src - OpenBSD base system

Age	Commit message (Collapse)	Author
2017-01-19	add hooks so we can query the current state of a BFD session	Peter Hessler
	bfd session details are visible with "route -n get 192.0.2.1 -bfd" OK mpi@ deraadt@ claudio@
2017-01-19	SVM: register reset and intercept setup code	Mike Larkin

2017-01-19	SVM: VMCB intercept definitions	Mike Larkin

2017-01-19	Do not return an error code for SIOCSIFFLAGS.	Martin Pieuchot
	This synchronize lo(4) with other pseudo-driver and fix a regression introduced by the refactoring of the UP/DOWN logic in if.c ok dlg@, claudio@
2017-01-19	Extend struct platform with MP control functions, and add bootstrap code	Visa Hankala
	for secondary CPUs. Discussed with miod@
2017-01-19	Add mplock.h for loongson.	Visa Hankala

2017-01-19	RFC 8021 "IPv6 Atomic Fragments Considered Harmful" deprecates	Alexander Bluhm
	generating atomic fragments. So remove the code that sends them. CVE-2016-10142 has been assigned to that issue. OK visa@ mpi@
2017-01-19	No need for conditionals around free(9)	Mike Belopuhov

2017-01-19	Zero a return value variable at the start of hifn_process() to avoid	Jonathan Gray
	using it uninitialised in one path.
2017-01-19	when parsing a BFD packet, avoid an uninitialized variable if the	Peter Hessler
	version check fails found by jsg@ with clang
2017-01-19	Export the host time to the guest, add it as a timedelta sensor in vmmci(4)	Reyk Floeter
	OK kettenis@ mlarkin@
2017-01-19	make error handling a function, and use it in a few places	Peter Hessler
	not all error handling is converted, some require a bit more thought
2017-01-19	rtisvalid() checks for RTF_UP, so instead check for RTF_BFD	Peter Hessler

2017-01-19	when deconfiguring a BFD session, clear both the RTF_BFD flag on the	Peter Hessler
	route, and the pointer to the route bfd uses
2017-01-19	rename a couple of macros that are causing me a merge headache with the	Mike Larkin
	next SVM diff
2017-01-19	remove the BFD flag on a route before we actually delete the route	Peter Hessler
	should fix a panic reported by Hrvoje Popovski
2017-01-19	There are currently two pmap flags on arm64 that are supposed to be	Patrick Wildt
	used for uncached memory: CI (cache inhibit) and DEV (devices). The pmap currently does not handle DEV but instead sets the device mode for CI. Until we have bus dma running properly and know the system better, make bus dma use CI for its pages to work around the panic.
2017-01-19	use a space instead of a tab, for consistancy	Peter Hessler
	requested by and OK mpi@
2017-01-19	SVM: matching vcpu deinit functions for previous commits	Mike Larkin

2017-01-19	SVM: vcpu_init_svm - allocate memory for control structures (vmcb,	Mike Larkin
	msr bitmap, ioio bitmap, and host state save area) matches amd64 version previously committed
2017-01-19	SVM: vcpu_init_svm - allocate memory for control structures (vmcb,	Mike Larkin
	msr bitmap, ioio bitmap, and host state save area)
2017-01-19	Enable TKIP as pairwise cipher when ifconfig's wpaprotos option enables WPA1.	Stefan Sperling
	Without this fix it was impossible to use WPA1 without also making use of the wpaciphers option to enable TKIP. Problem noticed by pirofti@. ok mpi@
2017-01-19	reduce differences to amd64	Mike Larkin

2017-01-19	delete some empty lines found when diffing amd64 vs i386	Mike Larkin

2017-01-18	Don't forget to free bounce buffer data when destroying the ring	Mike Belopuhov

2017-01-18	Use LIST_FOREACH to traverse icmp6_mtudisc_callbacks. Fix whitespaces.	Alexander Bluhm
	No functional change.
2017-01-18	Fixup typos reported by Adam Jeanguenat <avj at fig ! 6v6 ! org>, thanks!	Mike Belopuhov

2017-01-18	Allow changing of sender ip/port without switching address family.	Florian Obser
	With this regress tests pass again. OK benno
2017-01-18	Allow changing of receiver ip/port without switching address family.	Florian Obser
	OK benno
2017-01-18	i386 version of a fix that went in for amd64 previously	Mike Larkin
	(cpuid cacheline size info)
2017-01-17	Enable switch(4).	Rafael Zalamena
	ok jca@, reyk@
2017-01-17	Add missing malloc(9) return value check in athn_node_alloc().	Stefan Sperling
	ok millert@ tom@
2017-01-17	Remove uaddr_hint allocator	Stefan Kempf
	The hint allocator would have to check that the allocation does not overlap with brk, stack or text areas. This would make the address selectors too entagled. Just use the rnd allocator for hinted allocations in case pivots are used. This also reduces the amount of code somewhat. ok kettenis visa deraadt
2017-01-17	Make switch(4) compile with debug again.	Rafael Zalamena

2017-01-17	Initialize swas_actions for set-field with the expected pointer to the	Rafael Zalamena
	swpld_set_fields vector. This makes write-action work with set-field actions.
2017-01-17	Fix a panic when set-field with VLAN is set, but no VLANs were	Rafael Zalamena
	classified in the packet.
2017-01-17	Clean-up switch(4) device by removing excess prototypes, verbose debugs	Rafael Zalamena
	and unused functions. ok reyk@
2017-01-17	Add more action specific validations, unbreak instructions validation	Rafael Zalamena
	with multiple actions and add more error reports with what went wrong.
2017-01-16	Let it compile with debugging enabled	Mike Belopuhov

2017-01-16	Clean up SCSI operation status and state defines	Mike Belopuhov

2017-01-16	Make sure we're producing a 64-bit value when shifting left	Mike Belopuhov
	Reported by brad and kettenis separately; Mark has even sent me a diff and told to commit it with OK kettenis.
2017-01-16	Fix declaration: vsw_dev2sc has been renamed to switch_dev2sc.	Reyk Floeter

2017-01-16	spacing	Reyk Floeter

2017-01-16	Add missing declarations found with -Wmissing-declarations	Reyk Floeter

2017-01-16	The term "pipline" is used in many places, rename it to pipeline.	Reyk Floeter
	It was either a typo or a funny abbreviation. OK rzalamena@
2017-01-16	Removed unused function that is a leftover from the old debug code.	Reyk Floeter
	OK rzalamena@
2017-01-16	Reset block ack state and cancel related timeouts when a HT node disassociates.	Stefan Sperling
	The existing code (from damien@) already took care of freeing related buffers but because block ack state was not reset we were still trying to use these buffers if the node sent another A-MPDU. This problem only affects 11n hostap. Fixes kernel crash reported by Timo Myyra on bugs@
2017-01-16	Prevent wireless frame injection attack described at 33C3 in the talk	Stefan Sperling
	titled "Predicting and Abusing WPA2/802.11 Group Keys" by Mathy Vanhoef. https://media.ccc.de/v/33c3-8195-predicting_and_abusing_wpa2_802_11_group_keys If an attacker knows the WPA group key the attacker could inject a unicast frame by sending a group-encrypted frame to the AP with addresses set as: addr1 (receiver): ff:ff:ff:ff:ff:ff addr2 (source): MAC of attacker addr3 (target): MAC of victim client The AP would forward this frame as unicast, re-encrypted with the pair-wise session key of the victim client. But an AP should not forward such frames. Guessing a WPA group key used by an OpenBSD AP is hard because our random numbers are actually random. So we are not vulnerable to this attack but we are fixing the forwarding path anyway. ok mpi@ tb@
2017-01-15	When traversing the mount list, the current mount point is locked	Alexander Bluhm
	with vfs_busy(). If the FOREACH_SAFE macro is used, the next pointer is not locked and could be freed by another process. Unless necessary, do not use _SAFE as it is unsafe. In vfs_unmountall() the current pointer is actullay freed. Add a comment that this race has to be fixed later. OK krw@
2017-01-15	Harmonize the way frame buffer drivers display resolution and color	Frederic Cambus
	depth when attaching. OK visa@, deraadt@