summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-11-27Make brk() and sbrk() weak again to fix build with clang 13.Visa Hankala
OK jsg@
2021-11-27Adjust wait channel name and re-enable test.Visa Hankala
2021-11-27Fix timeouts in poll/select regress testsVisa Hankala
Disable poll/select timeout so that the wchan wait would work as intended. The timeout is not essential to the test flow. In addition, the top-level alarm timer prevents the tests from getting stuck should something go wrong.
2021-11-27Fix incomplete initialization bug: BIO_new(BIO_f_asn1()) neglectedIngo Schwarze
initializing five of the fields in BIO_ASN1_BUF_CTX (prefix, prefix_free, suffix, suffix_free, ex_arg), inviting a segfault in a subsequent call from the application program to BIO_write(3) because subroutines of that function assume that the function pointers are either NULL or valid. Fix this by using the less error-prone calloc(3) idiom. While here, inline asn1_bio_init() at the only call site in asn1_bio_new() to simplify the code and make it easier to read. Bug found and initial patch by me, this version (with inlining) by and OK tb@.
2021-11-27Let iwm(4) use per-Tx-queue interface timers to ensure that the interfaceStefan Sperling
watchdog will trigger a device timeout if a particular Tx queue gets stuck while other Tx queues keep working. The Linux driver is using a similar workaround for "stuck queues". I have only observed this problem on iwx(4) hardware but it won't hurt to add this workaround to iwm(4) as well.
2021-11-27whitespac eDamien Miller
2021-11-27regression test for match-principals. Mostly by Fabian StelzerDamien Miller
2021-11-27Add ssh-keygen -Y match-principals operation to perform matching ofDamien Miller
principals names against an allowed signers file. Requested by and mostly written by Fabian Stelzer, towards a TOFU model for SSH signatures in git. Some tweaks by me. "doesn't bother me" deraadt@
2021-11-27free() with nullptr is OK, but not if the size is unitialized, and theTheo de Raadt
fail label is reachable before the sizes are known.
2021-11-27drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga ↵Jonathan Gray
and dvi connectors From hongao 04c586a601dc0acb8e739205db350ab660dffc4f in linux 5.10.y/5.10.82 bf552083916a7f8800477b5986940d1c9a31b953 in mainline linux
2021-11-27drm/i915/dp: Ensure sink rate values are always validJonathan Gray
From Imre Deak 47901b77bf7dc801a084a0b377aee5974d9bc4ce in linux 5.10.y/5.10.82 6c34bd4532a3f39952952ddc102737595729afc4 in mainline linux
2021-11-27drm/amd/display: Update swizzle mode enumsJonathan Gray
From Alvin Lee 3d68d6ee83144044f610d67304cc194c2af7d0c5 in linux 5.10.y/5.10.82 58065a1e524de30df9a2d8214661d5d7eed0a2d9 in mainline linux
2021-11-27stop building kernels with -Wno-uninitialized on clang archsJonathan Gray
this hides real problems that could be found at build time ok kettenis@ visa@, ok sashan@ on amd64/i386
2021-11-26Put a mutex assert locked into puttdb_locked().Alexander Bluhm
OK tobhe@
2021-11-26make the bn/mont test compile with opaque DH.Theo Buehler
2021-11-26Stop reaching into EVP_PKEY in the rest of libssl.Theo Buehler
ok inoguchi jsing
2021-11-26Simplify two weirdly formatted pieces of code in ssl_rsa.c and stopTheo Buehler
reaching into the EVP_PKEY struct. ok inoguchi jsing
2021-11-26openssl(1): drop support for netscape certificates and server gated keys.Theo Buehler
ok inoguchi jsing
2021-11-26A peer sends both his local id and remote id he expects us to be. So far wePatrick Wildt
have only looked at the peer's local id, so that we can find a policy with the matching dstid set. Hence dstid is involved in the decision making. While we do send out our local id, which the peer will use to verify his policies, we do not yet make a decision based on the id the peer expects us to have. If you have two policies configured with only srcid set, we will always pick the same. To be able to choose a policy that matches the peer's expectations, save the local id the peer expects us to have and use it during policy lookup. ok tobhe@
2021-11-26Replace TDBF_DELETED flag with check if tdb was already unlinked.Tobias Heider
Protect tdb_unlink() and puttdb() for SADB_UPDATE with tdb_sadb_mutex. Tested by Hrvoje Popovski ok bluhm@ mvs@
2021-11-26The IORT table usually only contains single mappings. While on the LX2K therePatrick Wildt
is a non-single mapping for the networking subsystem, we don't yet have support for it and apparently Linux has trouble with it as well. So for now we can remove the code, because it uses an uninitialized variable and there's no easy way to fix it without re-thinking the concept. The code got there in the first place because it's a copy of the same pattern in our other IOMMU code. ok jsg@
2021-11-26avoid clang -Wsometimes-uninitialized warning when DDB is not definedJonathan Gray
ok kettenis@ visa@
2021-11-26avoid clang -Wsometimes-uninitialized warning when MULTIPROCESSOR is notJonathan Gray
defined feedback from millert@, ok kettenis@, mips64 diff from and ok visa@
2021-11-26Fix ikev2_child_sa_rekey() warnings. The SPI can't be printed without aTobias Heider
parent SA.
2021-11-26spellingJonathan Gray
ok schwarze@
2021-11-26after the bugfix in x509_vfy.c rev. 1.100,Ingo Schwarze
replace the BUGS section with a shorter CAVEATS section
2021-11-26Bugfix in X509_get_pubkey_parameters(3):Ingo Schwarze
If EVP_PKEY_copy_parameters(3) fails - among other reasons, this may happen when out of memory - the pkey argument and/or the chain argument will not contain all the desired parameters after returning. Consequently, report the failure to the caller rather than silently ignoring it. OK tb@
2021-11-26Simplify the code in X509_get_pubkey_parameters(3)Ingo Schwarze
by using X509_get0_pubkey(3) instead of X509_get_pubkey(3); no functional change. OK tb@ This is similar to the relevant part of the follwoing commit from the OpenSSL 1.1.1 branch, which is still under a free licence, but without the bug that commit introduced into this function in OpenSSL: commit c01ff880d47392b82cce2f93ac4a9bb8c68f8cc7 Author: Dr. Stephen Henson <steve@openssl.org> Date: Mon Dec 14 13:13:32 2015 +0000
2021-11-26use the keywords instead of vague english so that it's indexed better byMarc Espie
mandocdb
2021-11-26document annotation interactions with pkg_mklocatedbMarc Espie
2021-11-26Add interfaces to enable all power domains for a node.Mark Kettenis
ok patrick@, visa@
2021-11-26Mark exit1() and sigexit() as non-returningVisa Hankala
The late 1990s reasons for avoiding __dead with exit1() should not apply with the current compilers. This fixes compiler warnings about uninitialized variables in trap.c on mips64. Discussed with guenther@ and miod@
2021-11-26followng -> followingJonathan Gray
2021-11-26definiton -> definitionJonathan Gray
2021-11-26Transmiter -> TransmitterJonathan Gray
2021-11-26addresss -> addressJonathan Gray
2021-11-26remaing -> remainingJonathan Gray
2021-11-25move label to fix RAMDISKTheo de Raadt
2021-11-25debug("func: ...") -> debug_f("...")Damien Miller
2021-11-25LibreSSL error message has changed again, make test more tolerant.Alexander Bluhm
2021-11-25revert recent change, breakage reported by dv@Anton Lindqvist
2021-11-25Remove unused variable fd.Tobias Heider
2021-11-25Silence unitialized variable warnings.Tobias Heider
2021-11-25forgot the case about find... oopsMarc Espie
fixes GraphicsMagick updates
2021-11-25We know how to print a size_t now. Drop a comment and a cast.Theo Buehler
ok bluhm inoguchi
2021-11-25Rework this test to compile with opaque RSATheo Buehler
2021-11-25Honour /usr/mdec/mbr or -f partition 0 information even outsideKenneth R Westerback
of _powerpc__ and __mips__, preventing the possible creation of MBRs with overlapping partitions 0 and 3. Don't set bootprt DOSACTIVE flag if no partition 0 information was provided via /usr/mdec/mbr or -f. Lets octeon fdisk(8) set DOSACTIVE on the OpenBSD partition in the default MBR like every other fdisk(8) does.
2021-11-25Initialize the repo_timeout to timeout / 4 at start of main().Claudio Jeker
OK job@
2021-11-25Prepare iwx(4) for using new firmware (API version -67) in the future.Stefan Sperling
Bump command versions array size as required for -67 firmware. Ignore new TLVs found in -67 images. Add room for another ucode section needed for -67 on AX201 devices.
2021-11-25Replace MAX_REPO_TIMEOUT with repo_timeout, which is set to 1/4th ofJob Snijders
timeout, or if timeout is disabled set to 24 hours. OK claudio@