summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-09-29fix conflicts and merge in local changes to perl 5.10.0Todd C. Miller
2008-09-29import perl 5.10.0 from CPANTodd C. Miller
2008-09-29more updates on which args do and do not mix (doc only, this time):Jason McIntyre
- list -f in the -cStu "exclusive group" (we already document that -f overrides these options) - note that our implementation of -f differs from posix - -k and -u do not override each other: those options are not used together ok sobrado
2008-09-29fix log option with filter rulesReyk Floeter
2008-09-29also log the label if available for the matching rule node (like theReyk Floeter
URL filter category etc.)
2008-09-29spacingReyk Floeter
2008-09-29Change parsing of comments in external rule files. The hash mark mayReyk Floeter
appear in URLs (eg. /index.html#anchor), so only allow full-line comments indicated by a hash mark # at the beginning of a line.
2008-09-29allow to load expect, filter, log, and remove keys from external filesReyk Floeter
just containing on key per line. this allows easier use of URL white/blacklists from external sources.
2008-09-29Correct the logic when matching prefixes. This solves issues where IPv6Claudio Jeker
prefixes where matched on a simple deny from any prefix 0.0.0.0/0 rule. OK henning@
2008-09-29Use large pic asm for access to errno (needed for pie). Originally fromKurt Miller
drahn@ but tweaked to use same scratch reg as PIC_PROLOGUE. okay miod@ drahn@
2008-09-29enable JMicron Ethernet (jme/jmphy)Jonathan Gray
2008-09-29Use pools to do allocations for all sizes <= PAGE_SIZE.Artur Grabowski
This will allow us to escape the limitations of kmem_map. At this moment, the per-type limits are still enforced for all sizes, but we might loosen that limit in the future after some thinking. Original diff from Mickey in kernel/5761 , I massaged it a little to obey the per-type limits. miod@ ok
2008-09-29sort tokens for better readabilityReyk Floeter
2008-09-29allow to listen on a port range for redirections. this fixesReyk Floeter
stickyness with web applications that cannot do the clustering on their own and require stickyness with HTTP to HTTPS migration. this is required in many cases; it is a true fact that we cannot always fix the backend application in the real world. Tested and requested by many
2008-09-29Refactor code that handles the kroute interfaces and make it possible toClaudio Jeker
learn new interfaces during runtime. This should solve the issue with reloads failing when interfaces where created during runtime. OK norby@
2008-09-29Add a -mno-ieee option to disable ieee mode; ok millert@Miod Vallat
2008-09-29account for data expansion due to emulation in AUDIO_GET{I,O}OFFSJacob Meuser
ioctls. ok ratchov@
2008-09-28Always include machine/cpu.h and remove i82489reg.h/i82489var.h.Brad Smith
ok kettenis@
2008-09-28Remove "XXX for now" NLAPIC define. Already provided via lapic.h.Brad Smith
ok kettenis@
2008-09-28ntpd does not require you to run rdate -n before it -- it notices such anTheo de Raadt
event. so don't use the word "before" .. and leave the mention ambigious ok henning
2008-09-28Ansify function declarations for gif(4).Joel Sing
ok claudio@
2008-09-28Clear the PF state key before an IP packet exits a gif(4) tunnel, in orderJoel Sing
to prevent state key mismatches. ok henning@
2008-09-28Teach PF pf_print_state_parts() about IPv4 in IP and IPv6 in IPJoel Sing
encapsulation. Decapitalise the 'v' in ICMPv6 whilst here. ok henning@
2008-09-28initialize the ether_vtag field like the rest of the packet headerChristian Weisgerber
2008-09-28unbreak the tree.Damien Bergamini
pointed out by deraadt@, Markus Peloquin sorry guys.
2008-09-28Update 12160 firmware: 10.04.32 -> 10.04.41. From mjacob via FreeBSD.Kenneth R Westerback
Tested & ok kettenis@
2008-09-27- missing documentation bits for trusted-usersMartynas Venckus
- spamd(8) configuration now lives in /etc/mail, too - sort some items that were out of order ok jmc@. no objections millert@
2008-09-27Initial implementation of PMKSA caching and pre-authentication.Damien Bergamini
This will be required for future WPA-Enterprise support (802.1X). Add ieee80211_needs_auth() function (not implemented yet) to notify the userland 802.1X PACP machine when an 802.1X port becomes enabled (that is after successfull 802.11 Open System authentication). Add SIOCS80211KEYRUN and SIOCS80211KEYAVAIL ioctls so that the PACP state machine can kick the 802.11 key state machine and install PMKs obtained from 802.1X (pre-)authentication. Enable SHA-256 based AKMPs by default while I'm here (TGw). This uses SHA-256 for key-derivation (instead of SHA1), AES-128-CMAC for data integrity, and AES Key Wrap for data protection of EAPOL-Key frames. An OpenBSD AP will always advertise this capability and an OpenBSD STA will always prefer SHA-256 based AKMPs over SHA1 based ones if both are supported by an AP.
2008-09-27Add some inline functions to test the presence of optional 802.11Damien Bergamini
header fields (Sequence Control, Address 4, QoS Control, +HTC) and use them where appropriate. Add ieee80211_get_qos() inline function to extract the QoS control field of an 802.11 header instead of duplicating the same scary code everywhere (the location of this field depends on the presence of an Address 4 field). Export ieee80211_up_to_ac() so that drivers can select the access category to use based on the TID subfield of the QoS Control field. Define more QoS-related bits for the RSN Capabilities field of RSN IE (will be used later).
2008-09-27syncMiod Vallat
2008-09-27remove extra '#'. ok millert@, jmc@Martynas Venckus
2008-09-27remove a debug printf that is no longer requiredJonathan Gray
2008-09-26Add a man page for atphy(4).Brad Smith
2008-09-26Attach agp(4) to the Intel Q35 integrated video.Mike Belopuhov
Tested on ASUS P5E-VM DO motherboard. ok oga
2008-09-26add [-s socket] to usage();Jason McIntyre
2008-09-26Remove PICFLAG= setting, it is overridden in bsd.prog.mk. tested on landisk.Dale Rahn
Caught and ok kurt@
2008-09-26allow to add an additional restricted control socket for trap sendingReyk Floeter
only (not even show commands). this allows to place a socket for traps in another daemon's chroot. (based on restricted socket support from bgpd)
2008-09-26support proxies with password.Marc Espie
adapted from a patch by nikns, with tweaks by millert. took forever to test for real... okay miod@, henning@, millert@
2008-09-26Add drivers for the JMicron JMC250/JMC260 Ethernet controllersJonathan Gray
and JMicron JMP202/JMP211 Ethernet PHYs. Written by Pyun YongHyeon for FreeBSD, ported to DragonFlyBSD by Sepherosa Ziehau and then ported to OpenBSD by me. Thanks once again to JMicron for supplying hardware and information which made this possible. Some cleanup still needs to be done, and checksum offload needs to be sorted out, but the driver otherwise seems to work great. Comitted over a JMC250 card.
2008-09-25regenBrad Smith
2008-09-25Add the id for the Atheros F2 PHY.Brad Smith
2008-09-25Add a driver for the Attansic F1 PHY.Brad Smith
From FreeBSD via kevlo@
2008-09-25Fixed memory leak bug during scope evaluationJordan Hargrave
Removed unused functions ok marco@
2008-09-25remove dead stores.Charles Longeau
Found by LLVM/Clang Static Analyzer. ok jakemsr@
2008-09-25remove dead stores and newly created unused variable.Charles Longeau
Found by LLVM/Clang Static Analyzer. ok brad@
2008-09-25remove dead store.Charles Longeau
Found by LLVM/Clang Static Analyzer. ok brad@ krw@
2008-09-25remove dead store.Charles Longeau
Found by LLVM/Clang Static Analyzer. ok claudio@
2008-09-25do not hardcode the editor name in the message displayed by "-r"Igor Sobrado
when there are no files to recover as this flag is used by ex(1) and view(1) too. problem found by jsing@, Sven Verdoolaege did some suggestions to improve its portability. diff committed upstream. ok jsing@
2008-09-25Initialize 'ssc' to NULL since we test it later. Shouldn't ever beKenneth R Westerback
NULL at the point of test unless the device list is confused, but be consistantly paranoid if we're going to be paranoid.
2008-09-25Add 'default:' stanza to switch() to make clear that 'status' is alwaysKenneth R Westerback
initialized. From NetBSD. "won't hurt" miod@.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-13 04:46:28 +0000