summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-04-28Calculate divisor for i.MX8M composite clocks. So far we have setPatrick Wildt
fixed values for the divisors, but the imxesdhc(4) nodes for SD Cards usually have an assigned clock rate of 200 MHz instead of 400 MHz. So instead of just clearing the divisor, we should set it according to what is asked. This also allows us to add the clock for the second imxesdhc(4) node to the list, which I have previously skipped, since otherwise the controller would have been clocked too high. ok kettenis@
2020-04-28The order of arguments to proposals_negotiate makes a difference.tobhe
'key->pol_proposals' should be the peer proposal as it is derived from a received SA payload, 'p->p_proposal' comes from a locally configured policy. ok patrick@
2020-04-28Enable all clocks referenced by the imxesdhc(4) device tree node. UsuallyPatrick Wildt
those are already on, since on those machines we mostly boot from SD/MMC and U-Boot prepares them for us. On machines with a WiFi on imxesdhc(4), U-Boot isn't necessarily configured to do so. Enabling the clocks is the right thing to do anyway. ok kettenis@
2020-04-28Recognize a few more clocks referenced by the i.MX8MM and i.MX8MQPatrick Wildt
imxesdhc(4) device tree nodes.
2020-04-28Rather than attempting to lookup the keyword "set" as a hostname,Theo de Raadt
issue a usage message. This matches both historical behaviour, and the operation upon other keywords. ok florian
2020-04-28Remove support for insecure EC2N groups. Clarify which Diffie-Hellmantobhe
groups are not recommended to use and are only supported for backwards compatibility. Feedback from sthen@ ok kn@
2020-04-28re-organize statistics printing code, to make it less verbose andTheo de Raadt
more readable.
2020-04-28a blank line in the header is prettierTheo de Raadt
2020-04-28Print statistics as comments at the top of the files which can takeTheo de Raadt
comments. ok claudio job
2020-04-28document FETCH_PACKAGES betterMarc Espie
feedback and okay schwarze@
2020-04-28There have been no floppy images since the 6.2 release. Remove mentionSebastian Benoit
of boot floppies from the INSTALL.alpha notes. ok deraadt@
2020-04-28Use the same inittodr()/resettodr() implementation as on arm64/armv7/sparc64Mark Kettenis
and move it to the end of machdep.c. Rework the actual implementation for te MC14818 compatible RTC into something that can be used as a todr_handle. ok mpi@
2020-04-28Use the same inittodr()/resettodr() implementation as on arm64/armv7Mark Kettenis
and move it to the end of machdep.o. ok mpi@
2020-04-28syncStuart Henderson
2020-04-28Document that thread credentials are owned by curproc.Martin Pieuchot
From Vitaliy Makkoveev, ok visa@
2020-04-28Configure Tx interrupt mitigation thresholds on athn(4) devices.Stefan Sperling
ok kevlo@ mpi@
2020-04-28adapt dummy FIDO middleware to API change; ok markus@Damien Miller
2020-04-28use (long long) and %llx to satisfy both 32-bit and 64-bit systems.Theo de Raadt
2020-04-28when signing a challenge using a FIDO toke, perform the hashing in theDamien Miller
middleware layer rather than in ssh code. This allows middlewares that call APIs that perform the hashing implicitly (including Microsoft's AFAIK). ok markus@
2020-04-27Add curve25519 IANA group number.tobhe
2020-04-27Display multi-state controls with exactly three decimal places.Ingo Schwarze
Because for now, the maximum raw value of such controls is either 127 or 255, that assures that whenever the raw value changes, the displayed value changes, too. At the same time, it preserves the property that control values are not shown with excessive, misleading precision. If controls will ever be introduced that will have maximum raw values of less than 100 or of more than 999, the number of decimal places should then be reduced or increased for such controls as appropriate. With important help and an OK from ratchov@.
2020-04-27tcpci(4)Patrick Wildt
2020-04-27Enable tcpci(4).Patrick Wildt
2020-04-27Add tcpci(4) to support TCPCI-compliant USB Type-C port controllers.Patrick Wildt
A Type-C controller has multiple tasks. Even though the orientation of the plug doesn't matter for the user, it matters for the hardware. To be able to know how to route the SuperSpeed pins you need to know which way the plug is connected. Also you need to know if you're a sink/source or device/host. To get the first connection, you toggle between the modes until you find a connection. In case you see that a sink is connected, you can turn on USB Vbus to power the sink. This driver explicitly does not implement USB's Type-C state machine, but if we get more and more of these controllers it might be worth doing. Also there's no support for Power Delivery messages yet. "go for it" kettenis@
2020-04-27Add bcmclock(4) and bcmmbox(4). Fixes a hang because the clock for sdhc(4)Mark Kettenis
can't be enabled.
2020-04-27While i.MX6Q and i.MX7D's USB controller nodes claim to be compatiblePatrick Wildt
to i.MX27, they actually need different bits to be set than the i.MX27. The i.MX8MM's node instead rightfully only claims to be compatible to i.MX7D, since it's the same implementation. Thus change imxehci(4) to also match the i.MX7D compatible. ok kettenis@
2020-04-27Shuffle some functions around.Joel Sing
Move functions so that they are in the order that the TLSv1.3 messages are processed. While here, also move tls13_client_end_of_early_data_send() from tls13_client.c to tls13_server.c. No functional change. ok beck@ tb@
2020-04-27Remove reset hack; these days the U-Boot we ship for the CuBox-i isMark Kettenis
perfectly happy without it. ok patrick@
2020-04-27Use the device tree properties to setup imxehci(4)'s USB non-corePatrick Wildt
instead of hardcoding the values. Tested on a Cubox-i by kettenis@ ok kettenis@
2020-04-27Enable the power domain and set the assigned clocks on imxehci(4)'s USBPatrick Wildt
controller and its nop-PHYs. This is needed on the i.MX8MM. ok kettenis@
2020-04-27Fix two bugs in the AES-CBC-PKCS5 tests that didn't hide failing tests:Theo Buehler
1. Use the correct slice for comparing the cipher output 2. Fix logic error similar to the one in AES-GCM in the previous commit
2020-04-27Fix a logic error that hid the failing ZeroLengthIv tests.Theo Buehler
This issue was fixed in lib/libcrypto/evp/e_aes.c r1.40.
2020-04-27Disallow the use of zero length IVs in AES-GCM viaTheo Buehler
EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key. Issue reported and fix tested by Guido Vranken. ok beck, jsing This commit adds a constant to a public header despite library lock, as discussed with deraadt and sthen.
2020-04-27Log with SPI_SA().tobhe
2020-04-27The parent of the i.MX8MM and i.MX8MQ USB_CTRL_ROOTs is USB_BUS,Patrick Wildt
not USB_CORE_REF.
2020-04-27If the DHCP server disappears between OFFER'ing and ACK'ing a lease,Kenneth R Westerback
stop trying to get an ACK from that server after 'timeout' seconds. Give up and try to get another lease. Possible infinite loop pointed out by Alexander Markert on tech@.
2020-04-27syncTheo de Raadt
2020-04-27Bring inittodr()/resettodr() in line with arm64 and move it toMark Kettenis
arrm32_machdep.c. ok mpi@
2020-04-27Move inittodr() and resettodr() to the end of the file to easy move an MIMark Kettenis
implementation. ok mpi@
2020-04-27Attach when the name matches "dallas,ds1307" which is what the device treeMark Kettenis
binding uses. Remove warning about overwriting todr_handle since that is normal behaviour on arm64 systems. ok sthen@
2020-04-27Don't clear OSF flag when we attach such that we can reject the RTC clockMark Kettenis
time if the flag is set. Instead clear the flag when we set the time. This way we don't use the clock time if the oscillator has been interrupted. This happens for example when the battery is dead. ok sthen@
2020-04-27PCIe register accesses seem to "hang" on the i.MX8MM if its PHY doesn'tPatrick Wildt
come up. This apparently happens when there's no card in the PCIe slot. Thus improve the error handling in all cases where we wait for a link to come up, return and don't proceed any further. ok kettenis@
2020-04-27Add gpio support to bcmgpio(4) and make gpio(4) attach such that GPIOsMark Kettenis
that aren't claimed by kernel drivers can be used from userland. ok sthen@
2020-04-27Free the "ranges" array in the error handling paths.Patrick Wildt
ok kettenis@
2020-04-27fix SDHC_DEBUG build, remove procname printf'sians
ok kettenis@
2020-04-27IPv6 is no longer on by default. It must be enabled with "inet6 eui64".Gerhard Roth
Input from sthen@, ok claudio@
2020-04-27When creating the rx filter, indicate we want to match against the outermostJonathan Matthew
packet headers, rather than the headers inside any of the tunnel protocols the nic firmware understands. This allows us to receive gre, ipip, mpls, etc. packets without putting the interface in promisc mode. ok dlg@
2020-04-27Do not close the stdout file descriptor in control mode as it will beNicholas Marriott
needed for printing the exit messages. Fixes a bug when detaching with iTerm2.
2020-04-27Offload CCMP (WPA2) encryption and decryption to athn(4) hardware.Stefan Sperling
This reduces CPU load during traffic bursts, which is especially noticeable on boards with relatively slow CPUs such as Alix and APU. For reference, my rcc-ve boards (Intel Atom C2558) now forward ~2000pps between Ethernet and wifi with <= 1% CPU interrupt time according to systat. Beforehand, these boards became noticeably less responsive with fairly high interrupt and spin %. CCMP offload is used on both PCI and USB devices (thanks kevlo@ for catching my omission of USB devices in the first iteration of this change!) Tested by (at least) Kevin Chadwick, tracey@, kevlo@, kili@, Ted Patterson, David Dahlberg, and Scott Bennett. ok tracey@ kevlo@
2020-04-27Fix processing of compressed block ack notifications sent by iwn(4) firmware.Stefan Sperling
Fix wrong assumptions about what the data in these notifications is supposed to represent, and actually piece information about individual subframes of aggregated frames (A-MPDUs) back together when reporting to MiRA, rather than reporting unrelated subframes to MiRA individually. Testing by cwen@, Josh Grosse, f.holop, benno@ ok jmatthew@