summaryrefslogtreecommitdiffstats
path: root/lib/libssl/ssl_transcript.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2021-02-27Replace stray direct call of f_event with filter_event().visa1-2/+2
This does not change the current behaviour, but filterops should be invoked through filter_*() for consistency.
2021-02-27Identify DTLS based on the version major value.jsing1-2/+2
This avoids the need to match specific DTLS version numbers.
2021-02-27Add dobeep functions that take messages to basic.c.lum1-47/+26
No functional change intended.
2021-02-27Rework route_input() and rtm_sendup(). While we perform foreach loopmvs1-32/+12
in route_input() we drop solock() after we checked socket state. We pass mbuf(9) to this socket at next loops, while it referenced as `last'. Socket's state could be changed by concurrent thread while it's not locked. Since we perform socket's checks and output in same iteration, the logic which prevents mbuf(9) chain copy for the last socket in list was removed. ok bluhm@ claudio@
2021-02-27Path #defines are traditionally prefixed with _PATH.florian3-8/+8
Pointed out by deraadt
2021-02-27Path #defines are traditionally prefixed with _PATH.florian4-10/+10
Pointed out by deraadt
2021-02-27Path #defines are traditionally prefixed with _PATH.florian3-6/+6
pointed out by deraadt
2021-02-27Path #defines are traditionally prefixed with _PATH.florian3-13/+13
pointed out by deraadt
2021-02-27Read the lease file into a statically sized buffer and pass it over toflorian3-38/+42
the engine process for parsing instead of passing an fd. Let's us tighten the engine's pledge back down to "stdio".
2021-02-27Add logger(1) support for daemons that are logging to stdout/stderr (mostly fromajacoutot5-19/+51
the go ecosystem). Properly handle failing daemon startup now that we have pipefail. To take advantage of this new feature, just add foo_logger=facility to the daemon rc.d(8) script or in rc.conf.local(8) or use rcctl: rcctl set foo logger daemon.info tweak for checking flags in rcctl(8) from martijn@ "this looks pretty good" deraadt@ ok sthen@
2021-02-27trim some code i accidentally left into the nvgre add address functiondlg1-4/+1
2021-02-27recover scope from v6 nvgre endpoint addresses for userland to look at.dlg1-2/+2
2021-02-27It is perfectly fine to POLLIN and POLLOUT at the same time. It mayclaudio1-3/+3
actually make things a bit faster. OK deraadt@
2021-02-27Handle NULL term_type.nicm1-2/+5
2021-02-27regenjsg2-55/+55
2021-02-27sort and fix RTL8713 idjsg1-12/+12
2021-02-27regenjsg2-14/+14
2021-02-27sortjsg1-5/+5
2021-02-27regenjsg2-32/+312
2021-02-27add ids for Intel Xeon Scalablejsg1-7/+63
Used by at least Skylake-SP (SKX) and Cascade Lake-SP (CLX). Covers Xeon Scalable, Xeon D, Xeon W, Core Extreme/Core X product families. The Scalable parts are marketed as Xeon Bronze, Silver, Gold and Platinum. As most of these ids are not described in public documents from Intel use Skylake-ESystem.inf and KabyLakePCH-HSystem.inf from Intel's Windows drivers to get an idea of what the names should be. With the name for 0x2088 found in a Intel authored Linux driver. Initial patch and much discussion from Karel Gardas.
2021-02-27put the mac addr into a uint64_t to compare it to the ethernet slow addr.dlg1-5/+9
also do the ethertype comparison before the conversion above.
2021-02-26Check session, window, pane in the right order when working out format type.nicm1-5/+5
2021-02-26Set RTF_GATEWAY for flow routes, not for host route.tobhe1-3/+3
2021-02-26Fix and improve handling of address families in vroute_getcloneroute().tobhe1-27/+9
ok patrick@
2021-02-26Ship resolvd service, enable it by defaultkn3-3/+15
Starting right after unwind. OK deraadt
2021-02-26Ignore SIGHUPkn1-0/+3
It should always run and there is no reload semantic. OK deraadt
2021-02-26sync; OK deraadtflorian2-0/+6
2021-02-26Create /var/db/dhcpleased for lease files.florian1-1/+3
OK deraadt@
2021-02-26rc(8) bits for dhcpleased(8).florian4-7/+19
OK deraadt
2021-02-26Hook up dhcpleased to the build.florian2-7/+7
OK deraadt
2021-02-26Sort SEE ALSO and fix its punctuation.tb1-3/+3
2021-02-26Import dhcpleased(8) - a dhcp daemon to acquire IPv4 address leasesflorian21-0/+5265
from servers. dhcpleased(8) follows the well known three process design of all our privsep daemons. It uses pledge(2) and unveil(2) to restrict access further. In particular the "engine" process, responsible for parsing of untrusted data, is pledge'd "stdio". It cannot access the outside world nor the filesystem at all. Like slaacd(8) for IPv6 it will be always running and acquire addresses for all interface with the autoconf4 flag set. The flag can be set by "ifconfig $if inet autoconf" or by adding "inet autoconf" to /etc/hostname.if. An existing "dhcp" line should be removed. Various iterations tested by deraadt@ The hardest part, finding a name, was handled by jmatthew@ & otto@ "get to it :)" deraadt@
2021-02-26Set is_trusted in x509_verify_ctx_add_chain()tb1-2/+2
If we're about to add a chain we have a trust path, so we have at least one trusted certificate. This fixes a thinko from r1.31 and fixes the openssl(1) cms verify test. ok jsing (who had the same diff)
2021-02-26zap spades of trailing whitespacetb1-266/+266
2021-02-26Read and parse OTP on the BCM4378. There are quite a few firmware andpatrick2-2/+138
nvram files used for the different Apple devices. The device tree and the OTP hold the information which of those we will have to use. For now this information will simply be printed, but depending on how we choose to do the firmare distribution we could use it for loadfirmware().
2021-02-26Attach to BCM4378.patrick1-1/+2
2021-02-26Add support for BCM4378 as implemented on the Apple M1. This chip seemspatrick2-26/+126
to use a different set of PCIE2REG registers. Accessing the "old" ones even leads to faults. There are two surprises though. One is that it seems that the interrupt status register always returns 0, and the other one is that we receive the interrupts way too early, but both can be worked around for now.
2021-02-26touch pcidevs again to generated new rcs ids in headersjan2-2/+2
advince from sthen@
2021-02-26Only support #iommu-cells = <1> for now to make sure the correct stream IDkettenis1-17/+8
is passed to the IOMMU device driver. ok patrick@
2021-02-26Increase the amount of RX buffers given to the bwfm(4) chip. We haave seenpatrick1-4/+4
this already on previous chips, which only started giving us packets when handing over at least 128 of them. Apparently some now require 256, which seems to get the Apple M1's WiFi going.
2021-02-26Add aplcpie(4), a (minimal) driver for the PCIe host bridge on Apple M1 SoCs.kettenis4-3/+505
ok patrick@
2021-02-26Add missing PCI product IDs for x710 10GBase-T into ixl(4)jan4-2/+9
OK phessler
2021-02-26only store the current time on address table entries if it changes.dlg1-3/+6
this avoids unecessary writes to memory. it helps a little bit with a single nettq, but we get a lot more of a boost in pps when running concurrently. thanks to hrvoje for testing.
2021-02-26Add a couple of format variables for active and last window index.nicm2-5/+35
2021-02-26Some more improvements from Joachim Wiberg's version of mg.lum1-7/+10
check before using variable in list remove unnecessary variable declaration check value of adjustname() add a '< 0' return value of snprintf
2021-02-26syncderaadt1-0/+5
2021-02-26remove this KEX fuzzer; it's awkward to use and doesn't play nicedjm4-585/+1
with popular fuzzing drivers like libfuzzer. AFAIK nobody has used it but me.
2021-02-26remove some unused functions in slaacdjsg1-46/+1
ok florian@
2021-02-26tpmr can use the eth64 bits too.dlg1-9/+5
2021-02-26try do a better job of filtering 802.1 reserved group addresses.dlg1-3/+22
if the bridge is supposed to carry vlan packets, assuming it's an s-vlan component and should allow certain group addresses to cross between "customer" bridges. i should probably let some of these groups fall back through to the calling ether_input rather than drop them.
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.