires a guard against underflow, or subsequent assertions may fail. Issue found in an afl run performed by Jan Schreiber <jes at posteo dot de>.
2020-09-06Use __STDC_VERSION__ instead of __ISO_C_VISIBLE to guard _Static_assert.Todd C. Miller
We need to test what the compiler supports, not what the C library provides. This prevents static_assert from being defined when compiling with the in-tree gcc (4.2.1) which does not support _Static_assert.
2020-09-06On tls_config_set_protocols() failure, include the output ofTheo Buehler
tls_config_error() in the errx() message. discussed with jsing
2020-09-06Wording tweak from jsingTheo Buehler
2020-09-06Use an int for the verification depth and drop a cast.Theo Buehler
from jca
2020-09-06Document -S protocols in ftp(1)Theo Buehler
ok jca
2020-09-06Allow specifying supported TLS protocols in ftp(1)Theo Buehler
This adds the possibility of specifying the TLS protocols for ftp(1) to use via -S "protocols=tlsv1.2:tlsv1.1" or -S "protocols=all" or simlar options. This works the same way as nc(1)'s -T protocols option using tls_config_{parse,set}_protocols(3) internally. ok jca
2020-09-06For page-sized and larger allocations do not put the pages we'reOtto Moerbeek
shaving off into the cache but unamp them. Pages in the cache get re-used and then a future grow of the first allocation will be hampered. Also make realloc a no-op for small shrinkage. ok deraadt@
2020-09-05Implement spilling of kernel SLB entries. Mostly from FreeBSD.Mark Kettenis
This makes it possible to use more SLB entries for the kernel than the hardware supports. The design is such that a subset of the hardware SLB entries can be replaced when needed. This makes sure the entries mapping kernel code and data and the page tables ar always present. Traps for missing SLB entries are handled in real-mode and on a special stack such that it doesn't have to rely on SLB entires mapping kernel stacks. With this in place we can increase KVA to 32GB. Hopefully that's enough to support large memory configurations.
2020-09-05Use peer from policy, not from the acquire message.tobhe
2020-09-05Initialize flow_dir and flow_saproto so policy_test() can find the policytobhe
on acquire.
2020-09-05Whitespace.Mark Kettenis
2020-09-05Use SETSDIR consistently.Florian Obser
From Alex Holst, thanks! OK kn
2020-09-05allow compile of kernels with DDB, in more cases.Theo de Raadt
from Matt Baulch discussed with kettenis and drahn
2020-09-05Rename SID_INQUIRY_HDR (a.k.a. 5) to more explicit SID_SCSI2_HDRLEN and use itKenneth R Westerback
to replace various uses of '5' when calculating the amount of data in the INQUIRY response. Matches up more naturally with SID_SCSI2_ALEN. Also use to fix SCSIDEBUG display of INQUIRY responses to show correct count of bytes received/available.
2020-09-05Add mpii(4).Mark Kettenis
2020-09-05Replace '32' with SID_SCSI2_ALEN (a.k.a. 31) when building emulated INQUIRYKenneth R Westerback
responses. This is what the SCSI specifications say is the correct value and already used in several cases.
2020-09-05httpd(8) uses TLSv1.3 and TLSv1.2 by defaultTheo Buehler
Update the httpd.conf(5) manual to reflect this. Initially prompted by a question from tj and reminded by a diff from Navan Carson. ok kn
2020-09-05Add C11's static_assert.Anthony J. Bentley
tested in a bulk by naddy@ previously submitted by jsg@ and Martin Wanvik ok millert@
2020-09-04INFORMATIONAL and CREATE_CHILD_SA exchanges cannot be initiated at thetobhe
same time.
2020-09-04Restrict the size of the page table to 2G such that it never occupies moreMark Kettenis
than 8 SLB entries.
2020-09-04Make the kernel address space a bit bigger.Mark Kettenis
2020-09-04Restrict the size of the page table to 2G such that it never occupies moreMark Kettenis
than 8 SLB entries.
2020-09-04Add kstat to cnmac(4)Visa Hankala
This makes various receive and transmit event counters readable. This additionally replaces the old, and somewhat unusual, way of updating error counters in ifp. Most of the hardware counters are 32 bits wide. Hence the code polls them periodically and adds the values to 64-bit software counters. The hardware counters are cleared when read.
2020-09-04Replace TAILQ concatenation loop with TAILQ_CONCATbket
OK millert@, florian@
2020-09-04Replace TAILQ concatenation loop with TAILQ_CONCATbket
OK millert@, florian@
2020-09-04calloc cb data so the client is NULL.Nicholas Marriott
2020-09-04Create ERRORS section for ober_read_elements.Martijn van Duren
Tweaks and OK tb@ OK jmc@
2020-09-04Ignore ftruncate failure with errno == EAGAINTheo Buehler
This makes piping the OCSP response to other programs with -o - work. input and r+ guenther
2020-09-04drm/amdgpu: Fix buffer overflow in INFO ioctlJonathan Gray
From Alex Deucher b5b97cab55eb71daba3283c8b1d2cce456d511a1 in mainline linux
2020-09-04Add RK3308 pinctrl supportJonathan Matthew
ok kettenis@
2020-09-04Add RK3308 GRFJonathan Matthew
ok kettenis@
2020-09-03amd64: lapic: refactor timer programmingcheloha
We reprogram the lapic timer by hand in three separate places. This is error-prone and difficult to read. To clean things up, introduce routines for reprogramming the lapic timer in a given mode. lapic_timer_oneshot() starts a oneshot countdown. lapic_timer_periodic() starts a repeating countdown. Both of these routines call lapic_timer_start(), wherein we actually write the lapic registers. With input from dlg@. Earlier version eyeballed by mlarkin@. Suspend/resume tested by gnezdo@.
2020-09-03oops, i tripped over $Mdocdate$ again; so sync the date after the commitIngo Schwarze
2020-09-03Fix two issues with .po (page offset) formatting:Ingo Schwarze
1. Truncate excessive offsets to a width reasonable in the context of manual pages instead of printing excessively long lines and sometimes causing assertion failures; found in an afl run performed by Jan Schreiber <jes at posteo dot de>. 2. Remember both the requested and the applied page offset; otherwise, subtracting an excessive width, then adding it again, would end up with an incorrectly large offset. While here, simplify the code by reverting the previous offset up front, and also add some comments to make the general ideas easier to understand.
2020-09-03Sprinkle some more eieio(); seems to avoid triggering the KASSERT(new > old).Mark Kettenis