summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-03-16Allocate an mfi frame for each ccb, to be used to submit passthroughJonathan Matthew
commands later. part of a diff from Naoki Fukaumi ok dlg@
2018-03-15bug fix (I found it when comparing with if_upl.c)SASANO Takayoshi
- remove extra blank line - call ifq_deq_rollback() when ugl_send() failed - call ifq_clr_oactive() before splx() ok mpi@
2018-03-15Remove the check for flags M_AUTH and M_CONF (AH and ESP).remi
The check prevents incomming multicast packages from arriving at the gif interface (eg. OSPF) when the traffic is protected by IPsec in transport mode. ok dlg@
2018-03-15writebufg() does two write(2) calls, both can return EPIPE, so handle it inOtto Moerbeek
both cases. Avoids race in the exit path. ok sthen@ florian@
2018-03-15syncTheo de Raadt
2018-03-15Soften the language discouraging special character escape sequences.Ingo Schwarze
After i improved their ASCII renderings in groff and mandoc some time ago, mathematical symbols can now be used in specialised mathematical manual pages like libm and some X libraries. Tweaks and OK jmc@.
2018-03-15Always ensure to output a newline after checking for available syspatches.anton
Otherwise, if syspatch exits 1 any subsequent output will end up on the same line during boot. Discovered while upgrading from current today since we're in release mode. Discussed with and ok tb@
2018-03-15Favor usage of __func__ in warning/error messages. Some of them referred to theanton
wrong function and fix the rest for consistency. Diff from Michael W. Bombardieri with some cosmetic cleanup applied. ok benno@ tb@
2018-03-15Fix a format string issue that Go 1.10 complains about.Joel Sing
2018-03-15Add fake pthread_self and pthread_equal to libstubsBob Beck
ok kettenis@ jsing@ deraadt@ - "Exquisitly disgusting" guenther@
2018-03-15syncJeremie Courreges-Anglas
2018-03-15Also bump libtls minor after the addition of SSL_CTX_get_min/max_proto_versionJeremie Courreges-Anglas
cluebat tb@
2018-03-15Provide SSL_CTX_get_min_proto_version and SSL_CTX_get_max_proto_versionJeremie Courreges-Anglas
We already provided the setters, so also provide the getters like OpenSSL does. Addition prompted by the use of those functions in recent openvpn releases. manpage diff from schwarze@ (thanks!) with input from jsing@, ok tb@ jsing@
2018-03-15add syspatch public keys for 6.3 and 6.4Robert Nagy
2018-03-15syncTheo de Raadt
2018-03-15"force dirty" printf's are no longer required when pushing filesystemsTheo de Raadt
safely to disk. The subsystem seems to be working as intended! :)
2018-03-15Remove unused struct member.Kevin Lo
ok deraadt@
2018-03-14When processing IPsec AH packets check that the header fits intoAlexander Bluhm
the packet length. found by Maxime Villard; from FreeBSD; OK procter@ markus@
2018-03-14bump minor version just to be sure it makes release :-)Gilles Chehade
ok gilles@
2018-03-14newaliases is so 70s, very tied to the 'db' table backend (which has notGilles Chehade
been the default for a long time now) but users still assume this is the way to update aliases within the MTA. when smtpctl is invoked as newaliases, have it notify the daemon that it has had the aliases table updated, no matter what backend it uses, as it will at worst be a noop and at best do what user expected. ok eric@
2018-03-14Message-Id header is not added if sent over submission port because theGilles Chehade
port is stored in the listener structure using the network order. ok eric@
2018-03-14skip spf mechanisms that have been processed already.Eric Faurot
prevent possible loops on badly configured spf records. ok gilles@
2018-03-14regenJasper Lievisse Adriaanse
2018-03-14add a number of devices found on the new X1Jasper Lievisse Adriaanse
feedback and ok jsg@
2018-03-14On newer machines IPMI attaches only using the ACPI tables instead ofPatrick Wildt
the SMBIOS table. Some machines even have IPMI defined in both tables. This attachment driver makes ipmi(4) available via ACPI. There can only attach one ipmi(4) device, either on ACPI or SMBIOS. Akin to the SMBIOS-attached ipmi(4) this driver is disabled by default. Feedback from jsg@ ok deraadt@
2018-03-14disable POOL_DEBUG for releaseSebastian Benoit
ok deraadt@
2018-03-14remove 6.0 keysT.J. Townsend
2018-03-14we head to release soonTheo de Raadt
2018-03-14SIGSTKSZ is better defined as MINSIGSTKSZ + n pages (meaning 1U << ↵Theo de Raadt
_MAX_PAGE_SHIFT) Discussion with kettenis
2018-03-14disable the session resumption warnings for releaseMarc Espie
2018-03-14letsencrypt responded with a 301 redirect when requesting the chainFlorian Obser
certificate for some time. While they stopped doing so it seems best to follow redirects anyway. More status codes pointed out by & OK sthen OK benno
2018-03-14block two VMs from using the same disk image file at the same time.Mike Larkin
Also changes an error message in vmctl to reflect same.
2018-03-14knfMike Larkin
2018-03-14sort expiry-time;Jason McIntyre
2018-03-14rename recently-added "valid-before" key restriction to "expiry-time"Damien Miller
as the former is confusing wrt similar terminology in X.509; pointed out by jsing@
2018-03-13ensure SYS_getrandom and GRND_NONBLOCK are both defined before using ↵Brent Cook
getrandom(2) Based on discussion here https://github.com/libressl-portable/openbsd/pull/82 Suggested fix from jsing@
2018-03-13Mbuf data is used as struct ether_header before it has been madeAlexander Bluhm
continuous. The length of the hardware and protocol address are provided in the network packet and have to be checked first. So enforce that we only deal with internet over ethernet arp headers with the address length filled correctly. found by Maxime Villard; OK claudio@
2018-03-13remove the Ic macro from EXAMPLES, and use a much more standard literal;Jason McIntyre
while there, kill some Tn
2018-03-13Calculate RFC7217 link-local style addresses the same way asFlorian Obser
slaacd(8). RFC 7217 states (section 5, page 9): | The Interface Identifier is finally obtained by taking as many | bits from the RID value (computed in the previous step) as | necessary, starting from the least significant bit. Problem in slaacd pointed out by semarie@. OK sthen, phessler
2018-03-13RFC 7217 states (section 5, page 9):Florian Obser
| The Interface Identifier is finally obtained by taking as many | bits from the RID value (computed in the previous step) as | necessary, starting from the least significant bit. Copy bits from the end of the digest array, not from the beginning. While here initialize iid. Problem that IPv6 addresses change while they should not pointed out by semarie@. OK sthen, phessler
2018-03-13Preparation for i386 Meltdown fix:Alexander Bluhm
- provide a cpu_softc for cpu_attach() etc. - replace per PCB TSS with per CPU TSS The first change prepares for cpu_info being embedded in a cpu_full_info. Therefore during autoconf/cpu_attach we hand down a softc. The second change removes the per PCB TSS. We now have one TSS per CPU, thus in cpu_switchto() we only have to patch the ring 0 stack pointer instead of loading a new TSS. This also allows for cleaning up the GDT, so we only have a single slot for the TSS. from hshoexer@; OK deraadt@
2018-03-13Fix commentsJeremie Courreges-Anglas
ok eric@ a while ago
2018-03-13drm/edid: Add 6 bpc quirk for CPT panel in Asus UX303LAJonathan Gray
From Kai-Heng Feng 5b7ed414974320d7ebda71d18c85f505f3d959c0 in linux 4.4.y/4.4.119 06998a756a3865817b87a129a7e5d5bb66dc1ec3 in mainline linux
2018-03-13drm/dp/mst: save vcpi with payloadsJonathan Gray
From Harry Wentland c088f7bc3310bb57e0aaea297c7e2f467015d215 in linux 4.4.y/4.4.94 6cecdf7a161d2b909dc7c8979176bbc4f0669968 in mainline linux
2018-03-13pmap_map_ptes() always returns the same ptep and pdepp pointers,Philip Guenther
so inline the assignments, pushing them through the callers into several other functions. This shows that pmap_free_ptp() was doing a duplicate set of pmap_tlb_shootpage() calls: delete the extras. ok deraadt@ mlarkin@
2018-03-13We don't save+restore FS.base and GS.base on every context switch butPhilip Guenther
rather reset GS.base and restore FS.base to what was set via __tcb_set(), so we can't really support the wr{fs,gs}base instructions by userspace. Enabling CR4_FSGSBASE is therefore incorrect so stop doing so. ok jsg@ krw@
2018-03-13make m_pullup skip over empty mbufs when finding the payload alignment.David Gwynne
2018-03-13on input, check the unicast address before the multicast handling.David Gwynne
if the mac address is not for the interface, it must be multicast or broadcast. this is instead of if the packet is not multicast/broadcast, it must be for the interface. this allows ethernet interfaces to have multicast mac addresses without having to special case it themselves. eg, carp load balancing should become easier with this. ok mpi@
2018-03-12make m_adj keep m_data aligned when removing all the data in an mbuf.David Gwynne
previously it took a shortcut when emptying an mbuf by only setting m_len to 0, but leaving m_data alone. this interacts badly with m_pullup, which tries to maintain the alignment of the data payload. if there was a 14 byte ethernet header on its own that was m_adjed off, and then the stack wants an ip header, m_pullup would put the ip header on the ethernet header alignment, which is off by 2 bytes. found by stsp@ with pair(4) on sparc64. ok stsp@ too
2018-03-12Remove dependencies for non-existing files.Mark Kettenis
From Artturi Alm.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 22:47:56 +0000