summaryrefslogtreecommitdiff
path: root/sys
AgeCommit message (Collapse)Author
2017-01-19No need for conditionals around free(9)Mike Belopuhov
2017-01-19Zero a return value variable at the start of hifn_process() to avoidJonathan Gray
using it uninitialised in one path.
2017-01-19when parsing a BFD packet, avoid an uninitialized variable if thePeter Hessler
version check fails found by jsg@ with clang
2017-01-19Export the host time to the guest, add it as a timedelta sensor in vmmci(4)Reyk Floeter
OK kettenis@ mlarkin@
2017-01-19make error handling a function, and use it in a few placesPeter Hessler
not all error handling is converted, some require a bit more thought
2017-01-19rtisvalid() checks for RTF_UP, so instead check for RTF_BFDPeter Hessler
2017-01-19when deconfiguring a BFD session, clear both the RTF_BFD flag on thePeter Hessler
route, and the pointer to the route bfd uses
2017-01-19rename a couple of macros that are causing me a merge headache with theMike Larkin
next SVM diff
2017-01-19remove the BFD flag on a route *before* we actually delete the routePeter Hessler
should fix a panic reported by Hrvoje Popovski
2017-01-19There are currently two pmap flags on arm64 that are supposed to bePatrick Wildt
used for uncached memory: CI (cache inhibit) and DEV (devices). The pmap currently does not handle DEV but instead sets the device mode for CI. Until we have bus dma running properly and know the system better, make bus dma use CI for its pages to work around the panic.
2017-01-19use a space instead of a tab, for consistancyPeter Hessler
requested by and OK mpi@
2017-01-19SVM: matching vcpu deinit functions for previous commitsMike Larkin
2017-01-19SVM: vcpu_init_svm - allocate memory for control structures (vmcb,Mike Larkin
msr bitmap, ioio bitmap, and host state save area) matches amd64 version previously committed
2017-01-19SVM: vcpu_init_svm - allocate memory for control structures (vmcb,Mike Larkin
msr bitmap, ioio bitmap, and host state save area)
2017-01-19Enable TKIP as pairwise cipher when ifconfig's wpaprotos option enables WPA1.Stefan Sperling
Without this fix it was impossible to use WPA1 without also making use of the wpaciphers option to enable TKIP. Problem noticed by pirofti@. ok mpi@
2017-01-19reduce differences to amd64Mike Larkin
2017-01-19delete some empty lines found when diffing amd64 vs i386Mike Larkin
2017-01-18Don't forget to free bounce buffer data when destroying the ringMike Belopuhov
2017-01-18Use LIST_FOREACH to traverse icmp6_mtudisc_callbacks. Fix whitespaces.Alexander Bluhm
No functional change.
2017-01-18Fixup typos reported by Adam Jeanguenat <avj at fig ! 6v6 ! org>, thanks!Mike Belopuhov
2017-01-18Allow changing of sender ip/port without switching address family.Florian Obser
With this regress tests pass again. OK benno
2017-01-18Allow changing of receiver ip/port without switching address family.Florian Obser
OK benno
2017-01-18i386 version of a fix that went in for amd64 previouslyMike Larkin
(cpuid cacheline size info)
2017-01-17Enable switch(4).Rafael Zalamena
ok jca@, reyk@
2017-01-17Add missing malloc(9) return value check in athn_node_alloc().Stefan Sperling
ok millert@ tom@
2017-01-17Remove uaddr_hint allocatorStefan Kempf
The hint allocator would have to check that the allocation does not overlap with brk, stack or text areas. This would make the address selectors too entagled. Just use the rnd allocator for hinted allocations in case pivots are used. This also reduces the amount of code somewhat. ok kettenis visa deraadt
2017-01-17Make switch(4) compile with debug again.Rafael Zalamena
2017-01-17Initialize swas_actions for set-field with the expected pointer to theRafael Zalamena
swpld_set_fields vector. This makes write-action work with set-field actions.
2017-01-17Fix a panic when set-field with VLAN is set, but no VLANs wereRafael Zalamena
classified in the packet.
2017-01-17Clean-up switch(4) device by removing excess prototypes, verbose debugsRafael Zalamena
and unused functions. ok reyk@
2017-01-17Add more action specific validations, unbreak instructions validationRafael Zalamena
with multiple actions and add more error reports with what went wrong.
2017-01-16Let it compile with debugging enabledMike Belopuhov
2017-01-16Clean up SCSI operation status and state definesMike Belopuhov
2017-01-16Make sure we're producing a 64-bit value when shifting leftMike Belopuhov
Reported by brad and kettenis separately; Mark has even sent me a diff and told to commit it with OK kettenis.
2017-01-16Fix declaration: vsw_dev2sc has been renamed to switch_dev2sc.Reyk Floeter
2017-01-16spacingReyk Floeter
2017-01-16Add missing declarations found with -Wmissing-declarationsReyk Floeter
2017-01-16The term "pipline" is used in many places, rename it to pipeline.Reyk Floeter
It was either a typo or a funny abbreviation. OK rzalamena@
2017-01-16Removed unused function that is a leftover from the old debug code.Reyk Floeter
OK rzalamena@
2017-01-16Reset block ack state and cancel related timeouts when a HT node disassociates.Stefan Sperling
The existing code (from damien@) already took care of freeing related buffers but because block ack state was not reset we were still trying to use these buffers if the node sent another A-MPDU. This problem only affects 11n hostap. Fixes kernel crash reported by Timo Myyra on bugs@
2017-01-16Prevent wireless frame injection attack described at 33C3 in the talkStefan Sperling
titled "Predicting and Abusing WPA2/802.11 Group Keys" by Mathy Vanhoef. https://media.ccc.de/v/33c3-8195-predicting_and_abusing_wpa2_802_11_group_keys If an attacker knows the WPA group key the attacker could inject a unicast frame by sending a group-encrypted frame to the AP with addresses set as: addr1 (receiver): ff:ff:ff:ff:ff:ff addr2 (source): MAC of attacker addr3 (target): MAC of victim client The AP would forward this frame as unicast, re-encrypted with the pair-wise session key of the victim client. But an AP should not forward such frames. Guessing a WPA group key used by an OpenBSD AP is hard because our random numbers are actually random. So we are not vulnerable to this attack but we are fixing the forwarding path anyway. ok mpi@ tb@
2017-01-15When traversing the mount list, the current mount point is lockedAlexander Bluhm
with vfs_busy(). If the FOREACH_SAFE macro is used, the next pointer is not locked and could be freed by another process. Unless necessary, do not use _SAFE as it is unsafe. In vfs_unmountall() the current pointer is actullay freed. Add a comment that this race has to be fixed later. OK krw@
2017-01-15Harmonize the way frame buffer drivers display resolution and colorFrederic Cambus
depth when attaching. OK visa@, deraadt@
2017-01-15Make sure to also backup and restore the a4x bus space map functionPatrick Wildt
so that we can initialize the console early.
2017-01-15When dropping to EL1 ensure we have written to all special registers byPatrick Wildt
moving the instruction barrier to just before we drop exception level. Additionally, enable system register access for EL2. From FreeBSD.
2017-01-15Address _start relative to the current program counter, like we alreadyPatrick Wildt
do for esym.
2017-01-14Revert aml_rdpciaddr changes; breaks several machines that were workingMark Kettenis
before.
2017-01-14Move a splx() in pmap_enter() to handle all return paths.Jonathan Gray
ok patrick@
2017-01-13In comparison to armv7, our arm64 port passes the bus space tag asPatrick Wildt
first argument instead of the bus space cookie.
2017-01-13Enable vmmci(4)Reyk Floeter
OK mlarkin@