summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-06-29Print esn flag when dumping SAs with ESN enabledMike Belopuhov
2012-06-29Add support for the Extended (64-bit) Sequence Number as definedMike Belopuhov
in RFC4302 and RFC4303. Right now only software crypto engine is capable of doing it. Replay check was rewritten to implement algorithm described in the Appendix A of RFC4303 and the window size was increased to 64. Tested against OpenBSD, Linux (strongswan) and Windows. No objection from the usual suspects.
2012-06-29regenJasper Lievisse Adriaanse
2012-06-29add a bunch of intel 7 series id's for devices found in the thinkpad x230Jasper Lievisse Adriaanse
ok kettenis@
2012-06-29match the documented MAC order of preference to the actual one; ok dtucker@Christian Weisgerber
2012-06-29tcp/udp mandatory for "user"; from ti zedJason McIntyre
ok henning
2012-06-29sigpending() returns a sigset just like sigprocmask(), so decode it the samePhilip Guenthe
ok matthew@ otto@
2012-06-29Fix year in public domain declaration. Also, include <stddef.h> forMatthew Dempsky
POSIX compatibility so the test doesn't depend on <signal.h> defining NULL.
2012-06-29Clear out the sigset_t again before calling sigpending() to make sureMatthew Dempsky
sigpending() actually sets it and it wasn't just still set from calling sigprocmask().
2012-06-29add a regress test for sigpending(); add licensing notice to stackjmp.cMatthew Dempsky
2012-06-28Correctly register contiguous memory regions which start within the ARCBiosMiod Vallat
reported memory but end beyond it, such as > 1GB DIMMs in bank 0. Also, currently restrict physical memory usage to 1.5GB - there seems to be a bogus 32 bit truncation happening in the IP30 specific codepath, which in turns ends up causing the low memory alias region (and thus, the exception vectors and the NMI handler) to be overwritten, which I can't find from code inspection (does anyone has 2GB of Octane memory to spare?) Both issues reported and fix/workaround tested by Florentijn van Kampen, thanks!
2012-06-28prevent salt_len overflow; reported by andrew nelless, ok otto, teduMike Belopuhov
2012-06-28syncTodd T. Fries
2012-06-28a few minor cleanup and performance tweaks (is_wrapper doesn't need toMarc Espie
scan large binary files) okay jasper@
2012-06-28Fix a number of problems introduced by the link state handling commit:Mike Belopuhov
1) demote by 32 on the first bulk update to prevent failovers w/o having a full state table; 2) don't do any demotion adjustments on the link up event and undemote when bulk update finishes (or times out) preventing a race between nodes getting a link state update asynchronously. With phessler; tested by phessler and Kapetanakis Giannis. Thanks! Looked through by henning and dlg.
2012-06-28regenMike Belopuhov
2012-06-28Devices with BCM5724 BCM5750 and BCM5750M PCI IDs were never releasedMike Belopuhov
to the public; from broadcom/linux via brad
2012-06-28Fix issues with AMD chipset ahci(4) attach functions.Stuart Henderson
from Brad, ok jmatthew mikeb. - Have the SB700 attach routine properly call the IDE to AHCI function and migrate the ATI_SBX00_SATA_1 PCI id to using the SB700 attach routine. The SB600 routine was being used because it does the proper call. This just makes it so all of the SB700 controllers use the same attach routine, especially incase any other workarounds/errata type things come up or not setting SB600 things for SB700. - Have the Hudson-2 attach routine set the AHCI_F_IPMS_PROBE flag to resolve the issue with Port Multiplier support. The SB700 attachment function was being used because it was setting the flag. This also fixes the other Hudson-2 AHCI controllers so they won't experience the same issue.
2012-06-28librthread has eaten libpthread, so build includes via the former insteadPhilip Guenthe
of the latter. Permits the misleading lib/libpthread/Makefile to be removed discussed with deraadt@
2012-06-28Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs since they were removedDarren Tucker
from draft6 of the spec and will not be in the RFC when published. Patch from mdb at juniper net via bz#2023, ok markus.
2012-06-27Change sparc64 to match the "fp" boot device path's parameter based onMatthew Dempsky
the prototype-scsi_link's SDEV_2NDBUS flag rather than against its scsibus field. First, the scsibus field hasn't even been initialized when device_register() is called so it's always 0 anyway; second, the path number is supposed to be locally scoped to a single device whereas the scsibus field is a global scsibus(4) device number. The existing code only happened to work because all of the dual-port fibre-channel adapters we currently support attach as two devices with one scsibus each rather than a single device with two scsibuses, so we would never see anything but "fp@0". Initial investigation and diff by jmatthew after my SCSI cleanups at c2k11 broke sparc64's ability to boot from isp(4); newer version from me based on discussion with krw and kettenis. tested and ok kettenis
2012-06-27leftover code re-enqueued the same item on the list multiple timesMike Belopuhov
2012-06-27prevent an endless loopMike Belopuhov
2012-06-27- extend an error message to hint to --help for a list of optionsJasper Lievisse Adriaanse
ok espie@
2012-06-27- add a description of --tagJasper Lievisse Adriaanse
ok espie@
2012-06-27fptreef() always returns 0 and we never use the return value anyway,Otto Moerbeek
so make it void; from Michael W. Bombardieri.
2012-06-27Uniformize error messages printing, use err() instead of fprintf()Alexandre Ratchov
when appropriate. From Michael W. Bombardieri <mb at ii.net>
2012-06-27Don't return void expressions in functions returning void. RemovesAlexandre Ratchov
warnings in clang. From dhill. Thanks!
2012-06-26tweak previous;Jason McIntyre
2012-06-26tweak column spacing to allow for larger numbersTed Unangst
2012-06-26after a talk with ariane, use MAP_FIXED for mquery to avoid the cost ofTed Unangst
scanning for free space if the hint isn't available. also, on further inspection, this will prevent pmap_prefer from "improving" our hint.
2012-06-26It is time to bring this back alive.Claudio Jeker
2012-06-26simplify a little of the posix standards talk. ok deraadt guenther jmcTed Unangst
2012-06-26There is a iscsi.conf man page now. Reminded by jmc@Claudio Jeker
2012-06-26Long overdue addition of the iscsi.conf man page.Claudio Jeker
Help and OK jmc@, OK dlg@
2012-06-26IP22 R4600SC and R5000SC have their L2 cache supported now.Miod Vallat
2012-06-26add missing rcs idsJasper Lievisse Adriaanse
2012-06-26ALPHA_PGSHIFT -> PGSHIFT.Theo de Raadt
2012-06-26do not assume that sys/param.h is pulling in the world; pull in what isTheo de Raadt
needed by hand.
2012-06-26param.h (like landisk and alpha before) was still trying to include tooTheo de Raadt
much of the kernel world when it did not need to
2012-06-26create new machine/_float.h which is namespace clean. create a newTheo de Raadt
MI float.h which pulls in and defines the values that are needed from there, and repair sys/limits.h so that it defines the values it needs as well (depending on POSIX version, XPG version, etc). guenther has a more exact selection of that coming for limits.h. this also fixes a few mistakes for the vax. reviewed by kettenis and guenther.
2012-06-26syncTheo de Raadt
2012-06-26create new machine/_float.h which is namespace clean. create a newTheo de Raadt
MI float.h which pulls in and defines the values that are needed from there, and repair sys/limits.h so that it defines the values it needs as well (depending on POSIX version, XPG version, etc). guenther has a more exact selection of that coming for limits.h. this also fixes a few mistakes for the vax. reviewed by kettenis and guenther.
2012-06-26Use nl_langinfo(RADIXCHAR) instead of localeconv()->decimal_point inMatthew Dempsky
printf() and avoid calling it unless needed (i.e., when we have a floating point value to print). This isn't a big concern currently due to our limited locale support and current localeconv() implementation, but it's still technically a data race and implementing POSIX 2008 per-thread locales is likely to make it worse. nl_langinfo() isn't guaranteed by POSIX to be thread-safe either, but at least our current implementation is thread-safe and it's a simpler interface to keep that way. Printing floating point values isn't async-signal-safe anyway due to gdtoa()'s use of malloc(), so that's not an issue. ok deraadt, stsp, millert
2012-06-26Add some more paranoia and make code clearer. Check that the requiredKenneth R Westerback
length field for the option is present before using it. Reject lease if no length field is present.
2012-06-26RFC 2132 says "Options containing NVT ASCII data SHOULD NOT includeKenneth R Westerback
a trailing NULL; however, the receiver of such options MUST be prepared to delete trailing nulls if they exist." So delete (all) trailing NUL's when parsing NVT ASCII options. Should fix odd results when 'append'ing info to such options via dhclient.conf. FreeBSD commit to fix 'append' logic in a different way pointed out by brad.
2012-06-26initialize 'reason' variable before passing it to the pflog_packet;Mike Belopuhov
from david hill; ok henning
2012-06-26test sandbox with every malloc optionDarren Tucker
2012-06-26improve ikev2_msg_retransmit_timeoutMike Belopuhov
2012-06-26close SA when IKE_SA_INIT or IKE_AUTH exchanges fail;Mike Belopuhov
don't cache the response to IKE_SA_INIT.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-11 15:25:22 +0000