Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-12-29 | fix sign-while-creating mode | Marc Espie | |
2013-12-29 | when showing other hostkeys, don't forget Ed25519 keys | Damien Miller | |
2013-12-29 | - Verify that the FPU exception flags weren't clobbered as required by C99. | Martynas Venckus | |
- Additionally, test _setjmp and sigsetjmp as implementations are different. | |||
2013-12-29 | don't forget to load Ed25519 certs too | Damien Miller | |
2013-12-29 | don't refuse to load Ed25519 certificates | Damien Miller | |
2013-12-29 | allow deletion of ed25519 keys from the agent | Damien Miller | |
2013-12-29 | to make sure we don't omit any key types as valid CA keys again, | Damien Miller | |
factor the valid key type check into a key_type_is_valid_ca() function | |||
2013-12-29 | Add MLINK for db_vprintf(9) | Philip Guenther | |
2013-12-29 | Add db_vprintf() and indicate that db_v?printf() are in <ddb/db_output.h> | Philip Guenther | |
2013-12-29 | correct comment for key_drop_cert() | Damien Miller | |
2013-12-29 | correct comment for key_to_certified() | Damien Miller | |
2013-12-29 | allow ed25519 keys to appear as certificate authorities | Damien Miller | |
2013-12-29 | Add a regression test to verify that the FPU control word state is | Martynas Venckus | |
preserved by setjmp. Currently under REGRESS_FULL as this fails on certain archs. | |||
2013-12-29 | regen | Miod Vallat | |
2013-12-29 | Intel NM70 | Miod Vallat | |
2013-12-28 | The mips partition table in the volume header uses 512-byte logical units, | Miod Vallat | |
not sectors; don't multiply by the sector size to get the proper disk offsets. This will let install.iso be built with the OpenBSD label at the expected location, instead of within the ffs filesystem; we had been lucky enough the area being overwritten was not in use so far. | |||
2013-12-28 | Remove unused variable 'token'. Spotted by deraadt@ | Kenneth R Westerback | |
2013-12-28 | Try to load entropy data from disk:/etc/random.seed. Then, insert this into | Mark Kettenis | |
the ELF openbsd.randomdata of the kernel, so that it has entropy right from the start. | |||
2013-12-28 | oops, the fallback stack protector code must handle 64-bit guards | Theo de Raadt | |
spotted by kettenis | |||
2013-12-28 | Always call PHY_RESET upon attaching eephy(4) so as to do PHY initialization, | Brad Smith | |
to match behavior before rev 1.52. ok deraadt@ | |||
2013-12-28 | Make sure the PT_OPENBSD_RANDOMIZE program header actually covers the data | Mark Kettenis | |
we want to initialize with randomness. It covered exactly nothing before! | |||
2013-12-28 | sync | Theo de Raadt | |
2013-12-28 | Do not need __guard[] anymore since we are now relying on __guard_local | Theo de Raadt | |
for a while already ok miod kettenis | |||
2013-12-28 | Do not need __guard anymore | Theo de Raadt | |
Discussion with miod ok kettenis | |||
2013-12-28 | Move atexit(3) into crtbegin.c and certbeginS.c such that we can pass the | Mark Kettenis | |
right __dso_handle and have dlopen'ed shared objects run their atexit handlers when they get unloaded. This is what Linux does, and several ports depend on this behaviour (and will crash upon exit without this chang). Based on an earlier diff from matthew@ Tested by ajacoutot@ ok deraadt@ | |||
2013-12-28 | Back out the previous commit; rodata gets merged with text by the linker. | Mark Kettenis | |
Having a seperate rodata segment won't work anyway without significant pmap changes. | |||
2013-12-28 | create rodata PHDR; ok kettenis | Theo de Raadt | |
2013-12-28 | Require an explicit PT_OPENBSD_RANDOMIZE program header in the kernel linker | Miod Vallat | |
script (note that the amd64 linker script is currently not used). Discussed with deraadt@ | |||
2013-12-28 | i386 changes to PIE. See faq/current.html or use the snapshots to cross | Theo de Raadt | |
this. | |||
2013-12-28 | Further clean up and unification of the amd64 and i386 boot(8) makefiles. | Joel Sing | |
2013-12-28 | Actually load the second-stage boot loader so that softraid can store it in | Joel Sing | |
the softraid boot area. | |||
2013-12-28 | sparc64 uses /ofwboot as the second stage, not /boot. | Joel Sing | |
2013-12-28 | Add installboot support for sparc64. | Joel Sing | |
2013-12-28 | Add installboot support for the remaining `disklabel -B' architectures | Joel Sing | |
(hp300, hppa64 and landisk). hp300 and landisk are untested, however they should "just work" - hopefully someone with access to this hardware can confirm. | |||
2013-12-28 | Add installboot support for vax. | Joel Sing | |
2013-12-28 | Round the size of the bootstrap up to a multiple of the disk sector size. | Joel Sing | |
Some bootstraps are already built this way, however others are not. | |||
2013-12-28 | Various code clean ups - add a missing header, add a missing prototype, | Joel Sing | |
add some casts, tweak some types and variable names. | |||
2013-12-28 | Tweak makefiles so that we pull in source files based on defines. | Joel Sing | |
2013-12-28 | Attempt to approximate what should happen on a suspend/resume cycle. | Theo de Raadt | |
If the driver was doing some IO, we remove the timeouts, and force the fdc state machine into IOTIMEDOUT state with the final timeout count before a clean retry. In theory upon resume it should freak out quietly, and try the operation again. Noone has stepped forward to test this yet. | |||
2013-12-28 | Sync activate code sequnces to if_msk.c as much as possible, in case | Theo de Raadt | |
one of these is ever found in a suspend/hibernate system. | |||
2013-12-28 | The few network drivers that called their children's (ie. mii PHY | Theo de Raadt | |
drivers) activate functions at DVACT_RESUME time do not need to do so, since their PHYs are repaired by IFF_UP. NOTE: if_msk is the one that previously relied on mii/eephy.c doing a crazy dance. | |||
2013-12-28 | The few network drivers that called their children's (ie. mii PHY | Theo de Raadt | |
drivers) activate functions at DVACT_RESUME time do not need to do so, since their PHYs are repaired by IFF_UP. | |||
2013-12-28 | mii drivers no longer need activate functions. Repair of the PHY | Theo de Raadt | |
configuration setting is done at resume time because all networks drivers which were previously up, do an IFF_UP operation which hits PHY_RESET. This was in snapshots for about 2 weeks. | |||
2013-12-28 | Move the fairly heavy eephy_init sequence [which was only done at | Theo de Raadt | |
attach() and activate() time] into the eephy_reset() routine. This means that a bit more work gets done at PHY_RESET time, but it means also means it gets done in all scenarios. Why? For the next commit... This was in snapshots for about 2 weeks. | |||
2013-12-28 | change the stack protector guard into a long word (removing the old legacy | Theo de Raadt | |
compat pointed out by miod), and place it inside the ELF .openbsd.randomdata segment. Inside main(), only re-initialize the guard if the bootblocks failed to initialize it for us. | |||
2013-12-28 | - adjust getcwd-1.c.exp.gcc{3,4} after the getwd linker warning got added | Martynas Venckus | |
- adjust gcc-builtins to use the same approach as gcc-bounds - enable gcc-bounds and gcc-builtins in the default regression suite now that everything passes | |||
2013-12-28 | We can initialize the srandom/random system earlier from arc4random, | Theo de Raadt | |
and do not need microtime. | |||
2013-12-28 | We can random_start() earlier (not that it does too much) and call | Theo de Raadt | |
arc4random() much earlier. Leading to random pids for anything besides 0 and 1. | |||
2013-12-28 | Put the entropy_pool[] into the ELF .openbsd.randomdata segment. | Theo de Raadt | |
Also allow random_init() to be called later, by moving a few entropy control initializions into the lower-level _rs_seed() layer. tested by jsing, phessler and a few others | |||
2013-12-28 | crank the version | Theo de Raadt | |