Age | Commit message (Collapse) | Author |
|
|
|
newsyslog test failing atm on NFS..
ok sthen@
|
|
also PORTS_BUILD_XENOCARA_TOO.
Don't use !!! if things break, it's your fault.
|
|
ok kurt@
|
|
|
|
-assume we have hardware checksum offloading. stop mucking with the
checksum in most of the stack
-stop checksum mucking in pf, just set a "needs checksumming" flag if needed
-in all output pathes, very late, if we figure out the outbound interface
doesn't have hw cksum offloading, do the cksum in software. this especially
makes the bridge path behave like a regular output path
-little special casing for bridge still required until the broadcast path
loses its disgusting shortcut hacks, but at least it's in one place now
and not all over the stack
in6_proto_cksum_out mostly written by krw@
started at k2k11 in iceland more than 1.5 years ago - yes it took that
long, this stuff is everything but easy.
this happens to fix the infamous pf rdr bug that made us turn off proto
cksum offloading on almost all interface drivers.
ok camield sthen claudio, testing by many, thanks!
|
|
|
|
|
|
Found the hard way by deraadt@
|
|
|
|
|
|
ok nicm@
|
|
that a macro (which I called MAXRESOLVCONSIZE) would make things
easier to read and reduce such typos. Make it so.
|
|
ok kettenis
|
|
binding a lease to that interface. This fixes issues sthen@ found
with unexpectedly persistant addresses and failures of dhclient
when switching an interface repeatedly between different networks.
This crude but predictable behaviour may be toned down once it
is figured out what we want to do with mixed static/dynamic
configurations on an interface.
ok sthen@
|
|
Pointed out by deraadt@
|
|
|
|
|
|
size. When relocating use blocks that are a maximum of 32KB in size and
increment the segment registers after relocating each block. This keeps us
within the confines of the %cx register and the real mode segmented
addressing.
|
|
64KB segment at 0x7c00 and any additional 64KB segments over top of each
other at 0x10000.
|
|
|
|
|
|
|
|
OK jasper@ sthen@
|
|
have to go through the PLT/GOT to get at them anymore. In fact going through
the GOT now fails since we no longer have a GOT entry for OPENSSL_ia32cap_P.
Fixes the problem spotted by jasper@ and sthen@. Based on a diff from mikeb@
who did most of the actual work of tracking down the issue.
ok millert@, mikeb@
|
|
|
|
When enabled SMAP will generate page faults on the kernel attempting
to read/write user data pages unless an override flag is set.
Instructions that modify the flag are patched into copyin/copyout and
friends on boot if SMAP is enabled.
Those with access to hardware with SMAP can contact me for a test case.
joint work with deraadt@
ok miod@ deraadt@
|
|
ok sf@
|
|
authorized_keys from a command in addition to (or instead of) from
the filesystem. The command is run as the target server user unless
another specified via a new AuthorizedKeysCommandUser option.
patch originally by jchadima AT redhat.com, reworked by me; feedback
and ok markus@
|
|
no functional change
OK millert@
|
|
interface and route configuration via ioctl's and routing sockets.
This will break configurations using local enhancements of
dhclient-script, which will now require alternate arrangements.
Committing early to allow time to identify and develop required
alternatives.
Several proddings by deraadt@.
|
|
oce_{read,write}_{cfg,csr,db} for different pci bars
|
|
maninpulations. Inspired by similar files in bgpd, dvmrpd, ldpd, etc.
Necessary for imminent nuking of dhclient-script.
Not linked into build at the moment.
|
|
the code actually diffable. No binary change.
|
|
|
|
|
|
|
|
runtime while time_uptime is monotonic. Prevent underflows in
pfsync(4) and pflow(4) by using signed variables. pfsync(4) problem
pointed out by camield.
Diff originally by dlg, frag and pflow bits by me.
feedback dlg
man page tweak jmc
Various versions of the pflow bits tested by Hrvoje Popovski
(hrvoje AT srce DOT hr), thanks!
ok benno, henning, dlg
|
|
ok deraadt@
|
|
ok mikeb@
|
|
|
|
is non-zero before handling them, like we do in pyro(4). Seems to fix issues
with MSIs on sun4v, so enable them again.
|
|
|
|
|
|
other strands can do some useful work. Idea stolen from Linux.
Results in a small, but measurable speedup doing a kernel build and reduces
the system time by almost 10%.
|
|
|
|
|
|
|
|
|
|
|