summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-10-21first cut at a man page for cpumemDavid Gwynne
2016-10-21Fix build: declare the pcie read/write routines before using them.Paul Irofti
2016-10-21Add missing information about the handling of input, output, andIngo Schwarze
character encoding, clarify the description of table mode, and say that columns are filled before rows by default. Feedback an OK jmc@, OK martijn@.
2016-10-21add openbsd id;Jason McIntyre
2016-10-21pledge changes needed to support pledging vmd(8) on i386, forthcoming.Mike Larkin
ok deraadt@
2016-10-21and recommit with fixed GCOtto Moerbeek
2016-10-21consistently zero the allocated memory in both the MP and UP cases.David Gwynne
from markus@
2016-10-21man pages for vmm(4) i386Mike Larkin
2016-10-21add generalised access to per cpu data structures and counters.David Gwynne
both the cpumem and counters api simply allocates memory for each cpu in the system that can be used for arbitrary per cpu data (via cpumem), or a versioned set of counters per cpu (counters). there is an alternate backend for uniprocessor systems that basically turns the percpu data access into an immediate access to a single allocation. there is also support for percpu data structures that are available at boot time by providing an allocation for the boot cpu. after autoconf, these allocations have to be resized to provide for all cpus that were enumerated by boot. ok mpi@
2016-10-21vmm(4) for i386. Userland changes forthcoming. Note that for the time being,Mike Larkin
i386 hosts are limited to running only i386 guests, even if the underlying hardware supports amd64. This is a restriction I hope to lift moving forward, but for now please don't report problems running amd64 guests on i386 hosts. This was a straightforward port of the in-tree amd64 code plus the old rotted tree I had from last year for i386 support. Changes included converting 64-bit VMREAD/VMWRITE ops to 2x32-bit ops, and fixing treatment of the TSS, which differs on i386. ok deraadt@
2016-10-21mitigate against mpii device attachment racing with mountrootDavid Gwynne
mpii devices get attached by processing sas discovery events after threads are running, but if you have a lean (in terms of devices) and fast machine, these events might run after mountroot. this change has mpii use config_pending_incr() before it attaches scsibus, and runs config_pending_decr() after the first scan of the bus is complete. to make sure config_pending_decr() is run after the scsi attach/detach events are processed, the MPII_EVENT_SAS_DISCOVERY events are deferred to the same context that the MPII_EVENT_SAS_TOPOLOGY_CHANGE_LIST events run in. ok jmatthew@
2016-10-20- PF should send a challenge ACK as response to SYN, which matches existingAlexandr Nedvedicky
state. Extra thanks goes to bluhm@ for careful testing and fixing patch I've sent to tech@ O.K. henning@ bluhm@
2016-10-20- Remove useless var assignmentRicardo Mestre
- Use memset(*b, 0, len) instead of bzero(*b, len) - Use memcpy(*dst, *src, len) instead of bcopy(*src, *dst, len) - Use explicit_bzero(3) instead of bzero(3) to clean temporary HMAC Remarks from deraadt@ (duly noted!!), reviewed and OK by henning@ and tb@
2016-10-20During sniffing filter strictly on icmp6 "packet too big" to avoidAlexander Bluhm
that "neighbor discovery" confuses the test.
2016-10-20some macro fixes for the options list;Jason McIntyre
2016-10-20try to make DESCRIPTION read like it was written for one program, not two;Jason McIntyre
ok florian
2016-10-20spread the Xr! as a bonus, typo fix in switchd.conf.5 too;Jason McIntyre
Xr diff from kapetanakis giannis
2016-10-20some readability fixes for the SWITCH CONFIGURATION section,Jason McIntyre
from edd barrett; while here, there seems to be three sections to the config file, not two;
2016-10-20By removing all the sleeps I created a race in the pf tests. TheAlexander Bluhm
packet was sent and its reply received before the sniffer was up and running. So sleep a second after starting the sniffer thread but before sending the packet. With pf_forward 0m51.54s, pf_fragment 1m33.59s, pf_state 0m03.64s the test are still faster than with forking.
2016-10-20Only drop to _ping user if invoked as root. If invoked as anFlorian Obser
unprivileged user just shed the setuid privs as previously. sthen@ pointed out that you cannot kill(2) your own ping. With this we rely on pledge(2) for unprivileged users. OK sthen@, deraadt@ is happy with the middle ground
2016-10-20Replace fork() and sleep() with a Python thread for sniffing packets.Alexander Bluhm
This reduces test execution time from 2m21.95s to 1m09.80s.
2016-10-20Update to tzdata2016h from from ftp.iana.org.Todd C. Miller
2016-10-20Replace fork() and sleep() with a Python thread for sniffing packets.Alexander Bluhm
This reduces test execution time from 1m20.34s to 0m37.32s.
2016-10-20Make the test faster. Move all the packet matching code into theAlexander Bluhm
pcap filter. That means the first packet sniffed is the correct one. In the success case, we can stop without waiting for a timeout. OK sashan@
2016-10-200x%llu is a bad idea, make that 0x%llx;Ingo Schwarze
noticed while investigating a report from Ed Maste
2016-10-20st_size is off_t, which is signed, so use %lld rather than %llu;Ingo Schwarze
noticed by Ed Maste when compiling on FreeBSD
2016-10-20backout for now; flag combination GC is not okOtto Moerbeek
2016-10-20delete useless call to setlocale(3);Ingo Schwarze
patch from Jan Stary <hans at stare dot cz>; OK millert@ natano@
2016-10-19Add a test suite for pf state handling. It needs a remote machineAlexander Bluhm
to exchange packets, the remote kernel is tested. For now it only contains a challenge ack test written by sashan@. OK sashan@
2016-10-20avoid sentence splicing;Jason McIntyre
2016-10-20optarg is declared in unistd.h and usage is __dead. From Jan Stary.Theo Buehler
ok natano
2016-10-20canary corruption message changed a bitOtto Moerbeek
2016-10-20Move initialization of the helper process in its own routine to makeAlexandre Ratchov
code more readable. No bahavior change.
2016-10-20Also place canaries in > page sized objects (if C is in effect); ok tb@Otto Moerbeek
2016-10-20remove unused variablesAlexandre Ratchov
2016-10-19When tearing down ControlMaster connecctions, don't pollute stderr whenDarren Tucker
LogLevel=quiet. Patch from Tim Kuijsten via tech@.
2016-10-19Avoid the confusion that -a might require a section argument; it does not.Ingo Schwarze
Triggered by a question from <jmates at ee dot washington at edu>. OK jmc@.
2016-10-19Make the description of COLUMNS a bit more readable.Ingo Schwarze
Triggered by a different patch from Michal Mazurek. Joint work by tb@, jmc@, and tedu@, but no one ever committed it.
2016-10-19Delete useless setlocale(3) in src/bin/.Ingo Schwarze
Minor cleanup while here: return from main, static void __dead usage, etc. Based on a patch from Jan Stary <hans at stare dot cz>. Feedback and OK tb@, OK millert@.
2016-10-19Inline IMAGE, CBIN, CRUNCHCONF and XNAME.Martin Natano
ok deraadt
2016-10-19Inline IMAGE, CBIN, CRUNCHCONF and XNAME.Martin Natano
ok deraadt
2016-10-19Unshare Makefile.inc so we can determine how to squeeze makefsTheo de Raadt
into the picture. ok natano
2016-10-19unifdef OPENSSL_NO_CMSJoel Sing
2016-10-19syncTheo de Raadt
2016-10-19enable makefsTheo de Raadt
2016-10-19Link pf_state test to build.Alexander Bluhm
2016-10-19Update client hello messages to follow the removal of fixed ECDH.Joel Sing
2016-10-19Add a test suite for pf state handling. It needs a remote machineAlexander Bluhm
to exchange packets, the remote kernel is tested. For now it only contains a challenge ack test written by sashan@. OK sashan@
2016-10-19There used to be disabled code that used /dev/tty to determine theTheo Buehler
terminal size. That code was removed a while ago, and now there is no longer any reason to open /dev/tty right before exiting init(). ok natano
2016-10-19Remove support for fixed ECDH cipher suites - these is not widely supportedJoel Sing
and more importantly they do not provide PFS (if you want to use ECDH, use ECDHE instead). With input from guenther@. ok deraadt@ guenther@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-03 08:47:59 +0000