summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2003-01-25tables are just tables; implementation details (radix) don't need to beHenning Brauer
mentioned. accidently already slipped in w/ my last commit; this one is forced. ok theo
2003-01-25if a table name ist too long, it's actually nice to tell so instead of justHenning Brauer
aborting with a syntax error
2003-01-25kill whitespace at EOLHenning Brauer
2003-01-25- format consistent across platformsJason McIntyre
- sparc -> hppa in hppa/MAKEDEV.8 - removed references to wscons from mac68k/MAKEDEV.8 - typos ok deraadt@
2003-01-24Make table tests less sensitive to environmental conditions.Cedric Berger
Work started with revision 1.4 ok dhartmei@
2003-01-24plug potential memory leak; vincent okTheo de Raadt
2003-01-24On save:Jason Wright
If the fpu isn't enabled, don't save state, otherwise, save the state, mark both sides clean and disable the fpu. On restore: If the saved fpu state has the fpu disabled, do nothing, otherwise, restore everything.
2003-01-24Instead of stashing the timestamp on the pw temp file before eachTodd C. Miller
edit, just stash it once in copyfile(). This fixes the check for whether or not changes have been made (based on the timestamp) for cases like when the _shadow group is missing but is fixed by the admin during the next edit.
2003-01-24Save FPU state (unconditionally)Jason Wright
2003-01-24save and restore fp state when switching threads. This, withMarco S Hyman
an arch/i386 patch previously commited and arch/sparc64 patches from jason@ make the preemption_float test pass on those two architectures. Do not run signal handlers for a thread until the thread has been made current, ensuring the proper context. Solves several (if not all) of the '_pq_insert_tail: Already in priority queue' problems.
2003-01-24save i386 fpu stateMarco S Hyman
2003-01-24Changed: - Am. Eng. -> Br. Eng.Jason McIntyre
eg. normalization -> normalisation - examples/commands in white bold face - .Pa macros -> .Ar - ordered SEE ALSO - removed double quotes from GRAMMAR section - some grammar typos ok deraadt@
2003-01-24ansiTheo de Raadt
2003-01-24update supported devices list, from alexander guyMichael Shalayeff
2003-01-24compile rdata.c using -O0 on sparc64 due to bug in propoliceJakob Schlyter
2003-01-24ndc doesn't start named if named_flags=NO in /etc/rc.confMike Pechkin
Fix it. millert@ ok
2003-01-24Sigh, pf_pull_hdr (aka pf_pull_hair) doesn't do an m_pullup, it merelyDaniel Hartmeier
copies the data to the specified buffer. So, for TCP options, provide an sufficiently large buffer and copy to there.
2003-01-24Move the mbuf pullup for TCP options to the beginning of TCP handling,Daniel Hartmeier
doing it later can invalidate pointers to mbuf data. This fixes subtle breakage just introduced (with 1.306).
2003-01-24document pfctl -vvsqHenning Brauer
2003-01-24make rate2str include the unit in the ouput even if it is 0b. was irrelevantHenning Brauer
before as you cannot specify "bandwidth 0b" on a rule; now that rate2str is used for the stats output it does matter.
2003-01-24Fix wscale support, the first version didn't really work right.Daniel Hartmeier
Interestingly, our own stack uses wscale 1 quite regularly, and I now suspect that this is what caused most of the state failures I've seen. They were quite rare, but with working wscale support, they are reduced even more. ok henning@
2003-01-24pfctl -vvsq shows bandwidth and packets/s for PRIQ now tooHenning Brauer
2003-01-24let pfctl -vvsq loop and display measured bandwidth and packets/s per queue.Henning Brauer
cbq only for now.
2003-01-24export rate2strHenning Brauer
2003-01-24tune internal APIs a bitHenning Brauer
2003-01-24do not print deprecation messageJakob Schlyter
2003-01-24Convert m88k pmap from physseg to VM_PAGE_MD.Miod Vallat
This allows us to remove some ambiguities on how some functions are called, remove some diagnostic checks for conditions that can never happen and remove the ugly hack with "pmap_initialized". Then, rework internal function interfaces and some logic so as to stop fetching vm_page from a pa and the reverse every now and then - this makes some pmap operations run much faster. While there, various KNF and whitespace fixes, and rename some structure fields to be closer to the m68k pmap. per art@'s idea.
2003-01-24bring in 3 yet unused helper functions before I lose 'em againHenning Brauer
2003-01-24install nslookupJakob Schlyter
2003-01-24Remove duplicate kerberos entries; ekshell2 should probably just be removedTodd C. Miller
2003-01-24This is a project to modify executables so that they do not have anyDale Rahn
executable regions which are writable. If a section of an executable is writable and executable, it is much easier for errant code to modify the executable's behavior. Two current areas in shared library environments which have this critical problem are the GOT (Global Offset Table) and PLT (Procedure Linkage Table). The PLT is required to be executable and both GOT and PLT are writable on most architectures. On most ELF architecture machines this would cause shared libraries to have data and BSS marked as executable. Padding to the linker script for programs and shared libraries/objects to isolate the GOT and PLT into their own load sections in the executables. This allows only the text(readonly) region and the PLT region to be marked executable with the normal data and BSS not marked as executable. The PLT region is still marked executable on most architectures because the PLT lives in the "data" or "BSS" regions and the dynamic loader will need to modify it. Since the GOT and PLT should only ever be written by the dynamic linker, it will be modified to mprotect those regions so that they are not writable during normal execution. If the dynamic linker needs to modify the regions later, (eg for lazy binding), it will mprotect the region, make the necessary changes, and mprotect it back. Since it is possible to receive a signal which would interrupt the program flow and perhaps cause the dynamic linker to modify the same (or nearby) PLT references, it is now necessary for signals to be blocked for the duration of the mprotect. This diff was omitted from the original commit, this implements the -Z option to produce traditional (non protected) executables.
2003-01-24PMAP_{DE,}ACTIVATE are not used anymore.Miod Vallat
2003-01-24Flush the blrl instruction from the instruction cache if the GOT tag isDale Rahn
present. Fixes illegal instruction problems seen the last few days tested by myself and matthieu@
2003-01-23Honour TCP_WRAPPERS mk.conf setting; ok millert@Damien Miller
2003-01-23- Either memset() or loop and set to zero, not bothJason Wright
- reading RX_COMPLETION is a waste of time (and a -slow- PCI read vs. an, albeit uncached, memory access to determine the same thing). - on RX_OVERFLOW, reset the board; the RX unit has probably wedged
2003-01-23will need machine/frame.h for profilingMichael Shalayeff
2003-01-23Add a "DisableXProg" option to CVSROOT/config that can be used toTodd C. Miller
disable support for Update-prog and Checkin-prog. This is a good idea for anonymouse cvs servers or anyone who doesn't need this feature. From Stefan Esser.
2003-01-23be consistant on the spl everywhere and use splimp(), this seems to prevent ↵Michael Shalayeff
wi_mgmt_xmit: xmit failed messages; millert@ testing and ok
2003-01-23Little cleanup thanks to Andrey MatveevCedric Berger
2003-01-23'conjunction' typosAnil Madhavapeddy
2003-01-23scp -12; Sam Smith and others; ok provos@, deraadt@Markus Friedl
2003-01-23bandwidth limitation patch (scp -l) from niels@; ok todd@, deraadt@Markus Friedl
2003-01-23ssh-add -c, prompt user for confirmation (using ssh-askpass) whenMarkus Friedl
private agent key is used; with djm@; test by dugsong@, djm@; ok deraadt@
2003-01-23- rework Tables section in the introduction (pointed out by Theo)Ryan Thomas McBride
- Macros and Tables can appear anywhere in pf.conf - Since tables are no longer just a rule option, move the section up appropriately. ok dhartmei@
2003-01-23Fix a bug where the kernel crashes when translating IPv6 ICMP packets.Daniel Hartmeier
This only happens when using nat/rdr/binat on IPv6 connections, which hasn't been used before, obviously. But it does work now. Reported and confirmed by evilted@efnet, ok mcbride@
2003-01-23typos;Jason McIntyre
ok millert@
2003-01-23syncTheo de Raadt
2003-01-23stubs for functions needed by the vaxMarco S Hyman
2003-01-23Cleanup of TABLES section.Ryan Thomas McBride
Help with english language jmc@ ok dhartmei@ cedric@
2003-01-23print out the bad values when the test failsMarco S Hyman