summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-05-04Some hardware (such as the onboard dc(4) of the Netra X1) has a broken DMAMark Kettenis
engine that might attempt to read beyond the end of the buffer that was programmed. The IOMMU catches this "DMA overrun" and throws an unrecoverable error at us, at which point we have no choice but to panic. To avoid this implement a BUS_DMA_OVERRUN flag that maps an additional scratch page at the end of the vdma address range. DMA requests will spill over into this page, which just returns zeroes. Thanks to matthieu@ for giving me access to a machine with the problem. ok deraadt@, beck@
2016-05-04fix for integer overflow in encode and encrypt update functions.Ted Unangst
additionally, in EncodeUpdate, if the amount written would overflow, return 0 instead to prevent bugs in the caller. CVE-2016-2105 and CVE-2016-2106 from openssl.
2016-05-04fix a padding oracle in aesni cbc mac check. there must be enough dataTed Unangst
for both the mac and padding bytes. CVE-2016-2107 from openssl
2016-05-04internal only negative types should not be handled here.Ted Unangst
CVE-2016-2108 from openssl.
2016-05-04be careful about consuming excessive memory by reading in chunks.Ted Unangst
CVE-2016-2109 from openssl.
2016-05-04revert the big change from yesterday to prepare for smaller commits.Ted Unangst
2016-05-04add IdentityAgent; noticed & ok jmc@Markus Friedl
2016-05-04Initial support for MSI-X. Only supported on amd64 for now. I have diffs toMark Kettenis
actually use this in em(4) and xhci(4), but I'm not committing those yet because we almost certainly need to save and restore the MSI-X registers during suspend/resume. However, this allows mpi@ to play with multiple-vector support in networking hardware. Requested by mpi@ ok mlarkin@, mikeb@
2016-05-04allow setting IdentityAgent to SSH_AUTH_SOCK; ok djm@Markus Friedl
2016-05-04move SSH_MSG_NONE, so we don't have to include ssh1.h; ok deraadt@Markus Friedl
2016-05-04Print SD host controller version.Mark Kettenis
2016-05-04missing const in prototypes (ssh1)Markus Friedl
2016-05-04Fix inverted logic for updating StreamLocalBindMask which would cause theDarren Tucker
server to set an invalid mask. ok djm@
2016-05-04Preserve DiffServ value when fragmenting an ipv4 packet.Vincent Gross
Ok phessler@, henning@
2016-05-04IdentityAgent for specifying specific agent sockets; ok djm@Markus Friedl
2016-05-04fix junk characters after quotesDamien Miller
2016-05-04Add high-speed support for SD cards. In theory this should double theMark Kettenis
transfer rates to and from the card. In practice the improvement will be smaller, but I am seeing serious improvement in the read speeds.
2016-05-04Correct the description of the != operator in arithmetic expansion;Ingo Schwarze
from Andras Farkas <deepbluemistake at gmail dot com>.
2016-05-04Don't mask pins configured as direct IRQ. Those are tied directly to the APICMark Kettenis
and don't generate a GPIO controller interrupt. Masking them menas devices relying on those APIC interrupts will break. Unbreaks the keyboard on the Asus x205ta, which got broken in rev 1.6.
2016-05-04Fall back to "safe-value" when "unmanage-value" is not evailable toMartin Pieuchot
configure fan speeds. from mglocker@, ok kettenis@
2016-05-04line editing correction; from andras farkasJason McIntyre
2016-05-04Remove old cruft.Vadim Zhukov
okay millert@
2016-05-04Add ERRORS section (requested by bluhm@). While there, move start ofVadim Zhukov
RETURN VALUES section upper, where it belongs more.
2016-05-04Make KERN_FILE_BYPID return ESRCH when PID not found, both in sysctl andVadim Zhukov
offline paths. More polishing to come. Input and okay bluhm@ & kettenis@.
2016-05-03Print missing newline if we bail out because of a uid mismatch.Mark Kettenis
2016-05-03Fix regression on usermod/userdel by calling getpwnam_shadow(3) and savingRicardo Mestre
passwd hash early, instead of getpwnam(3), then close fds by calling endpwent(3) and finally only call pledge(2) after it, otherwise on any modification to the user it would destroy the passwd hash and therefore forbidding him/her to login again to the machine. Reported and tested by Edgar Pettijohn <edgar ! pettijohn-web at com> According to deraadt@ "that looks better then"
2016-05-03Fix some Perl statements perlcritic was bitching about: VariableAlexander Bluhm
declared in conditional statement.
2016-05-03listen directive may use a table for authentication, to make this work theJoerg Jung
table has to be defined BEFORE consequently move all tables in the examples to the beginning and before the listen directive to avoid tables not being found no functional change ran into this myself earlier, also reported by cjones via irc ok gilles
2016-05-03correct article;Jason McIntyre
2016-05-03Fix test after changing default column size from 60 to 80.Martijn van Duren
OK bentley@
2016-05-03Also remove -DINET6 here, noticed by teduJeremie Courreges-Anglas
-DKAME_SCOPEID can go away too, meaningless since 2006
2016-05-03Remove INET6 #ifdefsJeremie Courreges-Anglas
ifconfig.c doesn't build without -DINET6, and those #ifdefs clutter the code. ok bluhm@ henning@
2016-05-03To test syslogd compatibility rsyslog is used as remote server.Alexander Bluhm
New rsyslog has other options and debug output, adapt test.
2016-05-03These tests depended on whatever the user's locale was,Ingo Schwarze
and the last one failed for LC_CTYPE=C. Instead, ignore the user's locale and run each test twice, once for UTF-8 and once for US-ASCII. Problem reported by deraadt@.
2016-05-03Regression tests for fold(1).Ingo Schwarze
The lines containing SKIPUTF8 will be removed once the utility is fixed.
2016-05-03fix overriding of StreamLocalBindMask and StreamLocalBindUnlink inDamien Miller
Match blocks; found the hard way Rogan Dawes
2016-05-03Set umask to prevent "Bad owner or permissions" errors.Darren Tucker
2016-05-03don't forget to include StreamLocalBindUnlink in the configDamien Miller
dump output
2016-05-03make nethack^wrandomart fingerprint flag more readily searchableDamien Miller
pointed out by Matt Johnston
2016-05-03Stop using a soft-interrupt context to process incoming network packets.Martin Pieuchot
Use a new task that runs holding the KERNEL_LOCK to execute mp-unsafe code. Our current goal is to progressively move input functions to the unlocked task. This gives a small performance boost confirmed by Hrvoje Popovski's IPv4 forwarding measurement: before: after: send receive send receive 400kpps 400kpps 400kpps 400kpps 500kpps 500kpps 500kpps 500kpps 600kpps 600kpps 600kpps 600kpps 650kpps 650kpps 650kpps 640kpps 700kpps 700kpps 700kpps 700kpps 720kpps 640kpps 720kpps 710kpps 800kpps 640kpps 800kpps 650kpps 1.4Mpps 570kpps 1.4Mpps 590kpps 14Mpps 570kpps 14Mpps 590kpps ok kettenis@, bluhm@, dlg@
2016-05-03support doasDamien Miller
2016-05-03prefer limits.h over sys/limits.hBrent Cook
2016-05-03unit tests for sshbuf_dup_string()Damien Miller
2016-05-03Some tidying of copy mode search functions, based on a diff from LukaszNicholas Marriott
Piatkowski (initial changes to help some more to come).
2016-05-03clarify ordering of subkeys; pointed out by ietf-ssh AT stbuehler.deDamien Miller
2016-05-03patch from openssl for multiple issues:Ted Unangst
missing padding check in aesni functions overflow in evp encode functions use of invalid negative asn.1 types ok beck
2016-05-03implement bus_space_read_raw_X and bus_space_write_raw_XDavid Gwynne
with feedback from kettenis@ fixes building a kernel with xge, which might actually work on these machines now.
2016-05-03Make ip_forward() use the route entry fetched in in_ouraddr() when it isMartin Pieuchot
possible. This reduce the number of lookups to 1 for non-multicast traffic when PF is disable. Tested by Hrvoje Popovski who confirmed that benchmark numbers are now as good as with a single cache entry. ok visa@, bluhm@
2016-05-03Use a subshell for constructing key types to work around different sedDarren Tucker
behaviours for -portable.
2016-05-03Put back a panic() if an incoming packet already has a statekey.Martin Pieuchot
Apparently nobody can hit this condition anymore or people do not report bugs if their kernel do not panic. ok dlg@, sashan@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-07 15:31:03 +0000