summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-11-08/usr/share/compile -> relink; ok tbJason McIntyre
2017-11-08For IPcomp we need to load explicit ESP-flows for the IPIP or IPCOMPPatrick Wildt
tunneled packets, otherwise every packet between the gateways will be sent into the tunnel (e.g. ICMP, too). ok markus@
2017-11-08Since r1.41 the extensions are included in the CSR. Thus ca_request()Patrick Wildt
already sets the extension values and returns. ca_sign() re-uses the information to write out the extension file. Since ca_request() uses strings stored on the stack, on return the pointers to those strings will be unusable. To fix this, strdup() the strings passed ca_setenv() so we can re-use them in another scope. And free() them when we clear the environment in ca_clrenv(). Initial report and diff from Andrei-Marius Radu. ok markus@
2017-11-08Fixup what looks like a merge mistake; no functional changeMike Belopuhov
2017-11-07Test more variations of TCP packets in the scapy splicing tests.Alexander Bluhm
Delay connect and SYN+ACK to splice data into a connecting socket.
2017-11-07Prevent a potential stack buffer overrun when a urtwn(4) deviceStefan Sperling
reports more than 3 bulk-out endpoints. Problem found by Pierre Pronchery (khorben) during code inspection. ok mpi@ kevlo@
2017-11-07Fix spelling: bet -> net from Scott Bennett, thanksTheo Buehler
2017-11-07Convert all the fields of {ah,esp,ipcomp}stat to uint64.Visa Hankala
This is a preliminary step for using percpu counters with the data. OK mpi@
2017-11-07Serialize access to the IPv6 reassembly queue with a mutex.Visa Hankala
This lets the code run without KERNEL_LOCK() and NET_LOCK(). In addition, this patch reorganizes a part of the code, to move some of the memory release operations outside the critical section. Input and OK mpi@, OK florian@, an earlier version OK bluhm@
2017-11-07Revert previous, it breaks ports/infrastructure/bin/resolve-lib (I think)Antoine Jacoutot
with at least python and ruby. ok naddy@
2017-11-07Add support for client-specific directories (named after the client address)Jeremie Courreges-Anglas
tftpd -i will look up the requested path the directory named after the client's IP address. For read requests, if the file is not found, there's a fall back to its root directory. From Jan Klemkow with input and tweaks from at least jmc@, bluhm@, deraadt@, sthen@, semarie@ and myself. ok bluhm@
2013-01-03Reengineer the socket splicing regression tests:Alexander Bluhm
- Move the tests from splice to new sosplice directory for consistent naming. - Split the API tests and the TCP splicing tests into separate directories. - Create some tests for the upcoming UDP splicing. - Tests can be run in obj directories now. - The API tests can run both on a local and on a remote machine now. - Fix the forking TCP tests which splice and read or write simultaneously. - Bunch of little fixes for races in the tests. - Deduplicate code, move checks into common functions.
2017-11-07prefill with silence the buffer where cmap_copy() stores samplesAlexandre Ratchov
rather than the client buffer. Fixes uninitialized data being treated as recorded samples when resampling or format conversions are involved but no mono->stereo conversion is used.
2017-11-07prefill with silence the buffer where cmap_copy() stores samplesAlexandre Ratchov
rather than the file buffer. Fixes initialized data being treated as recorded samples when resampling or format conversions are involved but mono->stereo conversion is disabled.
2017-11-07Remove unused debug macro.Martin Pieuchot
2017-11-07typo in previousMike Larkin
2017-11-07comment function vm_checkpermMike Larkin
2017-11-07document how ospfd interacts with carpremi
improvement from jmc@ ok phessler@ jca@ benno@ for previous version ok jmc@
2017-11-07Format string fix from upstream.Kevin Lo
ok millert@
2017-11-07Tweak the man page and warning message, revert the comma.YASUOKA Masahiko
2017-11-06Use %s and __func__ in DPRINTF() to reduce false positive with grep(1).Martin Pieuchot
ok kettenis@, dhill@, visa@, jca@
2017-11-06Use the symtab's sh_link to get the string table section.Martin Pieuchot
This is technically more correct than looking for ".strtab" and allows us to get rid of unportable ELF_STRTAB. We can also get rid of the hack for some incorrect ELF files since we no longer try to apply relocations for the string table. From Mark Johnston, markj@FreeBSD
2017-11-06Add lease declaration 'epoch' to hold the time() when a lease isKenneth R Westerback
received. Set it in packet_to_lease() and preserve it in apply_defaults(). Otherwise not used, documented or printed in lease database yet.
2017-11-06Add format 't' to parse_decimal() for signed 64-bitKenneth R Westerback
integers.
2017-11-06move a function declaration, so the whole net80211 stack can disable wep or wpaPeter Hessler
OK stsp@
2017-11-06typo, surprised nobody noticed yetMarc Espie
2017-11-06remove ctf_type declaration no longer needed since -r1.33Jasper Lievisse Adriaanse
ok mpi@
2017-11-06Modify "machine video" command not to list mode when chaning video mode.YASUOKA Masahiko
diff from Klemens Nanni
2017-11-06Use a variable for /usr/share/relinkRobert Peichaer
OK tb@
2017-11-06Call CD-ROM devices cdN instead of hdN. Also select the booted deviceYASUOKA Masahiko
properly when the system is booted from CD-ROM. Initial diff from FUKAUMI Naoki.
2017-11-05ifconfig <if> giftunnel was deprecated in 2001, it's never too late toSebastian Benoit
remove it ok phessler@ beck@
2017-11-05Add minimal DHCP support to vmd's built-in DHCP/BOOTP server.Reyk Floeter
This fixes "local interface" mode with the udhcpc client. udhcpc, a DHCP client that is used by busybox and many embedded Linux distributions, does not support BOOTP which is the predecessor and a valid subset of DHCP. OK mlarkin@, Carlos Cardenas
2017-11-05Changing nwid on a wifi network means it is a new network, so clear thePeter Hessler
WPA and WEP configuration. OK pirofti@ stsp@ sthen@
2017-11-05Mention that "reload" is disabled; ok jmc@Jeremie Courreges-Anglas
2017-11-05Disable config reload, ospf6d just exits on reload with simple setups.Jeremie Courreges-Anglas
And fixing this doesn't appear trivial. Discussed with a bunch at p2k17, ok phessler@ denis@ benno@
2017-11-05Kill dead assignement.Jeremie Courreges-Anglas
2017-11-05Fix some comments and dependencies in this regress test.Alexander Bluhm
2017-11-05Finish off pr_drain functions, they haven't been used since 2006.Florian Obser
OK mpi
2017-11-05Insert a rule into pf regress anchor that passes all packets withoutAlexander Bluhm
state. The default pf rules interfere with this scapy test.
2017-11-05Fix http server selection from the list of mirrors. This broke inRobert Peichaer
r1.989 in a way that when selecting a mirror from the list by entering a number, the selection was not actually set as answer. Noted by and OK tb@
2017-11-05Remove the ':' at the beginning of ksh.kshrc.Robert Peichaer
prodded by Raf Czlonka OK tb@
2017-11-05Consolidate lib.so.*.a, ld.so.a and the kernel relink kit intoRobert Peichaer
one location under /usr/share/relink. Be more specific in src/etc/rc reorder_libs() what filesystems need r/w remount and ensure that their mount state is restored. Idea and positive feedback from deraadt@ OK aja@ tb@
2017-11-05Set the core's own group mask when scheduling work, to receive workVisa Hankala
from the intended group.
2017-11-05Handle failure.Visa Hankala
2017-11-05slight cleanupVisa Hankala
2017-11-05Add a function for getting the current core's hardware identifier.Visa Hankala
For now, the kernel does enforce one-to-one mapping between logical cpuids and hardware coreids, but the reliance on that should be removed eventually.
2017-11-05Remove unmaintained debug code.Visa Hankala
2017-11-05syncJeremie Courreges-Anglas
2017-11-04Revert recent changes to unbreak ports/net/sambaJeremie Courreges-Anglas
While it is not clear (to me) why that ports ends up with corrupted shared libs, reverting those changes fixes the issue and should allow us to close p2k17 more smoothly. Discussed with a bunch, ok ajacoutot@ guenther@
2017-11-04Don't keep blindly chugging along when receiving an unexpected imsg,Florian Obser
something is seriously wrong.