summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-01-12Remove bpfdetach() call right in front of the if_detach() call sinceClaudio Jeker
bpfdetach() will be called in if_detach(). Diff by Gleydson Soares
2010-01-12Delete unused structures. Pointed out by deraadt@.YASUOKA Masahiko
ok mcbride@
2010-01-12fix ioctl number that conflicted with tun(4)'s ioctl number.YASUOKA Masahiko
ok mcbride@
2010-01-12Remove the "bump the advskew to 240 in case of errors" hack.Marco Pfatschbacher
The demote counter can handle that. This lets carp hosts with an identical demote count still know which one is the designated master and prevents them from failing over asymmetrically. Since there is a demote handling bug in all releases prior to 4.6, symmetric failover will only work against 4.6 (and newer) from now on. OK henning@
2010-01-12set the length of the send queue to 1.David Gwynne
this prevents the ultimate length of the queue of the underlying interface from being artificially inflated while hte vlan/trunk queue is filled and then dumped wholesale on the underlying interface, which will dump its massive queue wholesale on the chip. tx mitigation is only triggered on real interfaces now (which is where the cost is) ok beck@ original diff ok kjc@ henning@
2010-01-12add a buffer_get_string_ptr_ret() that does the same asDamien Miller
buffer_get_string_ptr() but does not fatal() on error; ok dtucker@
2010-01-12Do not allow logins if /etc/nologin exists but is not readable by the userDarren Tucker
logging in. Noted by Jan.Pechanec at Sun, ok djm@ deraadt@
2010-01-12Allow the queueing of multiple fragments on virtual interfaces with aBob Beck
queue length of one - i.e. vlans with the forthcoming change from dlg. this allows fragmented frames to be sent on such an interface, hoping that the interface underneath copes correctly - A better fix for this will be forthcoming soon, but this is good enough for now, and will allow the change for vlans to use an ifq length of 1. tested by me and dlg@, ok dlg@, claudio@, deraadt@
2010-01-12Use M_ZERO in malloc instead of doing a bzeor right afterwards.Claudio Jeker
From Gleydson Soares, OK beck@
2010-01-12delete with extreme prejudice a debug() that fired with every keypress;Damien Miller
ok dtucker deraadt
2010-01-12avoid spinning when fd passing on nonblocking sockets by calling poll()Damien Miller
in the EINTR/EAGAIN path, much like we do in atomicio; ok dtucker@
2010-01-12Do not check malloc return value against NULL, as M_WAITOK is used.Charles Longeau
ok miod@
2010-01-12Make the structures for ifa_msghdr and friends even more likeTheo de Raadt
the route messages so that people and compilers will not get confused. ok claudio
2010-01-12Remove dead assignment and newly created unused variable.Charles Longeau
Found by LLVM/Clang Static Analyzer. ok grange@ krw@
2010-01-12Fix bug introduced in r1.78 (incorrect brace location) that broke key auth.Darren Tucker
Patch from joachim joachimschipper nl.
2010-01-11key should be an int not a char.Nicholas Marriott
2010-01-11Make the detach function handle the case of a partial attach, and make sureMark Kettenis
we also free the additional mapped BAR on "cyclone" chips. ok deraadt@
2010-01-11Increase/decrease the per-CPU interrupt depth variable around APIC interruptsMark Kettenis
like we do for PIC interrupts. ok art@, deraadt@, oga@
2010-01-11encourage use of setreseuid(), and warn there are other privs; ok henningTheo de Raadt
2010-01-11Fix wrong logic in error checking of buf_dynamic, found by pcc.Jacek Masiulaniec
2010-01-11sometimes, I manage to finish some stuffMarc Espie
2010-01-11quirks is special here too, oops.Marc Espie
2010-01-11When resuming from suspend, prime play buffers with silence,Alexandre Ratchov
otherwise the client would underrun by more than its own buffer size, which currently is not allowed (causes the client to deadlock). Set the minimum client buffer size to two blocks. Single block buffers don't work properly yet. with help from jakemsr
2010-01-11allow installation to proceed even without -r if it's an actual updateMarc Espie
(all markers match, conflict and pkgpath, and the pkgname is newer if it's the same stem/flavor combo)
2010-01-11works much better if I actually add the option...Marc Espie
2010-01-11move the oldlibs code into its separate file, prior to fixing it.Marc Espie
allow replacement if it only touches partial or libs
2010-01-11protect gzip against weird file namesMarc Espie
2010-01-11dlg@ lost the SCSI_IGNORE_ILLEGAL_REQUEST flag on all SYNCHRONIZE_CACHEKenneth R Westerback
commands. Noticed & fix tested by halex@. ok dlg@
2010-01-11Do not use after free kif->if_index; discovered with claudioTheo de Raadt
ok dlg
2010-01-11when converting keys, truncate key comments at 72 chars as per RFC4716;Damien Miller
bz#1630 reported by tj AT castaglia.org; ok markus@
2010-01-11Add PIPEX option, disabled by default for now.Ryan Thomas McBride
ok deraadt yasuoka
2010-01-11various cleanup, including a fix from Daniel Dickman;Jason McIntyre
ok espie
2010-01-11KNFBob Beck
2010-01-11KNFBob Beck
2010-01-11It's '-D dontmerge' now.Bernd Ahlers
2010-01-11Bring mutex protections to ststart, cdstart and ssstart, as alreadyKenneth R Westerback
done in sd. Make names consistant across all three. ok dlg@ tested (cd) & ok beck@
2010-01-11"default" routes need a mask of 0 too.David Gwynne
from and ok claudio@
2010-01-11"default" routes need a mask of 0 too.David Gwynne
from and ok claudio@
2010-01-11Pull in fix from kif via FreeBSD r1.114 to properly initializeKenneth R Westerback
uio_off. Prevents crap being passed as the starting offset to getdirentries(), which could lead to various kinds of confusion when trying to process cd9660 directory entries. Problem seen by jsg@, who also found the fix in FreeBSD. ok beck@
2010-01-11add "log brief" and "log verbose" to change logging verbosityJonathan Gray
like several other things in the tree. ok reyk@ looks fine claudio@
2010-01-11use calloc() instead of multiplying for malloc(); ok reykTheo de Raadt
2010-01-11Do not crash when starting up with a bad config file. Check thatClaudio Jeker
conf.listen_addr is actually valid before deref.
2010-01-11Negative offset or negative size in a buf is invalid. Treat just like otherKenneth R Westerback
invalid offsets and sizes: reject the i/o. ok deraadt@ beck@
2010-01-11Do not prompt for a passphrase if we fail to open a keyfile, and log theDarren Tucker
reason the open failed to debug. bz #1693, found by tj AT castaglia org, ok djm@
2010-01-11When mapping CarBus memory BARs, enforce a minimum alignment of 0x1000. ThisMark Kettenis
is the granularity of the windows provided by the CardBus bridge. A smaller alignment may result in those windows covering address space used by other PCI devices in the machines. Fixes CardBus xl(4) n naddy's X40.
2010-01-11Initial import npppd(8). npppd is a new PPP daemon that handles manyYASUOKA Masahiko
ppp sessions as a server. It supports L2TP, PPTP and PPPoE as tunneling. ok mcbride@ dlg@ deraadt@ reyk@.
2010-01-11"final" leak in state creation: in pf_state_key_setup, if we actuallyHenning Brauer
need two state keys (NAT case), and we succeed allocating the first one but fail getting the second we'd leak the first one. obvious and thus ok'd by dlg ryan and theo within seconds
2010-01-11lex <=, >=, !=, and -> into a single token for correctness and to reduce theTheo de Raadt
lookahead in the parser ok reyk
2010-01-11fix a bug in pf_create_state that was a major source of amusement for meHenning Brauer
over the last couple of weeks (ever since I found it): when we are out of memory for the state keys we leak the state. oh the irony. instead of just fixing that one case rework the error handling in the entire function. verified painfully by yours truly by forcefully exercising each and every error path in there. ryan ok
2010-01-11rework the polling code to use the semantic krw@ proposed.David Gwynne
intercept the ccb_done handling so polled commands set a flag that mpi_poll tests on. when ccb_done sets the variable, the poll loop breaks and mpi_poll runs the original ccb_done handler for the ccb completion. this is a lot simpler than the previous implementation and removes a mutex. ok beck@