deraadt [Tue, 13 Jul 2010 21:10:50 +0000 (21:10 +0000)]
delete unnccessary include
deraadt [Tue, 13 Jul 2010 21:01:05 +0000 (21:01 +0000)]
rename some thread related interfaces so they are logical
nicm [Tue, 13 Jul 2010 20:47:56 +0000 (20:47 +0000)]
regress for merge bug.
nicm [Tue, 13 Jul 2010 20:47:19 +0000 (20:47 +0000)]
Do not put the file into conflict if it is no longer modified (user has
edited it back to repository state).
ok zinovik
nicm [Tue, 13 Jul 2010 20:41:55 +0000 (20:41 +0000)]
PR 6423 fix for cvs too, requested by xsa@.
nicm [Tue, 13 Jul 2010 20:07:24 +0000 (20:07 +0000)]
Don't read before the beginning of the log message if it is zero-length
(possible when it comes from stdin).
Tweaked version of a fix from Peter Hendrickson in PR 6423.
ok deraadt
otto [Tue, 13 Jul 2010 18:52:25 +0000 (18:52 +0000)]
fix overflow of dirsize; from FreeBSD; PR 6426; ok beck@ millert@
deraadt [Tue, 13 Jul 2010 16:50:26 +0000 (16:50 +0000)]
Do not put a data buffer on the stack; malloc it (we will use dma_alloc
later, when we trust it)
ok matthew
deraadt [Tue, 13 Jul 2010 16:49:16 +0000 (16:49 +0000)]
need pool.h to initialize the dma allocator
deraadt [Tue, 13 Jul 2010 16:47:02 +0000 (16:47 +0000)]
dma_alloc() and dma_free(). This is a thin shim on top of a bag of
pools, sized by powers of 2, which are constrained to dma memory.
ok matthew tedu thib
espie [Tue, 13 Jul 2010 15:39:03 +0000 (15:39 +0000)]
handle Tm, like in tiff2ps
espie [Tue, 13 Jul 2010 15:38:27 +0000 (15:38 +0000)]
work around a strange problem in locality of @_ by copying stuff.
okay millert@
sthen [Tue, 13 Jul 2010 13:11:57 +0000 (13:11 +0000)]
Fix (pflow) display in rule printing. Spotted by dhill@, ok henning@
kettenis [Tue, 13 Jul 2010 13:07:35 +0000 (13:07 +0000)]
Fix dmesg printing.
ok krw@, claudio@
henning [Tue, 13 Jul 2010 12:56:06 +0000 (12:56 +0000)]
- find.fp_wsize *= find.fp_mss, 1;
+ find.fp_wsize *= find.fp_mss;
From: Ed Schouten <ed at FreeBSD.org>
martinh [Tue, 13 Jul 2010 12:54:51 +0000 (12:54 +0000)]
Avoid double free in ldap modify requests. The values received in the
modify request is linked into the stored ber structure, and then both are
freed. Fix this by unlinking the values from the request.
sthen [Tue, 13 Jul 2010 12:28:13 +0000 (12:28 +0000)]
When cleaning /tmp at boot, run the slower find unconditionally.
Previously if the quick rm -rf failed, find was not run, so some files
were not removed. Looks good to tedu@.
djm [Tue, 13 Jul 2010 11:52:06 +0000 (11:52 +0000)]
implement a timing_safe_cmp() function to compare memory without leaking
timing information by short-circuiting like memcmp() and use it for
some of the more sensitive comparisons (though nothing high-value was
readily attackable anyway); "looks ok" markus@
mlarkin [Tue, 13 Jul 2010 07:33:10 +0000 (07:33 +0000)]
Fix a broken mask for core temperature 1 and 2, and bias properly for degC.
Tested on Thinkpad T510.
jmc [Tue, 13 Jul 2010 07:01:23 +0000 (07:01 +0000)]
no more rmd160(1);
jmc [Tue, 13 Jul 2010 06:57:37 +0000 (06:57 +0000)]
no need for userland to refer to section 2/3 pages;
deraadt [Tue, 13 Jul 2010 06:03:59 +0000 (06:03 +0000)]
sync
guenther [Tue, 13 Jul 2010 04:24:46 +0000 (04:24 +0000)]
Fix PR 6417: if we're starting a thread and there's no other threads
running, then we need to start a gc thread...except when this is
the very call to start a gc thread!
"This works for me" marc@
guenther [Tue, 13 Jul 2010 03:10:29 +0000 (03:10 +0000)]
Fix PR 6376: restore more thread library state if execve fails,
including the scheduling timer, sigmask, fd nonblocking status, and
handling of the signals used by the thread library.
ok marc@, additional testing by ajacoutot@
schwarze [Tue, 13 Jul 2010 01:09:12 +0000 (01:09 +0000)]
Merge release 1.10.4 (all code by kristaps@), providing four new features:
1) Proper .Bk support: allow output line breaks at input line breaks,
but keep input lines together in the output, finally fixing
synopses like aucat(1), mail(1) and tmux(1).
2) Mostly finished -Tps (PostScript) output.
3) Implement -Thtml output for .Nm blocks and .Bk -words.
4) Allow iterative interpolation of user-defined roff(7) strings.
Also contains some minor bugfixes and some performance improvements.
krw [Tue, 13 Jul 2010 00:30:30 +0000 (00:30 +0000)]
Correct comment. scsi_sense_data is now 18 bytes, not 32.
tedu [Mon, 12 Jul 2010 23:16:55 +0000 (23:16 +0000)]
replace rmd160 links with sha256. it's way more popular and more better, too.
too many oks to enumerate.
while here, add Xr to the relevant libc functions in each page.
djm [Mon, 12 Jul 2010 22:41:13 +0000 (22:41 +0000)]
expand %h to the hostname in ssh_config Hostname options. While this
sounds useless, it is actually handy for working with unqualified
hostnames:
Host *.*
Hostname %h
Host *
Hostname %h.example.org
"I like it" markus@
djm [Mon, 12 Jul 2010 22:38:52 +0000 (22:38 +0000)]
Make ExitOnForwardFailure work with fork-after-authentication ("ssh -f")
for protocol 2. ok markus@
nicm [Mon, 12 Jul 2010 18:03:38 +0000 (18:03 +0000)]
Update to 1.4.14b.
From their change log:
o Fix memory-leak of signal handler array with kqueue. [backport]
o Make evutil_make_socket_nonblocking() leave any other flags alone.
o Adjusted fcntl() retval comparison on evutil_make_socket_nonblocking().
o Re-add event_siglcb; some old code _was_ still using it. :(
o Fix a free(NULL) in min_heap.h
o Clean up properly when adding a signal handler fails.
Also a local change to use an int rather than a long for fcntl().
ok guenther deraadt
jmc [Mon, 12 Jul 2010 16:28:29 +0000 (16:28 +0000)]
document gcc4; requested by brad
jmc [Mon, 12 Jul 2010 16:26:45 +0000 (16:26 +0000)]
ksh.1: add ((, )), ]], and `name' to the list of reserved words for compounds
sh.1: add ]] and `name' to the list; additionally document the commands
`select' (requested by Ross L Richardson) and [[
ok millert sobrado
espie [Mon, 12 Jul 2010 15:54:48 +0000 (15:54 +0000)]
missed one next -> return, as noticed by marco@
bluhm [Mon, 12 Jul 2010 14:35:13 +0000 (14:35 +0000)]
Merge duplicate log messages into one log_warn().
ok claudio@
espie [Mon, 12 Jul 2010 09:31:52 +0000 (09:31 +0000)]
need to copy f() parameters, otherwise strange bugs with sub expressions
may occur (bug in locality in @_ ?)
Add missing bagage to State.pm to be able to interact directly with
Makewhatis, later.
guenther [Mon, 12 Jul 2010 03:52:52 +0000 (03:52 +0000)]
After forking, clear the 'thread joining this one' pointer in the child,
as the child only has the one thread remaining.
ok marc@
chl [Sun, 11 Jul 2010 23:16:42 +0000 (23:16 +0000)]
remove unused variable and unused static prototype.
ok nicm@
nicm [Sun, 11 Jul 2010 17:06:45 +0000 (17:06 +0000)]
Return the command client return code with MSG_EXIT now that MSG_ERROR and
MSG_PRINT are unused.
New clients should be compatible with old tmux servers but vice versa may print
an error.
dhill [Sun, 11 Jul 2010 15:53:12 +0000 (15:53 +0000)]
bcrypt_gensalt is already declared in pwd.h
"sure" deraadt@
miod [Sun, 11 Jul 2010 14:09:10 +0000 (14:09 +0000)]
typo
espie [Sun, 11 Jul 2010 10:05:18 +0000 (10:05 +0000)]
move compare into LibSpec, it's not so specific to Signature after all
jmc [Sun, 11 Jul 2010 07:37:30 +0000 (07:37 +0000)]
sort SEE ALSO;
espie [Sun, 11 Jul 2010 07:27:25 +0000 (07:27 +0000)]
display updateset name alongside collisionreport (turns out it's not
always obvious)
espie [Sun, 11 Jul 2010 07:25:10 +0000 (07:25 +0000)]
tie back to bsd.port.mk, to make REVISION and EPOCH more obvious.
espie [Sun, 11 Jul 2010 07:19:05 +0000 (07:19 +0000)]
thinko (found by Daniel Dickman)
jordan [Sat, 10 Jul 2010 22:24:14 +0000 (22:24 +0000)]
Fixup structures to be correct size
ok claudio@
guenther [Sat, 10 Jul 2010 21:29:37 +0000 (21:29 +0000)]
A process on the zombie list can have a NULL p_pgrp if it sleeps when
grabbing allproclk in proc_zap(); skip such processes in sysctl(KERN_PROC*)
and handle the NULL pointer in ddb's ps.
ok tedu@
naddy [Sat, 10 Jul 2010 21:00:34 +0000 (21:00 +0000)]
Reduce the delays a bit in the miibus read/write routines.
Although with aditional 20us delays added just before returning
from miibus read/writes as required by the hardware.
Based on the Linux r8169 driver; from Brad.
drahn [Sat, 10 Jul 2010 20:55:14 +0000 (20:55 +0000)]
Add a bootstrap loader, this allow u-boot to auto-boot from the media
without modifying the u-boot environment.
drahn [Sat, 10 Jul 2010 20:47:10 +0000 (20:47 +0000)]
Remove debug print left in on last commit.
gilles [Sat, 10 Jul 2010 20:40:34 +0000 (20:40 +0000)]
fields are incorrectly named in structure descriptions
"of course" deraadt@
miod [Sat, 10 Jul 2010 19:40:06 +0000 (19:40 +0000)]
No mention of compat_freebsd anymore.
miod [Sat, 10 Jul 2010 19:38:36 +0000 (19:38 +0000)]
sun4e bits
miod [Sat, 10 Jul 2010 19:32:20 +0000 (19:32 +0000)]
sun4e (i.e. SPARCengine 1e) support. This platform is a mix between sun4 and
sun4c, as it has a sun4c OpenPROM but a sun4 8KB pagesize. VME devices are
not supported yet.
ok deraadt@
deraadt [Sat, 10 Jul 2010 17:09:15 +0000 (17:09 +0000)]
and cdboot must be linked with -N still, too. even more curious
deraadt [Sat, 10 Jul 2010 17:04:22 +0000 (17:04 +0000)]
actually, pxeboot must remain linked with -N
deraadt [Sat, 10 Jul 2010 16:11:43 +0000 (16:11 +0000)]
link bootblocks with -Z instead of -N, to ensure that the file offset and
addresses line up correctly. Newer i386 gcc4 - for some reason -- is
prompting the linker with -N to not do this alignment which it used to do
(perhaps because the alignment of all .o's have dropped to very small
amounts??). Using -Z wastes around a page of bootblock space which matters
even more on the small install media, so this definately needs revisiting.
Workaround from toby
martinh [Sat, 10 Jul 2010 14:27:15 +0000 (14:27 +0000)]
Retry requests when the btree is busy. Without this, clients will just hang
waiting for a response if the btree was being reopened when the request was
received.
ratchov [Sat, 10 Jul 2010 12:32:45 +0000 (12:32 +0000)]
When a file is created, initialize its ``busy cycles'' counter to zero.
ratchov [Sat, 10 Jul 2010 12:28:17 +0000 (12:28 +0000)]
In midi server mode, don't terminate the midi thru box if there are
no connections anymore.
ratchov [Sat, 10 Jul 2010 11:56:28 +0000 (11:56 +0000)]
fix parameter handling: don't try to open a ``default'' midi port
if no files are given on the command line
jmc [Sat, 10 Jul 2010 10:49:15 +0000 (10:49 +0000)]
tweak;
espie [Sat, 10 Jul 2010 09:12:02 +0000 (09:12 +0000)]
document EPOCH/REVISION
sthen [Sat, 10 Jul 2010 07:59:33 +0000 (07:59 +0000)]
whitespace cleanup from Brad, no change with diff -w
jordan [Sat, 10 Jul 2010 04:59:55 +0000 (04:59 +0000)]
Verify _ADR bdf is correct (some systems return 0xffff)
Works on Dell x9xx and Studio 1555
matthew [Sat, 10 Jul 2010 03:06:51 +0000 (03:06 +0000)]
Eliminate two of the remaining three instances of drivers passing
their own buf to physio(9).
compiler tested by nick@ and miod@; ok miod@
general approval thib@, deraadt@
matthew [Sat, 10 Jul 2010 02:56:16 +0000 (02:56 +0000)]
Eliminate some unnecessary #include lines.
"sure" marco@
matthew [Sat, 10 Jul 2010 02:52:38 +0000 (02:52 +0000)]
Limit SCIOCCOMMAND and ATAIOCCOMMAND requests to transferring MAXPHYS
bytes worth of data. Also, pass M_CANFAIL to malloc(9) and handle
allocation failures by returning ENOMEM.
Prevents user space from causing a kernel panic by passing
ridiculously large datalen values.
ok dlg@, krw@
dlg [Fri, 9 Jul 2010 22:33:21 +0000 (22:33 +0000)]
rewrite the polling codepath in mpii.
it basically has the poll code swap the ccb completion path out for
something that clears the flag the poll code is looping on. it just
runs the interrupt handler to try and get that ccb back off the
hardware.
the reply queue is now protected by a semaphore, meaning that if
one cpu is already pulling stuff off the chip, another cpu may try
to also pull stuff off, but will return immediately cos the first
cpu will end up doing the work it wants anyway.
i did it this way so the ccb completion paths wouldnt be run while
a mutex was held, and to avoid reordering of ccb completions and
updates to the reply queue consumer that could be caused by allowing
concurrent runs of the interrupt handler to step on each other.
there is a big change here in that polling doesnt time out anymore.
it keeps trying until it succeeds, or it keeps trying. i think it
is dangerous to complete a ccb until th echip has returned it.
the only safe alternative is to do a full reset of the chip, but
that is a massive amount of work.
reviewed by mikeb
ok krw@
testing by me on real and logical disks
deraadt [Fri, 9 Jul 2010 22:27:36 +0000 (22:27 +0000)]
sync
deraadt [Fri, 9 Jul 2010 20:30:48 +0000 (20:30 +0000)]
need sysctl.h to compile with GPROF; Luis Henriques
naddy [Fri, 9 Jul 2010 20:07:05 +0000 (20:07 +0000)]
Make cvs and rcs consistent in what characters they'll accept in
symbol/tag names: require the first character to be a letter and
allow any printable character (except the RCS specials $,.:;@)
afterwards. This matches GNU cvs.
ok xsa@ zinovik@ stsp@
kettenis [Fri, 9 Jul 2010 18:44:10 +0000 (18:44 +0000)]
We need to preserve %eax, %ecx and %edx since GCC 4.x might use these
registers in the prologue to realign the stack.
ok marco@, deraadt@, guenther@
zinovik [Fri, 9 Jul 2010 18:42:14 +0000 (18:42 +0000)]
when opencvs is started with trace option `-t' it must print function it
enters, even if it was executed simultaneously with `-n' (no exec option).
cvs_unedit_local() does not conform that behaviour, so lets make it behave
like all other functions.
ok xsa@, stsp@
deraadt [Fri, 9 Jul 2010 17:36:38 +0000 (17:36 +0000)]
un-terminated string found when comparing to i386 boot code. These
should be 100% identical.
ok toby
drahn [Fri, 9 Jul 2010 17:36:08 +0000 (17:36 +0000)]
Fix cross build problem with cpp, marex pointed out that it wasn't committed.
reyk [Fri, 9 Jul 2010 16:58:06 +0000 (16:58 +0000)]
Add support for using IPsec in multiple rdomains.
This allows to run isakmpd/iked/ipsecctl in multiple rdomains
independently (with "route exec"); the kernel will pickup the rdomain
from the process context of the pfkey socket and load the flows and
SAs into the matching rdomain encap routing table. The network stack
also needs to pass the rdomain to the ipsec stack to lookup the
correct rdomain that belongs to an interface/mbuf/... You can now run
individual IPsec configs per rdomain or create IPsec VPNs between
multiple rdomains on the same machine ;). Note that a primary enc(4)
in addition to enc0 interface is required per rdomain, eg. enc1 rdomain 1.
Test by some people, mostly on existing "rdomain 0" setups. Was in
snaps for some days and people didn't complain.
ok claudio@ naddy@
claudio [Fri, 9 Jul 2010 15:44:20 +0000 (15:44 +0000)]
Add the rtableid to struct rttimer and therefor make it available to
the callback functions. This fixes a problem where dynamic routes in
different tables would not get deleted because the callback was doing
the remove on the wrong table.
OK henning@
claudio [Fri, 9 Jul 2010 15:38:28 +0000 (15:38 +0000)]
ospfd is a AF_INET only routing daemon so limit the routing socket to that
af. This is possible since this filtering no longer blocks RTM_IFINFO.
OK henning@
claudio [Fri, 9 Jul 2010 15:36:54 +0000 (15:36 +0000)]
When protocol filtering is used on the rtsocket filter only messages that
actually have a protocol/address family set. Messages like RTM_IFINFO or
RTM_IFANNOUNCE are family independent and should not be filtered but
it is possible to use a ROUTE_MSGFILTER to filter these messages.
This allows to reduce the messages sent to AF_INET or AF_INET6 only daemons.
OK henning@, deraadt@
dlg [Fri, 9 Jul 2010 13:09:34 +0000 (13:09 +0000)]
instead of saying we're using the all the states in the table when
sending a bulk update, only say we're using the states referenced
by the next and last pointers into the table. this means the pf
timeout thread can keep trimming states during a bulk update.
espie [Fri, 9 Jul 2010 12:42:43 +0000 (12:42 +0000)]
fix pkg_mklocatedb
bluhm [Fri, 9 Jul 2010 12:39:46 +0000 (12:39 +0000)]
Do not try to originate an intra-area-prefix-lsa if an interface
address changes that does not belong to any area. This fixes an
ospf6d crash. To not search for the area in orig_intra_lsa_net(),
just pass the area as function parameter.
ok claudio@
dhill [Fri, 9 Jul 2010 12:27:09 +0000 (12:27 +0000)]
inetname is only called when !nflag. There is no need to again check for
!nflag within inetname().
from Alexandr Shadchin
ok claudio@
jordan [Fri, 9 Jul 2010 12:27:02 +0000 (12:27 +0000)]
Clear the noise
zinovik [Fri, 9 Jul 2010 12:17:34 +0000 (12:17 +0000)]
use macro defines for magical numbers, instead hardcoded values
ok krw@
dlg [Fri, 9 Jul 2010 12:07:21 +0000 (12:07 +0000)]
-#if 1 || defined(PFSYNC_DEBUG)
+#if defined(PFSYNC_DEBUG)
dlg [Fri, 9 Jul 2010 11:16:45 +0000 (11:16 +0000)]
the current code doesnt detect when its filled a bulk packet so it
keeps on building them, which means that it floods the tx ring on
the pfsync interface rather than actually sending many packets.
this change correctly calculates when we've filled a bulk update
packet.
many thanks to david@ for making me go chase this. ive been wondering
why the state count on my firewalls has had such a discrepency for
a long time now.
dlg [Fri, 9 Jul 2010 09:01:32 +0000 (09:01 +0000)]
sending of bulk updates has been very broken since r1.124.
pfsync_bulk_start sets up a bulk transfer by doing this:
sc->sc_bulk_next = TAILQ_FIRST(&state_list);
sc->sc_bulk_last = sc->sc_bulk_next;
and then calls pfsync_bulk_update which loops over state_list like
this:
st = sc->sc_bulk_next;
while (st != sc->sc_bulk_last) {
basically bulk updates never got sent.
this diff handles jjs problem by not attempting to send a bulk
update when the state table is empty and fixed the loop to break
at the right times.
reported by david@ who's initial tests are positive.
reviewed by mcbride@
tested in production at work.
yasuoka [Fri, 9 Jul 2010 08:36:31 +0000 (08:36 +0000)]
Modified to make sure that pipex_mppe_ouput() keeps the packet 32bit
aligned.
OK claudio@
sthen [Fri, 9 Jul 2010 08:28:03 +0000 (08:28 +0000)]
sync from mirrors.dat
espie [Fri, 9 Jul 2010 08:12:49 +0000 (08:12 +0000)]
don't print directly, use an interface that's similar enough to pkg_add
print framework so that we'll be able to integrate with it better.
ok millert@
otto [Fri, 9 Jul 2010 08:06:37 +0000 (08:06 +0000)]
kill redundant docheck() function; ok deraadt@
deraadt [Fri, 9 Jul 2010 08:05:45 +0000 (08:05 +0000)]
3 more JEDEC JC-42.4 sensors are the market
deraadt [Fri, 9 Jul 2010 07:58:49 +0000 (07:58 +0000)]
sync
deraadt [Fri, 9 Jul 2010 07:50:33 +0000 (07:50 +0000)]
gcc4 is a bloated pig, so a few things must fall off the floppy
install media until we can shrink something else. decisions on
what has to go made by jsg and I. (subject to change..)
sthen [Fri, 9 Jul 2010 07:10:55 +0000 (07:10 +0000)]
Update for some of the newer chipsets supported by bge(4). From Brad.
otto [Fri, 9 Jul 2010 06:41:17 +0000 (06:41 +0000)]
Avoid crashes by using correct types for block numbers, which can grow
large on very large filesystems; reported by Benny Lofgren; partly
from FreeBSD. ok deraadt@ beck@ millert@
deraadt [Fri, 9 Jul 2010 03:05:21 +0000 (03:05 +0000)]
good enough sync
jmc [Fri, 9 Jul 2010 01:24:45 +0000 (01:24 +0000)]
new sentence, new line;