summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-12-12add commented-out "val-log-level: 2" next to the uncommentable line toStuart Henderson
enable dnssec validation, it's really useful for debug
2018-12-12Cleanup, no functional change:Ingo Schwarze
No need to expose the tbl(7) syntax tree data structures everywhere. Move them to their own include file, "tbl.h", and improve comments.
2018-12-12remove unused prototypesGilles Chehade
2018-12-12add tx-data reporting eventGilles Chehade
2018-12-12Simplify mbzero() by using mem_write with a NULL buf which does zero outClaudio Jeker
all memory at once without having to use a zero buffer. OK mlarkin@
2018-12-12Set the com speed to 115200 like we do in our bootloader when using SeaBIOS.Claudio Jeker
OK mlarkin@
2018-12-12zap trailing whitespace;Jason McIntyre
2018-12-12some pcap_setdirection details; from jan staryJason McIntyre
ok djm
2018-12-12allow reading from stdin with -f -.Ted Unangst
ok kn
2018-12-12document show-indexedMarc Espie
2018-12-12Various cleanups:Martin Pieuchot
- Unify the two hooks by passing the same argument - Check for nullity before dereferencing `if_bridgeport', this will matter when we go MP - Use the same pattern to find a member in the ioctl path ok bluhm@, visa@
2018-12-12free(9) sizes for sysv shm.Martin Pieuchot
ok bluhm@, visa@
2018-12-12free(9) sizes for SVID semaphores.Martin Pieuchot
ok bluhm@, visa@
2018-12-12+nettle-bug now that the fix has been committedMarc Espie
2018-12-12even when there's no update needed, respect dependency chain order.Marc Espie
More specifically, the set currently being installed won't be affected, but shared libraries may be reached through a long dependency chain, so they actually require "full" dependency ordering. This fixes the libnettle issue reported by jca@ (see regress) okay aja@, sthen@
2018-12-12moving handles to kept means they're not affected by complete_set, whichMarc Espie
means that they won't get their dependency information. But if they're in kept, they're actually installed so make sure they have a location. This will let pkg_add always follow dependencies for all sets even if there's nothing to directly install
2018-12-12upon MAIL or RCPT errors, only trigger report_smtp_tx_{mail,rcpt} events ifGilles Chehade
error happened within an SMTP transaction.
2018-12-12Enable the rules doing more than one match at a time. This works since a while.Claudio Jeker
2018-12-12Make kcov MP-safe. Calling the injected tracing functionanton
__sanitizer_cov_trace_pc() early in the boot process caused a subtle crash while booting the secondary CPU(s). On amd64, accessing curcpu during this period is not safe since its GSBASE register is yet not written. After the CPU has been booted curproc can also be NULL for a brief period of time before the idle thread tied to the same CPU has started. The two problems can simply be avoided by postponing access to curcpu and curproc until /dev/kcov has been opened at least once. The end goal here is to allow fuzzing of MP kernels, which already is in full swing. This work has gone through many iterations before settling on the least intrusive change; many thanks for visa@ for reviewing and providing valuable input. Issue originally reported by Greg Steuck on tech@ who also took the time to test all iterations and providing me access to a virtualised OpenBSD machine for easier testing. ok mpi@ visa@
2018-12-12allow ethernet interfaces to provide a custom if_output routine.David Gwynne
this will be mostly useful for virtual interfaces like vlan and etherip, where they can bypass queueing on an ifq, and instead encapsulate in on multiple cpus concurrently and push the packet onto the next layer directly. ok visa@
2018-12-11Fix regress test. The rule optimizer changes output since all theClaudio Jeker
set community rules are merged into one big set block.
2018-12-11add optional per-cpu counters for interface stats.David Gwynne
these exist so interfaces that want to do mpsafe work outside the ifq machinery have a place to allocate and update stats in. the generic ioctl handling for getting stats to userland knows how to roll the new per cpu stats into the rest before export. ok visa@
2018-12-11the world is not ready for dnssec enabled by defaultFlorian Obser
2018-12-11Flip snprintf(3) error check to align it with the man page example.Alexander Bluhm
No functional change. suggested by tb@; from Jan Klemkow
2018-12-11Convert some variables with non-negative values to unsigned typeAlexander Bluhm
to avoid comparison of integers of different signs. from Jan Klemkow; OK tb@
2018-12-11Add PN_XNUM support to libbfd so objdump and gdb can handle corePhilip Guenther
dumps with many many segments. ok yasuoka@
2018-12-11add a non regression test that triggers the nettle bugMarc Espie
2018-12-11remove filter action "rewrite" can only be done from a proc filterGilles Chehade
remove "report" keyword, a proc filter gets report events discussed with eric@
2018-12-11merge 1.8.3Stuart Henderson
2018-12-11Fix dns64 allocation in wrong region for returned internal queries.Stuart Henderson
(This is the only code change in upstream release 1.8.3).
2018-12-11do some imsg renaming to make them more clearGilles Chehade
2018-12-11remove unused imsg namesGilles Chehade
2018-12-11these files are no longer usedGilles Chehade
2018-12-11factor smtp-in and smtp-out reporting codeGilles Chehade
2018-12-11report filter responses to smtpGilles Chehade
2018-12-11fix previousEric Faurot
ok gilles@
2018-12-11styleMarc Espie
2018-12-11bgpctl can no long reuse the aspath_match function from bgpd so move theClaudio Jeker
roughly the same function here called match_aspath(). OK denis@
2018-12-11Refactor aspath code a bit. Move cached source_as (for origin validation)Claudio Jeker
into struct aspath and pass that struct to aspath_match(). OK denis@
2018-12-11generate an event when a helo name identifies a linkGilles Chehade
2018-12-11remove unnecessary calls to getsockname()Eric Faurot
ok gilles@
2018-12-11Extend vmctl start -B argument to work for disk, cdrom and net.Claudio Jeker
Currently SeaBIOS will respect disk and cdrom and our kernel will understand net. OK ccardenas@, reyk@, mlarkin@
2018-12-11Improve the cert_*() interface. Use the return value to tell whetherEric Faurot
the request is pending (waiting for an async event) or not. Success or failure is always reported through the callback function. ok gilles@
2018-12-11teach libtool to build shared libraries with a sonameSebastien Marie
ok naddy@
2018-12-11provide ifq_is_priq, mostly so things can tell if hfsc is in effect or not.David Gwynne
2018-12-11use ifq_hdatalen for handling the FIONREAD ioctlDavid Gwynne
ok stsp@
2018-12-11document ifq_hdatalen()David Gwynne
ok stsp@
2018-12-11add ifq_hdatalen for getting the size of the packet at the head of an ifqDavid Gwynne
this gets the locks right, and returns 0 if there's no packet available. ok stsp@
2018-12-11split ether_output into resolution, encapsulation, and output functionsDavid Gwynne
if if_output can be overridden on ethernet interfaces, it will allow things like vlan to do it's packet encapsulation during output before putting the packet directly on the underlying interface for output. this has two benefits. first, it can avoid having ether_output on pseudo interfaces recurse, which makes profiling of the network stack a lot clearer. secondly, and more importantly, it allows pseudo ethernet interface packet encapsulation to by run concurrently by the stack, rather than having packets unnecessarily serialied by an ifq. this diff just splits ether_output up, it doesnt have any interface take advantage of it yet. tweaks and ok claudio@
2018-12-10When forwarding IPv6 packets, generated ICMP6 packets used theAlexander Bluhm
interface address of the route as source address. To avoid using link-local addresses in ICMP6 packets sent into networks where they are out of scope, use the regular IPv6 source selection algorithm also in this icmp6_reflect() case. reported by sthen@; fix from Arnaud BRAND; OK claudio@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-23 07:21:42 +0000