summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-02-12factor SSH_AGENT_CONSTRAIN_EXTENSION parsing into its own functionDamien Miller
and remove an unused variable; ok dtucker@
2021-02-11Call exuart(4) early attach on arm64.Patrick Wildt
ok kettenis@
2021-02-11Enable exuart(4).Patrick Wildt
ok kettenis@
2021-02-11Don't hardcode com(4)'s major number in exuart(4).Patrick Wildt
ok kettenis@
2021-02-11Explicitly unset IKED_REQ_CERTVALID before sending cert to ca process.tobhe
ok markus@
2021-02-11More route-to fallout in pfctl regress.Alexander Bluhm
2021-02-11sbdrop(): use NULL instead of 0 in pointer assignmentmvs
ok bluhm@
2021-02-11We link `ifp' to `if_list' before we perform if_attachsetup(). It is notmvs
fully initialized because we initialize `if_groups' after linking. It's not triggered because if_attach() and if_unit(9) are serialized by kernel lock and `ifp' is often filled by nulls. Move `if_groups' initialization to if_attach_common() to prevent this. ok bluhm@ claudio@ deraadt@
2021-02-11Link isakmpd dynamically. Mount /usr on NFS via IPsec does notAlexander Bluhm
work anyway. Dynamic binaries help building errata, reduce disk usage and make ROP harder. Also remove an unused bsd.subdir.mk include. OK sthen@ mvs@ deraadt@ tobhe@ patrick@
2021-02-11When clang was changed to -fcommon, perl's P_hash_{seed,state} variablesTheo de Raadt
moved into BSS in the .o, with padding rules following the types -- they are both char[]. Since P_hash_seed is (system-dependent) not a multiple of 8, P_hash_state gets layed out misaligned, which sucks because the hash functions demand 64-bit alignment for both variables. There is the possibility of using misalignment macros, but this is not cheap. Could also use kernel-trap fault repair, but the performance would really suck for something so crucial. The correct fix would be for upstream to declare these types as uint64[], we have requested that in https://github.com/Perl/perl5/issues/18555 In the meantime, carry a diff to roundup P_hash_seed to 64-bit alignment so that P_hash_state will land aligned. ok afresh1
2021-02-11Add missing break in switch statement of rge_activate().Stefan Sperling
CID 1501716 ok kevlo@ and mestre@ had the same diff
2021-02-11Leave out gp initialization from kernel entry on mips64Visa Hankala
On OpenBSD/mips64, the kernel is compiled with -mno-abicalls. This disables gp-relative addressing and essentially makes gp a spare register in the kernel. Hence it is unnecessary to initialize gp when entering the kernel. The _gp symbol is not needed either. Suggested by miod@
2021-02-11"proc: table is full" actually means thread table is full; ok mpi@ sthen@Otto Moerbeek
2021-02-11In the various open functions reduce the fdplock() to only span over theClaudio Jeker
function which need the lock (falloc, fdinsert, fdremove). In most cases it is not correct to hold the lock while calling VFS functions or e.g. closef since those aquire or release long lived VFS locks. OK visa@ mvs@
2021-02-11Initialize var since it's used in a condition a little bit afterwards.Ricardo Mestre
CID 1501713 ok jmatthew@
2021-02-11Initialize the stack local device id variable correctly.anton
CID 1501705
2021-02-11Swap faddr/laddr and fport/lport arguments in call to stoeplitz_ipXport().Patrick Wildt
Technically the whole point of the stoeplitz API is that it's symmetric, meaning that the order of addresses and ports doesn't matter and will produce the same hash value. Coverity CID 1501717 ok dlg@
2021-02-11Add a couple of helper functions, and flush imsgs on exit.Nicholas Marriott
2021-02-11O_TRUNC is needed in case file exists.Nicholas Marriott
2021-02-11Move file handling protocol stuff all into file.c so it can be reusedNicholas Marriott
more easily.
2021-02-11Make room for handling of HID++ 1.0 devices. No functional change.anton
2021-02-11Use idx suffix consistently.anton
2021-02-11Remove unused software id macro.anton
2021-02-11Fold long line.anton
2021-02-11Stop uhidpp from claiming all report ids, instead only claim theanton
necessary ones. Solves a regression introduced with the arrival of uhidpp causing some Logitech HID devices from attaching to its appropriate driver. Thanks to <naszy at poczta dot fm> and Peter Kane <pwkane at gmail dot com> for reporting and trying out diffs. ok mglocker@
2021-02-11Add uhidev_unset_report_dev(), doing the opposite ofanton
uhidev_set_report_dev(). Needed by some upcoming changes to uhidpp. ok mglocker@
2021-02-11If uhidev_set_report_dev() already have been invoked for the givenanton
report id, there's no point in trying to find a matching sub device. ok mglocker@
2021-02-11KNFTheo Buehler
2021-02-11syncTheo de Raadt
2021-02-10Delay deletion of IKE SAs on rekey when stickyaddress is enabled to maketobhe
sure peers can keep their previously assigned addresses. ok patrick@
2021-02-10rephrase example in a more consistent wayMarc Espie
2021-02-10Add a instruction barrier between writing CCSELR_EL1 and reading CCSIDR_EL1Mark Kettenis
to guarantee that we read the cache parameters of the cache we just selected. The required ISB instruction is present in the examples in the ARM ARM. Fixes the the report on the cores in Apple's M1 SoC. ok patrick@
2021-02-10If pf changes the routing table when sending packets, the kernelAlexander Bluhm
could get stuck in an endless recursion during TCP path MTU discovery. Create a dynamic host route in ip_output() that can be used by tcp_mtudisc() to store the MTU. Reported by Peter Mueller and Sebastian Sturm OK claudio@
2021-02-10Add med test, this no longer fails in -currentClaudio Jeker
2021-02-10Use the same check in kernel and ifconfig for group names. ifconfigAlexander Bluhm
delete group does not need name sanitation. The kernel will just report that it does not exist. OK deraadt@ gnezdo@ anton@ mvs@ claudio@
2021-02-10Interface group names must fit into IFNAMSIZ and be unique. ButAlexander Bluhm
the kernel made the unique check before trunkating with strlcpy(). So there could be two interface groups with the same name. The kif is created by a name lookup. The trunkated names are equal, so there was only one kif owned by both groups. When the groups got destroyed, the single kif was removed twice from the RB tree. Check length of group name before doing the unique check. The empty group name was allowed and is now invalid. Reported-by: syzbot+f47e8296ebd559f9bbff@syzkaller.appspotmail.com OK deraadt@ gnezdo@ anton@ mvs@ claudio@
2021-02-10Remove `sc_dead' logic from pppac(4). It is used to preventmvs
pppac_ioctl() be called on dying pppac(4) interface. But now if_detach() makes dying `ifp' inaccessible and waits for references which are in-use in ioctl(2) path. This logic is not required anymore. Also if_detach() was moved before klist_invalidate() to prevent the case while pppac_qstart() bump `sc_rsel'. ok yasuoka@
2021-02-10as usual, stuff got removed without updating the documentationMarc Espie
GC www/drupal7 description
2021-02-10Move UNIX domain sockets out of kernel lock. The new `unp_lock' rwlock(9)mvs
used as solock()'s backend to protect the whole layer. With feedback from mpi@. ok bluhm@ claudio@
2021-02-10Use ~/.tmux.conf as an example rather than /etc/passwd, suggested byNicholas Marriott
deraadt@.
2021-02-10some spacing/grammar fixes from dave voutila;Jason McIntyre
2021-02-10only amd64 & arm64 lldb work at the momentTheo de Raadt
2021-02-10cast large to reduce warning on 32-bit machines (an ELF type is printed with ↵Theo de Raadt
%ll)
2021-02-09Make sure that switching the console from serial to framebuffer worksMark Kettenis
for framebuffer nodes under / and /chosen. ok patrick@
2021-02-09pfsync_state_import() must not be called with the pf state lock held,Patrick Wildt
since the actual modification of the state table is done by a call to pf_state_insert(), which takes the pf state lock itself. Other calls to pfsync_state_import() also only have the pf lock. Reported-by: syzbot+d6ea8620b43dc69ecbc6@syzkaller.appspotmail.com ok bluhm@
2021-02-09syncPatrick Wildt
2021-02-09Build and install lldb.Patrick Wildt
Discussed with deraadt@
2021-02-09rc: ensure that vfs.mounts.nfs check works without NFSChristian Weisgerber
If NFS isn't compiled into the kernel, sysctl -n vfs.mounts.nfs will produce no numerical output. Make sure that we always have a valid arithmetic expression. Reported by and ok patrick@
2021-02-09Add optional 'group none' transform for child SAs and fix handling oftobhe
'group none'. We currently send no transform of type DH by default, which should be equivalent to explicitly sending a single DH transform of type 'none'. However, the proposal matching logic had a bug where these two would not match, effectively breaking the ability to negotiate optional PFS. This commit fixes the bug but continues to send no DH proposal by default to remain backwards compatible with older versions. ok patrick@
2021-02-09Fix lldb.mortimer
Map deliberately invalid signal to zero when passing to PT_STEP and P_CONTINUE. Also clean up getting Environment so setting LLDB_DEBUGSERVER env vars works again. ok patrick@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-22 04:11:13 +0000