summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* adapt to sshkey API tweaksdjm2015-01-262-6/+6
|
* correctly match ECDSA subtype (== curve) for offered/recevieddjm2015-01-2614-42/+68
| | | | | | | | host keys. Fixes connection-killing host key mismatches when a server offers multiple ECDSA keys with different curve type (an extremely unlikely configuration). ok markus, "looks mechanical" deraadt@
* Oops: symlinkat()'s 'atfd' argument is its second, not its firstguenther2015-01-261-2/+2
|
* Update the Samsung SSD controller comment.brad2015-01-261-3/+4
|
* Host key rotation support.djm2015-01-269-28/+401
| | | | | | | | | | | | | Add a hostkeys@openssh.com protocol extension (global request) for a server to inform a client of all its available host key after authentication has completed. The client may record the keys in known_hosts, allowing it to upgrade to better host key algorithms and a server to gracefully rotate its keys. The client side of this is controlled by a UpdateHostkeys config option (default on). ok markus@
* small refactor and add some convenience functions;djm2015-01-263-50/+86
| | | | ok markus
* Import the exynos work into tree. This is from Bitrig. Discussed with and OK jsg, also OK from krw.bmercer2015-01-2628-0/+7163
|
* Rename miniroot-sunxi to miniroot-cubie as the u-boot includedjsg2015-01-267-13/+13
| | | | | | in the image is for Cubieboard1. Discussed with bmercer@ While here switch from using the separate spl and u-boot images to the combined spl and u-boot 'u-boot-sunxi-with-spl.bin'.
* Improve (or rather, rewrite) tbl(7) option parsing.schwarze2015-01-268-183/+169
| | | | | | | | | | | | * Allow the layout to start after the semicolon on the options line. * Ignore leading commas. * Option arguments cannot contain closing parentheses. * Avoid needless UNSUPP messages. * Better ERROR reporting. * Delete unused "linesize" field in struct tbl_opts. * No need for static buffers. * Garbage collect one almost empty wrapper function. Improved functionality, but minus 40 lines of code.
* Rework cbus(4) interrupt support a bit. Instead of merging devhandle andkettenis2015-01-257-116/+91
| | | | | | | devino into a pseudo-sysino, directly use the devino as the ihandle. The devhandle is stored in the cbus softc, and accessed through the bus space tag. This allows us to have more than 256 interrupts on a single cbus, and avoids relying on the lower bits of the devhandle being zero.
* mention that the kern.global_ptrace sysctl also affects PT_ATTACHtedu2015-01-251-2/+6
|
* Don't leak the individual strings when copying environment.nicm2015-01-251-3/+6
|
* tweak and update the illustration to what the bootstrap loader actuallynaddy2015-01-251-12/+11
| | | | looks like; ok deraadt@ miod@
* Correct a bit test for DDR2 CAS Latency and recognise CL7 and CL6.jsg2015-01-251-3/+3
| | | | | | | While the spec only mentions bits for CL5->CL2 with the other bits being marked 'TBD' it seems likely they are used now. From David Vasek.
* refactor loading of dmamaps.dlg2015-01-251-173/+77
| | | | | | | | | | | | | | | | | | | | | | | | | | bus_dmama_load and bus_dmamap_load mbuf figure out the physical addresses of the memory theyre given and then hand it to _bus_dmamap_load_paddr to store in the dmamaps sg lists. unfortunately bus_dmamap_load_mbuf assumes it is only given memory from the kernels direct mapped region, and blindly translates anything its given into phys addresses to hand to _load_paddr. i recently committed change to pool asking them to allocate large pages, which meant uvm allocated mbufs outside the direct map, which meant bus_dmamap_load_mbuf was handing out bogus physical addresses. the pool change got backed out until i could debug this. now _load and _load_mbuf now call _bus_dmamap_load_vaddr for every buffer theyve been given, which properly determines if the addresses are in the direct map or via the tlb. _load_vaddr then feeds the physical addresses into _bus_dmamap_load_paddr to store them in the dmamap. tldr; _load_mbuf doesnt make naive assumptions about its addresses now. ok miod@ kettenis@
* Implement bus_dmamem_alloc_range(9) for macppc/socppc.kettenis2015-01-246-10/+28
|
* correct the syntax description of the boot command; ok jmc@naddy2015-01-247-63/+63
|
* Fix getopt string; the -N flag doesn't take an argument.millert2015-01-241-2/+2
| | | | From Matthew Clarke
* tweak previous;jmc2015-01-241-3/+4
|
* Add bus_dmamem_alloc_range(9).kettenis2015-01-241-2/+3
|
* Document bus_dmamem_alloc_range(9).kettenis2015-01-241-3/+28
|
* Use bus_dmamem_alloc_range(9) to make sure the ring descriprtors can bekettenis2015-01-241-3/+4
| | | | | | accessed by the device. ok deraadt@, stsp@
* Add bus_dmamem_alloc_range(9) to allow drivers to allocate DMA'able memorykettenis2015-01-249-16/+33
| | | | | | within a range that is more (or less) restrictive than the default range. ok deraadt@, stsp@
* Move -lz late in the linker commandline for things to build on static arches.miod2015-01-241-2/+3
|
* Add back <sys/param.h>; it's needed for MACHINE_STACK_GROWS_UP.kettenis2015-01-242-2/+4
| | | | ok millert@, tobiasu@
* preserve .PP before .RE; effect found in audio/pms(1)schwarze2015-01-243-2/+21
|
* Convert openssl(1) sess_id to the new option handling.doug2015-01-241-88/+113
| | | | input + ok jsing@
* Convert openssl(1)'s rsa.c to the new option handling code.doug2015-01-241-184/+251
| | | | input + ok jsing@
* Strangely, ignoring the roff(7) .na request was implemented in the man(7)schwarze2015-01-248-21/+13
| | | | | parser. Simplify the code by moving it into the roff(7) parser, also making it work for mdoc(7).
* Remove a comment that is no longer true with MCLGETI and jumbos onbrad2015-01-241-7/+1
| | | | some revisions of the chipsets.
* change .Cm to .Ar for macro argumentsschwarze2015-01-241-19/+19
|
* Support .RE with an argument; needed for audio/pms(1).schwarze2015-01-2411-26/+162
|
* Userland (base & ports) was adapted to always include <netinet/in.h>deraadt2015-01-2419-71/+95
| | | | | | before <net/pfvar.h> or <net/if_pflog.h>. The kernel files can be cleaned up next. Some sockaddr_union steps make it into here as well. ok naddy
* In shell statements use shell pattern '+([0-9])', not sed regularkrw2015-01-241-7/+7
| | | | | | | | | | | | | expression '[0-9]*'. Should fix problem reported by jsg@ where 'hostname.vlan6.bak' was deemed to be an active vlan specification during upgrade. No change to script output. Tested by rpe@. ok halex@ rpe@
* More missing $OpenBSD$.krw2015-01-2346-46/+92
| | | | ok nicm@
* a wee little bit more cleanup (more const and remove noise from CDIAGFLAGS...espie2015-01-2310-28/+29
| | | | | -pedantic kind of requires -std=c99 here to avoid LL warnings) okay miod@, millert@
* -Wpointer-sign is supported by gcc 4 only.miod2015-01-231-2/+2
|
* While ignoring the .ta (set tab stops) and .ti (temp indent) requestsschwarze2015-01-232-8/+8
| | | | | | is sometimes harmless, it often causes seriously ugly output, so flag these requests as unsupported rather than ignoring them. Discussed with naddy@.
* braces to open a function go on their own line like god intendedtedu2015-01-2310-67/+124
|
* delete some code that doesn't (and shouldn't) run. ok deraadt millerttedu2015-01-231-5/+1
|
* Make km_alloc(9) use the direct map for all "phys contig" mappings requestedkettenis2015-01-231-37/+29
| | | | | | | | | by the caller on architectures that implement them. Make sure that we physically align memory such that we meet any demands on virtual alignment in this case. This should reduce the overhead of mapping large pool pages for pools that request dma'able memory. ok deraadt@, dlg@
* Remove now-unused DebugFlags.millert2015-01-231-3/+1
|
* Ensure that a ServerKeyExchange message is received if the selected cipherjsing2015-01-232-10/+36
| | | | | | | | | | | | | | suite uses ephemeral keys. This avoids an issue where an ECHDE cipher suite can effectively be downgraded to ECDH, if the server omits the ServerKeyExchange message and has provided a certificate with an ECC public key. Issue reported to OpenSSL by Karthikeyan Bhargavan. Based on OpenSSL. Fixes CVE-2014-3572. ok beck@
* Killing my darling. Functionality and binary name moved to pkg_* andhalex2015-01-233-236/+0
| | | | | | friends. So long and thanks for all the fish. ok deraadt@
* Let .Aq/.Ao/.Ac print "<>" instead of the normal "\(la\(ra"schwarze2015-01-233-18/+18
| | | | | | when the only child is .Mt, not when the preceding node is .An, to improve robustness. Triggered by a question from Svyatoslav Mishyn <juef at openmailbox dot org> (Crux Linux).
* typoespie2015-01-231-2/+2
|
* remove a bunch of dangerous casts (useless casts from void * to somethingespie2015-01-2311-50/+56
| | | | | | | | | | | | | | | else, in some cases by adding extra temporary variables. IMO, it's much better practice to do void *a; int *p = a; *p = 42; rather than void *a; *(int *)a = 42; okay miod@... to be revisited for some possible const additions later.
* Normal OpenBSD code fits in an 80 column term. From Jim Smith, ok dlg.sthen2015-01-231-2/+3
|
* break after return is useless.dlg2015-01-231-2/+1
|
* move from deferring vd requests with a task per message to a ringdlg2015-01-231-39/+59
| | | | | | | | | | | | | | of pointers to vd requests, and a single task to notify the taskq that there's work on the ring. the ring is modelled on what you usually get with network cards, which is an array with a producer and consumer index. the interrupt handler fills an entry in the ring at the producers index and increments it. the task reads entries at the consumer index and increments it until it reaches the same value as the producer. tested and slightly tweaked by kettenis@ ok kettenis@