summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-08-12Clear pcb_fpcpu of the child upon fork. Not clearing it is probably notMark Kettenis
a critical issue as the pointer back to the proc in the struct cpu_info won't match, but it is better to avoid dangling pointers like this. ok patrick@, drahn@
2017-08-12Add manpage update for new grouping feature '{from,to} {i,e}bgp'job
OK phessler@
2017-08-12sig_atomic_t is not (necessarily) an int. UseKenneth R Westerback
SIG_ATOMIC_MAX for INTERNALSIG instead of INT_MAX.
2017-08-12ignore unknown/boring events by default, which modern thinkpads haveJoshua Stein
a lot of. put the spam behind an ACPITHINKPAD_DEBUG define which can be used when adding support for actually useful buttons. previous version ok deraadt, phessler, and kettenis
2017-08-12fix resource leaks, ok @guentherBrent Cook
2017-08-12Stop trying to outfox the routing tableKenneth R Westerback
by labelling dhclient routes. Just use the route(8) logic when flushing routes. ok benno@ claudio@
2017-08-12Set vendor to "Generic" like we do for ehci@fdt.Mark Kettenis
2017-08-12allow filter rules to be written that affect ibgp or ebgp neighborsPeter Hessler
discussed with henning@ OK claudio@, benno@, job@
2017-08-12em: Disable ultra-low-power mode on bootStefan Fritsch
With i219V, it sometimes happens that em fails to attach with this error: em0: Hardware Initialization Failed em0: Unable to initialize the hardware This happens always if booting native Windows 10 first and then rebooting into openbsd without switching the laptop off. But it has also been seen in other cases. This change ports the e1000_disable_ulp_lpt_lp() logic from the FreeBSD driver to disable ultra-low-power (ULP) mode. This seems to fix the problem in many (but not all) cases. The code has been merged in a way to make the diff from FreeBSD minimal. For example, the SWFW register is called H2ME on newer chips, so a new define is introduced. Also, the em_toggle_lanphypc_pch_lpt() function is left as separate function even if only used in one place at the moment. ok tom@ "commit it" deraadt@
2017-08-12fallback to strip(1) in case ctfconv(1) couldn't handle the file (i.e. whenJasper Lievisse Adriaanse
the input file lacks useful debug sections). adjust option handling accordingly to pass any flags not handled by ctfstrip(1) down to strip(1). help and ok mpi@ tb@
2017-08-12Make not yet implemented pledges more visible in grep output.Florian Obser
input benno, deraadt, tedu also standardize on #if 0 since it makes tedu's editor vomit. OK benno, pirofti on a previous version
2017-08-12In the locking wrappers for &map->lock and &map->mtx, pass through file+linePhilip Guenther
when WITNESS is enabled ok visa@ kettenis@
2017-08-12Always provide _mtx_* APIs, the use those to simplify the WITNESS wrappersPhilip Guenther
elsewhere ok visa@ kettenis@
2017-08-12bring ospf6d's log.c in sync with ospfd and bgpdSebastian Benoit
ok florian@ claudio@
2017-08-12Add a dummy (for now) <machine/reloc.h> for mips64 to fix build.Visa Hankala
OK guenther@
2017-08-12Prevent a NULL pointer deref in iwm(4) which I have seen during testing.Stefan Sperling
iwm_stop() sets the phy context pointer in the ic_bss node to NULL. If iwm_stop() runs in parallel to the newstate task, the newstate task can dereference this pointer in iwn_update_quotas() or iwm_binding_cmd(). So check the pointer for NULL before derefencing. This is a quick and dirty workaround. A proper fix for such task races is still pending.
2017-08-12Fix copy/paste error, CID 1453558.Martin Pieuchot
ok kettenis@
2017-08-12Fix Coverity CID 1453237: With rt2661 chips ral(4) was writing some stackStefan Sperling
memory garbage to the hardware while setting up beacon transmission. The driver left some fields of a struct rt2661_tx_desc on stack uninitialized. Zero out the entire struct before using it. ok mpi@
2017-08-12Import the SSL_CTX_set1_groups(3) manual page from OpenSSL, deletingIngo Schwarze
the read accessors we don't have and fixing the prototypes - the data type of each and every argument differs in the OpenSSL manuals. Reference the new page from SSL_set_tmp_ecdh(3) as suggested by jsing@.
2017-08-12Fix Coverity CID 1452915: urtwn(4) would use an uninitialized array indexStefan Sperling
if a hypothetical and malicious USB device reports no Rx endpoints. ok mpi@
2017-08-12Fix Coverity CID 1453280:Stefan Sperling
iwm(4) firmware could cause an out of bounds read of the ic->ic_channels array by lying about the channel a frame was received on. This array index is now properly bounds-checked. Not an errata-worthy fix, since the firmware has full DMA access anyway. While here, I noticed another problem: Stop assigning a firmware-derived value to ni->ni_chan. The Rx interrupt handler has no business tweaking that pointer. ok mpi@
2017-08-12remove apmwarn sysctl which is not usedTed Unangst
2017-08-12New manual page SSL_set_tmp_ecdh(3) written from scratch.Ingo Schwarze
Feedback and OK jsing@.
2017-08-12Use obj directory instead of a handcrafted working directory.rob
Pointers from tb@
2017-08-12Remove lots of outdated information found by jsing@.Ingo Schwarze
OK jsing.
2017-08-12update to unbound 1.6.4, ok florian@Stuart Henderson
2017-08-12add a new option to set limits on max-sessions each IPCP.Kazuya Goda
It can set limits on different max-sessions if there're using several protocols such as PPPoE and L2TP/IPsec. ok yasuoka@
2017-08-12In iwn(4), fix CID 1199266 "Missing comma in a string array"; only affectsStefan Sperling
fatal firmware error debug output.
2015-07-16update to Unbound 1.5.4, ok florian@, looks sane deraadt@Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2017-08-12When read(2)'ing from the routing socket only one message is returned.Florian Obser
Clue provided by jca and claudio. OK jca
2017-08-12No need to constantly re-open a socket. Just open it up front and keepFlorian Obser
it around. OK jca
2017-08-12make "--" before the hostname terminate command-line option processingDamien Miller
completely; previous behaviour would not prevent further options appearing after the hostname (ssh has a supported options after the hostname for >20 years, so that's too late to change). ok deraadt@
2017-08-12Switch from aes256-cbc to aes256-ctr for encrypting new-styleDamien Miller
private keys. The latter having the advantage of being supported for no-OpenSSL builds; bz#2754 ok markus@
2017-08-12Hookup ifstated and snmpd regress. Discussed with benno@ and bluhm@.rob
Ok benno@
2017-08-12Use vether instead of physical interfaces for temporary carp creation.rob
Recommended by and discussed with many.
2017-08-12Initial pledge for snmpd. snmpe remains unpledged. Regression tests pass.rob
Ok benno@, jca@.
2017-08-12Document tls_config_set_dheparams().Joel Sing
2017-08-12Document tls_reset().Joel Sing
2017-08-12add option -l to show only listening sockets (for tcp)Sebastian Benoit
feedback and ok awhile ago bluhm@ job@
2017-08-12Improve snps,dwc3 support. Enough to make the USB3 controller on theMark Kettenis
rk3399-firefly work in USB2 mode. ok patrick@
2017-08-12Silence clang warnings: remove unused variables and s/%hx/%x/gPhilip Guenther
ok mpi@ deraadt@
2017-08-12Update the TLSv1.2 Client Hello messages, due to the removal of DSAJoel Sing
sigalgs.
2017-08-12Remove support for DSS/DSA, since we removed the cipher suites a whileJoel Sing
back. ok guenther@
2017-08-12Clear the child pointer in CBB_cleanup(), so that we have fewer pointersJoel Sing
hanging around to potentially invalid address space. Discussed with beck@ and doug@
2017-08-12syncTheo de Raadt
2017-08-12stop pretending that qnames are always strings. treat everything as aTed Unangst
dname always.
2017-08-12snmpe runs as user _snmpd not _snmp.rob
2017-08-12Instead of hardcoding a partial dependency list for the syscall stub objects,Philip Guenther
calculate them as done for other objects
2017-08-12Fix dependency generation: pass ${DFLAGS} and -MF explicitlyPhilip Guenther
problem noted by deraadt@ ok espie@