summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-03-22avoid memleak / crash in addctagOmar Polo
the l pointer is advanced, so if the line is malformed `goto cleanup' will free(NULL) or a pointer inside l. semplification and ok tb@
2023-03-22plug memleak in error pathOmar Polo
based on a diff by lux (lx [at] shellcodes [dot] org), thanks! Diff via, tweak and ok tb@
2023-03-22delete trailing whitespaces; no functional changeOmar Polo
2023-03-22Bump versionClaudio Jeker
2023-03-22Reverse bus_space_unmap(9) orderDenis Fondras
When `unmap_1` is reached we should bus_space_unmap() sc_hwrm_* and not sc_db_*. ok miod@
2023-03-21update the description for bwfm(4);Jason McIntyre
2023-03-21Document support for the BCM4378 / BCM4387 chipsets.Patrick Wildt
from Brad
2023-03-21Improve length checks for ATTR_MP_REACH_NLRI.Claudio Jeker
Based on a report by cjt (melissa_cjt at 163.com) OK tb@
2023-03-21remove uneeded includesJonathan Gray
2023-03-19syncTheo de Raadt
2023-03-19Aggressively randomize the location of the stack on all 64-bit architecturesMark Kettenis
except alpha. This will put the stack at a random location in the upper 1/4th of the userland virtual address space providing up to 26 additional bits of randomness in the address. Skip alpha for now since it currently puts the stack at a (for a 64-bit architecture) very low address. Skip 32-bit architectures for now as well since those have a much smaller virtual address space and we need more time to figure out what a safe amount of extra randomizations is. These architectures will continue to use a mildly randomized stack address through the existing stackgap random mechanism. We will revisit this after 7.3 is released. This should make it harder for an attacker to find the stack. ok deraadt@, miod@
2023-03-19mda_expand_format: simplify token name extraction for %{name}Todd C. Miller
It is simpler to compute the length based on the start and end pointers and pass that value to memcpy(), adding an explicit NUL terminator after copying. OK op@
2023-03-19rkpciephy(4)Mark Kettenis
2023-03-19Enable rkpciephy(40.Mark Kettenis
2023-03-19Add rkpciephy(4), ad friver for the PCIe 3.0 PHY dound on the RK356x.Mark Kettenis
The driver in principle supports bifurcation but this is (largely) untested. ok dlg@
2023-03-19improve dmesg output to help with debugging.David Gwynne
for SoCs that can provide multiple instances of rkclock, let them provide a name that will be printed during attach so you can tell which one is doing what. when rkclock_set_frequency isn't handling a clock, have it print which rkclock instance isn't handling a clock. while here, print the clock index the same way the #define refers to them. ok kettenis@
2023-03-19Use a task to switch clocks on RK3568 as the clock API needs process context.Mark Kettenis
ok jmatthew@
2023-03-19regenJonathan Gray
2023-03-19add another Navi 33 device idJonathan Gray
0x7483 rev 0xcf is Radeon RX 7600M according to Radeon Software for Linux version 22.40.3 (5.4.3) libdrm-amdgpu-common
2023-03-19Add a few more RK3568 clocks.Mark Kettenis
ok dlg@
2023-03-19Use a task to switch clocks on RK3568 as the clock API needs process context.Mark Kettenis
ok jmatthew@
2023-03-19disable POOL_DEBUG for releaseJonathan Gray
ok deraadt@
2023-03-19Fix a potential NULL dereference in the unpriv child expanding %{mda}.Todd C. Miller
It is not legal to use %{mda} in anything but an mda wrapper. mda_expand_token() will now return an error when %{mda} is used and mda_command is NULL. OK op@
2023-03-18KNF: some missing spaces after commaTheo Buehler
2023-03-18sourceaddr:Jason McIntyre
- show that -ifp and "address" do not mix - show how to reset value (from claudio) - tweak text ok claudio
2023-03-18Rename bn_mod_exp_zero to the more appropriate bn_mod_expTheo Buehler
2023-03-18Retire the bn_mod_exp test.Theo Buehler
Its is fully covered by bn_mod_exp_zero now.
2023-03-18Reimplement a variant of the bn_mod_exp tests from scratchTheo Buehler
This exercises the same corner cases as bn_mod_exp and a few more. With input from jsing
2023-03-18fixes for mandoc -TlintJonathan Gray
ok tb@
2023-03-17remove -beta tagTheo de Raadt
2023-03-17Document M_LOG flag; from Peter J. Philipp.Todd C. Miller
2023-03-17Move annoying yet harmless diagnostic message into #ifdef DEBUG.Miod Vallat
2023-03-17Adjust sourceaddr argument parser.Claudio Jeker
Only print the sourceaddrs if no argument was passed. If arguemnts are set make sure that either and address is present or that an ifp was given. This make the command behave a more like other route commands. OK deraadt@
2023-03-17Fix rtr_parse_aspa(), the spas array is actually not copied over intoClaudio Jeker
the rtr_aspa struct so access them directly from the buf using offset as the address of the first element. OK tb@
2023-03-16after updating amdgpu-firmware from 20221214 to 20230310 a newJonathan Gray
warning appeared in dmesg on renoir: [drm] psp gfx command LOAD_TA(0x1) failed and response status is (0x7) [drm] psp gfx command INVOKE_CMD(0x3) failed and response status is (0x4) psp_securedisplay_parse_resp_status *ERROR* Secure display: Generic Failure. psp_securedisplay_initialize *ERROR* SECUREDISPLAY: query securedisplay TA failed. ret 0x0 This is likely related to not implementing all the HDCP paths. Return early in psp_securedisplay_initialize() to avoid this. I suspect the newer renoir firmware adds a TA_FW_TYPE_PSP_SECUREDISPLAY component the older one didn't have. reported by jmc@
2023-03-16Add code to bring up the PCIe controller on the RK356x.Mark Kettenis
ok dlg@
2023-03-16When syslogd is sending messages via UDP to a remote loghost, itAlexander Bluhm
stops if there is a permanent error. Add EACCES generated by pf to the list of transient errors. This restores pre-6.5 behavior and continues logging after pf.conf has been fixed. OK millert@ deraadt@ mvs@
2023-03-16Update for 7.3.Miod Vallat
2023-03-16Consistent phrasing: function -> function pointerJob Snijders
2023-03-16Add X509_STORE_{set,get}_check_issued and X509_STORE_CTX_get_check_issued to ↵Job Snijders
manpage with and OK tb@
2023-03-16syncTheo Buehler
2023-03-16Install EVP_CIPHER_meth_new.3Theo Buehler
2023-03-16Add EVP_CIPHER_meth_* documentation from OpenSSL 1.1Theo Buehler
This is essentially the original text with a few tweaks and fixes by me, removing parts inapplicable to LibreSSL. There are dangling references to EVP_CIPHER_CTX_copy(3) and EVP_CIPHER_CTX_get_cipher_data(3). This all isn't great, but it's better than nothing. Probably good enough for these rarely used functions.
2023-03-16Update manpage for X509_CRL_get0_tbs_sigalg()Job Snijders
OK tb@
2023-03-16Add missing dependecy for rkcomphy(4); pointed out by dlg@Mark Kettenis
2023-03-16Bump LibreSSL version to 3.7.2Theo Buehler
2023-03-16revert previous, stsp made WEP work on bwfm(4)Klemens Nanni
2023-03-15make WEP encryption work on bwfm(4)Stefan Sperling
based on an initial diff by jsg@ brokenness pointed out by kn@ ok jsg@
2023-03-15tweak sourceaddr:Jason McIntyre
- remove "-inet|-inet6" as it is not generally meaningful - remove the qualifier "if set": sourceaddr now works nicely in cases where no "address is given
2023-03-15Fix a number of out of bound reads in DNS response parsing.Todd C. Miller
Originally from djm@. OK deraadt@ florian@ bluhm@