summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-12-29fix sign-while-creating modeMarc Espie
2013-12-29when showing other hostkeys, don't forget Ed25519 keysDamien Miller
2013-12-29- Verify that the FPU exception flags weren't clobbered as required by C99.Martynas Venckus
- Additionally, test _setjmp and sigsetjmp as implementations are different.
2013-12-29don't forget to load Ed25519 certs tooDamien Miller
2013-12-29don't refuse to load Ed25519 certificatesDamien Miller
2013-12-29allow deletion of ed25519 keys from the agentDamien Miller
2013-12-29to make sure we don't omit any key types as valid CA keys again,Damien Miller
factor the valid key type check into a key_type_is_valid_ca() function
2013-12-29Add MLINK for db_vprintf(9)Philip Guenther
2013-12-29Add db_vprintf() and indicate that db_v?printf() are in <ddb/db_output.h>Philip Guenther
2013-12-29correct comment for key_drop_cert()Damien Miller
2013-12-29correct comment for key_to_certified()Damien Miller
2013-12-29allow ed25519 keys to appear as certificate authoritiesDamien Miller
2013-12-29Add a regression test to verify that the FPU control word state isMartynas Venckus
preserved by setjmp. Currently under REGRESS_FULL as this fails on certain archs.
2013-12-29regenMiod Vallat
2013-12-29Intel NM70Miod Vallat
2013-12-28The mips partition table in the volume header uses 512-byte logical units,Miod Vallat
not sectors; don't multiply by the sector size to get the proper disk offsets. This will let install.iso be built with the OpenBSD label at the expected location, instead of within the ffs filesystem; we had been lucky enough the area being overwritten was not in use so far.
2013-12-28Remove unused variable 'token'. Spotted by deraadt@Kenneth R Westerback
2013-12-28Try to load entropy data from disk:/etc/random.seed. Then, insert this intoMark Kettenis
the ELF openbsd.randomdata of the kernel, so that it has entropy right from the start.
2013-12-28oops, the fallback stack protector code must handle 64-bit guardsTheo de Raadt
spotted by kettenis
2013-12-28Always call PHY_RESET upon attaching eephy(4) so as to do PHY initialization,Brad Smith
to match behavior before rev 1.52. ok deraadt@
2013-12-28Make sure the PT_OPENBSD_RANDOMIZE program header actually covers the dataMark Kettenis
we want to initialize with randomness. It covered exactly nothing before!
2013-12-28syncTheo de Raadt
2013-12-28Do not need __guard[] anymore since we are now relying on __guard_localTheo de Raadt
for a while already ok miod kettenis
2013-12-28Do not need __guard anymoreTheo de Raadt
Discussion with miod ok kettenis
2013-12-28Move atexit(3) into crtbegin.c and certbeginS.c such that we can pass theMark Kettenis
right __dso_handle and have dlopen'ed shared objects run their atexit handlers when they get unloaded. This is what Linux does, and several ports depend on this behaviour (and will crash upon exit without this chang). Based on an earlier diff from matthew@ Tested by ajacoutot@ ok deraadt@
2013-12-28Back out the previous commit; rodata gets merged with text by the linker.Mark Kettenis
Having a seperate rodata segment won't work anyway without significant pmap changes.
2013-12-28create rodata PHDR; ok kettenisTheo de Raadt
2013-12-28Require an explicit PT_OPENBSD_RANDOMIZE program header in the kernel linkerMiod Vallat
script (note that the amd64 linker script is currently not used). Discussed with deraadt@
2013-12-28i386 changes to PIE. See faq/current.html or use the snapshots to crossTheo de Raadt
this.
2013-12-28Further clean up and unification of the amd64 and i386 boot(8) makefiles.Joel Sing
2013-12-28Actually load the second-stage boot loader so that softraid can store it inJoel Sing
the softraid boot area.
2013-12-28sparc64 uses /ofwboot as the second stage, not /boot.Joel Sing
2013-12-28Add installboot support for sparc64.Joel Sing
2013-12-28Add installboot support for the remaining `disklabel -B' architecturesJoel Sing
(hp300, hppa64 and landisk). hp300 and landisk are untested, however they should "just work" - hopefully someone with access to this hardware can confirm.
2013-12-28Add installboot support for vax.Joel Sing
2013-12-28Round the size of the bootstrap up to a multiple of the disk sector size.Joel Sing
Some bootstraps are already built this way, however others are not.
2013-12-28Various code clean ups - add a missing header, add a missing prototype,Joel Sing
add some casts, tweak some types and variable names.
2013-12-28Tweak makefiles so that we pull in source files based on defines.Joel Sing
2013-12-28Attempt to approximate what should happen on a suspend/resume cycle.Theo de Raadt
If the driver was doing some IO, we remove the timeouts, and force the fdc state machine into IOTIMEDOUT state with the final timeout count before a clean retry. In theory upon resume it should freak out quietly, and try the operation again. Noone has stepped forward to test this yet.
2013-12-28Sync activate code sequnces to if_msk.c as much as possible, in caseTheo de Raadt
one of these is ever found in a suspend/hibernate system.
2013-12-28The few network drivers that called their children's (ie. mii PHYTheo de Raadt
drivers) activate functions at DVACT_RESUME time do not need to do so, since their PHYs are repaired by IFF_UP. NOTE: if_msk is the one that previously relied on mii/eephy.c doing a crazy dance.
2013-12-28The few network drivers that called their children's (ie. mii PHYTheo de Raadt
drivers) activate functions at DVACT_RESUME time do not need to do so, since their PHYs are repaired by IFF_UP.
2013-12-28mii drivers no longer need activate functions. Repair of the PHYTheo de Raadt
configuration setting is done at resume time because all networks drivers which were previously up, do an IFF_UP operation which hits PHY_RESET. This was in snapshots for about 2 weeks.
2013-12-28Move the fairly heavy eephy_init sequence [which was only done atTheo de Raadt
attach() and activate() time] into the eephy_reset() routine. This means that a bit more work gets done at PHY_RESET time, but it means also means it gets done in all scenarios. Why? For the next commit... This was in snapshots for about 2 weeks.
2013-12-28change the stack protector guard into a long word (removing the old legacyTheo de Raadt
compat pointed out by miod), and place it inside the ELF .openbsd.randomdata segment. Inside main(), only re-initialize the guard if the bootblocks failed to initialize it for us.
2013-12-28- adjust getcwd-1.c.exp.gcc{3,4} after the getwd linker warning got addedMartynas Venckus
- adjust gcc-builtins to use the same approach as gcc-bounds - enable gcc-bounds and gcc-builtins in the default regression suite now that everything passes
2013-12-28We can initialize the srandom/random system earlier from arc4random,Theo de Raadt
and do not need microtime.
2013-12-28We can random_start() earlier (not that it does too much) and callTheo de Raadt
arc4random() much earlier. Leading to random pids for anything besides 0 and 1.
2013-12-28Put the entropy_pool[] into the ELF .openbsd.randomdata segment.Theo de Raadt
Also allow random_init() to be called later, by moving a few entropy control initializions into the lower-level _rs_seed() layer. tested by jsing, phessler and a few others
2013-12-28crank the versionTheo de Raadt