summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-07-09Replace the protocol directives for HTTP with a new generic filteringReyk Floeter
language. The grammar is inspired by pf and allows to write versatile last-matching filter rules in protocol sections starting with the "pass", "block" or "match" keywords. This work was started almost two years ago and replaces large parts of relayd(8)'s HTTP and filtering code. The initial version reimplements and extends HTTP filtering, but will be improved to support generic TCP and other protocols later. With some testing, feedback, and help from benno@ and andre@. OK benno@
2014-07-09Use the correct rf revision number for AR2425 radios. When read fromStefan Sperling
hardware the revision is zero. Linux also hardcodes this value. ok reyk
2014-07-09CPUF_PARK check was placed improperly in the previous commit.Mike Larkin
2014-07-09Remove leading underscore from _BYTE_ORDER and _{LITTLE,BIG}_ENDIAN, to beMiod Vallat
more friendly to systems where the underscore flavours may be defined as empty. Found the hard way be bcook@; joint brainstrom with bcook beck and guenther
2014-07-09miod@ fixed the "bug" so remove reference to it in the man pod^Wpage.Joel Sing
2014-07-09generate a locatedb while making release.Marc Espie
input and okay deraadt@
2014-07-09Now that the stack handles properly the xhci(4) way of setting anMartin Pieuchot
address, kill some no longer true comments and create a proper function to assign an address. For the moment, an address is assigned when setting up a slot for a new device.
2014-07-09Adds an optional bus function to set the address of a new device andMartin Pieuchot
explicitly set it when required. Right now xhci(4) does not need such function because it assigns addresses when the first pipe of a device is opened. ok yuo@, pirofti@
2014-07-09use explicit_bzero for stack and freed variablesTed Unangst
2014-07-09spellingTed Unangst
2014-07-09I hate eval. Apart from when it's really needed.Alexander Hall
Eval'ing constant expressions is not such a case. "...fine with me" krw@
2014-07-09Kill unused route storages.Martin Pieuchot
blambert@, henning@, lteo@
2014-07-09We do have icmp_data; no obj change.Florian Obser
OK benno@
2014-07-09We do have ICMP_MASKREQ & ICMP_MASKREPLY; no obj change.Florian Obser
OK benno@
2014-07-09notdef is notdef since the beginning of time; no obj change.Florian Obser
OK benno@
2014-07-09We do have SIGINFO; no obj change.Florian Obser
OK benno@
2014-07-09We do have IP_OPTIONS; no obj change.Florian Obser
OK benno@
2014-07-09add <sys/filio.h> header for FIONBIObcook
ok beck@
2014-07-09Print sizeof() value and size_t variable with %zu rather than %zd.Kenneth R Westerback
2014-07-09Minor cleanups in wording in some comments and printfs, and added someMike Larkin
dprintfs to help debugging in the field (disabled by default)
2014-07-09Don't use the suspending kernel's VA mapping for the piglet. It's farMike Larkin
easier and much less error-prone to just identity map it in the resuming kernel as we have more control over the VA space layout there (otherwise we are at the mercy of the suspending kernel's placement of the piglet VA). This diff also increases the size of the piglet to 4 chunks, to avoid an overwrite issue seen in m2k14 where the start of the kernel text was overwritten with a bounced chunk before unpack.
2014-07-09Delete an obsolete commentPhilip Guenther
2014-07-09Fixes a resume time page table issue on amd64 if the piglet was locatedMike Larkin
above 1GB physical (caused by using an incorrect page size mask) Also removes some unneeded low memory mappings on both amd64 and i386 (this is a cosmetic fix but makes things easier to debug).
2014-07-09check for EINTR when calling waitpid.bcook
ok jsing@
2014-07-09check if we were previously on a signal stack before restoring.bcook
OS X fails to restore the old signal stack because the signal stack is not enabled by default. This causes sigaltstack(2) to fail with ENOMEM as ss_size is 0, < MINSIGSTCKSZ. ok jsing@
2014-07-09Clean up and simplify SSL_CIPHER_description by always using asprintf. IfJoel Sing
a buffer was supplied then we copy the result into it. Also make the failure case return values match the documentation. Joint work with beck@
2014-07-09Add a daemon_timeout variable for rc_wait().Antoine Jacoutot
It represents the maximum time in seconds to wait for the start, stop and reload actions to return. Defaults to "30". No default behavior is changed. ok beck@ sthen@ jasper@ giovanni@
2014-07-09Rewrite lockstatus() description to be more like rw_status()Philip Guenther
2014-07-09fix ssh-add crash while loading more than one keySebastian Benoit
ok markus@
2014-07-09Cleanup the chunk placement routine by removing the conflict resolver.Mike Larkin
Chunks are now sorted by ascending PA and all chunks are bounced before unpack. This fixes an issue where the trampoline chunks were being placed at the end of the unpack ordering, causing overwrite during unpack.
2014-07-09Document recent x11/gnome MODULE changes.Antoine Jacoutot
2014-07-09Add support bpfwrite on DLT_LOOP interfaces.YASUOKA Masahiko
ok guenther
2014-07-09MLINKS for rw_{assert_{unlocked,wrlock,rdlock},status}Philip Guenther
2014-07-09Fixed rw_status() description, moving it to where it belongs.Philip Guenther
Clarify threads vs process. Move up some general explanatory text. Add rw_assert_* to the NAME section and kill crossref to spl(9)
2014-07-09Fix classless-{ms-,}static-routes to comply RFC 3442. Number ofYASUOKA Masahiko
octets should be changed by corresponding to the prefix length. And 0 should be allowed for the prefix length. Also fix white spaces. Based on diff from Yuuichi Someya. ok krw
2014-07-09Add an "If" to make a complete sentence.Brian Callahan
ok daniel@ jmc@ aja@
2014-07-09mlarkin requested that i cleanup the example codeTed Unangst
2014-07-09Teach rw_status() and rrw_status() to return LK_EXCLOTHER if it's writePhilip Guenther
locked by a different thread. Teach lockstatus() to return LK_EXCLUSIVE if an exclusive lock is held by some other thread. ok beck@ tedu@
2014-07-09Simplify error path of DH_check_pub_key()Miod Vallat
2014-07-09KNFMiod Vallat
2014-07-09remove unused variables getentropy for OS Xbcook
ok beck@
2014-07-09crude rrwlock to appease guenther and beckTed Unangst
2014-07-09ext_type is set but never read. its a waste of space.David Gwynne
MEXTADD will be fixed later. ok henning@ deraadt@ mpi@
2014-07-09Do the way long overdue renaming of register names from o32 to n64 ABI.Miod Vallat
In other words, ta0-ta3 are now a4-a7 instead of t0-t3; and the former t4-t7 are now t0-t3.
2014-07-09Kill unused shutdown hook pointers.Martin Pieuchot
ok miod@, deraadt@, tedu@
2014-07-09Special case pretty printing of DHO_CLASSLESS_STATIC_ROUTES andKenneth R Westerback
DHO_CLASSLESS_MS_STATIC_ROUTES. Remove 'C' (CIDR) pretty printing outside of those special cases. Add a bunch of paranoia to protect against confused/malicious dhcp servers. Since 'C' is a variable size element it can't be handled by the existing code, which is designed for fixed size elements. Issue found by Someya Yuuichi, reported by yasuoka@ who also provided the first diff. ok yasuoka@
2014-07-09Use O_CLOEXEC to make sure fork+exec in a threaded process can'tPhilip Guenther
see the fds used by dlopen() ok otto@ miod@
2014-07-09_dl_fcntl() is no longer used; kill the stubsPhilip Guenther
ok otto@ miod@
2014-07-09add a "no-dsn" listener option to disable DSN extension.Eric Faurot
2014-07-09Use suspending kernel's stack smash guard to avoid panicing during unpack.Mike Larkin
ok deraadt@