summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-02-22Move declarations of ip6_protox[] and inet6sw[] to <sys/protosw.h>Philip Guenther
where the IPv4 versions have been forever ok gnezdo@ deraadt@ jsg@ mpi@ millert@
2022-02-22pfctlinput() is already declared in <sys/protosw.h>, which isPhilip Guenther
more specific and appropriate, so delete it here ok gnezdo@ deraadt@ jsg@ mpi@ millert@
2022-02-21unveil(2) "/dev" read-only instead of using chroot(2)/chdir(2). after callingRicardo Mestre
the latter the program then also calls stat(2) and therefore it never actually worked correctly since they were added almost 20 years now. while here remove an implementation detail from the manpage which covered the chroot part. pointed out by and ok deraadt@
2022-02-21Convert KVA allocation to km_alloc(9).Mark Kettenis
ok mpi@
2022-02-21Convert KVA allocation to km_alloc(9).Mark Kettenis
ok mpi@
2022-02-21Convert KVA allocation to km_alloc(9).Mark Kettenis
ok gkoehler@
2022-02-21Convert KVA allocation to km_alloc(9).Mark Kettenis
ok mpi@
2022-02-21Factor out alert handing code in the legacy stack.Joel Sing
Pull out the code that processes incoming alerts - a chunk of the complexity is due to the fact that in TLSv1.2 and earlier, alerts can be fragmented across multiple records or multiple alerts can be delivered in a single record. In DTLS there is no way that we can reassemble fragmented alerts (although the RFC is silent on this), however we could have multiple alerts in the same record. This change means that we will handle this situation more appropriately and if we encounter a fragmented alert we will now treat this as a decode error (instead of silently ignoring it). ok beck@ tb@
2022-02-21Grab vmobjlocks with RW_DUPOK in vm_obj_wire() to silence WITNESSKlemens Nanni
The drm subsystem implements graphics buffers as uvm objects backed by anonymous memory, thus drm locks and aobj locks share the same "vmobjlock" type. uvm_obj_wire() is only called from sys/dev/pci/drm/, so instead of changing drm's lock init/alloc routines to mark allow duplicate locks in general, enter uvm's vmobjlock with RW_DUPOK in this function to allow duplicate lock types per thread in this specific call path alone. Fixes the following WITNESS report when booting/starting X (as seen already in other unrelated bugs@ reports): wsdisplay0: screen 1-5 added (std, vt100 emulation) witness: acquiring duplicate lock of same type: "&uobj->vmobjlock" 1st uobjlk 2nd uobjlk Starting stack trace... witness_checkorder(fffffd83b625f9b0,9,0) at witness_checkorder+0x8ac rw_enter(fffffd83b625f9a0,1) at rw_enter+0x68 uvm_obj_wire(fffffd843c39e948,0,40000,ffff800033b70428) at uvm_obj_wire+0x46 shmem_get_pages(ffff800008008500) at shmem_get_pages+0xb8 __i915_gem_object_get_pages(ffff800008008500) at __i915_gem_object_get_pages+0x6d i915_gem_fault(ffff800008008500,ffff800033b707c0,10009b000,a43d6b1c000,ffff800033b70740,1,35ba896911df1241,ffff8000000aa078,ffff8000000aa178) at i915_gem_fault+0x203 drm_fault(ffff800033b707c0,a43d6b1c000,ffff800033b70740,1,0,0,7eca45006f70ee0,ffff800033b707c0) at drm_fault+0x156 uvm_fault(fffffd843a7cf480,a43d6b1c000,0,2) at uvm_fault+0x179 upageflttrap(ffff800033b70920,a43d6b1c000) at upageflttrap+0x62 usertrap(ffff800033b70920) at usertrap+0x129 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffdc7c0, count: 246 End of stack trace. Input kettenis OK mpi
2022-02-21aligend -> alignedJonathan Gray
2022-02-21ambigus -> ambiguousJonathan Gray
2022-02-21anscestors -> ancestorsJonathan Gray
2022-02-21consisitent -> consistentJonathan Gray
2022-02-21cululative -> cumulativeJonathan Gray
2022-02-21differenent -> differentJonathan Gray
2022-02-21disatcher -> dispatcherJonathan Gray
2022-02-21diviedr -> dividerJonathan Gray
2022-02-21dmammem -> dmamemJonathan Gray
2022-02-21enries -> entriesJonathan Gray
2022-02-21entried -> entriesJonathan Gray
2022-02-21entris -> entriesJonathan Gray
2022-02-21expliclitly -> explicitlyJonathan Gray
2022-02-21futther -> furtherJonathan Gray
2022-02-21ignorint -> ignoringJonathan Gray
2022-02-21implenent -> implementJonathan Gray
2022-02-21independednt -> independent, let's -> letsJonathan Gray
2022-02-21Constify struct cfattach.Martin Pieuchot
2022-02-21initializion -> initializationJonathan Gray
2022-02-21initiailze -> initializeJonathan Gray
2022-02-21instructinos -> instructionsJonathan Gray
2022-02-21interrunts -> interruptsJonathan Gray
2022-02-21interting -> insertingJonathan Gray
2022-02-21Constify struct cfattach.Martin Pieuchot
2022-02-21iommmu -> iommuJonathan Gray
2022-02-21lenghy -> lengthyJonathan Gray
2022-02-21mappiing -> mappingJonathan Gray
2022-02-21splitted -> split, necesssary -> necessaryJonathan Gray
2022-02-21onbard -> onboardJonathan Gray
2022-02-21opearting -> operatingJonathan Gray
2022-02-21receice -> receiveJonathan Gray
2022-02-21cap the daemon login class' datasize at either 1G or 4G depending onRobert Nagy
the architecture and set the bgpd class' datasize to either 16G or 1G ok sthen@ and discussed with many
2022-02-21tempterature -> temperatureJonathan Gray
2022-02-21in input, clear the address union before putting an ipv4 address in it.David Gwynne
the whole vxlan address is used for lookups in the RB tree, so any garbage on the stack where the address sits could confuse the lookup. it looks like i was lucky before, but if you receive vxlan over ipsec you are less lucky. found by and fix tested by jason tubnor.
2022-02-21If the signature on an icmp echo reply doesn't match, don't count it asJonathan Matthew
a reply we've received, and print out the source address and sequence number as that might help the user understand what's going on. ok florian@ dlg@
2022-02-21syncTheo de Raadt
2022-02-21USE_CCACHE does not add a dependencyKlemens Nanni
OK jca sthen
2022-02-21vxlan sending to a mcast group needs an interface specified for that groupDavid Gwynne
ok anton@
2022-02-21mutibyte -> multibyteJonathan Gray
2022-02-20dmameme -> dmamemJonathan Gray
2022-02-20i missed a word.David Gwynne
some other tweaks for readability or brevity while here