summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-09-23Xr to correct man page; from Josiah Frentsos, thanks!Florian Obser
2022-09-23POSIX timzone specs may contain '.' so only reject names containing '../'.Todd C. Miller
Noted by pjanzen@ with input from deraadt@.
2022-09-23Since tzset(3) ignores arbitrary files, we no longer need rpathFlorian Obser
and can depend on the /usr/share/zoneinfo bypass. OK mestre, millert, deraadt
2022-09-23Don't depend on RTLABEL_LEN but instead define our own ROUTELABEL_LEN.Claudio Jeker
With this bgpd.h no longer depends on net/route.h OK tb@
2022-09-23Implement a special update generator for add-path send all.Claudio Jeker
The generic add-path code up_generate_addpath() reevaluates everything since this is the simplest way to select the announced paths. For add-path all this is overkill since there is no dependency between prefixes and so individual prefixes can be handled more efficently. Extend rde_generate_updates() to pass the current newbest and oldbest prefixes (for the selected best path) but now also include newpath and oldpath (which is the prefix that is added/removed/modified). If newpath or oldpath is set then a single prefix was altered and up_generate_addpath_all() can just remove or add this prefix. If newpath and oldpath are NULL than the full list based on newbest needs to be inserted and any old path/prefix removed in the process. This improves update generation performance on big route collectors using add-path all substantially. OK tb@
2022-09-23merge unbound 1.16.3Stuart Henderson
2022-09-23Don't hardcode disk major device types inside DEBUG block. UseKenneth R Westerback
findblkname() and DISKUNIT(). Allows all block devices, not just sd* and vnd* to generate useful names in DEBUG output. Cluebat by deraadt@
2022-09-23Delete unused variables originally come from mvme88k.Kenji Aoyama
2022-09-23only call printf the first time amd64_errata() is calledJonathan Gray
it may later be used from a resume path when we don't want to print same change as amd64 amd64errata.c 1.11 by robert ok robert@ deraadt@
2022-09-22remove dup line; from j@bitminerTheo de Raadt
2022-09-22use the always serializing RDTSCP instruction in tsc and usertc if availableRobert Nagy
tweaks from cheloha@; ok deraadt@, sthen@, cheloha@
2022-09-22Call amd64_errata() from cpu_fix_msrs() instead of identifycpu() so thatRobert Nagy
on resume, the errata is re-applied. In addition make amd64_errata() print the information about the applied errata only once for the first CPU. input from jsg@ and deraadt@, ok deraadt@
2022-09-21Distinguish between retransmit ok and nothing to retransmit. This makesTobias Heider
sure ikes_retransmit_response events don't also increase the ikes_msg_rcvd_busy counter. ok markus@
2022-09-21Fix typo. From AlexanderStohr via github PR#343.Darren Tucker
2022-09-21The values for fib_priority are OS dependent. To help portability moveClaudio Jeker
the RTP_BGP and similar defines all into kroute.c and export them via kr_default_prio() and kr_check_prio(). OK tb@
2022-09-21tzset: ignore TZ if it contains an absolute path or issetugid().Todd C. Miller
Reading time zone files from user-controlled paths can result in pledge(2) or unveil(2) violations. We also ignore files that contain a '.' character to avoid paths containing ".." or hidden files. Work with and OK deraadt@
2022-09-21Tweak symbols test in such a way that it would have caught the recentTheo Buehler
Symbols.list mistake: undefine aliases (except _cfb block ciphers which are aliases for historical reasons). Use -Wl,--no-allow-shlib-undefined.
2022-09-21Adjust pathid_assign() to be much faster in the common case.Claudio Jeker
Use a per peer path_id_tx to assign to paths received from none add-path enabled peers. This skips two extra walks of the RIB prefix list and is a big speed-up when there are many regular sessions. If the session uses add-path recv then the old way of assigning random path_ids needs to be used. With input and OK tb@
2022-09-21Revert UVM_VNODE_CANPERSIST removal, it exposes an issue on arm64.Martin Pieuchot
Found the hardway by miod@ and deraadt@.
2022-09-21Default request message body size should be 0.YASUOKA Masahiko
ok claudio
2022-09-21Update awk to Sep 12, 2022 version.Todd C. Miller
Fix undefined behavior and a use-after-free in cat().
2022-09-20Update libexpat to 2.4.9. This fixes CVE-2022-40674. Relevant forAlexander Bluhm
OpenBSD are security fixes #629 #640 and other changes #610 #643. No library bump necessary. OK deraadt@
2022-09-20Split out handling of cpu family specific MSRs from cpu_init_msrs()Robert Nagy
to a separate function that gets called after identifycpu() so that we have the required information to handle the correct MSRs for each cpu. Additionally, move the handling of the DE_CFG_SERIALIZE_LFENCE and IA32_DEBUG_INTERFACE_LOCK MSRs out of identifycpu() to the new function so that they get set again after a suspend/resume cycle as well, which in fixes TSC sync failures. discussed with and input from deraadt@, mlarkin@
2022-09-20drm/amd/amdgpu: skip ucode loading if ucode_size == 0Jonathan Gray
From Chengming Gui 985a5d3d491d558f785b77cc5b86837bfa408587 in linux 5.15.y/5.15.69 39c84b8e929dbd4f63be7e04bf1a2bcd92b44177 in mainline linux
2022-09-20Remove unused and unimplemented unp_drain().Vitaliy Makkoveev
ok bluhm@
2022-09-20Fix line length trimming in -f modeJob Snijders
Reported by Christian Weisgerber OK kn@
2022-09-20Reword comment, no functional changeClaudio Jeker
2022-09-20remove HY_D1_G34R1 enum value and just use HY_D1Jonathan Gray
HY-D1 C32r1 (0x00100f81) and HY-D1 G34r1 (0x00100f91) have the same errata and multiple cpuid values can map to a single enum value.
2022-09-19add RequiredRSASize to the list of keywords accepted by -o;Damien Miller
spotted by jmc@
2022-09-19Remove now-unused connect_wait() function.Todd C. Miller
2022-09-19Add iked connection statistics for successful and failed connections, commonTobias Heider
error types and other events that help analyze errors in larger setups. The counters can be printed with 'ikectl show stats'. ok bluhm@ patrick@ from and ok markus@
2022-09-19Change OF_getnodebyname() such that looking up a node using just the namePatrick Wildt
without a unit number (so without the @1234 bit) works as well. This is a re-commit of the backed out change with the endless loop fixed.
2022-09-19Symlink chosen time zone file to /etc/localtime so that we don't needFlorian Obser
to use a time zone path that's not relative to /usr/share/zoneinfo. Hopefully we can limit tzset(3) to only look at zone info files in /usr/share/zoneinfo, soon. OK millert, deraadt
2022-09-19When setting time, date(1) pledges "wpath" for logwtmp(3). RestrictFlorian Obser
this using unveil(2), but ignore errors if /var/log doesn't exist. We want to be able to set the time if the system is damanged or /var is not mounted yet. We also need to unveil everything for reading since we still allow arbitrary locations of zone info files. Hopefully that will go away soon. OK deraadt
2022-09-19adjust notes for linker set changeJonathan Gray
ok miod@ deraadt@
2022-09-19Remove PKCS12_MAKE_{,SH}KEYBAG from Symbols.listTheo Buehler
These functions were renamed in the last bump #define PKCS12_MAKE_KEYBAG PKCS12_SAFEBAG_create0_p8inf #define PKCS12_MAKE_SHKEYBAG PKCS12_SAFEBAG_create_pkcs8_encrypt They don't appear in the compiled library itself, so no further bump required. Fixes libressl-portable/portable#791 Found the hard way by vollkommenheit ok deraadt jsing
2022-09-19use users-groups-by-id@openssh.com sftp-server extension (whenDamien Miller
available) to fill in user/group names for directory listings. Implement a client-side cache of see uid/gid=>user/group names. ok markus@
2022-09-19sftp client library support for users-groups-by-id@openssh.com;Damien Miller
ok markus@
2022-09-19extend sftp-common.c:extend ls_file() to support supplied user/groupDamien Miller
names; ok markus@
2022-09-19sftp-server(8): add a "users-groups-by-id@openssh.com" extensionDamien Miller
request that allows the client to obtain user/group names that correspond to a set of uids/gids. Will be used to make directory listings more useful and consistent in sftp(1). ok markus@
2022-09-19better debugging for connect_next()Damien Miller
2022-09-19update set sizesJonathan Gray
2022-09-18Define PMU_ADB_CMD and PMU_INT_ACKGeorge Koehler
Taking these definitions from NetBSD's pm_direct.h; most PMU_* commands have the same names in the BSDs and Linux. ok miod@ kettenis@
2022-09-18Fix a memory leak which was introduced by the previous commit.Marcus Glocker
The issue was reported by Stephan Somogyi - Thanks!
2022-09-18timecounting: tc_reset_quality: print notice if active counter changesScott Soule Cheloha
Give the user a hint as to what happened if they boot up and the TSC is not the active counter. "sure" deraadt@
2022-09-18tsc: make tsc_report_test_results() less noisy without TSC_DEBUGScott Soule Cheloha
By default, just say "tsc: cpu0/cpuN: sync test failed". If you want more information you need to recompile with TSC_DEBUG set. While here, disable TSC_DEBUG. "sure" deraadt@
2022-09-18Revert previous it prevents the PinebookPro and the Rockpro64 to reach userland.Martin Pieuchot
Found by kn@ and myself, ok deraadt@
2022-09-17Allow TLSv1.3 clients to send CCS without middlebox compatibility mode.Joel Sing
While RFC 8446 is clear about what legacy session identifiers can be sent by a TLSv1.3 client and how middlebox compatibility mode is requested, it is delightfully vague about the circumstances under which a client is permitted to send CCS messages. While it does not make sense for a client to send CCS messages when they are not requesting middlebox compatibility mode, it is not strictly forbidden by the RFC and at least one (unknown) TLSv1.3 stack has been observed to do this in the wild. Revert part of the previous change and allow clients to send CCS messages, even if they are not requesting middlebox compatibility mode. Found the hard way by florian@ ok tb@
2022-09-17Link to SSL_read_early_data(3)Klemens Nanni
OK tb
2022-09-17bind/connect is now expected to succeedSebastian Benoit
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-30 01:17:14 +0000