summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* mark test-inlabel-wildcard-cert-no-CA-client as an expected failuretb2021-02-181-1/+2
|
* sftp-server: implement limits@openssh.com extensiondjm2021-02-182-3/+85
| | | | | | | | | | This is a simple extension that allows the server to clearly communicate transfer limits it is imposing so the client doesn't have to guess, or force the user to manually tune. This is particularly useful when an attempt to use too large of a value causes the server to abort the connection. Patch from Mike Frysinger; ok dtucker@
* handle "simple-pm-bus" in simplebusjsg2021-02-181-5/+10
| | | | | | | Enables a clock and/or power domain for a group of devices. Required to use linux 5.11 dtbs on am335x and omap4. ok kettenis@
* Unify unit initialization.mglocker2021-02-171-9/+7
|
* If the device driver open call fails, don't set sc_open since in that casemglocker2021-02-171-5/+7
| | | | | | | we don't get a file handle back which could be closed again, and therefore we couldn't toggle sc_open back to zero. Spotted and ok anton@
* Skip gp initialization in loongson bootblocksvisa2021-02-172-3/+1
| | | | | | | The loongson bootblocks are compiled with -mno-abicalls and do not use gp-relative addressing. A similar change has been made to the mips64 kernels recently.
* Do not reprogram address filter after MII status changevisa2021-02-171-5/+1
| | | | | The address filter is not affected by link parameter changes, so its reprogramming can be skipped.
* Add support for FIQs. We need these to support agtimer(4) on Apple M1 SoCskettenis2021-02-179-49/+104
| | | | | | | | since its interrupts seem to be hardwared to trigger an FIQ instead of an IRQ. This means we need to manipulate both the F and the I bit in the DAIF register when enabling and disabling interrupts. ok patrick@
* Call 'struct process' parameters 'pr' to distinguish from 'struct proc'mglocker2021-02-171-4/+4
| | | | | | parameters which are usually called 'p'. Spotted and ok anton@
* Move the call to setupterm() into the client and have it pass thenicm2021-02-175-77/+174
| | | | | | results to the server over imsg, means the server does not need to enter ncurses or read terminfo db. Old clients will not work with a new server.
* Collect return code of video_stop() for ioctls calls.mglocker2021-02-171-2/+2
| | | | Spotted and ok anton@
* Make sure puttygen is new enough to successfully run the PuTTY interopdtucker2021-02-171-10/+9
| | | | tests, otherwise skip them.
* Add support for the UART found on the Apple M1 SoC.kettenis2021-02-162-10/+30
| | | | ok patrick@
* Add x509 certificate validation regression testsjan2021-02-163-2/+242
| | | | | | | The validation tests are originaly createtd by Steffen Ullrich. OK tb@ No objection jsing@
* Fail on duplicate KE payload.tobhe2021-02-161-1/+5
| | | | ok patrick@
* Introduce debug levels since the current debug output is too noisy bymglocker2021-02-161-17/+18
| | | | default.
* Poll battery sensors less frequently. The previous period was quiteanton2021-02-161-2/+2
| | | | arbitrary and inspired by other USB drivers.
* Trim uhidpp_device_features() by extracting two pure protocol functions.anton2021-02-161-18/+52
|
* Prevent double free by copying the URI string from struct tal to the repo.claudio2021-02-161-2/+3
|
* make use of getline(3) in ftp(1)naddy2021-02-164-42/+23
| | | | | | | | Replace fparseln(3) with getline(3). This removes the only use of libutil.a(fparseln.o) from the ramdisk. Replace a complicated fgetln(3) idiom with the much simpler getline(3). ok jca@
* Revery previous hash alignment fixafresh12021-02-163-40/+24
| | | | Unintentionally changes ABI and breaks perl ports
* syncderaadt2021-02-161-3/+0
|
* Enable multiple opens of a video(4) device as described in the V4L2mglocker2021-02-161-30/+109
| | | | | | | | | | | | | | | | | | | | | | | specification: https://www.kernel.org/doc/html/v5.10/userspace-api/media/v4l/open.html#f1 The discussion has been started by jca@, who has implemented this behavior recently, but limited to the same process. This diff extends this behavior to any process. The first process which opens a stream will become the device owner. Other processes are still allowed to call certain ioctls, but none which are related to the start/stop of a stream, or manipulation of the streaming buffers. At the moment only VIDIOC_G_CTRL and VIDIOC_S_CTRL are supported to be called by non- device owner processes, which should be extended further in the future. There is no additional kernel locking implemented at the moment, since video(4) already runs under the KERNEL_LOCK(), which we expect to be sufficient for now (as discussed with claudio@). A lot of improvement input received from anton@. ok anton@
* Introduce BUS_SPACE_MAP_POSTED such that we can distinguish betweenkettenis2021-02-168-31/+43
| | | | | | | | posted and non-posted device memory mappings and set the right memory attributes for them. Needed because on the Apple M1 using the wrong mapping will fault. ok patrick@, dlg@
* Comments & style cleanup, no functional change intended.mpi2021-02-161-224/+284
| | | | | | | | | | | | - Sync comments with NetBSD including locking details. - Remove superfluous parenthesis and spaces. - Add brackets, even if questionable, to reduce diff with NetBSD - Use for (;;) instead of while(1) - Rename a variable from 'result' into 'error'. - Move uvm_fault() and uvm_fault_upper_lookup() - Add an locking assert in uvm_fault_upper_lookup() ok tb@, mlarkin@
* Print AIA in rpki-client test utilityjob2021-02-165-6/+11
|
* Rework the repository handling. Split the handling of trust anchors intoclaudio2021-02-163-146/+136
| | | | | | | | ta_lookup() while regular repositories (to fetch .mft files) are handled by repo_lookup(). Also the cache directory layout changed; moving the trust anchors to ./ta/{tal basename}/ the other repositories end up in ./rsync/ OK tb@
* Add `bgpctl show rtr` to display basic information about RTR sessions.claudio2021-02-167-23/+134
| | | | OK job@
* Add RTR support to OpenBGPD. Add basic support for the protocol.claudio2021-02-1615-106/+2167
| | | | | | | | The RTR client runs in a new process where the protocol handling is done and when new data is available all sources are merged into one ROA set which is then loaded into the RDE. The roa-set from the config is also handled by the new RTR engine. Tested by and ok job@
* get Authority Information Access (AIA) from CA & EE certsjob2021-02-166-30/+101
| | | | | | | | | | | | In the context of the RPKI, the AIA extension identifies the publication point of the certificate of the issuer of the certificate in which the extension appears. A single reference to the publication point of the immediate superior certificate MUST be present, except for a "self-signed" certificate. Thanks tb@ for review OK claudio@
* use rtalloc_mpath in pf_route and pf_route6.dlg2021-02-161-3/+4
| | | | | | | if you have multiple links to the same destination, this will let you use them with route-to/reply-to/dup-to. ok claudio@
* Backport upstream perl 64bit hash alignment fixesafresh12021-02-163-24/+40
| | | | | | | | | | | | | | | | Different flags triggering new compiler optimizations means that luck has run out on this working by chance with the strict alignment of octeon. Upstream issue: https://github.com/Perl/perl5/issues/18555 This is a combination of three commits from upstream. https://github.com/Perl/perl5/commit/d18575f18c6ee61ce80492e82cae7361358d570a https://github.com/Perl/perl5/commit/6027b190154088fbbcbde08a80c49531e4e4c012 https://github.com/Perl/perl5/commit/f43079cb514e3d0be0036424695438ae3fb58451 works on all arch deraadt@
* some phy are not needed anymore since the ethernet drivers went awayderaadt2021-02-161-6/+6
|
* Fix invalid config error in run-psk-fail.tobhe2021-02-151-3/+13
|
* While it should be possible to use "normal uncachable" mappings forkettenis2021-02-151-1/+2
| | | | | | | | write-combining on arm64 as Linux does, this doesn't seem to work on NXP's LX2160A SoC. So switch to using "device" mappings for now to make amdgpu(4) work better. ok patrick@
* ssh: add PermitRemoteOpen for remote dynamic forwarding with SOCKSmarkus2021-02-156-9/+170
| | | | ok djm@, dtucker@
* factor out opt_array_append; ok djm@markus2021-02-153-43/+51
|
* Extraneous blank line.krw2021-02-151-2/+1
|
* Simplify error path in in route_attach(). We always call it in threadmvs2021-02-151-10/+4
| | | | | | | context so we always have `curproc' Also protocol control block is not required for soreserve() so we can do it before `rop' allocation. ok bluhm@
* Only print the certificate file once on verifification failure.jsing2021-02-151-4/+2
| | | | | | Noted by Steffen Ullrich. ok tb@
* Make SGR 6 (rapid blink) the same as SGR 5 (blink) and make SGR 21 tonicm2021-02-151-1/+6
| | | | the same as SGR 4:2, it is an old alternative. GitHub issue 2567.
* Rework tick_msg() to make messages displayed during startup morekrw2021-02-151-45/+69
| | | | | | | | | | | | | | reliable and consistant. Eliminate unused time_t parameter since we only tick during the first link_timeout seconds. Replace it with 'action' parameter to clearly indicated what tick_msg() is supposed to do. Fix issuance of '\n' before log_debug() messages. Properly reinitialize static variables. Use more precise 'timespec' timers, hewing to idiom suggested by cheloha@.
* Fix double unlock in uvmfault_anonget().mpi2021-02-151-3/+3
| | | | Reported by and ok jsg@
* Back-out USB data toggle fix for HID devices, since we received multiplemglocker2021-02-152-43/+67
| | | | | | reports about broken devices, e.g. for ukbd(4) and fido(4). ok mpi@
* ProxyJump takes "none" to disable processing like ProxyCommand doesdlg2021-02-151-2/+5
| | | | ok djm@ jmc@
* Support X11 colour names and some other variations for OSC 10/11, alsonicm2021-02-155-61/+728
| | | | add OSC 110 and 111. GitHub issue 2567.
* Move single_thread_set() out of KERNEL_LOCK().mpi2021-02-154-12/+10
| | | | | | | Use the SCHED_LOCK() to ensure `ps_thread' isn't being modified by a sibling when entering tsleep(9) w/o KERNEL_LOCK(). ok visa@
* distrib: arm64: avoid customization in mr.fs targetsemarie2021-02-152-9/+4
| | | | | | | | | | | | arm64 ramdisk has customization in mr.fs target, in order to create usr/mdec/pine64 and usr/mdec/rpi directories (files will be copied inside them by runlist.sh). uses MKDIR directive to create these directories instead of. it put back mr.fs target identical to others archs. ok deraadt@
* Things are too tight. Retaining even those two symbols is too much.deraadt2021-02-151-2/+1
| | | | | When dealing with install floppies, the Makefiles will need to carry some differences.
* move the rearming of the cq after the refill of the rq.dlg2021-02-151-4/+5
| | | | | | | | this is the only real diff we have left outstanding on a box that experienced rx lockups. since adding this change it's been happy for the last 4 weeks and counting so far. ok jmatthew@