summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-07-19Fix an alignment fault observed on an octeon machine while pppoe(4) wasStefan Sperling
attempting to negotiate a large MTU. Copy the peer's max payload size from the discovery packet with memcpy() instead of using a pointer to this value's offset in the packet buffer. tweak and ok visa@ additional testing and ok sthen@
2021-07-19Markup optional ICMP/ICMP6 codes as suchkn
Only icmp(4)/icmp6(4) types are required for `icmp-type'/`icmp6-type' rules while codes are optional. From Martin Vahlensieck < openbsd at academicsolutions dot ch >, thanks!
2021-07-19Remove `ids' from `ipsec_ids_tree' while following ipsp_ids_insert()mvs
error path. This fixes use-after-free issue. Also fix debug message mistype pointed by bluhm@ in error path. ok millert@ bluhm@
2021-07-19Revert incorrect tweaks to disk geometry calculations andKenneth R Westerback
non '-b' MBR disk initialization. Detected by bluhm@'s ever vigilant regress testing.
2021-07-19document X509_CRL_print(3) and X509_CRL_print_fp(3)Ingo Schwarze
2021-07-19drm/i915/display: Do not zero past infoframes.vscJonathan Gray
From Kees Cook 3f9c2a058e61b8df9fef196ad6180fbf9932ed80 in linux 5.10.y/5.10.51 07b72960d2b4a087ff2445e286159e69742069cc in mainline linux
2021-07-19drm/amd/display: Reject non-zero src_y and src_x for video planesJonathan Gray
From Harry Wentland c6016936171a7b179b2c478ceb7fbd092ee4f9f8 in linux 5.10.y/5.10.51 c6c6a712199ab355ce333fa5764a59506bb107c1 in mainline linux
2021-07-19drm/amd/display: fix incorrrect valid irq checkJonathan Gray
From Guchun Chen b13574fa83ac55a9c3aa7f075ef5db62b444f7b5 in linux 5.10.y/5.10.51 e38ca7e422791a4d1c01e56dbf7f9982db0ed365 in mainline linux
2021-07-19drm/dp: Handle zeroed port counts in drm_dp_read_downstream_info()Jonathan Gray
From Lyude Paul 2998599fb16cd99b0384d2517bbd409a233a9695 in linux 5.10.y/5.10.51 205bb69a90363541a634a662a599fddb95956524 in mainline linux
2021-07-19drm/radeon: Call radeon_suspend_kms() in radeon_pci_shutdown() for Loongson64Jonathan Gray
From Tiezhu Yang 0d50d93d05d6571347f3ab9d28d0b80e5d142d81 in linux 5.10.y/5.10.51 c1bfd74bfef77bcefc88d12eaf8996c0dfd51331 in mainline linux
2021-07-19drm/radeon: Add the missed drm_gem_object_put() in ↵Jonathan Gray
radeon_user_framebuffer_create() From Jing Xiangfeng 7aa28f2f67421d7ba9957275bc211a7782238f31 in linux 5.10.y/5.10.51 9ba85914c36c8fed9bf3e8b69c0782908c1247b7 in mainline linux
2021-07-19drm/amdgpu: enable sdma0 tmz for Raven/Renoir(V2)Jonathan Gray
From Aaron Liu 2674ffcad0aef41425e1a4a40d3508caed989a1a in linux 5.10.y/5.10.51 e2329e74a615cc58b25c42b7aa1477a5e3f6a435 in mainline linux
2021-07-19drm/amdgpu: Update NV SIMD-per-CU to 2Jonathan Gray
From Joseph Greathouse 8f933b27cbf1cd176f0a73ddeae19fae5e9bc189 in linux 5.10.y/5.10.51 aa6158112645aae514982ad8d56df64428fcf203 in mainline linux
2021-07-19drm/amdkfd: Walk through list with dqm lock holdJonathan Gray
From xinhui pan 4cd713e48c272a80af935424afaa607ea125aed4 in linux 5.10.y/5.10.51 56f221b6389e7ab99c30bbf01c71998ae92fc584 in mainline linux
2021-07-19drm/amdgpu: fix bad address translation for sienna_cichlidJonathan Gray
From Stanley.Yang a2122e07920456e5d43f32e61d52be59634ddcab in linux 5.10.y/5.10.51 6ec598cc9dfbf40433e94a2ed1a622e3ef80268b in mainline linux
2021-07-19drm/amdkfd: Fix circular lock in nocpsch pathJonathan Gray
From Amber Lin 0e72b151e394106ad3e3d5bebd1118952970047a in linux 5.10.y/5.10.51 a7b2451d31cfa2e8aeccf3b35612ce33f02371fc in mainline linux
2021-07-19drm/amdkfd: fix circular locking on get_wave_stateJonathan Gray
From Jonathan Kim cd29db48bb65e53efe4b05c75e575c5f1af5ddaf in linux 5.10.y/5.10.51 63f6e01237257e7226efc5087f3f0b525d320f54 in mainline linux
2021-07-19drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_checkJonathan Gray
From Mark Yacoub a5f8862967c453aff5b32883d1b6be8e2009e4f0 in linux 5.10.y/5.10.51 03fc4cf45d30533d54f0f4ebc02aacfa12f52ce2 in mainline linux
2021-07-19drm/amdkfd: use allowed domain for vmbo validationJonathan Gray
From Nirmoy Das 378c156f9dd0f0e758513c38e33311ae3e5540b2 in linux 5.10.y/5.10.51 bc05716d4fdd065013633602c5960a2bf1511b9c in mainline linux
2021-07-19drm/amd/display: Fix off-by-one error in DMLJonathan Gray
From Wesley Chalmers c71de31b2e0f4ef71cc69ba841aeac12519b3607 in linux 5.10.y/5.10.51 e4e3678260e9734f6f41b4325aac0b171833a618 in mainline linux
2021-07-19drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7Jonathan Gray
From Wesley Chalmers afa06442d23d32e95e3336cf8ff366bdd8d590ee in linux 5.10.y/5.10.51 3577e1678772ce3ede92af3a75b44a4b76f9b4ad in mainline linux
2021-07-19drm/amd/display: Release MST resources on switch from MST to SSTJonathan Gray
From Vladimir Stempen 02f444321b3a0f3f94e34329f8aafa814c45b8e4 in linux 5.10.y/5.10.51 3f8518b60c10aa96f3efa38a967a0b4eb9211ac0 in mainline linux
2021-07-19drm/amd/display: Update scaling settings on modesetJonathan Gray
From Roman Li 01d6a693196595d356f0f5e42ab155c293470676 in linux 5.10.y/5.10.51 c521fc316d12fb9ea7b7680e301d673bceda922e in mainline linux
2021-07-19drm/amd/display: Fix DCN 3.01 DSCCLK validationJonathan Gray
From Nikola Cornij 57c63b47d6f188b44d93d1602bd24d8d9a9131f6 in linux 5.10.y/5.10.51 346cf627fb27c0fea63a041cedbaa4f31784e504 in mainline linux
2021-07-19drm/amdgpu: remove unsafe optimization to drop preamble ibJonathan Gray
From Jiansong Chen 8fa6473a61ecc9972ad543d8ba1d927d442d1f67 in linux 5.10.y/5.10.51 7d9c70d23550eb86a1bec1954ccaa8d6ec3a3328 in mainline linux
2021-07-19drm/amd/display: Avoid HDCP over-read and corruptionJonathan Gray
From Kees Cook c5b518f4b98dbb2bc31b6a55e6aaa1e0e2948f2e in linux 5.10.y/5.10.51 06888d571b513cbfc0b41949948def6cb81021b2 in mainline linux
2021-07-19drm/sched: Avoid data corruptionsJonathan Gray
From Andrey Grodzovsky 0687411e2a8858262de2fc4a1d576016fd77292e in linux 5.10.y/5.10.51 0b10ab80695d61422337ede6ff496552d8ace99d in mainline linux
2021-07-19drm/scheduler: Fix hang when sched_entity releasedJonathan Gray
From Andrey Grodzovsky 5ed8c298b2e140c640af8813a490fb4d77165e97 in linux 5.10.y/5.10.51 c61cdbdbffc169dc7f1e6fe94dfffaf574fe672a in mainline linux
2021-07-19drm/amd/display: fix use_max_lb flag for 420 pixel formatsJonathan Gray
From Dmytro Laktyushkin 3ca86d44b9023cd96c893d6dd90aacbca90e4d74 in linux 5.10.y/5.10.51 8809a7a4afe90ad9ffb42f72154d27e7c47551ae in mainline linux
2021-07-19drm/amd/amdgpu/sriov disable all ip hw status by defaultJonathan Gray
From Jack Zhang b025bc07c94770ab5ca68a8b2ead12628c2a0698 in linux 5.10.y/5.10.51 95ea3dbc4e9548d35ab6fbf67675cef8c293e2f5 in mainline linux
2021-07-19drm/amd/display: fix HDCP reset sequence on reinitializeJonathan Gray
From Brandon Syu fb7479d64d77a3bb0ee992f9e450cf52d56c6b2c in linux 5.10.y/5.10.51 99c248c41c2199bd34232ce8e729d18c4b343b64 in mainline linux
2021-07-19sync kfd_ioctl.h with linux 5.10.yJonathan Gray
2021-07-19Use SUDO when setting up hostkey.Darren Tucker
2021-07-19Mop up dtls1_get_ccs_header() and struct ccs_header_st.Joel Sing
All this code does is read one byte from memory with an unknown length, potentially being a one byte overread... and then nothing is actually done with the value. ok tb@
2021-07-19Inline DTLS1_CCS_HEADER_LENGTH rather than having a single use variable.Joel Sing
ok tb@
2021-07-19Increase time margin for rekey tests. Should help reliability on veryDarren Tucker
heavily loaded hosts.
2021-07-19Ensure that all returned SSHFP records for the specified host name andDarren Tucker
hostkey type match instead of only one. While there, simplify the code somewhat and add some debugging. Based on discussion in bz#3322, ok djm@.
2021-07-19Add test for host key verification via SSHFP records. This requiresDarren Tucker
some external setup to operate so is disabled by default (see comments in sshfp-connect.sh).
2021-07-19Add ed25519 key and test SSHFP export of it. Only test RSA SSHFP exportDarren Tucker
if we have RSA functionality compiled in.
2021-07-19Put dh_set_moduli_file call inside ifdef WITH_OPENSSL. Fixes build withDarren Tucker
OPENSSL=no.
2021-07-19Group keygen tests together.Darren Tucker
2021-07-18Add test for ssh-keygen printing of SSHFP records.Darren Tucker
2021-07-18Markup promises with Cm not Vakn
These are not variable names but rather keywords (as port of one big string). I originally changed this such that `.Bl -tag' would automatically tag them and thus allow ":t id" in the manual pager; since schwarze's recent mandoc(1) commit this is no longer needed as `.Va' gained tagging with it, but its use is incorrect here nonetheless, so still change it to the more appropiate `.Cm'. Input jmc schwarze
2021-07-18Don't save the prt_scyl/prt_ecyl values, change them, use themKenneth R Westerback
and then restore them. Just change/use the saved values and skip the restoring. Allows PRT_make() to add 'const' to its struct mbr parameter, and thus allows MBR_make() to add 'const' to its struct mbr parameter. No intentional functional change.
2021-07-18Introduce and use garbage collector for 'ipsec_ids' struct entitiesmvs
destruction instead of using per-entity timeout. This fixes the races between ipsp_ids_insert(), ipsp_ids_free() and ipsp_ids_timeout(). ipsp_ids_insert() can't stop ipsp_ids_timeout() timeout handler which is already running and awaiting netlock to be released, so reused `ids' will be silently removed in this case. ipsp_ids_free() can't determine is ipsp_ids_timeout() timeout handler running because timeout_del(9) called by ipsp_ids_insert() clears it's triggered state. So ipsp_ids_timeout() could be scheduled to run twice in this case. Also hrvoje@ reported about ipsec(4) throughput increased with this diff so it seems we caught significant count of ipsp_ids_insert() races. tests and feedback by hrvoje@ ok bluhm@
2021-07-18Zap dhclient bits, mention resolvdkn
OK deraadt
2021-07-18Make GPT_read() obtain and validate the on-disk MBR itself, viaKenneth R Westerback
MBR_read(), and report success/failure. Simplifies logic and makes clearer that the protective MBR is a required part of a GPT. With the standardization on 0/-1 return values for helper functions, rename 'valid' to 'error' in GPT_read() to make logic less mind bending. No functional change.
2021-07-18Remove hackery around /tmp/i/resolv.conf*. In particular "lookup file bind"Theo de Raadt
is required because of TLS servername for contacting ftp.openbsd.org, and there is no point doing that in resolv.conf.tail because it is no longer used. ok florian kn
2021-07-18The IPsec authentication before decryption used a different replayAlexander Bluhm
counter than after decryption. This could result in "esp_input_cb: authentication failed for packet in SA" errors. As we run crypto operations async, thousands of packets are stored in the crypto task. During the queueing the replay counter of the tdb can change. Then the higher 32 bits may increment although the lower 32 bits did not wrap. checkreplaywindow() must be called twice per packet with the same replay counter. Store the value in struct tdb_crypto while dangling in the task queue and doing crypto operations. tested by Hrvoje Popovski; joint work with tobhe@
2021-07-18Do not ask iwx(4) firmware to send probe requests on passive channels.Stefan Sperling
This seems to fix a problem where firmware becomes unresponsive after association and eventually raises a fatal error. iwx(4) already has a workaround in place for this: We always ask firmware to perform a passive scan, on any channel. This change is a better fix from iwm(4) CVS commit jJFMeXcos9GOqFQz. However, the current workaround will stay in place for now, until we have evidence that active scanning is working on iwx(4) devices. I will try to organize an out-of-tree round of testing for this.