summaryrefslogtreecommitdiffstats
path: root/usr.sbin/wsconscfg (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-06-22Fix two iwx(4) TX_CMD_OFFLD macros.stsp1-3/+3
The IP_HDR and MH_SIZE fields represent byte offsets into the frame, rather than flags. Make these macros require a parameter to prevent them from being misunderstood as flag bits. In iwlwifi these are defined via an enum, with most values being used as parameters to BIT(). Yet these IP and MH ones are actually used to shift length values to particular positions within the offloading parameters of the Tx command. Fortunately, these macros aren't used yet in our version of the driver.
2020-06-22Prepare for newer iwx(4) firmware scan command versions.stsp2-9/+72
Add declarations of "version 2" scan flags from iwlwifi and prepare the iwx_scan_channel_cfg_umac struct for life beyond version 1. None of this is needed yet. But we will need this at some point and I've already written the diff, hoping it would prevent firmware errors (which of course it didn't).
2020-06-22Update definition of the iwx_ac_to_tx_fifo map.stsp1-5/+5
Compared to iwm(4) devices the BE and BK fifo numbers have been swapped in iwx(4) hardware. This has no real consequences for us since we send all frames at the same access category, but I'm fixing the mapping anyway.
2020-06-22Enable critical temperature detection in iwx(4) firmware.stsp2-2/+71
The driver will turn the device off and print a message to dmesg if the firmware signals critical temperature. It looks like the firmware will also make use of a Tx-backoff mechanism to regulate device temperature.
2020-06-22Do not copy an SSID into the iwx(4) probe request template.stsp1-2/+4
Firmware will add SSIDs specified via the scan command to its probe requests. There is no need to copy an SSID into the template. This code path is not used yet because active scanning mode is still disabled in this driver.
2020-06-22Fix unconditional write to v1.scan_priority in iwx(4) scan command.stsp1-2/+3
The data structure for the scan command contains a union which represents various versions of the scan command. The driver wrote to the scan_priority field in version 1 data regardless of the scan command version actually expected by firmware. Perform that write only for scan command version 1, as intended. Testing suggests that this prevents occasional firmware errors during scans.
2020-06-22Fix length specification for 2GHz band IE data in iwx(4) probe requeststsp1-2/+2
template. This code path is not used yet because active scanning mode is still disabled in this driver. ok kn@
2020-06-22updated argument name for -P in first synopsis was missed in previous;jmc1-2/+2
2020-06-22supply word missing in previous;jmc1-2/+2
2020-06-22When the main process exits, it closes the pipe so a read 0 occurs.otto1-3/+3
Move log level to debug for that case and while there correct the string, we're reding, not writing.
2020-06-22add support for verification of webauthn sshsig signature, anddjm4-7/+718
example HTML/JS to generate webauthn signatures in SSH formats (also used to generate the testdata/* for the test).
2020-06-22Add support for FIDO webauthn (verification only). webauthn is adjm3-6/+130
standard for using FIDO keys in web browsers. webauthn signatures are a slightly different format to plain FIDO signatures - this support allows verification of these. Feedback and ok markus@
2020-06-22refactor ECDSA-SK verification a little ahead of adding supportdjm1-21/+23
for FIDO webauthn signature verification support; ok markus@
2020-06-22a first cut at requesting and parsing vpd info.dlg1-1/+137
reading vpd stuff is useful when you're trying to get support information about a pci device, eg, if you want a serial number, or firmware versions, or specific part name or number, it's likely available via vpd. also, im sick of having the diff in my tree. this relies on the new PCIOCGETVPD ioctl i just committed to the kernel. it's a very quick and dirty implementation, hopefully someone will pick it up and polish it a bit. tested by hrvoje popovski on a variety of cards ok jmatthew@
2020-06-22support for RFC4648 base64url encoding; ok markusdjm2-2/+47
2020-06-22better terminology for permissions; feedback & ok markus@djm1-11/+11
2020-06-22better terminology for permissions; feedback & ok markus@djm3-37/+37
2020-06-22in wait_for_completion_* return 0 on timeout -ERESTARTSYS on signaljsg1-14/+11
matches how the interfaces are documented
2020-06-22let userland read vpd info from a pci device.dlg2-5/+44
reading vpd stuff is useful when you're trying to get support information about a pci device, eg, if you want a serial number, or firmware versions, or specific part name or number, it's likely available via vpd. also, im sick of having the diff in my tree. the vpd info is not accessed as bytes read from a capability, but is read via a register in the capability. the same register also supports updating or writing vpd info, which sounds like a bad idea to let userland have raw access to. this adds an ioctl so that userland can ask the kernel to read via the vpd register on its behalf. this ensures that the only access is read access, and it's sanity checked. tested by hrvoje popovski on many devices. ok jmatthew@
2020-06-22deprecate network livelock detection using the softclock.dlg1-38/+2
livelock detection used to rely on code running at softnet blocking the softclock handling at a lower interrupt priority level. if the hard clock interrupt count diverged from one kept by a timeout, we assumed the network stack was doing too much work and we should apply backpressure to the receptions of packets. the network stack doesnt really block timeouts from firing anymore though. this is especially true on MP systems, because timeouts fire on cpu0 and the nettq thread could be somewhere else entirely. this means network activity doesn't make the softclock lose ticks, which means we aren't scaling rx ring activity like we think we are. the alternative way to detect livelock is when a driver queues packets for the stack to process, if there's too many packets built up then the input routine return value tells the driver to slow down. this enables finer grained livelock detection too. the rx ring accounting is done per rx ring, and each rx ring is tied to a specific nettq. if one of them is going too fast it shouldn't affect the others. the tick based detection was done system wide and punished all the drivers. ive converted all the drivers to the new mechanism. let's see how we go with it. jmatthew@ confirms rings still shrink, so some backpressure is being applied.
2020-06-22there's not going to be any whole kernel wide network livelocks soon.dlg1-3/+2
2020-06-22use ifiq_input and use it's return value to apply backpressure to rxrs.dlg12-28/+50
this is a step toward deprecating softclock based livelock detection.
2020-06-22use ifiq_input and use it's return value to apply backpressure to rxrs.dlg5-12/+19
this is a step toward deprecating softclock based livelock detection.
2020-06-22use ifiq_input and use it's return value to apply backpressure to rxrs.dlg4-11/+16
this is a step toward deprecating softclock based livelock detection. kettenis@ tested fec(4) on armv7 and dwge(4) on arm64 jmatthew@ tested dwxe(4) on armv7 and noted rings shrinking under load.
2020-06-22use (undocumented) base64 code in libc instead of libcrypto.dlg2-11/+10
naddy gave me a pointer in the right direction ok millert@ deraadt@ looks good to matt dunwoodie
2020-06-22plug the wireguard ioctls in.dlg2-2/+4
2020-06-22enable nvme on i386.dlg2-2/+5
ok deraadt@
2020-06-21syncderaadt2-0/+6
2020-06-21Making tracing through traps work.kettenis1-2/+19
ok gkoehler@
2020-06-21vmd(8): fix ns8250 lockup due to race conditionpd1-16/+16
Inject a pending interrupt even if the rcv_pending flag is set to avoid the endless EV_READ loop where a byte lingers read to be read but the vcpu never gets the interrupt to read it. (e.g. the result of spamming RETURN via the serial console) Also, protect com ratelimit handler with mutexes to avoid corruption of the device state. These changes help preventing linux vm crashes when the return key is held on boot. Discovered by and patch from Dave Voutila <dave@sisu.io> ok tb@
2020-06-21Update Spleen kernel fonts to version 1.7.1, bringing the followingfcambus5-35/+35
improvements: - Remove strain pixel on the '5' digit (5x8 version) - Improve the Esszet character (8x16, 12x24, 16x32, and 32x64 versions)
2020-06-21Enable machine check interrupt.kettenis1-2/+2
2020-06-21Set PTE valid bit in PTE descriptors such that we actually match them inkettenis1-4/+2
pmap_ptedinhash().
2020-06-21Set reference count of freshly created pmap to one.kettenis1-1/+2
2020-06-21tidy wording from when dnssec was enabled/disabled/reenabledsthen1-3/+3
ok kn gsoares
2020-06-21Nuke pointless vioblk_dev_probe() and vioblk_dev_free() functions andkrw1-21/+5
tweak adapter_target and adapter_buswidth values to provide desired semantic of providing only target 0/lun 0 device per vioblk(4) device. Tested by sf@
2020-06-21correct mutex_lock_interruptible()jsg1-2/+9
Linux kernel code often passes errors around as negative numbers cast to pointers. As rw_enter() returns a errno on failure mutex_lock_interruptible() negated the return value. But this did not account for ERESTART being -1 which would return 1 to the caller. sthen@ periodically hit a uvm_fault() in i915_request_create() which was caused by attempting to use 1 as a pointer. ok kettenis@
2020-06-21Set up exec_map and phys_map.kettenis2-3/+23
2020-06-21provide missing Aq; this one started my search for missing Aq, then i failedjmc1-3/+3
to commit it...
2020-06-21new sentence, new line;jmc1-3/+3
2020-06-21various minor tweaks;jmc1-7/+7
2020-06-21various minor tweaks;jmc1-14/+12
2020-06-21Add code to synchronize I-cache if necessary when mapping an executablekettenis1-2/+26
page.
2020-06-21wgpip -> wgendpoint. ok dlg@matthieu1-3/+3
2020-06-21Implement copyin(9), copyout(9), copyinstr(9) and copyoutstr(9).kettenis10-36/+212
2020-06-21add a commented out entry for wg(4).dlg1-1/+2
i think ive tempted fate enough for one day.
2020-06-21start wg with the other interfaces that rely on routing being up.dlg1-3/+3
from Matt Dunwoodie and Jason A. Donenfeld ok deraadt@
2020-06-21add a manpage for wg(4).dlg2-2/+228
the mandoc linter is upset about "An Jason A. Donenfeld", but i'm hoping ingo or jmc will fix it for me :) From Matt Dunwoodie ok deraadt@
2020-06-21teach ifconfig about wireguard.dlg3-6/+452
note that this links ifconfig with libcrypto to get at base64 encoding and decoding routines. im looking at an alternative way to do that, so hopefully this is temporary. secondly, note that all the wireguard stuff is under ifndef SMALL, so the special build of ifconfig for install media does include wireguard support, and also does not need libcrypto. from Matt Dunwoodie and Jason A. Donenfeld ok deraadt@
2020-06-21tell config how to build wg(4)dlg1-1/+7
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.