summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-07-15- Add [-a rounds] in ssh-keygen man page and usage()solene
- Reorder parameters list in the first usage() case - Sentence rewording ok dtucker@ jmc@ noticed usage() missed -a flag too
2020-07-15tmpfs_reclaim() has to make sure the VFS cache has no more locks heldGerhard Roth
for the vnode. ok beck@
2020-07-15Use SENSOR_ENERGY as the type of energy sensors.Mark Kettenis
2020-07-15POWE9 CPUs provide an energy sensor that accumulates the emount of energyMark Kettenis
used by the processor chip. Although we have a SENSOR_WATTHOUR sensor type its units are not really suitable for this sensor. So add a SENSOR_ENERGY type that uses micro Joules as its unit. ok deraadt@
2020-07-15Fix previous by calling the correct function.Darren Tucker
2020-07-15start sentence with capital letter;Jason McIntyre
2020-07-15Update test to match recent change in match.cDarren Tucker
2020-07-15Use $OBJ to find key files. Fixes test when run on an obj directoryDarren Tucker
(on OpenBSD) or out of tree (in Portable).
2020-07-15patrick@ pointed out there was a gap in the flow group numbering.Jonathan Matthew
ok dlg@
2020-07-15Add default for number of rounds (-a). ok djm@Darren Tucker
2020-07-15The exit code from the perl matters hereBob Beck
2020-07-15Don't leak the X509_STOREBob Beck
2020-07-15Consistently convert syndrome codes from big endian before printing them.Jonathan Matthew
ok dlg@
2020-07-15Add certificate validation tests generated using the tools fromBob Beck
bettertls.com, and a verification suite to try each certificate in the same manner as the web based tests do using X509_verify. This includes the list of "known" failures today in our validaion code so we can move forward without moving back.
2020-07-15Scott Cheloha convinces me the newly added tsleep_nsec should be tsleep,Theo de Raadt
to hint we are doing the minimum scheduler sleep (and as side effect, collecting potential signal status)
2020-07-14allow some additional control over the use of ssh-askpassDamien Miller
via $SSH_ASKPASS_REQUIRE, including force-enable/disable. bz#69 ok markus@
2020-07-14Properly clean up and dereference 'old' policy after failed lookup.tobhe
ok patrick@
2020-07-14Print real/avail mem like we do on all other architectures.Mark Kettenis
2020-07-14Make INTx interupts work.Mark Kettenis
2020-07-14Add xics(4), a driver for the OPAL virtual ICS.Mark Kettenis
2020-07-14Add FDT interrupt support.Mark Kettenis
2020-07-14Convert option handling for openssl(1) verify.Joel Sing
ok inoguchi@, tb@
2020-07-14Dedup the use legacy stack code.Joel Sing
ok inoguchi@ tb@
2020-07-14Revert the TLSv1.3 version switching fix/hack.Joel Sing
This is no longer necessary since the TLS_method() now supports TLSv1.3. Reverts r1.211 of ssl_lib.c. ok beck@ inoguchi@ tb@
2020-07-14Enter the certs regress directory.Joel Sing
2020-07-14Add regress for X509_verify() using the new bundles.Joel Sing
A number of these tests are known to fail due to bugs/incorrect verification implementation.
2020-07-14Provide generated certificate bundles and roots for regress.Joel Sing
ok beck@ tb@
2020-07-14Provide tools to build certificate changes for verify regress.Joel Sing
This provides a script that generates a variety of certificate chains and assembles them into bundles containing various permutations, which can be used to test our X.509 verification. A Go program is included to verify each of these bundles. ok beck@ tb@
2020-07-14Use a rwlock to protect the ttylist, rather than having ttymalloc/ttyfreeTheo de Raadt
callers use spltty. ok kettenis
2020-07-14Force TLSv1.2 when testing SSLv3/TLSv1.2 cipher suites.Joel Sing
Otherwise we end up switching to TLSv1.3 and using a TLSv1.3 cipher suite.
2020-07-14Add a -tls1_2 option so we can force TLSv1.2 for testing.Joel Sing
2020-07-14Mark unmanaged kernel mappings as wired and skip them if we need to evictMark Kettenis
a mapping from the page tables.
2020-07-14Put some debug code behin #ifdef TRAP_DEBUG.Mark Kettenis
2020-07-14Fix TIB/TCB on powerpc64. Some bright sould decided that the TCB shouldMark Kettenis
be 8 bytes in the 64-bit ABI just like in the 32-bit ABI. But that means there is no "spare" word in the TCB that we can use to store a pointer to our struct pthread. So we have to treat powerpc64 special. Also recognize that the thread pointer points 0x7000 bytes after the TCB. Since the TCB is 8 bytes this means that TCB_OFFSET should be 0x7008. Pointed out by guenther@; ok deraadt@
2020-07-14getopt(3) returns an int so don't use a char to store its return value.Mark Kettenis
Makes the test work on architectures where char is unsigned. ok deraadt@, millert@
2020-07-14Add support for routing interrupts to other CPUs in agintc(4). Most of thePatrick Wildt
supporting code was already there. The driver supports establishing multiple handlers on the same pin. Make sure that a single pin can only be established on a specific core by recording the struct cpu_info * of the first establish, and returning NULL if someone tries to share the pin with a different core. For LPIs, typically used for MSIs, the routing is done by targetting an LPI to a specific "collection". We create a collection per core, indexing it by cpu_number(). For this we need to know a CPU's "processor number", unless GITS_TYPER_PTA is set. Since we now attach CPUs early, and the redistributors are not banked, we can retrieve that information early on. It's important to move this as far up as possible, as it's not as easy as on ampintc(4) to re-route LPIs. To establish an LPI on a different core, we now only have the pass the CPU's number as part of the map command which is sent to the hardware. Prompted by dlg@ ok kettenis@
2020-07-14Add support for routing interrupts to other CPUs in ampintc(4). Most of thePatrick Wildt
supporting code was already there. The driver supports establishing multiple handlers on the same pin. Make sure that a single pin can only be established on a specific core by recording the struct cpu_info * of the first establish, and returning NULL if someone tries to share the pin with a different core. Since the array of CPU masks, used for enabling/disabling interrupt routing to specific cores, is only populated during cpu_boot_secondary_processors(), each core will re-route the interrupts once a core read its mask. Until then, the core will not receive interrupts for that pin. While there, remove a call to ampintc_setipl(), which seems to be a no-op. It tries to set the same value that's already set. Since the function that calls it is supposed to calculate a pin's mask and do the routing, this doesn't seem to be the correct place for such a call. agintc(4) doesn't have it either. Prompted by dlg@ ok kettenis@
2020-07-14Implement pci_intr_establish_cpu() on arm64 and armv7. The function pointerPatrick Wildt
in the chipset tag for establishing interrupts now takes a struct cpu_info *. The normal pci_intr_establish() macro passes NULL as ci, which indicates that the primary CPU is to be used. The PCI controller drivers can then simply pass the ci on to our arm64/armv7 interrupt establish "framework". Prompted by dlg@ ok kettenis@
2020-07-14Extend the interrupt API on arm64 and armv7 to be able to pass aroundPatrick Wildt
a struct cpu_info *. From a driver point of view the fdt_intr_establish_* API now also exist same functions with a *_cpu suffix. Internally the "old" functions now call their *_cpu counterparts, passing NULL as ci. NULL will be interpreted as primary CPU in the interrupt controller code. The internal framework for interrupt controllers has been changed so that the establish methods provided by an interrupt controller function always takes a struct cpu_info *. Some drivers, like imxgpio(4) and rkgpio(4), only have a single interrupt line for multiple pins. On those we simply disallow trying to establish an interrupt on a non-primary CPU, returning NULL. Since we do not have MP yet on armv7, all armv7 interrupt controllers do return NULL if an attempt is made to establish an interrupt on a different CPU. That said, so far there's no way this can happen. If we ever gain MP support, this is a reminder that the interrupt controller drivers have to be adjusted. Prompted by dlg@ ok kettenis@
2020-07-14A pty write containing VDISCARD, VREPRINT, or various retyping cases ofTheo de Raadt
VERASE would perform (sometimes irrelevant) compute in the kernel which can be heavy (especially with our insufficient tty subsystem locking). Use tsleep_nsec for 1 tick in such circumstances to yield cpu, and also bring interruptability to ptcwrite() https://syzkaller.appspot.com/bug?extid=462539bc18fef8fc26cc ok kettenis millert, discussions with greg and anton
2020-07-14reduce the diff to linux in local versions of functionsJonathan Gray
brings in changes from 'drm/ttm: stop always moving BOs on the LRU on page fault' 5d50fcbda7b0acd301bb1fc3d828df0aa29237b8 and some other minor changes ok kettenis@
2020-07-14Remove hyphenKinichiro Inoguchi
2020-07-14Add single space between pem and ...Kinichiro Inoguchi
2020-07-14Add manual for openssl(1) certhashKinichiro Inoguchi
ok jmc@
2020-07-14Remove commented out debug printfs.Mark Kettenis
2020-07-14Implement ptrace(2) bits. Still largely untested.Mark Kettenis
2020-07-14Do not convert the NOCACHE buffers that come from a vnd strategy routineBob Beck
into more delayed writes if the vnd is mounted from a file on an MNT_ASYNC filesystem. This prevents a situaiton where the cleaner can not clean delayed writes out without making more delayed writes, and we end up waiting for the syncer to spit things occasionaly when it runs. noticed and reported by sven falempin <sven.falempin@gmail.com> on tech, who validated this fixes his issue. ok krw@
2020-07-14Set up a second level flow table for RSS and switch the root flow tableJonathan Matthew
entries to forwarding packets to it. The RSS flow table contains flow table entries that match specific types of traffic and send them to TIRs set up to hash on the appropriate fields, then deliver packets through an RQT to all our rx queues. We still only have one queue, but now all we need to do is plug in an intrmap to add more. ok dlg@
2020-07-14Set SDEV_NOWIDE and SDEV_NOSYNC on the 'real' link (xs->sc_link) whenKenneth R Westerback
negotiations fail.
2020-07-13Clean up <machine/signal.h>, moving the trapframe struct intoMark Kettenis
<machine/frame.h>.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 18:52:07 +0000