summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-09-26openssh-8.8Damien Miller
2021-09-26need initgroups() before setresgid(); reported by anton@, ok deraadt@Damien Miller
2021-09-26Revert '-b' change. Forgot required bsd.rd tweak.Kenneth R Westerback
2021-09-26'-g' no longer needs '-i'.Kenneth R Westerback
No functional change.
2021-09-26MBR partitions created with '-b' should be marked DOSACTIVE.Kenneth R Westerback
That's what 'bootable' means in the MBR world. GPT partitions created by '-b' are unaffected. Pointed out by kettenis@, obviating need for new option.
2021-09-25Fix a possible race condition in spc_msgin().Kenji Aoyama
This comes from NetBSD:sys/dev/ic/mb89352.c fix by tsutsui: http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/ic/mb89352.c.diff?r1=1.57&r2=1.58&f=h Tested on LUNA-88K2 by me.
2021-09-25Add $OpenBSD$ keyword and correct spelling.Kenji Aoyama
2021-09-25Add gpiocharger(4) for arm64Klemens Nanni
This driver provides support for battery chargers connected to GPIO pins, such as those found on the Pinebook Pro. OK kettenis
2021-09-25Add gpioleds(4) for arm64Klemens Nanni
This driver provides support for LEDs connected to GPIO pins, such as those found on the Pinebook Pro. OK kettenis
2021-09-25RSA/SHA-1 is not used by default anymoreKlemens Nanni
OK dtucker deraadt djm
2021-09-24Simplify runAesCmacTest() by using EVP_DigestSign().Theo Buehler
2021-09-24Reset the Tx timer when iwm(4) firmware sends a BA notification.Stefan Sperling
This prevents a bogus "device timeout" if firmware sends a IWM_BA_NOTIF instead of IWM_TX_CMD in order to let us know that a frame has been sent on a Tx aggregation queue. Such behaviour was observed on iwx(4), and there is reason to believe that iwm(4) might also be affected by this issue. Tested by Jean-Michel Bessot on 7265 via bugs@ where this change seems to prevent random device timeouts. Tested by myself on 8265 with no apparent behaviour change seen.
2021-09-24Jordan now starts DST on February's last Thursday (was March).Todd C. Miller
2021-09-24Fix two bugs in m88k fcmp{,u} emulation.Kenji Aoyama
- Use of goto will skip zeroing of 88110-specific comparison bits (bitn 12-17) in some cases. (Move their zeroing closer to the point of their computation.) - Computing of the "in interval" bits should not be performed when the S2 operand is negative. Spotted by Tetsuya Isaki (nono project), suggested diff and description from Miod Vallat. Tested on the real hardware by Isaki and me.
2021-09-24regenKevin Lo
2021-09-24Add support for SIMCom SIM7600.Kevin Lo
To issue AT commands (AT+CUSBPIDSWITCH=9003,1,1 and AT+CLANMODE=1) to change to MBIM mode. ok deraadt@
2021-09-23Samoa no longer observes DST.Todd C. Miller
2021-09-23Remove wpath from secure mode pledge.Tobias Stoeckmann
Upstream removed history file support for secure mode. The history file feature is off by default already, disallowing it altogether in secure mode allows us to drop wpath. Added a note about it to manual page. ok benno, deraadt
2021-09-23Reset the Tx timer when iwx(4) firmware sends a BA notification.Stefan Sperling
When multiple frames are sent in a batch on a Tx aggregation queue our current firmware version does not provide the IWX_TX_CMD notification. Older versions used to provide this (as observed on iwm(4) devices), but our current firmware only sends IWX_BA_NOTIF. This means we need to reset the Tx timer upon BA_NOTIF in order to avoid a bogus "device timeout" trigger from our watchdog handler. Do this as soon as the BA notification has been validated.
2021-09-23Avoid a potential overread in x509_constraints_parse_mailbox()Joel Sing
The length checks need to be >= rather than > in order to ensure the string remains NUL terminated. While here consistently check wi before using it so we have the same idiom throughout this function. Issue reported by GoldBinocle on GitHub. ok deraadt@ tb@
2021-09-23Revert ieee80211_proto.c r1.97 (cvs commit ID 8vKZsdvvkjTr5BG5).Stefan Sperling
My assumption that frames which are buffered on the power save queue were already encrypted was wrong. And the issue which this change intended to fix is still present (reported by Mikolaj Kucharski).
2021-09-23Add support for Tx aggregation to the iwx(4) driver.Stefan Sperling
Throughput goes up to 100 Mbit/s under ideal conditions. This is mostly working and stable, however rare occasional hangs may occur where the device stops giving us interrupts for reasons which are not yet understood. In such cases ifconfig down/up will recover the interface. Regardless, this code seems to be stable enough for remaining issues to be resolved in-tree. My working assumption is that the remaining issues were always present but only trigger under increased load when firmware is driven with Tx agg enabled. Feedback is welcome, especially if stability issues turn out to be worse than expected! As usual, please enable "ifconfig iwx0 debug" when reporting issues. Tests on ax200/ax201: myself, dv, hrvoje, Stefan Hagen, kevlo, Eric Auge, mlarkin, jmc, Mark Patruck Of which only me and jmc have reported seeing a small amount of hangs during continuous usage over about 2 weeks.
2021-09-23Add an ADDBA_OFFLOAD capability for wifi devices manage Tx block ackStefan Sperling
sessions entirely in firmware. This will be used by iwx(4).
2021-09-23Remove an unused variable and a pointless label.Theo Buehler
ok inoguchi
2021-09-23Plug leaks of buf flagged by LLVM scan-build.Theo Buehler
ok claudio
2021-09-22if the key is a secret to be cleared with explicit_bzero, then theTheo de Raadt
length of that key is also a secret, may as well clear it also
2021-09-22use mmap() instead of alloca(), so that argv memory overflow leading toTheo de Raadt
execve can be detected better reported by Alejandro Colomar, ok millert
2021-09-22enable POOL_DEBUG again.Sebastian Benoit
2021-09-22we are now working on 7.0-currentTheo de Raadt
2021-09-22Adjust handling of RIB_GENERIC_ADDPATH MRT messages. Parse it the wayClaudio Jeker
OpenBGPD and GoBGP dump so that it works with all the MRT implementations out there supporting this. While there do some additional minor cleanup. OK deraadt@
2021-09-22remove test traces committed by mistakeEric Faurot
2021-09-22bump version to 7.0.0Eric Faurot
2021-09-22decode srs-encoded address in the right place.Eric Faurot
fixes a bug where ruleset was not evaluated with the expanded address. reported by Stefan Haller ok millert@
2021-09-22sync table_db capabilities with table_staticEric Faurot
ok millert@
2021-09-22Add a workaround for machines where the framebuffer size reported by theMark Kettenis
hardware is incorrect. In this case, make sure the amount of "stolen" memory is at least as large as the EFI framebuffer such that the driver doesn't use this memory until we've switched to the framebuffer allocated by the amdgpu(4) driver. Needs further investigation why the size reported by the hardware is incorrect. Tested by djm@ ok jsg@, deraadt@
2021-09-22Prevent ucc keyboards from changing the wsmux keyboard layout.Anton Lindqvist
ok deraadt@
2021-09-22Fix command prompt with multiple prompts (add the result onto the listNicholas Marriott
again as we go along). ok deraadt
2021-09-21Add NUL termination to btfile content to avoid that strlcpy(3) readsAlexander Bluhm
too much in btrace(8). OK mpi@ deraadt@
2021-09-21ctfstrip uses objcopy behind the scenes, meaning objcopy must alsoTheo de Raadt
be in base set, for KARL spotted by pavel korovin
2021-09-21The cflags -DSUN_CYLCHECK -DSUN_AAT0 were removed accidently. PutAlexander Bluhm
them back in special like in the main disklabel Makefile. OK deraadt@
2021-09-21Use upercase DHCP and sprinkle in some ":".Florian Obser
Committing on behalf of jmc OK deraadt
2021-09-21During resume, also restore pins that we configured as GPIO interrupt pins.Mark Kettenis
Fixes issues with dead touchpads after resume on some machines. ok jcs@, deraadt@
2021-09-21bump rpki-client versionSebastian Benoit
2021-09-21Move us to OpenBGPD 7.2Claudio Jeker
2021-09-20jmc was a bit too eager and deleted the -DSUN_CYLCHECK -DSUN_AAT0Theo de Raadt
compile options required for sparc64 (partition alignment, in particular) noticed by bluhm during testing
2021-09-20Changing the encoding of a ucc keyboard doesn't make sense as only oneAnton Lindqvist
encoding is supported. Instead, silently ignore such requests. Gets rid of the following warning emitted by kbd(8) while booting with a ucc keyboard attached and /etc/kbdtype being present: kbd: unsupported encoding uk on /dev/wskbd2 I ended up repurposing KB_MACHDEP as is became unused back in 2008. Note that running a kernel with this commit applied requires kbd and wsconsctl to be recompiled in order to show correct encodings. Problem reported by landry@ and ok deraadt@
2021-09-20Document how a 0 byte can be encoded for client-id.Florian Obser
Requested by & OK sthen mdoc clue by schwarze
2021-09-20Fix release day and emacs versionTheo Buehler
ok deraadt
2021-09-20Use proper sigsuspend() instead of old pause() and use sigprocmask() toClaudio Jeker
block delivery of signals outside of sigsuspend(). With this the test is more reliable. pause() is implemented as two syscalls and so it is possible to catch a signal on the first syscall and than be stuck on the second waiting for something that already happened. OK millert@ deraadt@ bluhm@
2021-09-20According to RFC 2132 (9.14. Client identifier) a hardware type of 0Florian Obser
should be used when the client identifier is not a hardware address, for example if it's just a string. It turns out that the majority of dhcp clients (and possibly servers?) does not do this but rather transmits the client identifier verbatim if a string is configured. The first character becomes the hardware type. Make dhcpleased(8) behave the same. Difference in behavior with dhclient(8) and interoperability issues with dhcp(8) first pointed out by Olivier Cherrier on misc@ OK sthen fine to get it in for 7.0 deraadt