summaryrefslogtreecommitdiff
path: root/sys
AgeCommit message (Collapse)Author
2015-12-06g/c pf_change_a6(). it's exactly the same thing as pf_change_ap() with p =Henning Brauer
NULL. inspired by Richard Procter <richard.n.procter@gmail.com>'s mail on tech from Aug 17, but redone. ok sashan vgross
2015-12-06unbreak kernel link if vmm isnt being built as part of the kernel.David Gwynne
2015-12-06typo in log entrymmcc
2015-12-06restore VMM mode after resume from suspend/hibernateMike Larkin
2015-12-05Multiple cleanups.Martin Pieuchot
ok goda@, yasuoka@
2015-12-05g/c unneeded af (address family) params to pf_change_ap and _icmpHenning Brauer
both af and naf (af-to case) are in the pf_pdesc some code shuffling to actually set these before calling pf_change_ap/_icmp inspired by Richard Procter <richard.n.procter@gmail.com>'s mail on tech from Aug 17, but redone ok bluhm vgross
2015-12-05Make sure we use the same cpu numbering for the kern.cptime2 sysctl as weMark Kettenis
do for kern.proc. Fixes the issue in top(1) where a cpu would seem to be idle even though a thread was reported to be running on it. ok mpi@, tedu@, deraadt@
2015-12-05vioblk: Don't send flush ops if flush feature not presentStefan Fritsch
If we haven't negotiated the flush feature, don't send VIRTIO_BLK_T_FLUSH to the device. noticed by mlarkin@
2015-12-05make vioblk_scsi_cmd more normalStefan Fritsch
Declare all variables at the start of the function and get rid of the strangely-indented block around the second half of the function.
2015-12-05Make virtio_enqueue_commit return voidStefan Fritsch
The return value was unused
2015-12-05Study of kernel code complete. Permit ioctl SIOCGIFMEDIA for pledgeTheo de Raadt
"route", which krw and mestre will be able to use in dhclient(8).
2015-12-05avoid an ugly wrap in a commentTheo de Raadt
2015-12-05Keep kernel definitions under _KERNEL to unbreak security/wpa_supplicantMartin Pieuchot
because of a missing forward declaration for kernel functions. ok stsp@
2015-12-05Keep kernel definitions under _KERNEL to unbreak ports that includeMartin Pieuchot
<net/if_var.h> because some other operating systems have defines in there. ok jasper@
2015-12-05Make the bnx interrupt handler mpsafe, and perform rx and tx completionJonathan Matthew
outside the kernel lock. Remove tx descriptor lists (essentially backing out if_bnx.c r1.77), add an interrupt barrier in bnx_stop, check the rx ring state before receiving packets, adjust the tx counter with atomic operations, and rework bnx_start to check for ring space before dequeueing and drop the packet if bnx_encap fails. tested on BCM5708 by me and on BCM5709 by Hrvoje Popovski ok dlg@
2015-12-05Make pppx pass packets with npppd through the device. This makes pppx workYASUOKA Masahiko
without pipex.enable=1. Also fix tun(4) not to pass the packets to pipex when pipex.enable=0. "go for it" dlg
2015-12-05pass a pointer to pf_test()'s reason to pf_test_rule instead of using aHenning Brauer
local one. While we always intended to keep the logging in pf_test_rule and pf_test so seperate that we don't end up with a wrong reason, this is just too fragile and I can't even convince myself that it still is right. pointed out by markus, ok bluhm benno
2015-12-05Remove useless "if() else", multicast and unicast v6 route lookups areVincent Gross
actually the same. This has been introduced in r1.7 to prevent RTM_MISS storms, but we don't send this message anymore. ok @mpi
2015-12-05Avoid using ifq_deq_rollback().Mark Kettenis
2015-12-05ifq_deq_rollback without a preceding ifq_deq_begin is fail.David Gwynne
caused by a badly managed merge. found by and testing by sebastia@ ok mpi@
2015-12-05upgrade tcp/ip to use the latest in C89 technology: memcpy.Ted Unangst
ok henning
2015-12-05AMD Family 12h and later processors keep their APIC clock running in deeperMark Kettenis
C-states. Set the TMP_ARAT flag for these (which is Intel-specific) such that acpicpu(4) enables the deeper C-states on these CPUs. ok deraadt@
2015-12-05remove stale lint annotationsTed Unangst
2015-12-05remove old lint annotationsTed Unangst
2015-12-04allow utrace(2) by default.Theo de Raadt
conversation with jsg
2015-12-04Activate functions should in general return 0 for events they don't handle.Mark Kettenis
ok deraadt@
2015-12-04Add intr_barrier() just in case...Mark Kettenis
2015-12-04Reduce the stride length of the tables by two and use a single pageMartin Pieuchot
allocator for the 4K heap. In this configuration a fullfeed BGP server for v4 and v6 consumes 10M more than with the radix tree. This double the depth of the tree and makes the lookup slower. But the ratio speed/memory can be adjusted in the future, for now we are interested in a lock-free route lookup. Tested by and ok benno@
2015-12-04Move the KERNEL_LOCK from rt_match() to rtable_match().Martin Pieuchot
ok claudio@
2015-12-04remove PLEDGE_INET granting when using "getpw" in YP environnmentSebastien Marie
it makes PLEDGE_YPACTIVE enough for doing required networking with YP. It should permit to bring YP internals into the light. discuted with deraadt@
2015-12-04Reject input when either the version is wrong or the pad is non-zero;Reyk Floeter
not when the version is wrong and the pad is non-zero. OK goda@
2015-12-04prefix function names like randomid and pmod to keep them out of globalTed Unangst
namespace. the history of this file is that it was a modified version of ip_id.c (with static functions to avoid clashes), then that file was rewritten, then this file lost static.
2015-12-04Grab the KERNEL_LOCK() around bridge_output().Martin Pieuchot
It is now safe to call if_enqueue() without holding the KERNEL_LOCK() even on an interface part of a bridge(4). ok dlg@, henning@, kettenis@
2015-12-04There is no need to grab the KERNEL_LOCK here anymore. After discussion withClaudio Jeker
dlg@ and mpi@
2015-12-04bridge(4) never outputs packets so set its if_output and if_start to NULL.Martin Pieuchot
bridge_output() is used by the stack to duplicate a packet coming from a bridge member to its other ports. Confusion pointed by Momtchil Momtchev on misc@ ok reyk@
2015-12-04Add pledge "dpath", which provides access to mknod(2) and mkfifo(2).Theo de Raadt
This will be required to keep pax/tar/cpio at otherwise very high levels of pledge (and we will see where else it is beneficial). Allocate a bit for pledge "audio", which will be coming soon. good discussions with semarie
2015-12-04add a missing mtx_leave before a panic to give ddb/reboot a betterJonathan Gray
chance of working. ok deraadt@
2015-12-04Do not think atomicity is required here. In any case, prepare forTheo de Raadt
ps_pledge to become 64-bits over the next few days (things are getting a bit tight; most newer pledges will be quite device-driver specific)
2015-12-03mpi@ forgot to commit this. That should unbreak the tree.Claudio Jeker
2015-12-03Get rid of rt_mask() and stop allocating a "struct sockaddr" for everyMartin Pieuchot
route entry in ART. rt_plen() now represents the prefix length of a route entry and should be used instead. For now use a "struct sockaddr_in6" to represent the mask when needed, this should be then replaced by the prefix length and RTA_NETMASK only used for compatibility with userland. ok claudio@
2015-12-03deleting ip_insertoptions() prototype, which is no longer neededAlexandr Nedvedicky
(follow up on my earlier commit) OK bluhm@
2015-12-03ip_send()/ip6_send() allow PF to send response packet in ipsoftnet task.Alexandr Nedvedicky
this avoids current recursion to pf_test() function. the change also switches icmp_error()/icmp6_error() to use ip_send()/ip6_send() so they are safe for PF. The idea comes from Markus Friedl. bluhm, mikeb and mpi helped me a lot to get it into shape. OK bluhm@, mpi@
2015-12-03remove code that's been #ifdef'ed out for 20 yearsBret Lambert
ok deraadt@
2015-12-03When enqueuing a mbuf chain, take the top instead of the lastAlexander Bluhm
element. Otherwise the kernel paniced with "ipintr no HDR" if the data passed to pppxwrite() had a certain length. Bug reported and fix tested by Sevan / Venture37. Debugged with and OK mikeb@
2015-12-03Remove the /usr/share/nls/ exception from pledge(2). The libcAlexander Bluhm
native language support was deleted a month ago at u2k15. OK semarie@ deraadt@
2015-12-03Use SRPL_HEAD() and SRPL_ENTRY() to be consistent with and allow toMartin Pieuchot
fallback to a SLIST. ok dlg@, jasper@
2015-12-03add ifdef IPSEC for protoypes; requested by mpi@Markus Friedl
2015-12-03pledge(pf) needs to allow DIOCKILLSRCNODES, used in relayd.Sebastian Benoit
ok deaadt@
2015-12-03Let the IP27 kernel build with DEBUG.Visa Hankala
2015-12-03factor out ip_input_ipsec_{fwd,ours}_check(); ok mpi@Markus Friedl