summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-08-22Rename now oddly-named variable.Jeremie Courreges-Anglas
2017-08-22reboot: don't wait for processes to die if there are noneStefan Fritsch
If processes are already dead, reduce wait times between SIGTERM and SIGKILL and wait time after SIGKILL. The reboot syscall will cause another sync later on, therefore the long wait times are not necessary for disk i/o, either. "makes sense" deraadt@
2017-08-22Add some buffercache docsStefan Fritsch
* add clarifications and bread_cluster() buffercache(9) * add some comments to vfs_bio.c ok tedu@
2017-08-21Split up ahci_port_portreset into a few smaller bits, and also slightlyJonathan Matthew
adjust port multiplier detection so it doesn't call ahci_port_portreset again directly, but instead restarts the loop for the current call. During attach, poll for device detection across all ports until either all ports have detected a device, or one second has passed, rather than doing them sequentially. Devices are still attached in order of port number, so disk unit numbers won't change. ok visa@
2017-08-21Use waitpid()/EINTR idiom for the specific pid, rather than generic wait(),Theo de Raadt
in case the parent process was started with a dangling child. This style ensures any potential parent:child interlock isn't disrupted due to the "wrong" child being waited on first. Then the other other childs can safely zombie. ok millert jca brynet
2017-08-21Move the kernel relinking code from /etc/rc into a seperate scriptRobert Peichaer
/usr/libexec/reorder_kernel. Requested by ajacoutot@ to be able to relink the kernel from within syspatch(8). OK deraadt@ tb@
2017-08-21Same as previous for \r alone.Nicholas Marriott
2017-08-21Add RK3399 CPU core related clocks. Fix RK3399 SD/MMC controller clock.Mark Kettenis
For now, expose the clock speed of the Cortex-A53 cores through the hw.cupseed sysctl.
2017-08-21Do not emit \r\n to move to column 0 if there are margins, because itNicholas Marriott
will instead move to the margin left.
2017-08-21add basedir of the kernel link-kitRobert Peichaer
requested by ajacoutot@ OK tb@
2017-08-21Pass the address of the EFI system table and the EFI memory map throughMark Kettenis
properties in the /chosen node of the FDT. The properties match the ones used by Linux (see Documentation/arm/uefi.txt in the Linux kernel source tree) but with the "linux," prefix replaced by "openbsd,". While there, reduce the diffs to the arm64 efiboot. ok tom@, jsg@
2017-08-21Remove unnecessary NULL check and fix an incorrect warning.rob
Ok jca@
2017-08-21When executing ssh, use "--" to indicate end of arguments before theTodd C. Miller
host name. Adapted from a MirBSD diff by Thorsten Glaser.
2017-08-21syncTheo de Raadt
2017-08-21When the stdout stream gets broken, there is no point in readingIngo Schwarze
any more input files, and it would be misleading to start a parser, because that would show randomly truncated text. Instead, print an error message and exit the program. Issue found by Leah Neukirchen <leah at vuxu dot org>, who was surprised to see half a manpage when her /tmp/ overflew.
2017-08-21Add a comment about why we need to ignore the timestamps on perl man pagesAntoine Jacoutot
(Pod::Man adds the current date to the manuals). ok robert@
2017-08-21s/xflagssock/ioctlsock/ since the socket is (going to be) used forFlorian Obser
more.
2017-08-21Move sin6_to_str() to slaacd.c so that it can be used in moreFlorian Obser
places. While here do not compile it for the ramdisk.
2017-08-21undo unintentional commitsPeter Hessler
2017-08-21When 'enforce neighbor-as no' is set, don't do a config-time check for the ↵Peter Hessler
neighbor-as, as it is dynamic.
2017-08-21Allow SIOCGIFAFLAG_IN6 and SIOCGIFALIFETIME_IN6 ioctls withFlorian Obser
pledge("route"). These are read only and expose only minimal kernel code. slaacd(8) needs this on startup and when an interface gains the autoconf6 flag to get lifetime and autoconf information about already configured addresses. OK deraadt
2017-08-21Fix off by one in array bounds tests when parsing descriptors.Jonathan Gray
Coverity CIDs 1452970 1453305.
2017-08-215.9 pubkeys no longer neededTheo de Raadt
2017-08-21add 6.3 base keyTheo de Raadt
2017-08-21Minor cleanup, joint work with Scott Cheloha <scottcheloha at gmail dot com>:Ingo Schwarze
* Delete bogus error message and correct exit status when dying from SIGKILL. * Prefer warn(3) over perror(3) for clarity. * Return from main() rather than exit(3). * Simplify kill(getpid(), ...) to raise(...). * Drop obvious /* NOTREACHED */. No objections raised when shown on tech@.
2017-08-21Document the newly introduced RI_ROTATE_CCW flag.Frederic Cambus
OK kettenis@
2017-08-21import SSL_export_keying_material(3) from OpenSSLIngo Schwarze
2017-08-21merge the applicable parts of SSL_set_tlsext_host_name(3) documentation;Ingo Schwarze
from Paul Yang <yang dot yang at baishancloud dot com> via OpenSSL commit 190b9a03 Jun 28 15:46:13 2017 +0800
2017-08-21Selectively merge OpenSSL commit e091367d May 5 11:56:45 2017 +0100Ingo Schwarze
from Matt Caswell <matt at openssl dot org>. In particular, stop talking about SSL 2.0 and SSL 3.0, but do not start talking about TLS 1.3 just yet.
2017-08-21No need to explicitely add patch.sig to the plist, diff.sh will now pick itAntoine Jacoutot
up properly.
2017-08-21Kernel syspatches will now only contain the differing object files.Antoine Jacoutot
The syspatch(8) utility will be modified accordingly to relink the kernel at the end of its run (not done yet, still WIP). That will give us KARL and much smaller patches. Idea from deraadt@ OK robert@
2017-08-21Catch non existent files (in case a syspatch would _add_ a new file).Antoine Jacoutot
2017-08-21Mention three functions related to protocol selection by the clientIngo Schwarze
that are deprecated no-ops in LibreSSL, but that OpenSSL explicitly documented on April 19, 2017, without deprecating them.
2017-08-21The syspatch(8) build system will eventually be properly documented in its ownAntoine Jacoutot
man(1) page but until things settle and the framework is robust, this file will be used as a quick reminder. ok robert@
2017-08-21syncJonathan Gray
2017-08-21Delete non-existent function SSL_flush_sessions();Ingo Schwarze
from Rich Salz <rsalz at openssl dot org> via OpenSSL commit 1722496f Jun 8 15:18:38 2017 -0400.
2017-08-21Delete non-existent functions SSL_add_session() and SSL_remove_session() andIngo Schwarze
clarify that SSL_CTX_remove_session(3) marks the session as non-resumable. From Rich Salz <rsalz at openssl dot org> via OpenSSL commit 1722496f Jun 8 15:18:38 2017 -0400 and from Matt Caswell <matt at openssl dot org> via OpenSSL commit b8964668 Apr 26 15:16:18 2017 +0100.
2017-08-21Fix the build when RTWN_DEBUG is defined.Jonathan Gray
ok kettenis@ stsp@
2017-08-21vmm (i386): Move CPUID masks to vmmvar.hpd
My previous commit to restrict vm migration broke vmd for i386. This fixes it. ok mlarkin@
2017-08-20New manual page X509_check_private_key(3), using informationIngo Schwarze
from the OpenSSL manual and from code inspection. Use my own Copyright and license because no Copyright-worthy amount of text from OpenSSL remains. And, no, these functions do *NOT* check private keys, not at all.
2017-08-20syncTheo de Raadt
2017-08-20also crank for 6.2Theo de Raadt
2017-08-20fix a pasto in the description of UI_get0_result_string(3);Ingo Schwarze
from Richard Levitte <levitte at openssl dot org> via OpenSSL commit e9c9971b Jul 1 18:28:50 2017 +0200
2017-08-20syncTheo de Raadt
2017-08-20vmd: Allow only upward migrationpd
This restricts receiving vms from hosts with more cpu features. Tested on broadwell -> skylake (works) skylake -> broadwell (don't work) ok mlarkin@
2017-08-20Add a BUGS section stating that RSA_PKCS1_PADDING is weak by design;Ingo Schwarze
from Emilia Kasper <emilia at openssl dot org> via OpenSSL commit 1e3f62a3 Jul 17 16:47:13 2017 +0200.
2017-08-20Add a BUGS sectionIngo Schwarze
stating that RSA_padding_check_PKCS1_type_2(3) is weak by design; from Emilia Kasper <emilia at openssl dot org> via OpenSSL commit 1e3f62a3 Jul 17 16:47:13 2017 +0200.
2017-08-20import PEM_bytes_read_bio(3) from OpenSSL,Ingo Schwarze
dropping the secmem stuff that we don't want
2017-08-20Simplify the code for stopping daemons listed in pkg_scripts inRobert Peichaer
reverse order on shutdown. OK aja@ tb@
2017-08-20mention CRYPTO_mem_leaks_cb(3) because OpenSSLIngo Schwarze
now also documents it, in OPENSSL_malloc.pod