summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-12-06Don't hardcode the cache directory for rpki-client. If started as rootClaudio Jeker
rpki-client will use the defaults for cache and output directory. If not started as root users need to provide both directories as arguments. While there switch from absolute path names to relative ones. For this the parser and rsync process do a chdir(2) to the cache directory on startup. OK benno@
2019-12-06Like Targets.def include AMDGPU lines in generated .def files forJonathan Gray
AsmParsers.def AsmPrinters.def and Disassemblers.def. Required so that LLVM headers will have prototypes for LLVMInitializeAMDGPUAsmPrinter() and LLVMInitializeAMDGPUAsmParser().
2019-12-06Sync KVE_ET_* and UVM_ET_* flags.Martin Pieuchot
ok guenther@
2019-12-06fix setting of $SSH_ASKPASS_PROMPT - it shouldn't be set when askingDamien Miller
passphrases, only when confirming the use of a key (i.e. for ssh-agent keys added with "ssh-add -c keyfile")
2019-12-06bring the __func__Damien Miller
2019-12-06when copying capabilities from the first port to a trunk, copy hardmtu too.David Gwynne
previously it copied the ports if_mtu to the trunks if_hardmtu, which makes it hard for things like vlan(4) to work with a full frame size, or large frame size. tested by hrvoje popovski
2019-12-06enable the full use of jumbos and remove IFCAP_VLAN_MTU.David Gwynne
The chip can do 9008 byte packets (not including the ethernet header), but only 9004 if you want to enable IFCAP_VLAN_MTU. by not enabling IFCAP_VLAN_MTU, we let other protocols (eg, mpls or svlan) use the extra bytes if they want. using the extra bytes for the hardmtu instead of for IFCAP_VLAN_MTU works a bit better with how aggr(4) is set up at the moment because aggr does not pass IFCAP_VLAN_MTU through from its ports, which means vlan(4) on aggr(4) cannot see the flag and use the extra bytes. this was figured out by hrvoje popovski in a discussion with pedro caetano on the "issues configuring vlan on top of aggr device" on misc@. hrvoje also tested the diff and made sure the full use of jumbos works for things like ping packets with DF set. jmatthew skimmed the diff and didnt see anything obviously wrong too
2019-12-06Explicitly say that *permissions can be "".Ingo Schwarze
Potential for misunderstanding noticed by Chris Rawnsley <chris at puny dot agency>, wording proposed by deraadt@, patch sent by Chris Rawnsley, OK deraadt@.
2019-12-05- fix some Xr; from martinJason McIntyre
- minor tweaks while here
2019-12-05syncStuart Henderson
2019-12-05Various cleanup tweaks. 'return' is not a function. KNF. Whitespace,Kenneth R Westerback
Comment fixes.
2019-12-05Don't discard error from mode sense (6) if mode sense (10) isKenneth R Westerback
not attempted.
2019-12-05Document IP6_SOIIKEY_LENkn
OK florian jmc
2019-12-05Shrink scsi_mode_do_sense() parameter list by eliminating the threeKenneth R Westerback
pointers returning possible block descriptor values for block size, block count and density. Most calls were passing "NULL, NULL, NULL" since they did not care. Call scsi_parse_blkdesc() directly in those few cases where one or more of the values is of interest. No intentional functional change.
2019-12-05No need for 'byte2' parameter to scsi_mode_sense[_big]() since weKenneth R Westerback
always pass 0. i.e. never disable block descriptors, never accept long LBA values.
2019-12-05Move prototypes for scsi_mode_sense(), scsi_mode_sense_big(),Kenneth R Westerback
scsi_mode_sense_page() and scsi_mode_sense_big_page() into scsi_base.c. They are just internal helper functions for scsi_do_mode_sense().
2019-12-05tweak previous;Jason McIntyre
2019-12-05be less verbose in debug logging; ok florian@Otto Moerbeek
2019-12-05Move uvmexp_print() to a better place.Martin Pieuchot
ok mlarkin@
2019-12-05Split uvm(9) into smaller manuals.Martin Pieuchot
ok jmc@, deraadt@, schwarze@
2019-12-05Tell a little bit how "preference" works these days; ok florian@Otto Moerbeek
2019-12-05revert previous; ingo said itJason McIntyre
2019-12-05Document X509_STORE_CTX_set_flags() which is a handy way to change theClaudio Jeker
verification param flags of a context. While this function is marked as likely to be deprecated in OpenSSL it seems that this may not happen. This is why we decided to still document it. OK and input from ingo@ tb@
2019-12-05replace "Pf < ... Ns >" with Aq; tidy up lists a little;Jason McIntyre
2019-12-05tweak the FILTERING text a little; ok gillesJason McIntyre
2019-12-05Remove clause #3 from mrg@NetBSD license.Martin Pieuchot
In May 29 2008, Matthew R. Green removed it in NetBSD: github.com/IIJ-NetBSD/netbsd-src/commit/7ea20401d535da9996394136ef ok deraadt@
2019-12-05No need to unveil(NULL, NULL) right before pledge "stdio rpath".Theo Buehler
From George Brown. ok benno
2019-12-05Convert infinite sleeps to tsleep_nsec(9).Martin Pieuchot
ok jca@
2019-12-05Fix #ifndef NOSSL vs SMALL inconsistenciesJeremie Courreges-Anglas
from Hiltjo Posthuma
2019-12-04use return x; instead of return (x);, like all other files here.Sebastian Benoit
ok deraadt@
2019-12-04reduce includes to the required minimum.Sebastian Benoit
ok deraadt@
2019-12-04When we detect that a resolver strategy is not validating because theFlorian Obser
time is wrong enable a timer to check it again later. ntpd might have corrected the time. input & OK otto
2019-12-04Add sizes for free() in autri(4).Frederic Cambus
OK mpi@
2019-12-04Use NI_MAXHOST like everywhere else instead of a wrong number.Florian Obser
2019-12-04some minor tweaks;Jason McIntyre
2019-12-04I accidentally smashed wrong contents into this file.Theo de Raadt
Repair from Martin @ academicsolutions.ch
2019-12-04Rework rpki-client documentationjob
OK Ingo Schwarze
2019-12-04Insert missing &&job
OK claudio@
2019-12-04Attempt to smear out stampedes on the RPKI rsync serversjob
OK claudio@ benno@
2019-12-04If we see a validated result, we can (must!) assume the resolver isOtto Moerbeek
validating; ok florian@
2019-12-04typos don't help aproposMarc Espie
2019-12-04split output management code into seperate file. iterate over outputTheo de Raadt
methods using a table. detect output truncation (for instance filesystem full) and don't overwrite previous output ok claudio
2019-12-04document special names that exist in the package systemMarc Espie
2019-12-04explicitly say you're not allowed to insert most of these yourselfMarc Espie
2019-12-04document DEBUG_PKG_CACHEMarc Espie
2019-12-04add DEBUG_PKG_CACHE functionality. Doesn't interfere with normal operation.Marc Espie
Basically, if you set DEBUG_PKG_CACHE to a directory, pkg_add will download debug packages "on the sly" any time it installs packages. It is mostly silent (apart from fetching error or directory non existent). It *won't* download packages that are already installed, but this allows keeping debug packages "just in case" in synch with your current snapshot, as some people (mpi@) have worried that by the time you get to debugging something, the snapshots will have moved too much.
2019-12-04allow error to be passed along, in case we need to save $? for laterMarc Espie
2019-12-04Convert infinite sleeps to {m,t}sleep_nsec(9).Martin Pieuchot
ok krw@, jca@
2019-12-04libc's authentication privsep layer performed insufficient usernameTheo de Raadt
validation. Repair work mostly by markus and millert, first of all solving the primary problem, then adding some additional validation points. And then futher validation in login and su. This will be 6.5/021_libcauth.patch.sig and 6.6/010_libcauth.patch.sig Reported by Qualys
2019-12-04Fix a bad offset calculation in uvm_share.Mike Larkin
Syzkaller found a bug in uvm_share when using a vmd(8) mmap region with an offset that ended up making an overlap with a previous vmm(4) uvm_map range. This diff reworks the range and offset calculation in uvm_share. Only vmm(4) uses this, so there should be no visible effects outside vmm(4) environments. Syzkaller also went sorta crazy on this one, finding multiple reproducers for the same bug with just slightly different parameters, thus the multiple "Reported-by" lines below. ok stefan@, anton@ Reported-by: syzbot+2c625ab1b8e964da644a@syzkaller.appspotmail.com Reported-by: syzbot+1300829862412751462d@syzkaller.appspotmail.com Reported-by: syzbot+27cfad3394f34528cbec@syzkaller.appspotmail.com Reported-by: syzbot+3e700c5698177f91cce1@syzkaller.appspotmail.com