summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-08-12ssh-keyscan(1): simplify conloop() with timercmp(3), timersub(3); ok djm@cheloha
2020-08-11Run start routing without KERNEL_LOCK()kn
pfsyncstart() does not require the big lock, make it use the ifq API. OK mvs
2020-08-11clang 10 now emits calls to __multi3 from libcompiler_rtJeremie Courreges-Anglas
Hints from kettenis@, ok kettenis@ deraadt@
2020-08-11setitimer(2): write new timer value in one placecheloha
Rearrange the critical section in setitimer(2) to match that of getitimer(2). This will make it easier to merge the two critical sections in a subsequent diff. In particular, we want to write the new timer value in *one* place in the code, regardless of which timer we're setting. ok millert@
2020-08-11Prioritize incoming certificate requests by the order of CERTEQ payloadstobhe
in the received message. ok patrick@
2020-08-11Send an unexpected message alert if no valid content type is found.Joel Sing
When record protection is engaged, the plaintext must be followed by a non-zero content type and optional zero padding. If the plaintext is zero length or only consists of zero bytes then it is not a valid message, since the content type is unspecified. ok tb@
2020-08-11Increment the epoch in the same place for both read and write.Joel Sing
ok inoguchi@ tb@
2020-08-11Use 0 instead of 0x00 for memset() calls.Joel Sing
ok inoguchi@ tb@
2020-08-11Use SSL3_SEQUENCE_SIZE for last_write_sequence[] rather than hardcoding.Joel Sing
ok inoguchi@ tb@
2020-08-11In SSL_new() just 'goto err' on allocation failure.Joel Sing
The error path does the same as the currently duplicated code. ok inoguchi@ tb@
2020-08-11setitimer(2): consolidate copyin(9), input validation, input conversioncheloha
For what are probably historical reasons, setitimer(2) does not validate its input (itv) immediately after copyin(9). Instead, it waits until after (possibly) performing a getitimer(2) to copy out the state of the timer. Consolidating copyin(9), input validation, and input conversion into a single block before the getitimer(2) operation makes setitimer(2) itself easier to read. It will also simplify merging the critical sections of setitimer(2) and getitimer(2) in a subsequent patch. This changes setitimer(2)'s behavior in the EINVAL case. Currently, if your input (itv) is invalid, we return EINVAL *after* modifying the output (olditv). With the patch we will now return EINVAL *before* modifying the output. However, any code dependent upon this behavior is broken: the contents of olditv are undefined in all setitimer(2) error cases. ok millert@
2020-08-11Update awk to August 7, 2020 version.Todd C. Miller
2020-08-11getitimer(2): don't enter itimer_mtx to read ITIMER_REAL itimerspeccheloha
The ITIMER_REAL per-process interval timer is protected by the kernel lock. The ITIMER_REAL timeout (ps_realit_to), setitimer(2), and getitimer(2) all run under the kernel lock. Entering itimer_mtx during getitimer(2) when reading the ITIMER_REAL ps_timer state is superfluous and misleading.
2020-08-11Explicitly #include <scsi/scsi_debug.h> rather than assuming scsiconf.h will doKenneth R Westerback
it. Prepares for removal of #include <scsi/scsi_debug.h> from scsiconf.h as soon as the alpha tester digs out from hurricane to compile last untested files.
2020-08-11struct process: annotate locking for getitimer(2), setitimer(2)cheloha
The ITIMER_REAL itimerspec (ps_timer[0]) and timeout (ps_realit_to) are protected by the kernel lock. Annotate them with "K". The ITIMER_VIRTUAL and ITIMER_PROF itimerspecs (ps_timer[1], ps_timer[2]) are protected by itimer_mtx. Annotate them with "T", for "timer". With input from kettenis@ and anton@. ok kettenis@, anton@
2020-08-11syncStuart Henderson
2020-08-11let ssh_config(5)'s AddKeysToAgent keyword accept a time limit forDamien Miller
keys in addition to its current flag options. Time-limited keys will automatically be removed from ssh-agent after their expiry time has passed; ok markus@
2020-08-11let the "Confirm user presence for key ..." ssh-askpass notificationDamien Miller
respect $SSH_ASKPASS_REQUIRE; ok markus@
2020-08-11sync with upstream libfido2 rev 2fa20b889, picking up ~7 monthsDamien Miller
of fixes and a few new APIs that we'd like to use in OpenSSH ok deraadt@
2020-08-11Remove fixtfti.c from ppc-if to unbreak macppc build. I guess kettenis@Patrick Wildt
was right that this isn't really needed. Now the list is the same as what we had for the previous compiler-rt version.
2020-08-11I accidentally zeored out a few bytes of the TLSv1.0 session ID.Theo Buehler
Restore them to their previous values.
2020-08-11fix path for testing if a .S existsJonathan Gray
2020-08-11add -w so kstat can update and print stats at a specified wait interval.David Gwynne
2020-08-10Get Elantech v1 touchpad with fw version 0x20022 working.Marcus Glocker
From sxvghd (at) firemail (dot) cc, on tech@
2020-08-10Tedu compiler-rt 8.0.1.Patrick Wildt
2020-08-10Un-hook and re-hook libcompiler_rt.Patrick Wildt
ok kettenis@
2020-08-10Add build infrastructure for compiler-rt.Patrick Wildt
ok kettenis@
2020-08-10Re-apply our patches to compiler-rt.Patrick Wildt
ok kettenis@
2020-08-10Import compiler-rt 10.0.1 release.Patrick Wildt
ok kettenis@
2020-08-10Reduce log spam.tobhe
2020-08-10Remove unused argument.tobhe
ok patrick@
2020-08-10Avoid passing -1 to freezero.Theo Buehler
If a peer sends a bogus record consisting of all-zero plaintext, the content_len would be decremented to -1 and cause a crash in freezero. ok inoguchi jsing
2020-08-10Do not block IPIs when acquiring the rendezvous mutex. Otherwise theVisa Hankala
system would deadlock when a CPU gets blocked by the mutex while another CPU is waiting for the first CPU to finish a rendezvous request. This possibly fixes some hangs on sgi. There should be no effect on loongson and octeon because their interrupt code is sloppy with masking of IPIs. While here, rename the rendezvous mutex to better reflect its use.
2016-09-05Import libcompiler_rt 3.9.0, LLVM's replacement for libgcc.Pascal Stumpf
This is the lib/builtin directory of the compiler-rt source tarball. comments/ok patrick@, ok kettenis@
2020-08-10syncPatrick Wildt
2020-08-10Minor code shuffle to get all *_activate(), *_probe() and *_detach() functionsKenneth R Westerback
nestled together. Rename scsibusprint() to scsibussubprint() since it is used with scsibussubmatch().
2020-08-10minor polishing: fix typos, add HISTORY and AUTHORS, a few wordingIngo Schwarze
simplifications, add missing markup, and break an overlong line
2020-08-10Set `IFXF_MPSAFE' bit to pppac(4) related `ifnet'. This moves pppac(4)mvs
packets output out of KERNEL_LOCK. pppac(4) and pipex(4) are ready to this. ok yasuoka@
2020-08-10sigh, i made the previous diff to small.David Gwynne
main needs to understand the kstat_tree type now, so move the declaration up.
2020-08-10factor out the printing of kstats. no functional change otherwise.David Gwynne
2020-08-10remove #if 0'd ufs2 magic error which predates ffs2 supportJonathan Gray
ok kn@
2020-08-10use EROFS when attempting to mount a 4.2BSD fs without MNT_RDONLYJonathan Gray
This is the documented behaviour which was changed by pedro in rev 1.81 which was partially backed out in rev 1.82.
2020-08-10consistently return EINVAL on invalid BPBJonathan Gray
reverts changes from msdosfs_vfsops.c rev 1.7 Prompted by a patch from John Carmack to add an an error path when exFAT is detected on mount to give a more helpful error message. Returning EINVAL in the existing sanity checks will make mount_msdos(8) print "not an MSDOS filesystem" when attempting to mount exFAT and matches historic and documented behaviour. ok kn@
2020-08-10Remove the acpicpu_sc array and instead locate acpicpu instances usingJonathan Matthew
the ci_acpicpudev pointer in struct cpu_info. This simplifies matters when we have lots of cpus. ok kettenis@
2020-08-10add the ability to filter which kstats are displayed.David Gwynne
kstats are identified by a "provider:instance:name:unit" tuple, where provider and name are strings, and instance and unit are integers. you can pass tuples as arguments to kstat to select them for display, eg, to see the rxq and txq stats for the first rings on an em0 interface, you can run `kstat em0:0:rxq:0 em0:0:txq:0`. this can be pretty tedious if you want to select a group of stats quickly though, so there's some wildcard and pattern matching support. firstly, empty fields in the tuple are wildcarded, eg, if you want to see all the stats that an mcx0 interface provides then run `kstat mcx0:::`. secondly, strings in a tuple (ie, the provider and name fields) are compared using fnmatch(3) so you can use shell like patterns to match fields. to expand the last example to all mcx interfaces, you can run `kstat mcx*:::`. lastly, you can pass a bare name to match on all kstats with that name. eg, to see the txq stats for all interfaces, just run `kstat txq`.
2020-08-09hardclock(9): fix race with setitimer(2) for ITIMER_VIRTUAL, ITIMER_PROFcheloha
The ITIMER_VIRTUAL and ITIMER_PROF per-process interval timers are updated from hardclock(9). If a timer for the parent process is enabled the hardclock(9) thread calls itimerdecr() to update and reload it as needed. However, in itimerdecr(), after entering itimer_mtx, the thread needs to double-check that the timer in question is still enabled. While the hardclock(9) thread is entering itimer_mtx a thread in setitimer(2) can take the mutex and disable the timer. If the timer is disabled, itimerdecr() should return 1 to indicate that the timer has not expired and that no action needs to be taken. ok kettenis@
2020-08-09Fix some wrapping/indent.Joel Sing
2020-08-09Convert openssl req option handling.Joel Sing
With input from inoguchi@ ok beck@ inoguchi@
2020-08-09Update TLS versions to match TLSv1.3 being enabled for TLS_method().Joel Sing
2020-08-09Fix regress test so that it exits non-zero for failure cases.Joel Sing