summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-04-17Remove now unused dh_prn.cTheo Buehler
2023-04-17Drop dh_prn.cTheo Buehler
2023-04-17Move DHparam_print_fp() next to DHparam_print()Theo Buehler
As usual with the fp suffix, the former wraps the latter with a file BIO. There is no reason for this function to be in a separate file.
2023-04-17remove bad Pp;Jason McIntyre
(sorry, otto, for not spotting in the updated diff)
2023-04-17fix a macro and tweak punctuation;Jason McIntyre
2023-04-17drm/i915: Split icl_color_commit_noarm() from skl_color_commit_noarm()Jonathan Gray
From Ville Syrjala 726825297dd6aaa2d91daf7c1c2fd030859cc6cb in linux-6.1.y/6.1.24 76b767d4d1cd052e455cf18e06929e8b2b70101d in mainline linux
2023-04-17drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLORJonathan Gray
From Ville Syrjala 64244a900ddff4abd4c894dcfa9ea7df898ad1eb in linux-6.1.y/6.1.24 05ca98523481aa687c5a8dce8939fec539632153 in mainline linux
2023-04-17drm/i915/dp_mst: Fix payload removal during output disablingJonathan Gray
From Imre Deak 1297278ce23977853afeac7bfb65e42450a722dd in linux-6.1.y/6.1.24 eb50912ec931913e70640cecf75cb993fd26995f in mainline linux
2023-04-17drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload()Jonathan Gray
From Imre Deak 0c64d72fd3f21ac9d0da186809394d9593090ce7 in linux-6.1.y/6.1.24 e761cc20946a0094df71cb31a565a6a0d03bd8be in mainline linux
2023-04-17drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 resetJonathan Gray
From Tim Huang 62de38c8201d853b130fc54ddbfab748180053e2 in linux-6.1.y/6.1.24 e11c775030c5585370fda43035204bb5fa23b139 in mainline linux
2023-04-17drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resumeJonathan Gray
From Alex Deucher 73ca74fc7ab6c1679c3b2720579c0c20b73a9764 in linux-6.1.y/6.1.24 2a7798ea7390fd78f191c9e9bf68f5581d3b4a02 in mainline linux
2023-04-17drm/amd/display: Clear MST topology if it fails to resumeJonathan Gray
From Roman Li 245525543f48cd9eabd2964d8931043e9e3c31cf in linux-6.1.y/6.1.24 3f6752b4de41896c7f1609b1585db2080e8150d8 in mainline linux
2023-04-17drm/i915: fix race condition UAF in i915_perf_add_config_ioctlJonathan Gray
From Min Li 240b1502708858b5e3f10b6dc5ca3f148a322fef in linux-6.1.y/6.1.24 dc30c011469165d57af9adac5baff7d767d20e5c in mainline linux
2023-04-17drm/i915: Fix context runtime accountingJonathan Gray
From Tvrtko Ursulin 4e29fb89f771316caed9e4d166213b10dd49eb2e in linux-6.1.y/6.1.24 dc3421560a67361442f33ec962fc6dd48895a0df in mainline linux
2023-04-17fix double wordJonathan Gray
2023-04-17Oops, ramdisk case should be -fcf-protection=noneTheo de Raadt
spotted by brynet
2023-04-17Enable Indirect Branch Tracking (IBT) for the kernelJonathan Gray
endbr64 (f3 0f 1e fa) is placed at valid targets of an indirect jmp or call. A nop on older machines. When IBT is enabled, an indirect jmp or call with no endbr will trigger a control protection trap. IBT is present on Intel Tiger Lake (Core gen 11) and later. with and ok deraadt@
2023-04-17For future userland IBT, the sigcode needs to start with a endbr64.Theo de Raadt
This is simpler than clearing the cet_u bits in the kernel. ok guenther, kettenis
2023-04-17The bootblocks are 32-bit binaries which use the ENTRY() macros which nowTheo de Raadt
include endbr64 macros. That's not going to work, so use the simple method of -Dendbr64= to remove them from the instruction stream. ok kettenis guenther
2023-04-17IDTVEC_NOALIGN() was the incorrect way to create a label in two places,Theo de Raadt
use GENTRY() instead. Also add two endbr64 which cannot be supplied by macros ok guenther
2023-04-17Add endbr64 instructions to most of the ENTRY() macros.Theo de Raadt
The IDTVEC() and KIDTVEC() macros also get a endbr64, and therefore we need to change the way that vectors are aliased with a new IDTVEC_ALIAS() macro. with guenther, jsg
2023-04-16compile regular kernels with -fcf-protection=branch, and ramdisks withTheo de Raadt
-fcf-protection=none, regardless of what the compiler default is. -fcf-protection=branch puts endbr64 instructions on functions which could be reached indirectly. ok guenther kettenis
2023-04-16Fix previous: add a missing andTheo Buehler
2023-04-16clockintr: add shadow copy of running clock interrupt to clockintr_queueScott Soule Cheloha
cq_shadow is a private copy of the running clock interrupt passed to cl_func() during the dispatch loop. It resembles the real clockintr object, though the two are distinct (hence "shadow"). A private copy is useful for two reasons: 1. Scheduling operations performed on cq_shadow (advance, cancel, schedule) are recorded as requests with the CLST_SHADOW_PENDING flag and are normally performed on the real clockintr when cl_func() returns. However, if an outside thread performs a scheduling operation on the real clockintr while cl_func() is running, the CLST_IGNORE_SHADOW flag is set and any scheduling operations requested by the running clock interrupt are ignored. The upshot of this arrangement is that outside scheduling operations have priority over those requested by the running clock interrupt. Because there is no race, periodic clock interrupts can now be safely stopped without employing the serialization mechanisms needed to safely stop periodic timeouts or tasks. 2. &cq->cq_shadow is a unique address, so most clockintr_* API calls made while cl_func() is running now don't need to enter/leave cq_mtx: the API can recognize when it is being called in the midst of clockintr_dispatch(). Tested by mlarkin@. With input from dlg@. In particular, dlg@ expressed some design concerns but then stopped responding. I have changes planned to address some of the concerns. I think if we hit a wall with the current clockintr design we could change the allocation scheme without too much suffering. I don't anticipate there being more than ~20 distinct clock interrupts.
2023-04-16if (actually... when) the compiler is flipped to do BTI/ENDBR by default,Theo de Raadt
the install media would grow too much, so use the same strategy as we for stack protector and other things: disable them, just on the install media ok kettenis
2023-04-16Dump (leak) info using utrace(2) and compile the code always inOtto Moerbeek
except for bootblocks. This way we have built-in leak detecction always (if enable by malloc flags). See man pages for details.
2023-04-16Add a -u label option to print selected utrace records, used by upcomingOtto Moerbeek
malloc (leak) dump fucntion. ok semarie@
2023-04-16Garbage collect the now unused obfuscating macro string_stack_free()Theo Buehler
2023-04-16Inline the three uses of string_stack_free()Theo Buehler
sk_OPENSSL_STRING_pop_free() is much more explicit and isn't that much more complicated. x509_util.c can also use it directly... No binary change
2023-04-16Remove the now unused vpm_int.hTheo Buehler
2023-04-16x509_vfy.c and x509_vpm.c don't need vpm_int.h anymoreTheo Buehler
2023-04-16Move X509_VERIFY_PARAM_st from vpm_int.h to x509_local.hTheo Buehler
2023-04-16Fix (and simplify) link speed reporting.Mark Kettenis
ok jsg@
2023-04-16Provide EVP methods for SHA3 224/256/384/512.Joel Sing
ok tb@
2023-04-16Provide EVP methods for SHA512/224 and SHA512/256.Joel Sing
ok tb@
2023-04-16Bounds check mdlen that is passed to sha3_init().Joel Sing
While here, use KECCAK_BYTE_WIDTH instead of hardcoding the value.
2023-04-16Add PT_GNU_PROPERTY define.Mark Kettenis
ok deraadt@
2023-04-16vmd(8): correct comment in vioraw, cleanup formatting.Dave Voutila
Comment incorrectly mentioned returning sectors when this function returns bytes; the logic in virtio.c computes the number of 512 byte sectors after calling virtio_raw_init. While here, adjust the formatting of return's to match the rest of vmd. No functional change.
2023-04-16vmd(8): clean up fd closing in vmm process.Dave Voutila
Some mild tidying of fd closing in the vmm process in prep for landing parts of my fork+exec diff. With input from guenther@ on the nuances of if/when EINTR may happen in a call to close(2). ok mlarkin@
2023-04-16Add support for the PCIe controller found on M2 Pro/Max SoCs. While theMark Kettenis
bindings are still preliminary I don't exepect any substantial changes that would affect the driver. Hopefully the bindings will end up officially approved before OpenBSD 7.4 gets released. ok patrick@
2023-04-16Shuffle ext_cmp() and ext_list_free() up a bitTheo Buehler
2023-04-16Remove unnecessary prototypes in the middle of the codeTheo Buehler
In addition, ext_cmp() was already prototyped earlier...
2023-04-16Use more usual version of inlined nitems(). No binary change.Theo Buehler
2023-04-16Fix comment formatting and grammar, drop usless and outdated commentTheo Buehler
2023-04-16Remove now empty/unused ext_dat.hTheo Buehler
2023-04-16Merge ext_dat.h back into x509_lib.cTheo Buehler
There is no point in having this in a separate internal header. discussed with jsing
2023-04-16Too many ACPI implementations advertise serial ports that aren't actuallyMark Kettenis
implemented. This leads to hangs when we run "ttyflags -a" in /etc/rc. Add the same probe that we have in the ISA version of the driver to make sure the port is actually there. ok patrick@
2023-04-16Add no-op implementations of the WSDISPLAYIO_GVIDEO and WSDISPLAYIO_SVIDEOMark Kettenis
ioctls. Everything we need from them is handled by wsdisplay(4) already, but we need to handle them here to signal that we actually implement burner support. ok tb@, tobhe@
2023-04-16Make enabling the BTI feature a per-pmap thing by storing the ATTR_GP bitMark Kettenis
in a new pm_guarded member of struct pmap and using this member to add the bits to the PTEs ok deraadt@
2023-04-16Clear BTYPE bits when setting up a signal handler and when handling aMark Kettenis
PT_CONTINUE ptrace(2) request. Otherwise we would trap if userland was interrupted at a point where it is doing an indirect branch that has set the bits but before it has executed the BTI instruction at the branch target. The PT_SETREGS request may need similar treatment, at least when the PC is changed. But Linux doesn't do this and debuggers might want full control over the BTYPE bits. So leave this alone for now. ok guenther@