IABSD.fr/src
Branch :
Log
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
 |
0dc53d81 | 2022-09-03 18:48:49 | Move PRU_SOCKADDR request to (*pru_sockaddr)() Introduce in{,6}_sockaddr() functions, and use them for all except tcp(4) inet sockets. For tcp(4) sockets use tcp_sockaddr() to keep debug ability. The key management and route domain sockets returns EINVAL error for PRU_SOCKADDR request, so keep this behaviour for a while instead of make pru_sockaddr handler optional and return EOPNOTSUPP. ok bluhm@ | |
 |
3664b3a8 | 2022-09-03 18:45:51 | Provide c2i_ASN1_ENUMERATED_cbs() and call it from asn1_c2i_primitive(). This avoids asn1_c2i_primitive() from needing knowledge about the internals of ASN1_INTEGER and ASN1_ENUMERATED. ok tb@ | |
 |
78964d1a | 2022-09-03 18:17:15 | whitespace | |
 |
17b371d9 | 2022-09-03 18:05:10 | Make sure we don't suspend if we have no way to wake up the machine. The idea is that device drivers that can wake up the machine register themselves by calling device_register_wakeup(). To prevent regressions on amd64, we let acpi(4) register itself as a wakeup device if the AML for the machine defines wakeup devices. This may be refined in the future. This diff will prevent people from suspending their arm64 SBCs without having a way to wake them up. For now the only driver that registers itself is axppmic(4), which means that at this moment only SBCs with an allwinner A64 or H5 SoC will actually support suspend/resume. ok mlarkin@, deraadt@ | |
|
7a1f0687 | 2022-09-03 17:47:47 | Prepare to provide OPENSSL_cleanup. OPENSSL_cleanup() cleans up and deallocates memory in use by the library. There are a couple of use cases for this, primarily related to memory leak testing. This will not be called automatically in LibreSSL, which means that OpenSSL's OPENSSL_NO_INIT_ATEXIT is implied. If code wants to clean up then they need to explicitly call this themselves. ok tb@ | |
 |
9db53cc8 | 2022-09-03 17:43:14 | New test coverage for RC4 From Joshua Sing | |
|
ba6ce9be | 2022-09-03 16:01:23 | Stop using CBIGNUM_it internal to libcrypto. CBIGNUM_it is supposed to be the "clear bignum" or "secure" bignum - that is one which zeros its memory after use and ensures that the constant time flags are set... in LibreSSL we always do both of these things for BIGNUMs, so just use BIGNUM_it instead. ok tb@ | |
 |
9b00ff81 | 2022-09-03 15:59:04 | - rework the -f text to read better; ok job - while here, wrap a long line | |
 |
75ff2046 | 2022-09-03 15:58:40 | Remove -lncurses from LDADD. It is not used. Also add DPADD line. OK deraadt@ | |
|
30c38fb1 | 2022-09-03 15:48:16 | Allow ikbd(4) to become the console keyboard. ok miod@ | |
 |
d5142bb9 | 2022-09-03 15:46:20 | Fix passing explicit stage files Every platform ought to set `stages', `stage1' and optionally `stage2' in md_init(), otherwise passing explicit files results won't work as `stages' is zero-initialised and no default path is set: # installboot -nv wd0 ./ofwboot usage: installboot [-nv] [-r root] disk [stage1] installboot [-nv] -p disk This is correct synopsis and ought to work, but macppc_installboot.c (others, too) has an empty md_init(). Set stage bits to fix this: # ./obj/installboot -nv wd0 ./ofwboot Using / as root would install bootstrap on /dev/rwd0c using first-stage ./ofwboot would copy ./ofwboot to /tmp/installboot.Ymmm6QU8OJ/ofwboot Using `stage1' leads to a bit more cleanup since early MI installboot.c handles `-r', i.e. write_filesystem() no longer has needs to do the fileprefix() dance itself. This makes regress/usr.sbin/installboot pass on macppc (while being lucky or carrying miod's fix for the kernel disklabel race manifesting on vnd). OK gkoehler | |
|
3119f858 | 2022-09-03 15:29:43 | Allow suspend with root on sdmmc(4). ok deraadt@ | |
 |
ae92bda2 | 2022-09-03 15:13:44 | Clarify warning | |
 |
14b185b3 | 2022-09-03 14:57:54 | When divert-reply is used, keep some pf states after pcb is dropped if its local address is translated, to prevent its source port from being reused. regress test by blumn. ok blumn | |
|
527da30c | 2022-09-03 14:41:47 | Don't doublecheck whether the RSC eContent Resourceblock contains inherit elements The RSC ASN.1 templates make it impossible to pass an RFC3779-style inherit option because of the use of ConstrainedIPAddressFamily and ConstrainedASIdentifiers. OK tb@ | |
|
c9e39c95 | 2022-09-03 14:40:09 | Introduce x509_any_inherit() for objects which may not have inherit elements Unify conformance checking of Trust Anchors, ROAs, ASPAs, RSCs - none of which may have any 'inherit' elements in the RFC 3779 IP/AS Resources extension of the X509 certificate. OK tb@ | |
 |
4536786e | 2022-09-03 13:59:25 | Add a new keyword to template files, 'raid', to allow the auto allocation of RAID partitions. Make both 'raid' and 'swap' keywords case insensitive. Suggested by kn@ ok kn@ miod@ | |
|
c94cf448 | 2022-09-03 13:30:27 | Add the repoid of the cert in the cert struct. This way it is possible to track the parent repository id of a publication point. Nomenclature is confusing but not much we can do here. OK tb@ job@ | |
|
bcad1ab7 | 2022-09-03 13:29:33 | Fix socket splicing between inet and inet6 sockets broken by PRU_CONTROL request splitting to (*pru_control)(). ok bluhm@ | |
|
4c866cd6 | 2022-09-03 13:06:15 | Allow multiple X.509 locations While currently everyone only uses a single location, the spec allows for multiple locations ordered by preference. While rpki-client does not support more than one location this should not be a fatal error. Instead, pick the first location and warn if there are more than one. ok job | |
|
bc1fb2e9 | 2022-09-03 13:01:43 | Move non-inheritance check for BGPsec certs into cert_parse_pre() ok claudio job (as part of a larger diff) | |
 |
ffacad8a | 2022-09-03 12:35:29 | regen | |
|
94bc6e28 | 2022-09-03 12:33:44 | add the sendmmsg syscall that allows sending multiple msghdrs at once. libc, man page, and regress parts to come. With input from jca@, bluhm@. OK bluhm@ | |
|
52ce63ca | 2022-09-03 11:01:55 | Clarify timeout/deadline | |
|
0df89876 | 2022-09-03 09:22:25 | Move the repo lookup into queue_from_mft() OK tb@ | |
|
a7b1c138 | 2022-09-03 08:44:56 | Add apldcms(4), a driver for the touchpad on M2 laptops. This driver needs firmware that is provided on the ESP by the Asahi installer and copied into /etc/firmware/apple by the OpenBSD installer. ok tobhe@ | |
|
ce015b32 | 2022-09-03 08:37:36 | Copy Apple touchpad firmware on machines that need it. ok kn@, deraadt@ | |
|
7d412f24 | 2022-09-03 08:26:05 | Fix the failing libm/rint regress test by adding ieee754 implementations for the rounding functions. Input from kettenis@, OK miod@ | |
|
eb775c6e | 2022-09-03 06:55:01 | use past tense for history; | |
 |
6cd90bab | 2022-09-03 05:44:04 | sync with arm64.html | |
 |
ff30fda4 | 2022-09-02 22:11:57 | Make rc_configtest behave like rc_pre and rc_post; i.e. don't define a default function (each rc.d script is supposed to define its own if wanted). This way, we can filter out the "configtest" action depending on whether the function exists or not. Adapt documentation. tweak/ok kn@ | |
|
47de54a6 | 2022-09-02 21:56:45 | Introduce a deadline timer that aborts all repository syncs. With this rpki-client has a chance to still finish and produce an output even when a CA is excessivly slow and holds back progress. With and OK benno@ tb@ and job@ | |
 |
f53d796a | 2022-09-02 21:33:51 | vmd(8): compute i8254 read-back command latch from singular timestamp The intent of the i8254 read-back command is (most likely) to permit simultaneously latching two or three counters at once along with their statuses. To simulate this, we should compute olatch from one timestamp per read-back command, not one timestamp per counter. Improved with a tweak by dv@. Link: https://marc.info/?l=openbsd-tech&m=166213670605453&w=2 ok dv@ mlarkin@ | |
 |
3ad05d8a | 2022-09-02 20:06:55 | Constify nam2blk[], chrtoblktbl[] and octeon devmap[]. ok mpi@ millert@ | |
|
c88484cc | 2022-09-02 19:14:04 | Fix over long lines OK tb@ job@ | |
|
0cda9bff | 2022-09-02 19:10:36 | Use the abort commands when a repo timeout happens. This is cleaner then just failing the repo fetch but leaving the backends running. OK tb@ | |
|
4673c683 | 2022-09-02 18:37:17 | Implement RRDP_ABORT, a message to abort a inflight RRDP request. The abort is done in a way that waits for any inflight files or http requests to finish before removing the rrdp state and before sending the rrdp done message indicating failure. OK tb@ and benno@ | |
|
98efa068 | 2022-09-02 18:08:43 | rrdp_new() need not return the struct The only caller does nothing with it. with/ok claudio | |
|
12e50ba5 | 2022-09-02 17:54:42 | First attempt at supporting audio on machines with multiple speakers. Probably needs more work as the device tree bindings evolve. Note that speakers are currently disabled in the device tree for all Apple Silicon machines except for the Mac mini. | |
 |
6ff447b0 | 2022-09-02 17:46:37 | vmm(4): add tracepoint for in/out handler. Inserts a new static dt(4) tracepoint in vmm(4) to report details on in/out instructions (direction, port, and data). ok mlarkin@ | |
|
c8e165a4 | 2022-09-02 17:39:51 | extra newline | |
|
7141bfc1 | 2022-09-02 16:53:28 | Add a callback for setting the TDM slot used by an audio codec. Implement this callback in tascodec(4) such that we can pick the audio channel that it outputs. This will override the default which is to downmix stereo input from TDM channels 0 and 1 to mono output. ok ratchov@ | |
|
bfee0ecd | 2022-09-02 15:45:52 | Rewrite RMD-160 tests to be table-driven. From Joshua Sing | |
|
3a7fc93e | 2022-09-02 15:21:40 | wc(1): accelerate word counting wc(1) counts a word whenever a whitespace byte is followed by a non-whitespace byte. Because the state machine transition occurs within the space of a single byte we don't need to use getline(3). Counting words in a big buffer with read(2) is much faster. The overhead varies with the length of a line, but for files with 60-100 byte lines, word counting is about twice as fast when we avoid getline(3). In the pathological case where each line is a single byte, word counting is about ten times as fast when we avoid getline(3). Link1: https://marc.info/?l=openbsd-tech&m=163715995626532&w=2 Link2: https://marc.info/?l=openbsd-tech&m=165956826103639&w=2 "Seems reasonable." deraadt@ | |
|
6e120aea | 2022-09-02 15:09:19 | Move mkpath logic after checking for 'noop' to prevent creation of directories in -n mode OK claudio@ | |
|
9619265f | 2022-09-02 14:18:47 | Don't ignore an OpenBSD GPT partition just because the GPT says it extends beyond the edge of the disk the GPT currently inhabits. We only care if enough of it is addressable that a disklabel is accessible. Brings GPT handling of 'OpenBSD partitions extending too far' into line with the MBR handling of the same situation. | |
 |
f09e68de | 2022-09-02 14:08:09 | Fix TSO large receive offloading in ix(4). Without this diff it might happen that content of different TCP connection get mixed up, when reading coalesced buffers from the receive ring. Thanks, for a lot of testing effort to mbuhl. OK mbuhl@ | |
|
e2deea65 | 2022-09-02 13:46:23 | Retire the old crap. Thanks, Joshua | |
|
23177a7a | 2022-09-02 13:45:18 | Unhook the old md4 and md5 tests | |
|
24f1a0be | 2022-09-02 13:38:56 | Link new md test to regress. | |
|
080aa9e4 | 2022-09-02 13:34:48 | New md4/md5 regress tests These exercise MD4 and MD5 with the test vectors from RFCs 1320 and 1321. From Joshua Sing <joshua () hypera ! dev> | |
|
06acb1ca | 2022-09-02 13:23:33 | regen | |
|
ece7faeb | 2022-09-02 13:23:05 | Add two const | |
|
a79bf4b0 | 2022-09-02 13:21:32 | Make test tables static const and fix a style nit | |
|
5e8575d9 | 2022-09-02 13:20:46 | Enable apldc(4), apldchidev(4), apldckbd(4) and aplrtk(4) here as well. | |
|
8945982b | 2022-09-02 13:18:06 | add the recvmmsg syscall that allows receiving multiple msghdrs at once. libc, man page, and regress parts to come. With input from jca@, guenther@, bluhm@. OK bluhm@ | |
|
3f68dcd3 | 2022-09-02 13:12:31 | Move PRU_CONTROL request to (*pru_control)(). The 'proc *' arg is not used for PRU_CONTROL request, so remove it from pru_control() wrapper. Split out {tcp,udp}6_usrreqs from {tcp,udp}_usrreqs and use them for inet6 case. ok guenther@ bluhm@ | |
|
3e9f5857 | 2022-09-02 13:04:16 | Rework the rsync proc code. Use a proper queue of requests and enforce the limit on that queue instead of stopping to read new messages. This is needed to implement an abort request. "There is not enough RB_TREE in this diff" tb@ | |
|
d606fae9 | 2022-09-02 12:46:18 | Reduce differences to amd64. ok kettenis | |
|
32e11e70 | 2022-09-02 12:40:02 | Nuke TEMPLATE variable and just do it, like amd64/ramdisk_cd does. ok deraadt@ | |
|
b5cea687 | 2022-09-02 12:28:12 | Nuke variable partlba that is set but not used. | |
|
9dfb435a | 2022-09-02 12:24:26 | Relax GTP header validity check by allowing 1 sector size usable LBA area (gh_lba_start == gh_lba_end) and allowing either or both of gh_lba_start and gh_lba_end to exceed the size of the disk the GPT currently inhabits. Reduces false negatives and inappropriate fall through to MBR spoofing and allows repair of otherwise valid GPT. | |
|
fdb0798e | 2022-09-02 11:47:25 | Simplify and clean up the ecdsa test a little. Use stdio instead of BIO for output, use 'err' as a label and avoid some silly repetitions. | |
|
a938e53c | 2022-09-02 11:18:09 | Retire old SHA tests The old tests were incomplete, some of them had no license and the code quality was questionable. The new tests by Joshua Sing cover what they did (and additionally SHA-224 and SHA-384). Many thanks! | |
|
5f735a34 | 2022-09-02 11:16:03 | Unhook old SHA tests | |
|
c8db7e74 | 2022-09-02 11:13:34 | Add tests for 1 million repeated "a" From Joshua Sing | |
|
6f531dd6 | 2022-09-02 10:41:05 | sync | |
|
8b310230 | 2022-09-02 10:39:31 | drm/i915: Add new ADL-S pci id From Jose Roberto de Souza in drm-intel-next | |
|
a17f37f2 | 2022-09-02 10:34:43 | regen | |
|
8a4378f0 | 2022-09-02 10:34:07 | sync Intel ADL-S devices with Mesa git adds 0x468b, removes 0x4691 | |
|
9e056ac4 | 2022-09-02 10:16:51 | Now that boot blocks are able to parse ufs2, there is no need to force ufs1 for the / file system. Brings landisk into the wonderful world of y2k38 compliance. | |
|
6d62b6ec | 2022-09-02 10:15:35 | Add UFS2 support, with libsa for boot and with a specific ufs-and-ufs2-in-one flavour for xxboot, due to its size constraints. | |
|
eac97fcc | 2022-09-02 10:14:02 | Add ufs2 to the list of filesystem, for the sake of boot blocks which do not provide an explicit list of files to build in libsa. | |
|
d18bfbf3 | 2022-09-02 10:12:46 | Remove non-_KERNEL code path for division by zero. This will allow the bootblocks to shrink a little. | |
 |
3a57ef91 | 2022-09-02 09:39:55 | Write /etc/resolv.conf in a more atomic manner. There were few reports were /etc/resolv.conf would lose user-managed lines, possibly caused by a system crash. While here add a call to fsync(2) which might also help. input otto input & OK deraadt, kn | |
|
2547ab58 | 2022-09-02 09:02:37 | Get the retguard region's phys address from pmap, instead of using linker script symbols. This is needed since we don't have those symbols on all archs where we want hibernate. ok kettenis, and input and help from miod. | |
|
172b98bf | 2022-09-02 08:13:03 | Add softraid(4) RAID 1C boot support Equivalent of sys/arch/arm64/stand/efiboot/softraid_arm64.c r1.4: (commitid: Ka484R3swI5xSRWO) "Add softraid(4) RAID 1C boot support". Tell the boot loader to decrypt 1C like C volumes and check the number of disks in 1C like in 1C volumes -- no new code rquired. Tested on T4-2 guest domains "Looks reasonable" kettenis OK stsp NB: While kernel and boot loader support root on softraid on sparc64, installboot(8) still needs a pending fix for installations on multi-chunk softraid volumes. Until then, the usual installation process will fail on 1C volumes and requires manual fixup. | |
|
4ed81583 | 2022-09-02 07:46:03 | Adopt a terser specification of an MBR partition table of 64 zeros, suggested by miod@ a while ago. ok mlarkin@ | |
 |
2c434b9b | 2022-09-02 07:38:14 | Make newer mime type definitions take precedence over existing ones. Patch from Ben Fuller <ben -AT- bvnf -DOT- space>, helped along by florian@ ok florian@ and some mumblings from claudio who does not want okays in httpd. | |
 |
46d2ff95 | 2022-09-02 07:37:57 | openpty() family of functions use /dev/ptm PTMGET to open a master+slave fd pair, and also provides their names. Internally, 3 NDINIT+namei operations access /dev/[tp]ty[p-zP-T][0-9a-zA-Z], of these 2 followed unveil restrictions. I argue if you unveil /dev/ptm, (and not the 372 other nodes), you still want openpty() to provide you with working fd's, and the names, which the caller will probably never open manually, because the fd's are given. So change all NDINIT to use KERNELPATH, bypassing unveil. ok semarie | |
 |
74d1c2fc | 2022-09-02 07:07:45 | The sysORTable doesn't have 10 entries anymore. Adjust the test for now to -Cr4, which isn't exactly in the spirit of the test but fixes things for now. Now that we have agentx I should write a backend with more predictable output to make regress more stable. pointed out by anton@ | |
|
3e492f6e | 2022-09-02 06:19:04 | Use a shorter system call invocation template for system calls in the range 0-127, where immediate addressing can be used to load the system call number in r0, rather than performing a memory load using pc-relative addressing. No functional change, but rm(1) runs a couple cycles faster per file now. | |
 |
e67f83d8 | 2022-09-02 04:20:02 | sk-usbhid: fix key_lookup() on tokens with built-in UV explicitly test whether the token performs built-in UV (e.g. biometric tokens) and enable UV in that case. From Pedro Martelletto via GHPR#388 | |
|
eb5b05f3 | 2022-09-01 22:24:40 | Zap IRR RFC reference for the 'bgpctl irrfilter' command which was deprecated in 6.6 | |
|
33de4f94 | 2022-09-01 22:01:40 | vmm(4): send all port io emulation to userland Simplify things by sending any io exits from IN/OUT instructions to userland instead of trying to emulate anything in the kernel. vmm was sending most pertinent exits to vmd anyways, so this functionally changes little. An added benefit is this solves an issue reported by tb@ where i386 OpenBSD guests would probe for a pc keyboard repeatedly and cause excessive vm exits. (The emulation in vmm was not properly handling these port reads.) While here, make the assignment of the VEI_DIR_{IN,OUT} enum values not assume the underlying integer the compiler may assign. ok mlarkin@ | |
|
0dd33aec | 2022-09-01 21:50:19 | whitespace | |
|
24ca0f25 | 2022-09-01 21:15:54 | Add forest (-f) mode In -f mode group & display parent/child process relationships using ASCII art. Borrows heavily from Brian Somers' work on FreeBSD ps(1). With input from deraadt@ and tb@ OK benno@ claudio@ | |
|
716e1627 | 2022-09-01 20:36:25 | ugly whitespace | |
|
621c53d4 | 2022-09-01 18:21:22 | Move PRU_CONNECT2 request to (*pru_connect2)(). ok bluhm@ | |
 |
3d4ce2b9 | 2022-09-01 18:18:24 | sync | |
|
ed1d2f92 | 2022-09-01 18:15:04 | change part of entry description for tf from "cat" to "C/A/T"; from josiah frentsos | |
|
3e618802 | 2022-09-01 17:23:36 | Fill the gaps for armv7, powerpc64 and riscv64 These still fail early on due to the opendev(3)/diskmap(4) race condition, so only hook them up after the kernel is fixed. Note to self: some distrib/${MACHINE}/ramdisk/install.md pass explicit newfs(8) flags -- this might be needed here; test once all the relevant kernel and installboot(8) bugs are squashed and this regress suite can be run normally. | |
|
15994619 | 2022-09-01 17:07:09 | whitespace | |
|
9fa049c5 | 2022-09-01 15:48:51 | d_bbsize and d_sbsize are entirely absent from the tree. Rename them d_spare2 and d_spare3. ok otto@ as part of larger diff | |
|
2d650259 | 2022-09-01 15:43:07 | fix unveil(2) in vmctl(8), unix socket needs :w: ok mestre@ martijn@ | |
 |
dd20eed5 | 2022-09-01 15:21:28 | Update awk to Aug 30, 2022 version. Various leaks and use-after-free issues plugged/fixed. | |
|
bcee1a6c | 2022-09-01 15:19:16 | Check sk_SSL_CIPHER_push() return value CID 24797 ok jsing | |
|
1985d3eb | 2022-09-01 14:34:17 | Add privilege separation to snmpd. This uses the just imported snmpd_metrics as a new (agentx-based) backend. Snmpd(8) executes all files in /usr/libexec/snmpd and treats regions registered by these binaries as authorative, so that no other agentx backends can overwrite them. The snmpe process is now pledged "stdio recvfd inet unix". This removes quite a few entries from the sysORTable, but the current entries are non-compliant anyway and should be completely revisisted at a later time. Reduces the time for a full walk by about a factor of 4, bringing us close to the original speed before application.c was introduced. General design discussed with claudio@ Tested by and OK sthen Release build test and OK tb@ | |
|
0bee16bd | 2022-09-01 14:23:25 | add checks that unveil() is doing the right thing irt. bind() and connect() | |
|
411fe3cb | 2022-09-01 14:22:55 | Hook up snmpd_metrics OK tb@, sthen@ |