summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-05-15drop unused <time.h>cheloha
ok kn@ mpi@
2018-05-15Link free directory to libcrypto regress test suite.Theo Buehler
ok jsing
2018-05-15Fix switch-client -l, from Jean-Marc Eurin in GitHub issue 1343.Nicholas Marriott
2018-05-15Typo fix, ok bluhm@Martin Pieuchot
2018-05-15Use memset(3) instead of bzero(3) for consistency and as per POSIXhelg
recommendation.
2018-05-15Fix format string errors in log messages and update ldapd to use relayd's log.cReyk Floeter
OK benno@ jmatthew@
2018-05-15Remove a4x bus space hack.Mark Kettenis
ok patrick@
2018-05-15Remove a4x bus space hack.Mark Kettenis
ok patrick@
2018-05-15fix format strings; ok @kettenisOtto Moerbeek
2018-05-15Take NET_LOCK for pppioctl when called via the tty ioctl handlerMike Belopuhov
ok mpi
2018-05-15Grab the KERNEL_LOCK() in pppasyncstart/pppasyncrelinq/pppasyncctlp.Martin Pieuchot
The tty layer still relies on it to serialize access to its data. Fixes crashes reported & tested by form@ via mikeb@. ok mikeb@
2018-05-15Test DSO_free(NULL).Theo Buehler
2018-05-15remove _CONF_free_data(). It doesn't belong here.Theo Buehler
2018-05-15Remove the /* ASN1_item_free */ annotations I added in r1.9 again.Theo Buehler
They generate a lot of noise in an upcoming diff.
2018-05-15correct keyowrd name (permitemptypasswords); from brendan macdonellJason McIntyre
2018-05-14wrap an overlong lineTheo Buehler
2018-05-14Add support for register shift/io-width to the console code as well.Mark Kettenis
ok visa@, patrick@
2018-05-14simplify as suggested by Anton Lindqvist a while agoGilles Chehade
this is not linked to the build
2018-05-14When checking the IPsec enable sysctls, ipsec_common_input() hadAlexander Bluhm
switches for protocol and address family. Move this code to the specific functions from where the common function is called. As a consequence the raw ip input functions can never be called from udp_input() anymore. If IPsec is disabled, the functions ah6_input(), esp6_input(), and ipcomp6_input() do not start processing the header chain. The raw ip input functions are called with the mbuf and offset pointers from the protocol walking loop which is the usual behavior. OK mpi@ markus@
2018-05-14kill corrupt / uncorrupt queue mechanism as it has never been usable and itGilles Chehade
will be made irrelevant when the new config comes up soon ok eric@
2018-05-14When walking the IPv6 header chain in IPsec output, check that theAlexander Bluhm
next extension header is within the packet length. Also check at the end that the IPv4 headers are not longer than the packet. reported by Maxime Villard; from markus@ via NetBSD; OK mpi@
2018-05-14Some broken terminal emulators (e.g. sakura) do the equivalentIngo Schwarze
of "stty cols 0". Ignore that insanity rather than setting conf.output.width to an invalid value and embarking on infinite loops. Issue reported by Jesper Wallin <jesper at ifconfig dot se>, thanks!
2018-05-14Relax the way irqs are assigned. This diff does:Mark Kettenis
- dynamic allocation of interrupts for dino(4) and gsc(4) - only mention irq locators for devices which use interrupts. - for gsc(4), this actually postpones interrupt allocation until gsc(4) attaches, so asp(4)/lasi(4)/wax(4) won't route the interrupt yet, but the gsc(4) child will take care of this. - remove the irq locator for the drivers which do not need a fixed assignment. siop and moongoose could benefit from this but don't work at the moment so this is left as an exercize to future kernel hackers. A side effect from this is that we do not need multiple sti(4) attachment lines, so PCI sti(4) devices will now attach as sti0 rather than sti2. With this diff, multiple dino(4) devices attached to the same parent will use different interrupt sources, and more than two dino(4) devices can attach. Tested on 715/75 (old-gen using asp), 715/100/XC (new-gen using lasi), B132L+, B180L, C240, B2000, C3650. From miod@
2018-05-14Stopping counting and reporting CPU time spent spinning on a lock asMartin Pieuchot
system time. Introduce a new CP_SPIN "scheduler state" and modify userland tools to display the % of timer a CPU spents spinning. Based on a diff from jmatthew@, ok pirofti@, bluhm@, visa@, deraadt@
2018-05-14Remove duplicated word ("scope scope").Reyk Floeter
Pointed out by jmc@
2018-05-14Expose memory barriers to userland.Mark Kettenis
ok visa@, mpi@
2018-05-14Add support to filter on attributes.Reyk Floeter
This can be used to allow users to change their password (and a few other things) but not their entire dn. For example: allow read access to any by self allow write access to any attribute userPassword by self This is currently only supported for "write" (modify, add, delete) and not "read" (search) filter rules. OK jmatthew@
2018-05-14Use a SRP list to protect pfkeyv2 sockets, thus removing the need toMartin Pieuchot
grab the KERNEL_LOCK() when delivering messages. This is the same solution already used by routing sockets. ok claudio@, visa@
2018-05-14constrain fractional part to [0-9] (less confusing to static analysis); ok ian@Damien Miller
2018-05-14Delete unused/obsolete labelsPhilip Guenther
2018-05-13vmd(8): enable pause / unpause for vm ownerspd
Patch from Mohamed Aslan. Thanks! ok kn@
2018-05-13Fix code which is #ifdef TRAP_SIGDEBUG or DEBUG: wrong variable andPhilip Guenther
format string mismatch
2018-05-13Add const to the 'name', 'value', and 'section' arguments ofTheo Buehler
X509V3_EXT_{,n}conf_nid(3), X509_EXT_{,n}conf(3) X509V3{,_CRL,_REQ}_add_{,n}conf(3) as well as the get_string() and get_section() members of X509_CONF_METHOD_st. tested in a bulk build by sthen ok jsing
2018-05-13Fix a malloc() NULL check in ssl3_send_client_kex_ecdhe_ecp(), by addingJoel Sing
the missing goto. While here also remove a set of unnecessary parentheses.
2018-05-13Reference the related accessor EVP_PKEY_get0_asn1(3).Ingo Schwarze
More logical ordering of EVP_PKEY_base_id(3) and EVP_PKEY_id(3) while here.
2018-05-13Document EVP_PKEY_get0_asn1(3), it is declared in <openssl/evp.h>.Ingo Schwarze
It makes no sense to have method enumerators public, but the function to retrieve the method of a specific public key undocumented. Besides, it is confusing to have EVP_PKEY_asn1_get0(3) documented without mentioning the very different EVP_PKEY_get0_asn1(3). Remove a duplicate .Xr while here, and reference the related accessor EVP_PKEY_base_id(3). Triggered by tb@ adding a const qualifier to the argument.
2018-05-13Enable futex(2)-based mutex on arm64.Visa Hankala
OK mpi@, kettenis@
2018-05-13Add memory barriers to libc's _spinlock() to make the mechanismVisa Hankala
serialize memory accesses properly. _spinlock()'s backend, _atomic_lock(), already issues an entry barrier on some architectures, but that practice has not been consistent. This patch generalizes the barrier use. OK kettenis@, mpi@
2018-05-13Document EVP_PKEY_bits(3).Ingo Schwarze
It is clearly public because it is declared in <openssl/evp.h>, refenced from EVP_PKEY_asn1_set_public(3), and similar to the documented functions DH_bits(3) and RSA_bits(3). Triggered by tb@ adding a const qualifier to its argument.
2018-05-13More clean up of the RSA key exchange code.Joel Sing
Convert to CBS, use more appropriate variable names and improve validation. Allocate a dedicated buffer to hold the decrypted result, rather than decrypting into the handshake buffer (which is also used to send data). ok beck@ inoguchi@ tb@
2018-05-13Add missing pledge(). From Jesper Wallin <jesper at ifconfig.se>.Alexandre Ratchov
Thanks!
2018-05-13Add const to the ASN1_OBJECT argument of TS_TST_INFO_get_ext_by_OBJ(3).Theo Buehler
Should have been part of the previous commit. Omission noted by schwarze. tested in bulk build by sthen ok jsing
2018-05-13Add const qualifier to the ASN1_OBJ * argument ofTheo Buehler
TS_REQ_get_ext_by_OBJ(3), TS_REQ_set_policy_id(3), TS_RESP_CTX_add_policy(3), TS_RESP_CTX_set_def_policy(3), and TS_TST_INFO_get_ext_by_OBJ(3) tested in a bulk by sthen ok jsing
2018-05-13Add const qualifiers to the char *zone and char *user arguments ofTheo Buehler
SXNET_add_id_INTEGER(3), SXNET_add_id_asc(3), SXNET_add_id_ulong(3) tested in a bulk by sthen ok jsing
2018-05-13In pkcs12.h rev. 1.18 2018/05/13 13:46:55, tb@ added const qualifiersIngo Schwarze
to the "pass" and "name" arguments of PKCS12_create(3). Adjust the manual.
2018-05-13Add support for Elantech trackpoints to pms. Extend the list ofUlf Brosziewski
"IC types" that identify Elantech-V4 touchpads. Thanks to Ryan Lennox for help and testing. ok mpi@
2018-05-13In pem.h rev. 1.18 2018/05/13 10:47:54, tb@ added const qualifiersIngo Schwarze
to the "name", "header", and "data" arguments of PEM_write(3) and PEM_write_bio(3). Adjust the manual.
2018-05-13In ocsp.h rev. 1.15 2018/05/13 10:42:03, tb@ added const qualifiersIngo Schwarze
to the "url" argument of OCSP_crlID_new(3) and to the "urls" argument of OCSP_url_svcloc_new(3). Adjust the manuals.
2018-05-13Add const qualifiers to the X509_SIG * and char * arguments ofTheo Buehler
PKCS8_decrypt(3). tested in a bulk build by sthen ok beck, jsing
2018-05-13In x509.h rev. 1.49 2018/05/13 10:36:35, tb@ added a const qualifierIngo Schwarze
to the argument of X509_get_subject_name(3) and X509_get_issuer_name(3). Adjust the manual.