Age | Commit message (Collapse) | Author |
|
Lots of agreement.
|
|
RFC 4106 and 4543.
Please note that although IKEv1 and IKEv2 identifiers are
different for ESP_NULL_AUTH_AES-GMAC (SADB_X_EALG_AESGMAC),
we use the IKEv2 one only (which is 21). ipsecctl(8) will
be taught to handle exported SA correctly.
|
|
tc_intr_disestablish() prototype is changed to carry information whether the
counter needs to be detached or not.
This does not matter much since no driver ever calls tc_intr_disestablish().
|
|
|
|
to NIST (gcm-spec.pdf) and draft-mcgrew-gcm-test-01.txt.
|
|
described in FIPS SP 800-38D.
This implementation supports 16 byte authentication tag only,
splitting transformation into two parts: encryption and
authentication. Encryption is handled by the existing
AES-CTR implementation, while authentication requires new
AES_GMAC hash function.
Additional routine is added to the software crypto driver
to deal with peculiarities of a combined authentication-
encryption transformation.
With suggestions from reyk, naddy and toby.
|
|
copy sbin/iked/chap_ms.[ch] and fixed chap.c and eap.c to compile with it.
|
|
interrupts, since inspecting the code, they seem to always attach
anyway. This fixes compiler fallout from my evcount simplification.
build error reported by naddy@; "seems sensible" deraadt@
|
|
``Go ahead, its free'' deraadt@.
|
|
bounds file is empty.
ok deraadt@ henning@
|
|
the initiator chose wrong D-H group. in this case we throw away our
SA and start over with a proper group.
makes iked work as an initiator with strongswan/charon without any
specific "ikesa" (phase 1) configuration.
ok reyk
|
|
of the descriptor. Diff created and tested by Loganaden Velvindron.
Looks good dlg@ and myself
|
|
ssh_config.5: format the kexalgorithms in a more consistent (prettier!) way
ok djm
|
|
is no easily available physical information outside of the stored
disklabel just make it a synonym for DIOCGDINFO.
Commit on the theory it is unlikely to harm, and fallout can be
addressed in the mass re-compile that will follow j2k10.
Should allow auto-allocation of disks to work with all devices.
ok deraadt@
|
|
|
|
awesome for debugging, a rule like
match log(matches) from $testbox
will show you exactly which subsequent rules match on that packet
real ok theo assumed oks ryan & dlg bikeshedding many
implementation time ~1 min bikeshedding about the keyword longish.
i voted for "matches" since i like to play with matches
idea was theo's, actually
|
|
forces logging on all subsequent matching rules
real ok theo assumed oks ryan and dlg bikeshedding everyone in the room
implementation time ~ 1 minute
|
|
"Sure" deraadt@
|
|
in the tree. Update disk.9 to reflect current reality.
ok matthew@ deraadt@
|
|
selection of which key exchange methods are used by ssh(1) and sshd(8)
and their order of preference.
ok markus@
|
|
locking diff.
ok guenther@
|
|
ok dlg@
|
|
|
|
the same thread theyre attached in (syswq) rather than in teh vscsi
process context. this serialises attach and detach so we can avoid
weird races with autoconf.
also, count the devices on the bus rather than the outstanding commands.
fixes some stuff for matthew@
ok matthew@
|
|
ok krw@ kettenis@
|
|
else and an unneeded if (r)
|
|
no point in keeping it around.
"i like this" thib@ (a while back); ok krw@ and oga@; reminder to
update the man page and tweaks jmc@
|
|
ok krw@ marco@
|
|
ok yasuoka@
|
|
happens when waiting for the gpu), the reset function will at the very
least clean out all of our unwanted buffers, which is all we wanted to
do here ourselves. so we can continue with disabling the hardware and
cleaning up then return success.
Fixes a QUIESCE crash for krw when he had a wedged gpu (``it works, ok
krw@''). matthew@ hit a similar thing and this should fix it.
|
|
when we check for gpu hangs.
This makes catching some situations a bit more reliable so that large
gpu programs don't trigger hangcheck, and also the ring_wait can unhang
the chip for us without needin to do a reset.
Merge of two patches from Chris Wilson ``upstream''. Running this here
for a few days.
|
|
From henning@, fixed pflog_bgpcopy crashes.
|
|
their actual lengths. Will improve vertical alignment in some
uncommon situations, for example when escape sequences occur in
list or column width strings or in .Nm block arguments in the SYNOPSIS.
From kristaps@.
|
|
in ARB_STATE.
Without this bit, C{2,3,4} power states can't complete render writes
this has been known to cause painful hangs on some 945s where the bios
doesn't set this bit for us.
Code from Dave Airlie ``upstream''.
|
|
The sodding bits moved again *sigh*.
|
|
OP_BCOND subfunction.
|
|
|
|
efficient in the case where we are idle.
Idea taken from a commit to the linux kernel by chris wilson.
|
|
retire_requests() called just prior will do that for us.
|
|
requirements of this function (due to no longer binding any objects)
Found by matthew@'s lovely lock assertion diff.
|
|
MI softfloat code, implementing all MIPS IV specified floating point
operations.
Tested on R5000, R10000, R14000 and Loongson2F.
|
|
|
|
context, because drivers (like eso(4) and envy(4)) might want to sleep
in their halt method.
|
|
|
|
ok pirofti
|
|
determined by bNbrPorts in hub descriptor.
USB hub sends status packet to host, it contains status bits for each port
and hub itself. So, the packet size is ceil((port + 1) / 8) bytes.
If host requests smaller than that size, the hub behavior is undefined.
Some hub (Intel's RMH for example) sends whole status every time,
it makes babble of USB. This is the reason that uhub_intr() of old code
was suffered from USBD_IOERROR,
Okay deraadt@ and yuo@.
|
|
about the device rather than the contents of whichever disklabel
was read. Tweak whitespace in sd.c to make the code appearance
consistant.
|
|
|
|
that were mislabeled as MCP89 AHCI.
|
|
|