| Age | Commit message (Collapse) | Author |
|---|
|
it consists of
- ECN support in TCP
- tunnel-egress and fragment reassembly rules in layer-3 not to lose
congestion info at tunnel-egress and fragment reassembly
to enable ECN in TCP, build a kernel with TCP_ECN, and then,
turn it on by "sysctl -w net.inet.tcp.ecn=1".
ok deraadt@
|
|
|
|
|
|
we'll use for printing the information.
miod@ ok
|
|
|
|
|
|
|
|
|
|
- while i'm here some style, as well as spaces/tabs removal.
deraadt@ ok
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Idea from form@.
millert@ ok
|
|
|
|
|
|
we schedule a SIGFPE signal delivery to the faulting process.
However, arithmetic faults come in two flavors: "traps" that are "regular"
exceptions, and "faults" that are restartable exceptions.
In the "fault" case, the frame pc points to the faulting instruction, instead
of the next instruction, in case we could save the world by tweaking memory
and make the instruction not fault again when restarted.
In practice, this led to processes blocked in a SIGFPE loop madness.
To avoid this, add a skip_opcode() routine to compute the address of the
next opcode, effectively skipping the offending instruction ; this routine
is a very stripped-down db_disasm().
While there, enhance the ddb disassembler to correctly recognize and
disassemble two-byte opcodes.
ok hugh@, deraadt@
|
|
|
|
|
|
where each user gets their own file, which is owned by that user.
An old S/Key database may be converted by running "skeyinit -C" as root.
Programs that need to access the S/Key database no longer need to be
setuid root. They must now be setgid auth instead.
|
|
but I'm not sure which revisions yet).
|
|
o Tidy up includes
o Fix macros in auth.h
o Insist on context for ``set mru'' in MP mode
o Usage -> usage
o Don't intialise after processing config requests
o Show FSM values for ConfigAcks
o Make ident output prettier
o Fix some Id keywords
o Handle RADIUS pool address 255.255.255.254
o Support RADIUS Session-Timeout attributes
o Support RADIUS Reply-Message attributes
o Support RADIUS CHAP-Error attributes
o Store RADIUS Filter-Id attributes
o Provide a NAS-Port-Type attribute to RADIUS servers
o Provide a better NAS-Port attribute to RADIUS servers
o Support MS-CHAP with RADIUS
o Improve FSM decode functions
o Support an OCTETSIN variable
o Support an OCTETSOUT variable
o Support an PACKETSIN variable
o Support an PACKETSOUT variable
o Support an IPOCTETSIN variable
o Support an IPOCTETSOUT variable
o Support an IPPACKETSIN variable
o Support an IPPACKETSOUT variable
o Support an IPV6OCTETSIN variable
o Support an IPV6OCTETSOUT variable
o Support an IPV6PACKETSIN variable
o Support an IPV6PACKETSOUT variable
o Support a SOCKNAME variable
|
|
"should be called at splbio()"
|
|
From Sam Smith S at mSmith.net
|
|
|
|
|
|
|
|
spl handling (already found 3 problems).
Man page in a few seconds.
deraadt@ ok.
|
|
now that binutils is updated. As hoped, resulting .o file was identical.
|
|
|
|
|
|
|
|
the public key engine (very much like the 6500, surprise) and the rng.
|
|
|
|
|
|
consider changing the size parameter to uiomove() from int to size_t.
|
|
|
|
to 'pmonitor'. provos@
|
|
5805 (and 5601) require the modulus and base to be normalized to the right of
one of several different register lengths. The result is also normalized to
the same length. Provide functions for shifting the bits back and forth
as appropriate. Note: for consistencies sake the exponent is NOT normalized.
|
|
Idea from form@.
millert@, krw@ ok
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
