Age | Commit message (Collapse) | Author |
|
|
|
|
|
instead of letting hardware rings grow on every interrupt, restrict
it so it can only grow once per softclock tick. we can only punish
the rings on softclock ticks, so it make sense to only grow on
softclock tick boundaries too.
the rings are now punished after >1 lost softclock tick rather than
>2. mclgeti is now more aggressive at detecting livelock.
the rings get punished by an 8th, rather than by half.
we now allow the rings to be punished again even if the system is
already considered in livelock.
without this diff a livelocked system will have its rx ring sizes
scale up and down very rapidly, while holding the rings low for too
long. this affected throughput significantly.
discussed and tested heavily at j2k10. there are still some games
with softnet we can play, but this is a good first step.
"put it in" and ok deraadt@
ok claudio@ krw@ henning@ mcbride@
if we find out that it sucks we can pull it out again later. till then
we'll run with it and see how it goes.
|
|
factor out bandwidth limiting code from scp(1) into a generic bandwidth
limiter that can be attached using the atomicio callback mechanism
add a bandwidth limit option to sftp(1) using the above
"very nice" markus@
|
|
Lots of agreement.
|
|
``Go ahead, its free'' deraadt@.
|
|
bounds file is empty.
ok deraadt@ henning@
|
|
ssh_config.5: format the kexalgorithms in a more consistent (prettier!) way
ok djm
|
|
selection of which key exchange methods are used by ssh(1) and sshd(8)
and their order of preference.
ok markus@
|
|
their actual lengths. Will improve vertical alignment in some
uncommon situations, for example when escape sequences occur in
list or column width strings or in .Nm block arguments in the SYNOPSIS.
From kristaps@.
|
|
from kristaps@
|
|
Two authors with "and", but without a comma.
Three or more with commata, and an "and" before the last one.
From kristaps@.
|
|
From kristaps@
|
|
name and then linking it into position after listen() has succeeded.
this allows the mux clients to determine that the server socket is
either ready or stale without races. stale server sockets are now
automatically removed
ok deraadt
|
|
|
|
|
|
disabled and unfinished J-PAKE code.
avoids catastrophic security failure found by Sebastien Martini
|
|
|
|
Add pointer from -print0 to xargs(1).
Add an EXAMPLE to demonstrate \( ... -or ... \) -print0.
Stop advertising -print | xargs, which is dangerous.
Add a CAVEAT about passing find(1) output to other programs.
Mostly from joachimschipper dot nl;
using feedback from jmc@ and sthen@, and tweaked myself;
ok jmc@
|
|
|
|
- better Nd; from schwarze
ok schwarze
|
|
|
|
device with the required mode
|
|
|
|
ignore embedded escapes and mathematical roff subexpressions.
In roff copy mode, resolve "\\" to '\'.
Allow ".xx\}" where xx is a macro to close roff conditional scope.
Mandoc now handles the special character definitions in the pod2man(1)
preamble, so remove the explicit redefinitions in chars.c/chars.in.
From kristaps@.
I have checked that this causes no relevant change to the Perl manuals.
The only change introduced is that some non-ASCII characters rendered
incorrectly before are now rendered incorrectly in a different way.
For example, e accent aigu was "e", now is "e'"
and c cedille was "c", now is "c,".
|
|
Fix for .Pp from kristaps@, i applied the same to .Lp.
Bug reported by espie@.
|
|
|
|
minute changes :-/.
|
|
terminals (I'm looking at you, putty) which disable the vt100 ACS mode
switching sequences in UTF-8 mode.
Also on terminals without ACS at all, use ASCII equivalents where
obvious.
|
|
|
|
viewable position beyond the size of the history.
|
|
ok ray, zinovik
|
|
* less repetition in FILES section
* SSHv1 keys are still encrypted with 3DES
help and ok jmc@
|
|
|
|
|
|
(SHA256/384/512) depending on the length of the curve in use. The previous
code incorrectly used SHA256 in all cases.
This fix will cause authentication failure when using 384 or 521-bit curve
keys if one peer hasn't been upgraded and the other has. (256-bit curve
keys work ok). In particular you may need to specify HostkeyAlgorithms
when connecting to a server that has not been upgraded from an upgraded
client.
ok naddy@
|
|
is not a proper error message.
|
|
session (yes, it doesn't match window/pane, but so what, nor does
switch-client).
Based on a diff long ago from "edsouza".
|
|
ok stsp
|
|
|
|
ok ray zinovik
|
|
pointers.
ok zinovik
|
|
gcc, at least in earlier versions, but this does not forgive your current
transgressions) seen between zlib and openssl
ok djm
|
|
|
|
|
|
ok deraadt@
|
|
|
|
ok schwarze@ and kristaps
|
|
|
|
|