summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-09-06fixes for !WITH_OPENSSL compilation; ok dtucker@Damien Miller
2019-09-06lots of things were relying on libcrypto headers to transitivelyDamien Miller
include various system headers (mostly stdlib.h); include them explicitly
2019-09-06Check for RSA support before using it for the user key, otherwise useDarren Tucker
ed25519 which is supported when built without OpenSSL.
2019-09-06remove leakmalloc reference; we used this early when refactoring butDamien Miller
not since
2019-09-06better error code for bad arguments; inspired byDamien Miller
https://github.com/openssh/openssh-portable/pull/144 by Ed Maste
2019-09-05syncTheo de Raadt
2019-09-05Document pledge keywordkn
OK millert
2019-09-05Fix previous commit.Mark Kettenis
ok millert@, sf@, deraadt@
2019-09-05Update Spleen kernel fonts to the latest released version, bringingFrederic Cambus
the following improvements: - Character at position CB is 'E' with diaeresis, not with tilde (12x24 version) - Character at position D6 is 'O' with diaeresis, not with tilde (12x24 version) - Character at position DC is 'U' with diaeresis, not with tilde (12x24 version) - Fix middle bar thickness in the upper case 'eth' character (12x24 version) - Fix ring alignment for the 'A' and 'a' characters (16x32 and 32x64 versions) - Fix tilde alignment in the 'o' with tilde character (32x64 version) - Remove strain pixel on the '3' and 'k' characters (32x64 version) OK deraadt@, mpi@
2019-09-05Nuke some 25+year old comments that the oracles at delphi would haveKenneth R Westerback
found obscure. Repair a broken WangTEK 5150ES quirks entry that apparently suffered some damage when imported in 1995. It never made NetBSD/FreeBSD quirk lists at all. Some whitespace tweaking to make everything line up.
2019-09-05Add mvdog(4), a driver to support the watchdog on the Armada 3700 SoC.Patrick Wildt
At the moment it only supports disabling the watchdog, which lets me continue to work on the Turris Mox. ok kettenis@
2019-09-05Ignore missing pseudo terminal for ssh when called from cron job.Alexander Bluhm
2019-09-05Supermicro X8DTH-i/6/iF/6F fails to attach uhci(4) via PCI and AHCI.Alexander Bluhm
Result is a crash at power down. Skip the activate function if attach has failed. Solution taken from ehci(4). OK deraadt@ kettenis@
2019-09-05Devices that have no quirks don't need to appear in the list ofKenneth R Westerback
devices with quirks.
2019-09-05Add missing RCS Id.Patrick Wildt
2019-09-05Revert iwm(4) to software WPA crypto because of apparent firmware issues.Stefan Sperling
For a small proportion of frames on 8265 we have observed firmware reporting "not encrypted" even though in Wireshark these frames appear as regular encrypted frames (rx_pkt_status=0xc0400007 type=0x8 subtype=0x80 m_len=1542). This causes frame drops which do not occur with software crypto. We might try again after a firmware upgrade. There seems to be no public record of bug fixes made by Intel between firmware versions which degrades our development process into pure trial-and-error. We need to waste our own time to find out information which Intel should be providing to the public. If anyone is aware of a source of such information, please let us know. All this is of course very disappointing. Problem reported by and debugged with help from solene@
2019-09-05Add objects for ECDH schemes in RFC 5753.Joel Sing
Based on OpenSSL 1.1.1b. ok inoguchi@ tb@
2019-09-05Build ecdh_kdf.cJoel Sing
2019-09-05Replace OPENSSL_cleanse() with explicit_bzero().Joel Sing
2019-09-05Provide prototype for ecdh_KDF_X9_63()Joel Sing
2019-09-05Include correct header.Joel Sing
2019-09-05style(9) and whitespace.Joel Sing
2019-09-05Restore per-file license/copyright removed in OpenSSL commit 4f22f40507f.Joel Sing
2019-09-05Remove ECDH_KDF_X9_62 wrapper.Joel Sing
2019-09-05Provide ECDH KDF for X9.63 as needed for CMS ECC.Joel Sing
From OpenSSL 1.1.1b. ok tb@ inoguchi@
2019-09-05adapt to print_indent() HTML_NOSPACE fix, html.c rev. 1.132Ingo Schwarze
2019-09-05Do not clear HTML_NOSPACE in print_indent().Ingo Schwarze
I don't think there ever was a reason for doing so. Besides, there is a discrepacy with respect to the point in the document affected. That flag controls whitespace at the current formatting point. But when HTML_BUFFER is in effect, the line break and indentation is typically inserted one word further to the left. Anything happening at that point to the left can't reasonably influence spacing at the different point further to the right. Among other effects, this change avoids some spurious line breaks in HTML code at points where they weren't supposed to happen, line breaks that in some cases caused undesirable, visible whitespace when the resulting HTML was rendered.
2019-09-05Nuke unused struct block_desc_cipher. The Eighties called and wantKenneth R Westerback
their "CIPHER ST150S (old drive)" devices back.
2019-09-05Name environment variables consistently.Alexander Bluhm
2019-09-05Add Allwinner H6 support.Mark Kettenis
ok patrick@
2019-09-05if a PKCS#11 token returns no keys then try to login and refetchDamien Miller
them. Based on patch from Jakub Jelen; bz#2430 ok markus@
2015-11-05Add regression tests for the ARP implementation in the kernel. SendAlexander Bluhm
multiple ARP packets to a remote machine with Scapy. Check ARP replies, table entries and log messages. All log messages in in_arpinput() are generated. Proxy ARP is also tested.
2019-09-05sprinkle in some explicit errors here, otherwise the percolate allDamien Miller
the way up to dispatch_run_fatal() and lose all meaninful context to help with bz#3063; ok dtucker@
2019-09-05only send ext_info for KEX_INITIAL; bz#2929 ok dtuckerDamien Miller
2019-09-05em: Fix potential endless loopStefan Fritsch
If the NIC is in some error state (seen on a i219LM when em_read_phy_reg_ex() returns at "MDI Error"), it can happen that we loop endlessly because the loop variable is modified again somewhere down in the call stack. Use a separate variable to make the attach fail with "Hardware Initialization Failed" instead of hanging. yes deraadt@
2019-09-05macro fix; ok djmJason McIntyre
2019-09-05memleak on error path; found by libfuzzerDamien Miller
2019-09-05Use the new set_blksz() interface to set the block size.Alexandre Ratchov
This simplifies the code and allows any block size multiple of 1ms to be used when play and recording number of channels are not the same. ok mpi@
2019-09-05Use the new set_{blksz,nblks}() interface to set the block size.Alexandre Ratchov
This simplifies the code and allows any block size supported by the hardware to be used. ok mpi@
2019-09-05Add the set_blksz() and set_nblks() audio driver functions.Alexandre Ratchov
The first sets the block size in frames, which is necessarily common to play and recording directions no matter the number of channels. The second sets the number of blocks per buffer for the given direction. Together, these two functions allow audio drivers to easily set the block size, matching both playback and recording constraints. The round_blocksize() didn't allow to do so because it returns the block size in *bytes*. Since the driver doesn't know if it's called for the play or for the record block size, it's impossible to calculate the block size in all cases if play and record number of channels are different. ok mpi@
2019-09-05Implement splassert() on mips64.Visa Hankala
2019-09-05Adjust interrupt priority levels on mips64 so that prioritiesVisa Hankala
of soft interrupts are lower than priorities of hard interrupts. This allows the delivery of hard interrupts while soft interrupts are masked.
2019-09-05expose allowed_signers options parsing code in header for fuzzingDamien Miller
rename to make more consistent with philosophically-similar auth options parsing API.
2019-09-05Prepare the bat for kernels greater > 8MB of code, why because clang.Theo de Raadt
ok kettenis
2019-09-05Nuke unused st_softc field 'numblks'.Kenneth R Westerback
2019-09-05Minimize differences between IPv4 and IPv6 multicast tests.Alexander Bluhm
2019-09-05There can be only one -- mode.Kenneth R Westerback
So fold 'modeflags' field of st_softc into 'flags' field of same. Nuke a bunch of dubious/obvious comments.
2019-09-05Link IPv6 multicast tests to regress build.Alexander Bluhm
2019-09-05Test IPv6 multicast sender, receiver, router. Minimal mc6routeAlexander Bluhm
implmentation does not care about ICMPv6, it simply adds static multicast routes. Multicast routing needs at least two test machines. Otherwise only send and receive on localhost is tested. Currently receiving link-local packets via loopback does not work due to wrong scope id. Everything is mostly copied from IPv4 regress.
2019-09-05Feed the bntest output to bc(1). This checks the result of the bigAlexander Bluhm
num calculations and avoids lots of ugly output to stdout. Remove fflush(3) of stderr, it is unbuffered anyway. with Moritz Buhl
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-18 09:38:02 +0000