summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-06-03Work around a bug where discarding the .ARM.exidx section in the armv7 kernelMark Kettenis
linker script makes ld.lld(1) crash. This has been fixed in a different (proper?) way upstream but backporting their fix is a bit too invasive. ok patrick@
2018-06-03Sync manual with the const changes introduced in pcap.h rev 1.20.Theo Buehler
2018-06-03Change some libpcap functions which use pointers as arguments andStuart Henderson
returns to const pointers: - the prefix argument to pcap_perror(); - the return value of pcap_strerror(); - the filter expression argument to pcap_compile() and pcap_compile_nopcap(); - the BPF filter program argument to bpf_image(). Matches changes made earlier in tcpdump.org's version of libpcap. From Guy Harris, ok tb@, been through a bulk ports build.
2018-06-03some words about the lang/php moduleStuart Henderson
2018-06-03Increment the lines counter when skipping a line to avoid an infiniteNicholas Marriott
loop, and fix a check to avoid a potential out-of-bounds access. Problem reported by Yuxiang Qin and tracked down by Karl Beldan; GitHub issue 1352. Also a man page fix request by jmc@.
2018-06-03Add placeholder for lang/php.Antoine Jacoutot
2018-06-03Enable bwfm(4) for USB devices on RAMDISK as well.Frederic Cambus
Requested by visa@.
2018-06-03rock AND roll!Jason McIntyre
2018-06-03for the witness(4) text, we already Xr the page in the first sentence, so addingJason McIntyre
"See witness(4)" is unneccessary, and just bulks this already large page: remove it;
2018-06-03i386 isn't quite ready for witness yet.Theo de Raadt
2018-06-02syncTheo de Raadt
2018-06-02Initial regress for CSI DH.Joel Sing
2018-06-02Validate DH public values and allow for smaller keys to be generated whenJoel Sing
less keying material is needed. Based on code written by djm@ and markus@ for ssh.
2018-06-02Initial version of Crypto Simplified Interface (CSI).Joel Sing
This is a code base that intends on providing a simplified interface for mid-level cryptographic operations. In due course various applications and libraries will be able to benefit from a clean and robust API, rather than using libcrypto or other similar APIs directly. Discussed at length with deraadt@, djm@, markus@, beck@ and others.
2018-06-02+.Xr fanpwr 4Jason McIntyre
2018-06-02Convert ssl3_get_client_kex_ecdhe_ecp() to CBS.Joel Sing
Also allocate a dedicated buffer to hold the shared secret, rather than reusing init_buf. ok inoguchi@ tb@
2018-06-02Move the declarations of the raw ip and ip6 pcb tables into theAlexander Bluhm
in_pcb.h header file. OK mpi@ visa@
2018-06-02Update regress for DES cipher suite removal.Joel Sing
2018-06-02Remove the three remaining single DES cipher suites.Joel Sing
These are insecure and should not be used - furthermore, we would should not have been allowing their negotiation with TLSv1.2 (as noted by Robert Merget, Juraj Somorovsky and Simon Friedberger). Removing these cipher suites also fixes this issue. ok beck@ inoguchi@
2018-06-02Cleanup the in_pcbnotifymiss diagnostic printfs. Always print theAlexander Bluhm
rdomain. Move the printf to the end of the pcb lookup functions. OK tb@ mpi@ visa@
2018-06-02The function in_pcbrehash() does not modify the pcb table queue.Alexander Bluhm
So in in_pcbresize() the variant without _SAFE of the TAILQ_FOREACH macro is sufficient. OK tb@ mpi@ visa@
2018-06-02Zero the client random so that it is easier to spot unintended differences.Joel Sing
2018-06-02Add more RK3399 clocks such that we can support assigned locks for theMark Kettenis
clock controller.
2018-06-02Add an assert that makes explicit that finishdup() should receiveVisa Hankala
an inserted fp. OK mpi@
2018-06-02Enable fanpwr(4), move sypwr(4) where it belongs.Mark Kettenis
2018-06-02fanpwr(4)Mark Kettenis
2018-06-02Add fanpwr(4), a driver for the Fairchild FAN53555 voltage regulator.Mark Kettenis
2018-06-02LARVAL fds are now invisble from userland.Martin Pieuchot
From tb@
2018-06-02Put file descriptors on shared data structures when they are completelyMartin Pieuchot
setup. LARVAL fd still exist, but they are no longer marked with a flag and no longer reachable via `fd_ofiles[]'. This allows us to simplifies a lot code grabbing new references to fds. All of this is now possible because dup2(2) refuses to clone LARVAL fds. Note that the `fdplock' could now be release in all open(2)-like syscalls, just like it is done in accept(2). With inputs from Mathieu -, visa@, guenther@ and art@ ok visa@, bluhm@
2018-06-02restore one set of quotes i shouldn;t have removed;Jason McIntyre
from ingo feinerer
2018-06-02Add a const qualifier to the argument of UI_method_get_closer(),Theo Buehler
UI_method_get_flusher(), UI_method_get_opener(), UI_method_get_prompt_constructor(), UI_method_get_reader(), and UI_method_get_writer(). tested in a bulk build by sthen ok jsing
2018-06-02Add const to the argument of the following callback getters:Theo Buehler
BIO_meth_get_callback_ctrl, BIO_meth_get_create, BIO_meth_get_ctrl, BIO_meth_get_destroy, BIO_meth_get_gets, BIO_meth_get_puts, BIO_meth_get_read, and BIO_meth_get_write. ok jsing
2018-06-01With option WITNESS we need to have a bit more KVA available during earlyMark Kettenis
bootstrap so allocate page tables for the first GB. ok deraadt@
2018-06-01Rockchip RK3288/3328/3399 pre-divide the clock. Take this into account whenMark Kettenis
calculating the base clock. Also explicitly set the clock if a clock-frequency property is present as documented in the device tree bindings.
2018-06-01Quiet clang warningsmortimer
ok deraadt@ millert@
2018-06-01Add code to set the frequency of the SDMMC and SDIO clocks.Mark Kettenis
2018-06-01Pass flags for highspeed capabilities based on device tree properties.Mark Kettenis
2018-06-01reorder pki grammar, no functional changeGilles Chehade
2018-06-01instead of using 'set queue XXX' 'set mta XXX' 'set mda XXX' to set optionGilles Chehade
XXX on the relevant component, just drop the keyword 'set', it does not do anything useful and makes config directives longer. while at it, instead of having 'limit' as a main keyword, make it an option on components. and also while at it, do cleanup parse.y a bit ok millert@
2018-06-01when peer advertises SIZE, keep track of it in the sessionGilles Chehade
this will later allow _not_ sending messages when we know they will be rejected at commit time ok eric@
2018-06-01Avoid some unnecessary calls to strlen(3) in systat uvm.Alexander Bluhm
OK krw@
2018-06-01Clear aesni_sc if the context is freed, to avoid leaving a danglingFrederic Cambus
pointer behind. OK visa@
2018-06-01Restrict DMA to the Rockchip RK3328 and RK3388 for now. There is someMark Kettenis
evidence that it doesn't work reliably yet for the Rockchip RK3288 and I can't test that myself right now.
2018-06-01Add a kludge that fixes the build until com_fdt.c is ready for octeon.Visa Hankala
2018-06-01Consistently use printf() instead of db_printf() when not runningVisa Hankala
in ddb. This avoids invoking the output pager by accident and keeps the output somewhat readable in case multiple cores trigger a warning simultaneously.
2018-06-01Clear vc3_sc if the context is freed, to avoid leaving a danglingFrederic Cambus
pointer behind. Pointed out by visa@, thanks! OK visa@
2018-06-01Enable witness(4) on select architectures to help the current MP work.Visa Hankala
Requested by deraadt@
2018-06-01document that keywords have to be quoted when used additionally as argumentJason McIntyre
names, and remove any unneccessary quoting from the existing examples; ok gilles
2018-06-01While sending the pf syncookie, we are holding the pf lock. SoAlexander Bluhm
goto unlock when leaving this block. OK sashan@ henning@
2018-06-01Require a valid certificate by default when relaying through a smarthost.Eric Faurot
Add "tls no-verify" relay option to disable it. suggested and initial diff by semarie@. ok gilles@