Age | Commit message (Collapse) | Author |
|
|
|
in the kernel, not only when com @ gsc is there.
|
|
in the kernel, not only when com @ gsc is there.
ok miod@
|
|
When one of the state limits is reached, further packets that would
create state are dropped, until existing states time out. Discussed
with mcbride, ok henning, jmc
|
|
limit is reached.
Added twist, clamp the max_softdeps to 64 as it is still
possible to exhaust bufkva.
|
|
make more extensive plans later)
|
|
Johan Commelin.
|
|
3385651.
|
|
bindings. From "miaout17" SF bug 3392063.
|
|
session.
|
|
|
|
|
|
is non-NULL. Prevents a panic caused by a NULL dereference when physical
memory is exhausted at pmap_create() time.
ok kettenis@, deraadt@
|
|
|
|
|
|
ok deraadt
|
|
from sthen@
|
|
tested and ok krw@, "get it in" deraadt@
|
|
with the same prefix, neighbor discovery did not work. When comparing
two carp interfaces in in6_ifpprefix(), assume they share the prefix
if they have the same parent.
sure deraadt@
|
|
ok deraadt
|
|
adding a descriptor pointing at zeroed bytes onto the end of transmit
chains. i was accounting for this extra descriptor when i was
completing the chain, but not when i was setting this up. this
meant the number of free descriptors kept growing until it overflowed.
at this point the check for space in the ring failed and packets
no longer flowed.
this counts the pad descriptor in the tx chain setup too.
ok deraadt@
|
|
|
|
|
|
|
|
|
|
Verify that the address in the in6_pktinfo structure included
in the control message is unicast and configured on the local
host. Additional checks prevent from using non-routable
addresses and inactive interfaces.
Embed the scope identifier into the link local addresses as
required by the stack. Do not force users to provide valid
interface index in the ipi6_ifindex but look it up in place
if needed.
ok bluhm, waived by deraadt for the release.
|
|
|
|
The old code left an interrupt enabled at that level, making spl-protection
non functional.
Remove __packed from struct hppa_iv. Instead re-order the members to pack
things efficient on a 64-bit host. Remove explicit padding.
|
|
the route to be at the corresponding carp or physical interface or
at an interface belonging to a common bridge. This fixes IPv6
neighbor discovery with carp.
bug report and tested by Florian Fuessl
put it in deraadt@
|
|
e.g. 'Brazil/DeNoronha East'. Input with embedded spaces put the
install script into a state where a valid timezone could not be
entered.
Problem noted by and fix tested by Javier Bassi.
ok deraadt@
|
|
|
|
|
|
implemented in hardware anyway.
|
|
Otherwise pf could reroute or redirect such a packet. KAME moved
it in rev 1.189 of their ip6_input.c. This also allows rdr or nat
to ::1 in pf.
bug report and test camield@
ok mikeb@; go for it deraadt@
|
|
|
|
ok deraadt@
|
|
build stuff.
ok deraadt@
|
|
`ESC \', as supported by xterm; some third-party software such as
ncmpcpp rely upon this.
Noticed by dcoppa@, based on a draft diff by nicm@; ok deraadt@
|
|
Configure script.
ok deraadt@
|
|
filling gaps found by checking the MANUAL DOMAIN chapter in mdoc.samples(7).
While here, fix lots of minor issues.
feedback and ok jmc@;
tree is locked, but ok to commit this one from deraadt@
|
|
The basic analysys is correct, however, the problem in this case is that by forcing
softdept to synchornously flush everything across *all* softdep filesystems we cause a
huge performance problem when we take a 3 second pause and slam everything synchronously.
the right way to fix this is to fix the speedup_softdep code, not make the filesystem
go synchronous when we hit a limit - if we are doing that we may as well not run softdep
it will be faster.
ok deraadt@
|
|
thread context, this used to work but loses bigtime with gcc4.
ok drahn@ deraadt@
|
|
|
|
not the same as it was in 4.9 or earlier. In either case you can turn
it on again using sysctl kern.pool_debug=1 -- but if POOL_DEBUG is not
enabled you only get a subset of the strict checks.
ok kettenis miod beck
|
|
move that out of i386_set_threadbase(), and have clone() pass NULL
to fork1() for the child func argument so that it gets the child
proc pointer.
Report and verification by pirofti@, heavy lifting by matthew@
|
|
(doubtful) but since files tend to move from one set to another sysmerge
would end up tagging them as obsolete. I see no way to fix this...
req. by and ok deraadt@, ok landry sthen@
|
|
It's already in pfvar.h
OK mcbride@
|
|
|
|
unmap handling.
|
|
without growing it in pfsync_state too.
to keep the wire format compat this uses some of the pad bytes to send
all the state flags on the wire as well as maintaining the old state_flags
field. after 5.0 we'll deprecate the original field and only use the new
one.
discussed with mcbride and deraadt and based on a diff from deraadt.
tested against an "old" pfsync locally.
ok mcbride@ henning@ deraadt@
|