summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-09-27fix passing explicit stage filesKlemens Nanni
This fixes installboot regress on powerpc64. The exact same diff already landed for macppc; efi also has the same fix for md_init() but without the string handling cleanup that entails. macppc_installboot.c r1.6 "Fix passing explicit stage files": Using `stage1' leads to a bit more cleanup since early MI installboot.c handles `-r', i.e. write_filesystem() no longer has needs to do the fileprefix() dance itself. OK gkoehler
2022-09-27- no more /usr/include/objc; confirmed by miodJason McIntyre
- add /var/agentx; text from martijn
2022-09-27typing ^C and seeing "terminated by signal %d" is so ... I don'tTheo de Raadt
have the words ok florian
2022-09-27we are now working on 7.2-currentTheo de Raadt
2022-09-26openssh-9.1Damien Miller
2022-09-26For framebuffers that don't start on a page boundary, we need to allowMark Kettenis
mapping of all the pages used by the framebuffer, even those that are only used partially. Adjust the check in simplefb_wsmmap() to allow that. While there, also make sure we use a (rounded down) page aligned address base address for the physical address we return. Fixes X on the 16" Macbook Pro. ok patrick@, deraadt@
2022-09-26Fix a use after free in case mta_tls_init fails.Martijn van Duren
Found the hard way by renaud <at> allard <dot> it OK eric@, gilles@, millert@
2022-09-26Regenerate usbdevs{.h,_data.h} for Wacom One S (CTL-472)Stefan Hagen
2022-09-26uwacom(4): Support for Wacom One S (CTL-472)Stefan Hagen
2022-09-26Drop incomplete archs lists from wsmoused(8) commentKlemens Nanni
OK deraadt
2022-09-26Hide error messages while extracting Apple firmware. Depending on theMark Kettenis
model there might be no firmware and we want to avoid confusing users with WARNING messages about patterns that were not matched. ok deraadt@
2022-09-25Document savecore_flagsKlemens Nanni
OK jmc deraadt
2022-09-25add /etc/rpki/Jason McIntyre
tweak/ok claudio
2022-09-25Give mfii(4) firmware more time to transition out of UNDEFINED state.Stefan Sperling
Prevents occasional failure to recover from firmware FAULT state where the driver gave up too early: mfii0: firmware stuck in state 0 ok deraadt@
2022-09-24ascii_load_sockaddr: Remove old IPv6 address parsing for envelope files.Todd C. Miller
IPv6 addresses have been formatted as "[address]" in envelope files for years. This was supposed to be removed after the 6.6 release but got forgotten. Noticed by kn@, OK deraadt@ kn@
2022-09-24rpki-client 8.1Claudio Jeker
2022-09-24OpenBGPD 7.7Claudio Jeker
2022-09-24There are time zones that have minute offsets, display thoseFlorian Obser
correctly. Pointed out by pjanzen@. To display the offset, use ISO 8601, as suggested by David Goerger. While here check if tm->tm_gmtoff changed which probably means that we moved in or out of daylight savings time. Input & OK millert, deraadt
2022-09-24macro tweaks; from josiah frentsosJason McIntyre
ok deraadt
2022-09-24macro tweaks; from josiah frentsosJason McIntyre
ok deraadt
2022-09-24Sync with https://github.com/JodaOrg/global-tzTodd C. Miller
Major changes: o Palestine DST transitions are now Saturdays at 02:00.
2022-09-24disable POOL_DEBUG for releaseJonathan Gray
ok deraadt@
2022-09-24add SH-B0 0x00000f50 socket 940 family 0Fh OpteronJonathan Gray
we already had SH-B0 0x00000f40 socket 754 family 0Fh Athlon 64 SH-B0 is part of amd64_errata_set8[]. Used for: Errata 89: Potential Deadlock With Locked Transactions ok deraadt@
2022-09-24Adjust dummy rde_generate_updates() to the new prototype.Claudio Jeker
2022-09-23Fix detection of duplicate sticky-address in pf.conf parser.Alexander Bluhm
reported to FreeBSD by Franco Fichtner; from Kristof Provost
2022-09-23Sync to libunbound 1.16.3Florian Obser
2022-09-23Xr to correct man page; from Josiah Frentsos, thanks!Florian Obser
2022-09-23POSIX timzone specs may contain '.' so only reject names containing '../'.Todd C. Miller
Noted by pjanzen@ with input from deraadt@.
2022-09-23Since tzset(3) ignores arbitrary files, we no longer need rpathFlorian Obser
and can depend on the /usr/share/zoneinfo bypass. OK mestre, millert, deraadt
2022-09-23Don't depend on RTLABEL_LEN but instead define our own ROUTELABEL_LEN.Claudio Jeker
With this bgpd.h no longer depends on net/route.h OK tb@
2022-09-23Implement a special update generator for add-path send all.Claudio Jeker
The generic add-path code up_generate_addpath() reevaluates everything since this is the simplest way to select the announced paths. For add-path all this is overkill since there is no dependency between prefixes and so individual prefixes can be handled more efficently. Extend rde_generate_updates() to pass the current newbest and oldbest prefixes (for the selected best path) but now also include newpath and oldpath (which is the prefix that is added/removed/modified). If newpath or oldpath is set then a single prefix was altered and up_generate_addpath_all() can just remove or add this prefix. If newpath and oldpath are NULL than the full list based on newbest needs to be inserted and any old path/prefix removed in the process. This improves update generation performance on big route collectors using add-path all substantially. OK tb@
2022-09-23merge unbound 1.16.3Stuart Henderson
2022-09-23Don't hardcode disk major device types inside DEBUG block. UseKenneth R Westerback
findblkname() and DISKUNIT(). Allows all block devices, not just sd* and vnd* to generate useful names in DEBUG output. Cluebat by deraadt@
2022-09-23Delete unused variables originally come from mvme88k.Kenji Aoyama
2022-09-23only call printf the first time amd64_errata() is calledJonathan Gray
it may later be used from a resume path when we don't want to print same change as amd64 amd64errata.c 1.11 by robert ok robert@ deraadt@
2022-09-22remove dup line; from j@bitminerTheo de Raadt
2022-09-22use the always serializing RDTSCP instruction in tsc and usertc if availableRobert Nagy
tweaks from cheloha@; ok deraadt@, sthen@, cheloha@
2022-09-22Call amd64_errata() from cpu_fix_msrs() instead of identifycpu() so thatRobert Nagy
on resume, the errata is re-applied. In addition make amd64_errata() print the information about the applied errata only once for the first CPU. input from jsg@ and deraadt@, ok deraadt@
2022-09-21Distinguish between retransmit ok and nothing to retransmit. This makesTobias Heider
sure ikes_retransmit_response events don't also increase the ikes_msg_rcvd_busy counter. ok markus@
2022-09-21Fix typo. From AlexanderStohr via github PR#343.Darren Tucker
2022-09-21The values for fib_priority are OS dependent. To help portability moveClaudio Jeker
the RTP_BGP and similar defines all into kroute.c and export them via kr_default_prio() and kr_check_prio(). OK tb@
2022-09-21tzset: ignore TZ if it contains an absolute path or issetugid().Todd C. Miller
Reading time zone files from user-controlled paths can result in pledge(2) or unveil(2) violations. We also ignore files that contain a '.' character to avoid paths containing ".." or hidden files. Work with and OK deraadt@
2022-09-21Tweak symbols test in such a way that it would have caught the recentTheo Buehler
Symbols.list mistake: undefine aliases (except _cfb block ciphers which are aliases for historical reasons). Use -Wl,--no-allow-shlib-undefined.
2022-09-21Adjust pathid_assign() to be much faster in the common case.Claudio Jeker
Use a per peer path_id_tx to assign to paths received from none add-path enabled peers. This skips two extra walks of the RIB prefix list and is a big speed-up when there are many regular sessions. If the session uses add-path recv then the old way of assigning random path_ids needs to be used. With input and OK tb@
2022-09-21Revert UVM_VNODE_CANPERSIST removal, it exposes an issue on arm64.Martin Pieuchot
Found the hardway by miod@ and deraadt@.
2022-09-21Default request message body size should be 0.YASUOKA Masahiko
ok claudio
2022-09-21Update awk to Sep 12, 2022 version.Todd C. Miller
Fix undefined behavior and a use-after-free in cat().
2022-09-20Update libexpat to 2.4.9. This fixes CVE-2022-40674. Relevant forAlexander Bluhm
OpenBSD are security fixes #629 #640 and other changes #610 #643. No library bump necessary. OK deraadt@
2022-09-20Split out handling of cpu family specific MSRs from cpu_init_msrs()Robert Nagy
to a separate function that gets called after identifycpu() so that we have the required information to handle the correct MSRs for each cpu. Additionally, move the handling of the DE_CFG_SERIALIZE_LFENCE and IA32_DEBUG_INTERFACE_LOCK MSRs out of identifycpu() to the new function so that they get set again after a suspend/resume cycle as well, which in fixes TSC sync failures. discussed with and input from deraadt@, mlarkin@
2022-09-20drm/amd/amdgpu: skip ucode loading if ucode_size == 0Jonathan Gray
From Chengming Gui 985a5d3d491d558f785b77cc5b86837bfa408587 in linux 5.15.y/5.15.69 39c84b8e929dbd4f63be7e04bf1a2bcd92b44177 in mainline linux