summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-10-07zap duplicated line; Theo BuehlerStuart Henderson
2014-10-07when running bpf on an outgoing vlan interface that doesnt have aDavid Gwynne
parent that doesnt offload the tag insertion, we need to chop the vlan subheader out before the filter is run, not after. this moves the mbuf surgery out from the bpf layer into the vlan layer. ok henning@ jmatthew@
2014-10-07Use L1_S_V7_AP instead of L1_S_AP for the v7 caseJonathan Gray
otherwise the high bit of AP will end up in TEX.
2014-10-07Since the list of mpe(4) interfaces is only accessed in process context,Martin Pieuchot
it does not need to be protected by splnet(). Rafael Zalamena agrees, no objection from the MPLS gang.
2014-10-07Do not protect the SIOCSIFADDR call by splnet(). Drivers alreadyMartin Pieuchot
raise it inside their ioctl handler (except for carp(4), what else?). In general, global structures manipulated in the softnet codepath only require a splsoftnet() protection when they are modified in process (ioctl) context. Also put some IPL_SOFNET asserts in functions accessing global structures. Previous version diff ok mikeb@, with inputs from and ok bluhm@
2014-10-07Correct the l1 pte permission bits for armv7. Problem pointed outJonathan Gray
by Patrick Wildt who made a similiar change in Bitrig. ok miod@ rapha@
2014-10-07Use strdup() instead of malloc() + memcpy().Miod Vallat
ok doug@ jsing@
2014-10-07EC_KEY_set_group() does an EC_GROUP_dup() of its argument, so we don'tMiod Vallat
need to do it in ec_copy_parameters() prior to invoking EC_KEY_set_group(). ok doug@ jsing@
2014-10-07Rare to find a gem this amazing missed by tedu.Theo de Raadt
2014-10-07When reading time intervals, start with a long long and convert from there.Philip Guenther
Similarly, print them by casting to long long and using %lld. ok otto@
2014-10-06Remove the #ifdef HAVE_SIGACTION from libevent. The structAlexander Bluhm
evsignal_info does not change, so no library crank. OK nicm@ deraadt@
2014-10-06Make amd64 pmap more efficient on multi-processorStefan Fritsch
With the current implementation, when accessing an inactive pmap, its ptes are mapped in the APTE range. This has the problem that the APTE range is mapped on all CPUs and changes to the APTE must therefore be followed by a remote TLB flush on all CPUs. This is very inefficient because the costs increase quadratically with the number of CPUs. Therefore, the code is changed to remove the APTE mechanism completely and instead switch the pmap locally. A remote TLB flush is then only done if the pmap is in use on the remote CPU. In the common case, this will replace one TLB flush on all CPUs with two local TLB flushes. An additional optimization is done in cases where only a single PTE of an inactive pmap is accessed: The requested PTE is found by walking the page tables manually via the direct mapping. This makes some more TLB flushes unnecessary. Furthermore, some code is reordered so that the TLB-shootdown-IPIs are sent first, then more local processing takes place, and only afterwards the CPU waits for the remote TLB-shootdowns to finish. This diff is based on a patch for i386 by Artur Grabowski <art blahonga org> from 2008. Some additional bits were taken from a different patch by Artur from 2005. Tested by many. OK mlarkin@
2014-10-06As libevent provides safe signal callbacks instead of signal handlers,Alexander Bluhm
the sigprocmask(2) protection is not necessary and can be removed. OK nicm@ deraadt@
2014-10-06In case of invalid syntax like "chmod -Pr -w tf" (trailing mode letterIngo Schwarze
in a group of option letters), do not silently ignore the syntax error and do something undefined, but instead error out properly. Found because miod@ said "read the code" (not to me, though). ok doug@
2014-10-06When verifying whether an IP address is in the commonName of aJeremie Courreges-Anglas
certificate, do not perform wildcard matching. Suggested by Richard Moore (rich@kde) ok tedu@
2014-10-06If we have to match against a wildcard in a cert, verify that it containsJeremie Courreges-Anglas
at least a domain label before the tld, as in *.example.org. Suggested by Richard Moore (rich@kde) ok tedu@
2014-10-06Amend previous commit to unbreak TLS cert validation when using a proxy.Jeremie Courreges-Anglas
ok miod@
2014-10-06correct options in usage(); from mancha1 AT zoho.comDamien Miller
2014-10-05fix typo in comment: correspoding -> correspondingLawrence Teo
2014-10-05Test that the specified libevent backend kqueue(2) or poll(2) orAlexander Bluhm
select(2) is used by syslogd.
2014-10-05The fixes to X509_PURPOSE_add() in r1.18 actually could cause a globalMiod Vallat
X509_PURPOSE object (obtained with X509_PURPOSE_get0() instead of being allocated in the function) to be freed if modifying that object would fail due to a low memory condition, while this object would still be referenced elsewhere. Fix this by only cleaning the object if we did not allocate it here. While there, fail early if either `name' or `sname' are NULL, rather than allocating an object and realizing we have nothing to strdup() into it. ok guenther@
2014-10-05Be sure to check the stack push operation for success in v2i_POLICY_MAPPINGS();Miod Vallat
if it fails, free the object we were about to push. Factor error handling to avoid having four copies of about the same code. ok guenther@
2014-10-05In v2i_AUTHORITY_INFO_ACCESS(), separate object allocation from object pushMiod Vallat
on a stack; if the latter fails, we need to free the object before returning failure. ok guenther@
2014-10-05Memory leak upon error in set_dist_point_name().Miod Vallat
ok guenther@
2014-10-05Be sure to check object allocation for success before using them.Miod Vallat
Tweaks and ok guenther@
2014-10-05Missing deallocation upon error.Miod Vallat
ok deraadt@ guenther@
2014-10-05Fix memory leak in the error path of v2i_AUTHORITY_KEYID().Miod Vallat
ok deraadt@ guenther@
2014-10-05Switch syslogd from using poll(2) to libevent.Alexander Bluhm
test and OK nicm@; OK henning@
2014-10-05we use tradcpp instead; ok jsgTheo de Raadt
2014-10-05compile with c89 (code / decl ordering); from Joakim.Tjernlund@transmode.seTheo de Raadt
ok miod
2014-10-05Use more specific curves/formats naming for local variables inJoel Sing
ssl_add_clienthello_tlsext() and ssl_add_serverhello_tlsext(), rather than the current generic naming. ok miod@
2014-10-05Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather thanJoel Sing
hand rolling the same code. ok miod@
2014-10-05Make tls1_get_formatlist() behave the same as tls1_get_curvelist() andJoel Sing
return the client format list if the client_formats flag is specified. Use tls1_get_formatlist()/tls1_get_curvelist() in tls1_check_ec_key(), simplifying the code. ok miod@
2014-10-05Only synchronize used TRBs and not the full ring when sending a controlMartin Pieuchot
transfer. While here remove/fix other XXXs.
2014-10-05Do not mark the pipe as halted when the HC reports a (split) transactionMartin Pieuchot
error. Makes Intel Series 7 controllers happy and no longer report an illegal context state transition when detaching devices.
2014-10-05Skip unnecessary processing in interrupt handler.Kenji Aoyama
2 spc(4/luna88k)'s share the same level 3 interrupt on LUNA-88K2. So returns earlier when the device is not the source of interrupt. NetBSD has the same code. http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/ic/mb89352.c#rev1.34 "it is the right thing to do" miod@
2014-10-05pass size to free.David Gwynne
2014-10-05dont need to cast pointers to/from void *David Gwynne
no binary change
2014-10-05ansify function definitions.David Gwynne
no binary change.
2014-07-12Import a copy of ucpp, lightweight cpp that doesn't dependMatthieu Herrb
on the 'comp' set. Moving from xenocara with a new name. ok deraadt@.
2014-10-05Do not re-establish the default pipe twice for every controller. MoveMartin Pieuchot
this hack in the drivers that need it. Tested by many, thanks! ok pirofti@, kettenis@
2014-10-05Quirk needed by the Archos 24y Vision, from Max Fillinger.Martin Pieuchot
2014-10-05regenMartin Pieuchot
2014-10-05Add vendor and product for the Archos 24y Vision, from Max Fillinger.Martin Pieuchot
2014-10-05Use CPU_IS_PRIMARY macro. No functional change.Kenji Aoyama
2014-10-05two more events found on thinkpad yogaTheo de Raadt
2014-10-04- Recognize the Yukon Prime and Yukon Optima 2 chipsets.Brad Smith
- Recognize some more revs of the EC U and Supreme chipsets. - Add the PCI id for the Yukon 88E8079. ok jsg@
2014-10-04Switch the kernel configs over to using -Wframe-larger-than= instead ofBrad Smith
-Wstack-larger-than-. This is what modern GCC supports as well as LLVM. ok miod@
2014-10-04Be sure to only path the remote host to ressl_connect_socket(), without aMiod Vallat
possible :portnumber suffix. Noticed by ajacoutot@ ok ajacoutot@ deraadt@
2014-10-04Wait until a read control transfer is really completed before passingMartin Pieuchot
it to the stack when a Short Transfer condition is reported. In this dummy implementation the ``Event Data TRB'' of a read control transfer is the only TRB that can trigger an interrupt without being the last TRB of a transfer. This is done in order to report the remaining length of a short transfer. But when that happens, we want to wait until all Transfer TRBs are completed before passing the xfer to the stack. Note that clearing the ISP and IOC flags in all Transfer TRBs like it is specified in 4.10.1.1.1 might not work in our cases because the HC has most of the time already processed all Transfer TRBs when the driver dequeues the events in the softinterrupt path. While here, use the right spl protection when aborting a xfer.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-07 16:35:21 +0000