summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-11-28Since our IPI broadcast functions exclude the CPU doing the broadcast, weMark Kettenis
need to explicitly call wbinvd() in wbinvd_on_all_cpus(). ok jsg@, deraadt@
2020-11-28ICC_DIR, used to deactive interrupts, is only needed when running inPatrick Wildt
EOImode == 1, which we don't do. Hence there's no need to touch the register at all. This allows OpenBSD to progress on ESXi-Arm. This bug in ESXi-Arm will be fixed there as well. Noticed by Jared McNeill ok kettenis@
2020-11-28Rather than skipping %[sizearg]n in the kernel, panic when it is encountered.Theo de Raadt
printf(9) already lacked documentation and needs no change.
2020-11-28Prepare for libX11 1.7.0Matthieu Herrb
2020-11-28Include cipher.h for declaration of cipher_by_name.Darren Tucker
2020-11-28An interface might have disappeared or switched rdomains while weFlorian Obser
waited for a FD. It's not a fatal condition if it arrives late. OK tb
2020-11-28Reduce code duplication by introducing unref_icmp6ev().Florian Obser
OK tb
2020-11-28Handle the case of an autoconf interface changing its rdomain.Florian Obser
To avoide code duplication have get_icmp6ev_by_rdomain() either return an existing icmp6ev in the correct rdomain or allocate one. OK tb
2020-11-28Use IN_MULTICAST correctly, so it checks the IP address rather than theJonathan Matthew
pointer to it. ok florian@
2020-11-28check result of strchr() against NULL rather than searched-forDamien Miller
characters; from zhongjubin@huawei.com
2020-11-27Remove redundant state change. ikev2_ikesa_delete() sets the correct state.tobhe
2020-11-27Unleash curlen check from DIAGNOSTIC block, and change the related printf'sMarcus Glocker
to DPRINTF's. From Mikolaj Kucharski <mikolaj AT kucharski DOT name>
2020-11-27tweak previous as suggested by jmcStuart Henderson
2020-11-27Shuffle code relating to initializing the physical interface and theKenneth R Westerback
internal structure reflecting the interface into a function that in turn calls simple helper functions to do the different actions involved. Simplifies the overly lengthy main(), correctly starts the state machine with the state of the interface link as DOWN when IFF_UP is 0, tests more initialization actions when '-n' is used.
2020-11-27wg(4): show an actual command to retrieve wgpubkey to go with the text whichStuart Henderson
says "shown in the status output of the interface"; this makes it clear that 1) ifconfig is used, 2) the interface must be specified (either that or -A; it is not shown in the default output with no parameters), and 3) hints that it must be run as root. ok jmc@
2020-11-27As in urtwn(4), don't bring link up (getting dhclient(8) excited) untilKenneth R Westerback
all the keys are negotiated and installed. ok stsp@
2020-11-27wg(4): add comments for the shell script in EXAMPLES, feedback jmc@Stuart Henderson
2020-11-27Set the correct IPL for `pageqlock' now that it is grabbed from interrupt.Martin Pieuchot
Reported by AIsha Tammy. ok kettenis@
2020-11-27Check if the interface has an IPv6 link-local address before using it.Florian Obser
Problem noted by & OK tb
2020-11-27Document ssh-keygen -Z, sanity check its argument earlier and provideDarren Tucker
a better error message if it's not correct. Prompted by bz#2879, ok djm@ jmc@
2020-11-27Set the specified TOS/DSCP for interactive use prior to TCP connect.Damien Miller
The connection phase of the SSH session is time-sensitive (due to server side login grace periods) and is frequently interactive (e.g. entering passwords). The ultimate interactive/bulk TOS/DSCP will be set after authentication completes. ok dtucker@
2020-11-27clean up passing of struct passwd from monitor to preauth privsepDamien Miller
process. No longer copy entire struct w/ pointer addresses, but pass remaining scalar fields explicitly, Prompted by Yuichiro NAITO, feedback Thorsten Glaser; ok dtucker@
2020-11-27Add initialization of sc_sff_lock rwlock.Kevin Lo
ok semarie@
2020-11-26Fix config_add_transform and config_free_proposal.tobhe
2020-11-26Use a counter instead of random IV for AES-GCM. Security depends ontobhe
choosing a unique IV for every encryption operation, using a counter as IV eliminates the risk of random collisions. ok markus@ patrick@
2020-11-26fix typo in log message: inteface -> interfaceTheo Buehler
ok florian
2020-11-26Fix check for vertical centre.Nicholas Marriott
2020-11-26Add -N flag to display-panes to ignore keys, GitHub issue 2473.Nicholas Marriott
2020-11-25Fix proposal error handling. If a proposal contains an unknown transformtobhe
type or id, ignore the proposal instead of failing the exchange. ok patrick@
2020-11-25Teach route(8) about the names of the IEEE80211_F_* flags.Kenneth R Westerback
2020-11-25Avoid undefined behavior due to memcpy(NULL, NULL, 0)Theo Buehler
This happens if name->der_len == 0. Since we already have a length check, we can malloc and memcpy inside the conditional. This also makes the code easier to read. agreement from millert ok jsing
2020-11-25Change kqueue_scan() to keep track of collected events in the given context.Martin Pieuchot
It is now possible to call the function multiple times to collect events. For that, the end marker has to be preserved between calls because otherwise the scan might collect an event more than once. If a collected event gets reactivated during scanning, it will be added at the tail of the queue, out of reach because of the end marker. This is required to implement select(2) and poll(2) on top of kqueue_scan(). Done & originally committed by visa@ in r1.143, in snap for more than 2 weeks. ok visa@, anton@
2020-11-25When processing proposed static routes (inc. default route) ignoreKenneth R Westerback
routes that are already present, neither deleting nor re-adding them.
2020-11-24Fix duplicate sa->sa_cp assignment.tobhe
2020-11-24Kill connection if rsync server stallsjob
OK deraadt@
2020-11-24Simple implementation of --timeout to exit after specified seconds of I/OClaudio Jeker
inactivity. By default rsync will wait forever but this results in stuck processes if the remote side does not answer properly as seen in rpki-client. OK job@ benno@
2020-11-24use non-reserved ports in the wg(4) example, the previous 111 was quiteStuart Henderson
a bad choice as it conflicts with portmap. ok deraadt
2020-11-24Pid files? Where we're going, we don't need pid files.Florian Obser
OK sthen
2020-11-24fter ixgbe_stop() there will be no more link-state-changeGerhard Roth
interrupts. Hence, update the link state manually. Tested and ok bluhm@
2020-11-24Remove commented-out code messing with uvmexp.Martin Pieuchot
ok jca@
2020-11-24Grab the `pageqlock' before calling uvm_pageclean() as intended.Martin Pieuchot
Document which global data structures require this lock and add some asserts where the lock should be held. Some code paths are still incorrect and should be revisited. ok jmatthew@
2020-11-23Adopt a Linux heuristic and mark as IGNORE_RESIDUE those umass(4)Kenneth R Westerback
devices whose INQUIRY command succeeds but with a residue equal to the requested bytes. Subsequent i/o's (including the INQUIRY) which succeed with a residue equal to the requested bytes will have residue set to 0. Fixes (very?) old devices such as the memory stick Andrew Daugherity pulled out of his drawer and with which he hoped to install 6.8. Subsequent testing of diffs much appreciated!
2020-11-23Ignore duplicate sigsha2 notify, don't fail the exchange.tobhe
2020-11-23mapalign() only handles allocations >= a page; problem found by and ok semarie@Otto Moerbeek
2020-11-23The -exec primary is terminated by either ';' or '+', but the latterAlexander Hall
only if immediately following a '{}' placeholder. Slightly modify the error message to indicate so. Brought up by and discussed with Paul de Weerd, thanks! ok millert@
2020-11-22when loading PKCS#11 keys, include the key fingerprints and provider/slotDamien Miller
information in debug output.
2020-11-22when mentioning that the host key has changed, don't report the typeDamien Miller
because it is ambiguous as to whether it referred to the known or new host key. bz3216; ok dtucker@
2020-11-22Fix comment typo.tobhe
2020-11-22add a comma;Jason McIntyre
2020-11-22ARM64's bus dma coalesces segments when they are physically contiguous,Patrick Wildt
to optimize the amount of segments given to hardware for DMA. The cache maintenance code uses the virtual addresses stored in the segments for flushing, since we have to flush by VA. Unfortunately the coalescing only checks if the physical blocks are contiguous. Thus it is possible that phys-contig but virt-non-contig blocks are coalesced. The cache flush operations are then not aware of this, and will flush the vaddr with the length of the whole physical block, thus running long and then flushing vaddrs that do not belong to the segments. Fix this by making sure the coalescing only occurs if the bus space is coherent, which means we do not do any flushing, or if the vaddrs are contiguous as well. An alternative fix would have been to keep a copy of the mbuf/uio pointers and flush vaddrs extracted from those objects. This fixes a panic seen with mbuf chains, where the physical data was surpisingly contiguous, but the mbufs' data pointers were not. ok drahn@ kettenis@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 19:25:00 +0000