summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-07-15Update per-neighbor GTSM options on config reload.Renato Westphal
2016-07-15disable acpicbkbd by default until after the release when acpi ecJoshua Stein
issues can be worked out, otherwise this driver will cause the kernel to spin forever on certain chromebooks
2016-07-15Tweak output of environment logging.Nicholas Marriott
2016-07-15Log environment to new panes.Nicholas Marriott
2016-07-15Wrap some long lines and apply some static.Nicholas Marriott
2016-07-15Switch m88k to pass &_DYNAMIC to _dl_boot_bind()Philip Guenther
probably works: this ASM pattern is already used for _dl_dtors
2016-07-15take us out of -betaTheo de Raadt
2016-07-15Reduce the syslog level of some relatively common protocol eventsDarren Tucker
from LOG_CRIT by replacing fatal() calls with logdie(). Part of bz#2585, ok djm@
2016-07-15Don't update cells in each block of data read from a pane immediately,Nicholas Marriott
instead track them as change (dirty) and update them once at the end, saves much time if repeatedly writing the same cell. Also fix comparison of cells being equal in a few places (memcmp is not enough).
2016-07-15Instead of representing colours in several different forms with variousNicholas Marriott
cell flags, convert to use an int with flags marking 256 or RGB colours in the top byte (except in cells, which we don't want to make any bigger). From Brad Town.
2016-07-15Add a ProxyJump ssh_config(5) option and corresponding -J ssh(1)Damien Miller
command-line flag to allow simplified indirection through a SSH bastion or "jump host". These options construct a proxy command that connects to the specified jump host(s) (more than one may be specified) and uses port-forwarding to establish a connection to the next destination. This codifies the safest way of indirecting connections through SSH servers and makes it easy to use. ok markus@
2016-07-14kern.usermount is currently a no-op;Jason McIntyre
ok deraadt
2016-07-14Make sure that amap slot calculation does not overflowStefan Kempf
This prevents from too small amaps being allocated by forcing the allocation of a large number of slots. Based on an analysis from Jesse Hertz and Tim Newsham. ok kettenis@
2016-07-14syncTheo de Raadt
2016-07-14kern.usermount=1 is unsafe for everyone, since it allows any non-pledgedTheo de Raadt
program to call the mount/umount system calls. There is no way any user can be expected to keep their system safe / reliable with this feature. Ignore setting to =1, and after release we'll delete the sysctl entirely. ok lots of people
2016-07-14Drop received packets with an IPv4-compatible address as source orMartin Pieuchot
destination as per RFC4213. We're not in 1999 anymore, what was earlier a "stronger check than RFC1933" is now a best practice. This matches the behavior of the reject (R) routes added by default by netstart(8). ok jca@, florian@, claudio@, bluhm@
2016-07-14Do board-specific delay/skew corrections for the Micrel KSZ9021 and KSZ9031Mark Kettenis
PHYs based on device tree properties instead of the board ID. Untested as I don't have the hardware. ok jsg@, patrick@
2016-07-14Prevent a use-after-free by not updating an ARP entry that has beenMartin Pieuchot
removed from the table. Currently the storage for L2 addresses is freed when an entry is removed from the table. That means that we cannot access this chunk of memory between RTM_DELETE and rtfree(9). Note that this doesn't apply to MPLS because the associated storage is currently released by the last rtfree(9). ok mikeb@
2016-07-14vioblk: Properly handle poll timeoutStefan Fritsch
The only way to ensure that the device does not do DMA for the timed out request is a device reset. Also increase the timeout to 15s
2016-07-14rename virtio_ops.intr to poll_intrStefan Fritsch
This describes more accurately what it is good for. Also introduce a virtio_poll_intr macro.
2016-07-14virtio: Move interrupt handler into transport specific codeStefan Fritsch
For MSI-X (and also possibly for other transports), the interrupt handler must do different things. Move it out of virtio.c and into virtio_pci. ARM part tested by patrick@
2016-07-14make several program to use "chown" promise.Sebastien Marie
it allows chown(2) call to change the user or group on a file. - usr.bin/compress : aka gzip - usr.bin/mg : open a file for writing - usr.bin/sed : inplace editing - usr.bin/sort : if outfile equals one of the input files ok deraadt@ tb@ (and a reminder from Remi Locherer) warning: in order to use it, you must have a recent kernel with the new promise.
2016-07-14Add PT_GNU_RELRO, for ld.so workPhilip Guenther
ok millert@ kettenis@
2016-07-14Prevent silly states via knotes on pids > 2^32 and on nonexistent signals.Philip Guenther
ok tedu@
2016-07-14ufs_readdir() buffer was meant to be limited to 64kB; reversed testPhilip Guenther
permitted very big mallocs to panic the kernel. reported by Tim Newsham ok millert@
2016-07-14kevent validates that ident is a valid fd by getting the file. one sadTed Unangst
quirk: uint64 to int32 truncation can lead to false positives, and then later in the array sizing code, very big mallocs panic the kernel. add a check that the ident isn't larger than INT_MAX in the fd case. reported by Tim Newsham
2016-07-14Correct equal in test.Darren Tucker
2016-07-13A work-in-progress driver for the Hyper-V NetVSCMike Belopuhov
Network VSC is an RNDIS device using NVSP protocol to communicate with the Hyper-V VMBus via VMBus channels and/or shared memory. The code was ported from FreeBSD with some API changes and simplifications. While the Rx path is nearly complete, packet transmition is not implemented yet. ok deraadt, mlarkin
2016-07-13When matching a day in the month, make sure that the date is stillTodd C. Miller
in the month we are interested in after calling mktime(3). This fixes things like Sunday+5 for months where there is not a 5th Sunday and the 31st day in months with less than 31 days. From Andy Bradford
2016-07-13The "#address-cells" and "#size-cells" properties define the sizePatrick Wildt
of the memory address and length information. The root node passes this information down to the children and it can be overwritten by other nodes inbetween. Pass these properties as part of the fdt attach args, so that we can grab that information quickly inside the drivers. ok kettenis@
2016-07-13ross l richardson reports that an auto reply is no longer generatedJason McIntyre
on submission, so remove that sentence (correct me if this is wrong); while here replace some mandoc chars;
2016-07-13output the no-longer-so-new AS operators when printing theSebastian Benoit
configuration noticed by and diff from Denis Fondras, thanks! ok phessler@ sthen@
2016-07-13Since mappings established using __MAP_NOFAULT will be converted into anonymousMark Kettenis
memory if the file backing the mapping is truncated, we should check resource limits. This prevents callers from triggering a kernel panic and a potential integer overflow in the amap code by forcing the allocation of too many slots. Based on an analysis from Jesse Hertz and Tim Newsham. ok deraadt@
2016-07-13Revert previous; the __MAP_NOFAULT test is inverted and the commit message isMark Kettenis
wrong.
2016-07-13Move ARP processing back to the KERNEL_LOCK()ed task until the raceMartin Pieuchot
triggered by updating a cached, but removed from the table, entry is properly fixed. Diff from dlg@, prodding deraadt@
2016-07-13Adjust existing tls_config_set_cipher() callers for TLS cipher groupJoel Sing
changes - map the previous configuration to the equivalent in the new groups. This will be revisited post release. Discussed with beck@
2016-07-13Split the existing TLS cipher suite groups into four:Joel Sing
"secure" (TLSv1.2+AEAD+PFS) "compat" (HIGH:!aNULL) "legacy" (HIGH:MEDIUM:!aNULL) "insecure" (ALL:!aNULL:!eNULL) This allows for flexibility and finer grained control, rather than having two extremes (an issue raised by Marko Kreen some time ago). ok beck@ tedu@
2016-07-13Since mappings established using __MAP_NOFAIL will be converted into anonymousMark Kettenis
memory if the file backing the mapping is truncated, we should check resource limits. This prevents callers from triggering a kernel panic and a potential integer overflow in the amap code by forcing the allocation of too many slots. Based on an analysis from Jesse Hertz and Tim Newsham. ok deraadt@
2016-07-13remove <0 check for an unsigned variableTheo de Raadt
from tom
2016-07-13remove unused function ether_cmp()Theo de Raadt
from tom
2016-07-13Use the device tree voltage regulator information to supply power to the USBMark Kettenis
bus. For this only supports "fixed" regulators that are controlled through a gpio. But this covers all the case we currently handle with board ID specific code. Note that the old code did explicitly remove power first on some boards, which would reset bus-powered devices/hubs on the bus. The new code doesn't do this. If that causes problems we can revisit the issue. The boards that would be affected are sabrelight/nitrogen6x and utilite. The plan is to evolve this into a generic regulator framework that supports more complex regulator types as well. ok jsg@, patrick@
2016-07-13Introduce RTF_MULTICAST and flag corresponding IPv6 routes as suchMartin Pieuchot
instead of abusing RTF_CLONING. Fix a leak reporeted by Aaron Riekenberg on misc@, ok sthen@
2016-07-13CPUID vendor ID was already register-swapped during initial query, so noMike Larkin
need to do it again.
2016-07-13Fix usage() output and getopt sortingPhilip Guenther
2016-07-13store nd6 expiries in the route, not separately in the llinfo struct.David Gwynne
this makes it more consistent with arp, and makes expiries visible via route(8) get as well as ndp(8). ok mpi@ florian@
2016-07-12Document that the syslogd options -c and -k must be used together.Alexander Bluhm
OK jmc@
2016-07-12Reset the mt state completely in wsmouse_mt_init.Ulf Brosziewski
ok kettenis@
2016-07-12The only valid flag for unmount(2) is MNT_FORCE, ignore any others.Todd C. Miller
Fixes a crash when MNT_DOOMED is passed in the flags to unmount(2) found by NCC Group. OK bluhm@
2016-07-12Turn ahci(4) glue code for the i.MX6 platform into its own imxahci(4) driverMark Kettenis
such that we can don't end up with conflicting attachments of other SoC-specific glue code.
2016-07-12Change over to imxehci(4) here as well.Mark Kettenis
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-28 18:52:13 +0000