| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
ok bluhm@
|
|
|
|
|
|
| |
value of the sleep by using tsleep_nsec(9).
ok mglocker@
|
|
|
|
|
|
| |
make the structs const so that the data are put in .rodata.
OK mpi@, deraadt@, anton@, bluhm@
|
|
|
|
|
|
|
|
|
| |
Some drivers have returned ENXIO (6) if the device is not available
which incorrectly translates into POLLPRI|POLLOUT (2|4) in userland.
Change it to POLLERR for now, but it might as well be POLLHUP.
OK mpi@
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
While FIDO/U2F keys were already supported by the generic uhid(4)
driver, this driver adds the first step to tighten the security of
FIDO/U2F access. Specifically, users don't need read/write access to
all USB/HID devices anymore and the driver also improves integration
with pledge(2) and unveil(2): It is pledge-friendly because it doesn't
require any ioctls to discover the device and unveil-friendly because
it uses a single /dev/fido/* directory for its device nodes.
It also allows to support FIDO/U2F in firefox without further
weakening the "sandbox" of the browser. Firefox does not have a
proper privsep design and many operations, such as U2F access, are
handled directly by the main process. This means that the browser's
"fat" main process needs direct read/write access to all USB HID
devices, at least on other operating systems. With fido(4) we can
support security keys in Firefox under OpenBSD without such a
compromise.
With this change, libfido2 stops using the ioctl to query the device
vendor/product and just assumes "OpenBSD" "fido(4)" instead. The
ioctl is still supported but there was no benefit in obtaining the
vendor product or name; it also allows to use libfido2 under pledge.
With feedback from deraadt@ and many others
OK kettenis@ djm@ and jmc@ for the manpage bits
|
|
|
|
|
|
|
|
| |
resolutions without running out of kernel memory.
Tested with 1920x1080 uncompressed and mjpeg without performance
degradation.
ok mpi@
|
| |
|
|
|
|
|
|
| |
- Add RX/TX checksum offload support
Tested by Shawn Chiou and myself.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
One on the TRB that went short, and one for the last TRB in a TD.
We already set actlen only once so that the last TRB in a TD does
not override it, but some controllers throw another short event
instead of a success event, so we have to add the same check there
as well.
ok gerhard@ mglocker@
|
|
|
|
| |
ok bluhm@
|
|
|
|
|
| |
Change the printf into a log and only under IFF_DEBUG to reduce dmesg spam.
Loudly requested by beck@ OK deraadt@
|
|
|
|
| |
Tested by kevlo@, ok stsp@
|
|
|
|
|
|
| |
DNS proposals in that case. Also clear the DNS proposals when the
interface is deconfigured (e.g. when going down).
OK florian@
|
|
|
|
| |
when the interface is deconfigured (when going down).
|
|
|
|
|
|
| |
This makes udl(4) on xhci(4) work fine.
Help and ok patrick@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
we have subtracted the remaining length from the total transfer
length, which essentially means that we assume that all TRBs have
successfully been transferred apart from the remainder. Actually
we might get a short completion in the middle of a chain of TRBs,
which means that all TRBs until this TRB have completed successfully
apart from a remainder. Thus we have to count the length of all
TRBs until and including the one that we went short on, and remove
the remainder. All following TRBs in the same transfer must be
ignored.
Found by and fixed with gerhard@
ok mglocker@
|
|
|
|
|
|
|
| |
it may prevent incorrect mac address read from efuse
- Disable BB/RF is not needed in urtwn_r92c_power_on()
ok stsp@
|
|
|
|
|
|
| |
when Linux has g_ether configured as RNDIS.
OK patrick@, sthen@
|
|
|
|
|
|
|
|
| |
tiny devices don't accept reports using control transfers since
they think that offering the interrupt pipe is enough.
Discussed with djm@
ok mpi@
|
|
|
|
| |
ok cheloha@
|
|
|
|
| |
and IOCPARM_LEN macros types.
|
|
|
|
|
|
| |
Prevent an infinite loop when aborting ulpt(4)'s pipe after an I/O error.
Found by and ok stsp@
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
fields are naturally aligned, it is enough to remove __packed.
This lets the compiler generate saner machine code. In particular, now
the compiler does not use lwl/lwr and swl/swr instructions on mips64
for changing xhci descriptors. The descriptors are properly aligned in
memory, so lwl/lwr and swl/swr end up doing a redundant load or store.
Feedback from guenther@ deraadt@
Tested on amd64 by krw@
OK mpi@ krw@ kettenis@
|
|
|
|
| |
ok visa@, kn@
|
|
|
|
|
|
|
| |
MBIM_IPCONF_HAS_GWINFO are available. Configuring umb(4) without gateway
wont work the system needs a destination address for the interface.
Problem found by jsg@.
OK jsg@ deraadt@
|
|
|
|
| |
ok visa@, kn@, cheloha@
|
|
|
|
| |
ok visa@, kn@
|
|
|
|
| |
ok visa@, kn@, cheloha@
|
|
|
|
|
|
|
|
| |
sweep tree to correct NDIINT op and flags ahead of time. document
the requirement. This allows KERNELPATH to be used to bypass
unveil for crash dumps with nosuidcoredump=2 or 3
ok visa@ deraadt@ florian@
|
|
|
|
|
|
|
|
|
|
| |
ip only whereas DTL_LOOP passes the address family of the packet and so
supports more address families.
To make this work umb_decap() prepends the AF to the packet and which is
consumed then by umb_input(). Similar umb_output() sets ph_family in the
mbuf header which is used by umb_start().
OK deraadt@ dlg@
|
|
|
|
|
| |
(unlikely) failure path remains noisy.
discussed with claudio
|
|
|
|
|
|
|
|
| |
has a lower priority than wifi or wired LAN and so should only be used when
no other interface is available. With this using umb(4) becomes less painful
Now ifconfig umb0 up will be enough especially if unwind(8) is used to handle
DNS requests.
OK deraadt@ job@ benno@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This reduces drops caused by the ifq pressure drop mechanism and hence
increases throughput. Such drops are visible with e.g. 'netstat -dnI iwm0'.
Not all affected drivers have been tested yet but these changes are largely
mechanical and should be safe. As usual, please report any regressions.
With help from dlg@ and mpi@
Problem found by robert@
Tested by robert, jmc, Tracey Emer, Matthias Schmidt, florian, Björn Ketelaars
ok mpi@
|
|
|
|
|
|
|
| |
This simplifies the code and allows any block size multiple of 1ms to
be used when play and recording number of channels are not the same.
ok mpi@
|
| |
|
|
|
|
| |
Tested by myself, jcs@
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
wiping the entire cache every time a scan is triggered.
This has benefits for userland programs trying to look at scan results,
and for drivers which don't get a full view from hardware on every scan.
Nodes will still be evicted from the cache in one of several ways:
Add a new way of timing out inactive nodes which don't send a beacon
within 10 scan iterations, for client mode only. This should get rid
of stale APs if we're scanning for some time in a changing environment.
If we fail to associate a few times, the corresponding node is removed.
If net80211 transitions back to INIT state (e.g. because of a
user-initiated configuration change) all nodes are removed.
When a background scan starts all nodes will be removed. This could be
revisited later but has been intentionally left as-is for now.
Tested by myself, jmc@, benno@, procter@ on iwm(4), athn(4) and ral(4).
|
|
|
|
|
|
| |
Also change the storage type for the DNS addresses to struct in_addr since
that is more convinient for userland. This includes some minor other cleanup.
OK gerhard@
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
seen on a Lenovo X395 which combines normal webcam functionality
with another IR camera, by parsing the USB interface association
descriptors. This fixes the symptom of uvideo(4) complaining
about too many headers and not providing any functionality at all.
ok jan@
|
|
|
|
|
|
| |
as seen on the IR camera of my Lenovo X395.
ok jan@
|
|
|
|
|
|
|
|
| |
All callers sleep indefinitely.
With help from visa@.
ok visa@, ratchov@, kn@
|
|
|
|
|
|
|
| |
sizes with each specification. Use the correct size for the given
version, since some newer devices cannot handle small buffers.
ok jan@
|
|
|
|
|
|
| |
compiled in.
ok jan@
|
|
|
|
| |
ok jan@
|