summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-01-11KNFBob Beck
2010-01-11KNFBob Beck
2010-01-11It's '-D dontmerge' now.Bernd Ahlers
2010-01-11Bring mutex protections to ststart, cdstart and ssstart, as alreadyKenneth R Westerback
done in sd. Make names consistant across all three. ok dlg@ tested (cd) & ok beck@
2010-01-11"default" routes need a mask of 0 too.David Gwynne
from and ok claudio@
2010-01-11"default" routes need a mask of 0 too.David Gwynne
from and ok claudio@
2010-01-11Pull in fix from kif via FreeBSD r1.114 to properly initializeKenneth R Westerback
uio_off. Prevents crap being passed as the starting offset to getdirentries(), which could lead to various kinds of confusion when trying to process cd9660 directory entries. Problem seen by jsg@, who also found the fix in FreeBSD. ok beck@
2010-01-11add "log brief" and "log verbose" to change logging verbosityJonathan Gray
like several other things in the tree. ok reyk@ looks fine claudio@
2010-01-11use calloc() instead of multiplying for malloc(); ok reykTheo de Raadt
2010-01-11Do not crash when starting up with a bad config file. Check thatClaudio Jeker
conf.listen_addr is actually valid before deref.
2010-01-11Negative offset or negative size in a buf is invalid. Treat just like otherKenneth R Westerback
invalid offsets and sizes: reject the i/o. ok deraadt@ beck@
2010-01-11Do not prompt for a passphrase if we fail to open a keyfile, and log theDarren Tucker
reason the open failed to debug. bz #1693, found by tj AT castaglia org, ok djm@
2010-01-11When mapping CarBus memory BARs, enforce a minimum alignment of 0x1000. ThisMark Kettenis
is the granularity of the windows provided by the CardBus bridge. A smaller alignment may result in those windows covering address space used by other PCI devices in the machines. Fixes CardBus xl(4) n naddy's X40.
2010-01-11Initial import npppd(8). npppd is a new PPP daemon that handles manyYASUOKA Masahiko
ppp sessions as a server. It supports L2TP, PPTP and PPPoE as tunneling. ok mcbride@ dlg@ deraadt@ reyk@.
2010-01-11"final" leak in state creation: in pf_state_key_setup, if we actuallyHenning Brauer
need two state keys (NAT case), and we succeed allocating the first one but fail getting the second we'd leak the first one. obvious and thus ok'd by dlg ryan and theo within seconds
2010-01-11lex <=, >=, !=, and -> into a single token for correctness and to reduce theTheo de Raadt
lookahead in the parser ok reyk
2010-01-11fix a bug in pf_create_state that was a major source of amusement for meHenning Brauer
over the last couple of weeks (ever since I found it): when we are out of memory for the state keys we leak the state. oh the irony. instead of just fixing that one case rework the error handling in the entire function. verified painfully by yours truly by forcefully exercising each and every error path in there. ryan ok
2010-01-11rework the polling code to use the semantic krw@ proposed.David Gwynne
intercept the ccb_done handling so polled commands set a flag that mpi_poll tests on. when ccb_done sets the variable, the poll loop breaks and mpi_poll runs the original ccb_done handler for the ccb completion. this is a lot simpler than the previous implementation and removes a mutex. ok beck@
2010-01-11Initial import PIPEX. PIPEX(Pppac IP EXtension) is a IP forwardingYASUOKA Masahiko
acceleration for PPP access concentrator. ok mcbride@ dlg@ deraadt@ reyk@.
2010-01-11lex <=, >=, !=, and >< into a single token for correctness and to reduce theTheo de Raadt
lookahead in the parser ok henning
2010-01-11regress test for stdio forwardingDarren Tucker
2010-01-11Enable IP checksum offloading in ix(4).Reyk Floeter
Note: it did not work before because the checksum offloading was taking care about TCP and UDP but forgot about IP fragments and other IP protocols. We need to take care that IP fragments are handled correctly when we do IP/TCP/UDP offloading. ok jsg@ deraadt@, discussed with others
2010-01-11syncTheo de Raadt
2010-01-11Add a 'netcat mode' (ssh -W). This connects stdio on the client to a singleDarren Tucker
port forward on the server. This allows, for example, using ssh as a ProxyCommand to route connections via intermediate servers. bz #1618, man page help from jmc@, ok markus@
2010-01-11Make sure we do not add trailing garbage while parsing a prefix that has aClaudio Jeker
prefixlen that is not a multiple of 8. Found while reading the RFC. OK henning@
2010-01-11Be as careful with sd/cd buf queue manipulations as was found necessary forKenneth R Westerback
st's queue manipulations. i.e. ensure b_actb is correctly updated as the queue becomes empty or has an i/o requeued on it. Tested on claudio@'s backup crashing box. ok dlg@ beck@
2010-01-11remove some debug code that snuck in somehow.David Gwynne
2010-01-11Add mutex around work consuming loop in sdstart - this ensures that onlyBob Beck
one thread will be grabbing xs's at a time and dequeuing work, but avoids a race between notification there is work to do and exiting the loop releasing the xs's. Fixes problem noticed by claudio where usb disks would hang with the new minty dlg midlayer. ok krw@, dlg@, tested by claudio@
2010-01-11Don't check ITSDONE since we know it is set in scsi_done(). EliminatesKenneth R Westerback
possible references to xs which has been recycled. Slight tweak to dlg's previous fix for atapiscsi. ok dlg@ 'looks safe' miod@
2010-01-10replace a pad in the pfsync subheader with a length field. it stores theDavid Gwynne
length of its message in dwords. multiply that by the count of the messages to figure out how to skip to the next subheader. "old" code still thinks the len field is a pad, which it doesnt look at, so new messages with a filled in len are still parsed correctly by "old" code. input and ok mcbride@ sounds good! Simon Perreault
2010-01-10lex <=, >=, and != into a single token for correctness and to reduce theTheo de Raadt
lookahead in the parser ok henning otto
2010-01-10Restore delay on XS_BUSY result, just in case it is needed somewhere. PolishKenneth R Westerback
logic to eliminate FALLTHROUGH craziness. ok marco@ dlg@
2010-01-10fix some mdoc tidbits. Thanks to jmc@ for advice.Marc Espie
2010-01-10Add traces to help tracking subtle timing bugs often causingAlexandre Ratchov
underuns and overruns; such bugs are hard to debug with ktrace or a debugger. They are also handy to debug or monitor code using aucat. To enable traces, compile aucat with ``make DEBUG=-DDEBUG'' and use the -d option multiple times. ok jakemsr
2010-01-10unify options a bit: use -Dname=value for defines uniformously (e.g., deprecateMarc Espie
-F keyword heavily).
2010-01-10- teach runner how to remove a message from queue given a message id/uidGilles Chehade
and assuming message is not in processing/scheduled state - teach smtpctl how to request message removal from runner discussed with todd@, idea ok jacekm@
2010-01-10nitsMarc Espie
2010-01-10use full signatures to avoid downgrades.Marc Espie
remove double check in update that properly belongs in pkg_add replace has_new_sig by has_different_sig, with better diagnostic messages.
2010-01-10Add /var/db/sysmerge, needed for upcoming change in xenocara.Antoine Jacoutot
"reads alright" oga@, ok matthieu@ todd@
2010-01-10remove and move some chatty byte during upgrade startup; ok krw, idea from ↵Theo de Raadt
mcbride
2010-01-10Make hotplugd to not complain if any of attach or detach scriptAlexander Yurchenko
doesn't exist. ok stsp@ deraadt@
2010-01-10ATI AHCI seems not to put slot number into the command registerAlexander Yurchenko
on error as the spec requires. This triggers kernel assertion error because zero is read from the register and wrong ccb is picked from the queue. To cope with it if there's only one outstanding command get its slot number from the active commands mask, otherwise fail all active commands. ok krw@ dlg@
2010-01-10Make sure END() matches the *{LEAF,ENTRY}() function names.Miod Vallat
2010-01-10Fix two bugs in IPsec/HMAC-SHA2:Markus Friedl
(1) use correct (message) block size of 128 byte (instead of 64 bytes) for HMAC-SHA512/384 (RFC4634). (2) RFC4868 specifies that HMAC-SHA-{256,384,512} is truncated to nnn/2 bits, while we still use 96 bits. 96 bits have been specified in draft-ietf-ipsec-ciph-sha-256-00 while draft-ietf-ipsec-ciph-sha-256-01 changed it to 128 bits. WARNING: this change makes IPsec with SHA-256 (the default) incompatible with older OpenBSD versions and other IPsec-implementations that share this bug. ok+tests naddy, fries; requested by reyk/deraadt
2010-01-10more signatures checksMarc Espie
2010-01-10only substract ISAKMP_ID_DATA_OFF once. otherwise 'buf' might overflowMarkus Friedl
and/or ASN1-DNs get not parsed correctly; with and ok krw@; ok reyk@
2010-01-10follow logic: if same packagename, but different signature elements,Marc Espie
something very bad happened.
2010-01-10Fix use of `enumeral_type' in template type unification error as seenFederico G. Schwindt
when compiling boost 1.41. From http://gcc.gnu.org/bugzilla/show_bug.cgi?id=17327 via Markus Hennecke <markus-hennecke at markus-hennecke dot de>. miod@ tested and ok
2010-01-10trick: I can actually recognize specs easily, so why not allow them withoutMarc Espie
-e ?
2010-01-10add REGRESSION_TESTING markers so tests still run.Marc Espie
new test for signature comparison checks
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-26 07:54:43 +0000