| Age | Commit message (Collapse) | Author |
|---|
|
warnings. ok djm@
|
|
|
|
|
|
_libc___cxa_thread_atexit_impl reference on gcc architectures that breaks
the build.
|
|
|
|
From Scott Cheloha, ok tb@
|
|
|
|
|
|
|
|
Crash found by Sergey Bronnikov using afl-fuzz.
Based on a diff from and OK by espie@
|
|
of system model. The early boot code already prints them, but
that output is not buffered and tends to be left out from
dmesg submissions.
|
|
unused code. POW interrupts are now handled in if_cnmac.c.
|
|
Use more descriptive names, and make it clearer that real and user
timers work on different static storage. The end goal is to be able to
reuse those timer functions, instead of inlining other timer
implementations subject to clock jumps.
Discussed with Scott Cheloha
|
|
SSID against ifi->ssid, not the SSID of the new lease. They
should be the same, but this makes the intent clearer and removes
an assumption about the contents of ifi->active.
|
|
is all the line.
problem reported by Sergey Bronnikov
|
|
|
|
interface is also made available as __cxa_thread_atexit_impl to satisfy the
needs of GNU libstdc++.
ok guenther@, millert@
|
|
are an initiator and store the information on the proposal, because we
only had one proposal so far. This changes the code to only create one
SA on the first proposal and then apply the SPI to all other proposals
as well.
ok markus@
|
|
|
|
|
|
that contain code, just like some sun4u machines. So add it for sun4v as
well when entering the mappings into the kernel pmap.
|
|
Missed in previous, found by deraadt@, ok visa@
|
|
condition is handled a line before.
|
|
replace "minimal" with "minimum".
|
|
|
|
then call the next one, which can then validate itself. Thing is, most
layers try to run validations on the upper layer, which is not useful
and rather confusing. This cleans it up.
First change is that the generic payload parser does not anymore pass
the length of the whole datagram, including all remaining payloads, but
passes only the length of the specific payload to the specific payload
parser. Second change is that the payload validators don't check the
length of the upper layer, but only verify their own lengths.
Diff discussed with hshoexer@ and sthen@
Tested by sthen@
|
|
their IPv6 header hop limit field. Let pf drop neighbor solicitation,
neighbor advertisement, router solicitation, router advertisement,
and redirect ICMP6 packets that do not comply. This enforces that
bogus packets cannot be routed when pf is enabled.
OK mpi@ sashan@ benno@
|
|
pointed out by krw
|
|
ok mpi@
|
|
by aja and others.
ok krw
|
|
|
|
is set, pf_find_divert() cannot fail so put an assert there.
Explicitly check all possible divert types, panic in the default
case. For raw sockets call pf_find_divert() before of the socket
loop. Divert reply should not match on TCP or UDP listen sockets.
OK sashan@ visa@
|
|
extend ddb(4) "ps /o" output to print which CPU is currently holding the
KERNEL_LOCK().
Tested by dhill@, ok visa@
|
|
ok visa@
|
|
flag in the SA header that there is another proposal coming. The "more"
attribute borrows its values, as specified in the RFC, from IKEv1.
ok sthen@
|
|
for each transform type. We do some sanity checks, for instance we do
require an encryption transform for ESP, but that's not enough. We need
to check that for every proposed transform type we have found a matching
transform in our own proposal.
ok sthen@
|
|
and into struct interface_info. Nuke set_lease_times().
|
|
PF ruleset. This is not a complete block on _pbuild being able to communicate
(e.g. non-TCP/UDP protocols don't have a PCB with userid, so PF can't restrict
in those cases) but avoids some cases, and in particular makes it more obvious
when a port does things like download extra distfiles or dependencies
as part of the build process. Slight tweak from a diff by espie@.
|
|
|
|
if we didn't attach a device driver to avoid enumerating them again in
the acpi device tree walk.
ok deraadt@
|
|
- pledge(2) "stdio" after managing arguments (opening files)
- add $OpenBSD$ markers on elfrd_size.c and elfrdsetroot.h
- add a check for NULL on malloc(3) call in elfrd_size.c
from semarie, ok deraadt
|
|
for a custom res_hnok(), so just use the libc version of res_hnok().
Requested by deraadt@
|
|
ok visa@, kettenis@, deraadt@
|
|
Requires U-Boot >= 2017.11 and dtb >= 4.15-rc1.
|
|
|
|
|
|
|
|
|
|
|
|
|
