summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-04-27syncTheo Buehler
2023-04-27Stop installing NIST prime documentationTheo Buehler
2023-04-27Remove a useless doxygen commentTheo Buehler
2023-04-27Unbreak regress after yesterdays churn.Claudio Jeker
Friendly reminder from anton@
2023-04-27cope with recent vmm changesAnton Lindqvist
2023-04-27- list some missing pci entries. dlg noticed some missing ones, and miodJason McIntyre
worked out what was missing - remove commented out entry to non-existent en(4) driver - remove all instances of .Tn ok miod dlg
2023-04-27Fix logic error in rtwn_r92e_get_txpower().Kevin Lo
The RTL8192EU is up to two stream TX/RX (so MCS0->15). ok stsp@
2023-04-27Whitespace fixKevin Lo
2023-04-27syncTheo de Raadt
2023-04-27drm/amd/display: set dcn315 lb bpp to 48Jonathan Gray
From Dmytro Laktyushkin 4ac57c3fe2c0a74c6239170fc58fc824637c6015 in linux-6.1.y/6.1.26 6d9240c46f7419aa3210353b5f52cc63da5a6440 in mainline linux
2023-04-27drm/amdgpu: Fix desktop freezed after gpu-resetJonathan Gray
From Alan Liu bef774effb278ff0b65ea2dbaa1ab32ba6a1dc13 in linux-6.1.y/6.1.26 c8b5a95b570949536a2b75cd8fc4f1de0bc60629 in mainline linux
2023-04-27drm/i915: Fix fast wake AUX sync lenJonathan Gray
From Ville Syrjala 66eb772be27e228716bb81feee0400d995cbe605 in linux-6.1.y/6.1.26 e1c71f8f918047ce822dc19b42ab1261ed259fd1 in mainline linux
2023-04-27drm: buddy_allocator: Fix buddy allocator init on 32-bit systemsJonathan Gray
From David Gow fb766acce3cf1c9637a79c1ffb3cebc61fd9d859 in linux-6.1.y/6.1.26 4453545b5b4c3eff941f69a5530f916d899db025 in mainline linux
2023-04-26Treat crypto disk like the root disk, both are boot disksKlemens Nanni
Chosing [W]hole on a GPT disk means it needs non-default `-b' fdisk(8) to boot and preserve any existing BIOS boot partition. With 'Encrypt the root disk?' answered postively, the crypto disk instead of the root disk becomes the boot disk. Extend the sanity check to both crypto and root disk, really asking "is this a boot disk?". This preserves existing boot partitions when using guided disk encryption.
2023-04-26Treat crypto disk like the root disk, both are boot disksKlemens Nanni
Chosing an existing OpenBSD partition on GPT during disk setup requires an existing EFI Sys partition (the installer does not create it in thi case). With 'Encrypt the root disk?' answered postively, the crypto disk instead of the root disk becomes the boot disk. Extend the EFI Sys sanity check to both crypto and root disk, really asking "is this a boot disk?".
2023-04-26add viogpu(4); from diana eichertJason McIntyre
2023-04-26On openbsd amd64, the compiler has been found to generate some nasty jumpTheo de Raadt
table variations (calculate address into %rax, jmp %rax) which is not compatible with IBT endbr64. The specific generated code sequence was found inside clang, which made the debugging experience pretty miserable. So we will have to disable jump tables by default. ok kettenis
2023-04-26Make x509_policy.c compile with gcc 4.Theo Buehler
ok beck
2023-04-26Add test for invalidation of DER cache for X509_CRL_* setter functionsJob Snijders
The program won't exit with a non-zero exit code if X509_CRL_set_* tests fail, as the relevant bits haven't been committed to libcrypto yet.
2023-04-26Add a -P option to rpki-client to specify the evaluation timeBob Beck
This is intended to be able to test rpki-client in a reproducable way without worrying about the system time changing the results ok claudio@
2023-04-26On openbsd amd64, emit IBT endbr64 instructions by default (meaning,Theo de Raadt
-fcf-protection=branch is the default). All binaries grow slightly, but we can slowly move towards greater IBT enforcement in userland. 4th or 5th variation of this diff, with mortimer ok kettenis
2023-04-26Fix phy_enable_prop_idx() to retrieve the property length with the passedPatrick Wildt
property name instead of "phys". ok dlg@
2023-04-26Allow compiling with -DHAS_DAG to enable the policy check with a DAG.Theo Buehler
ok beck
2023-04-26Turn C++ comments into C comments and minor KNF fixupsTheo Buehler
2023-04-26Clean up X509 memory before exitJob Snijders
2023-04-26Use < 0 for fprintf() error checking and not == -1.Claudio Jeker
2023-04-26KNF according to knfmt(1)Theo Buehler
2023-04-26Don't rely on the disklabel defaults or a disktab entry's ba#/fa#Kenneth R Westerback
values for the block/fragment sizes that some install media need. Hoist the desired values into the newfs(8) invocations to make it obvious non-default values are required and what the values are. No functional change.
2023-04-26Zap trailing whitespaceTheo Buehler
2023-04-26Verify each fprintf call for success. On failure stop calling fprintfClaudio Jeker
and return -1 in json_do_finish(). tb@ thinks this is not to horrible
2023-04-26Add RCS tagTheo Buehler
2023-04-26Take X509_POLICY_NODE_print() behind the barnTheo Buehler
This used to be public API but is now only used for debug code that has certainly never been used since it was released to the public. It drags that debug nonsense with it. ok beck
2023-04-26Introduce `rtlabel_mtx' mutex(9) to protect route labels storage. ThisVitaliy Makkoveev
time kernel and net locks are held in various combination to protect it. We don't want to put kernel lock to all the places. Netlock also can't be used because rtfree(9) which calls rtlabel_unref() has unknown netlock state within. This new `rtlabel_mtx' mutex(9) protects `rt_labels' list and `label' entry dereference. Since we don't export 'rt_label' structure, keep this lock private to net/route.c. For this reason rtlabel_id2name() now copies label string to externally passed buffer instead of returning address of `rt_labels' list data. This is the way which rtlabel_id2sa() already works. ok bluhm@
2023-04-26Add the new policy code to the build.Bob Beck
ok tb@ jsing@
2023-04-26Use fprintf instead of printf and pass the FILE handle in json_do_start().Claudio Jeker
OK tb@
2023-04-26fix some Xr;Jason McIntyre
2023-04-26Make the new policy code in x509_policy.c to be selectable at compile time.Bob Beck
The old policy codes remains the default, with the new policy code selectable by defining LIBRESSL_HAS_POLICY_DAG. ok tb@ jsing@
2023-04-26Add a shim to mimic the BoringSSL sk_delete_if function.Bob Beck
We add this locally as a function to avoid delving into the unholy macro madness of STACK_OF(3). ok tb@ jsing@
2023-04-26Add lookup name+function pointer table for improved diagnosticsJob Snijders
OK tb@
2023-04-26Adapt the sk_find calls from BoringSSL's api to ours.Bob Beck
ok tb@ jsing@
2023-04-26Add the STACK_OF declarations we require.Bob Beck
ok tb@ jsing@
2023-04-26Change OPENSSL_malloc|free|memset and friends to the normal versions.Bob Beck
ok tb@ jsing@
2023-04-26Fix error code goopBob Beck
ok tb@ jsing@
2023-04-26Use the correct headers to compile with libresslBob Beck
2023-04-26Import policy.c from BoringSSL as x509_policy.cBob Beck
This is an implementation of the X509 policy processing using a DAG instead of a tree to avoid the problem of exponential expansion of the policy tree as specified in RFC 5280 For details see: https://boringssl-review.googlesource.com/c/boringssl/+/55762 ok tb@ jsing@
2023-04-26New manual page written by Ted Bullock <tbullock at comlore dot com>,Ingo Schwarze
to start working on it in the tree.
2023-04-26In JSON/ASPA output, only print commas up to after the pen-ultimate ↵Job Snijders
applicable provider Reported by Ties de Kock OK claudio@
2023-04-26Kill whitespaceTheo Buehler
2023-04-26Add prototypes for geticmptypebyname() and geticmpcodebyname().Claudio Jeker
Needed for bison.
2023-04-26Fix confusing comments, no object change; with casparKlemens Nanni