summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix synchronization in gmirror and graid3 which I broken. Synchronizationpjd2006-09-132-6/+12
| | | | | | | | request can still have bio_to set to sc_provider (this is READ part of a synchronization request) and in this case g_{mirror,raid3}_sync() wasn't called as it should be. MFC after: 1 week
* Document net.inet.tcp.maxtcptw and net.inet.tcp.nolocaltimewait.glebius2006-09-131-1/+19
| | | | Wording by: Devon O'Dell
* Remove unessary includes and follow common ordering style.andre2006-09-131-10/+2
|
* Rewrite of TCP syncookies to remove locking requirements and to enhanceandre2006-09-135-208/+315
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | functionality: - Remove a rwlock aquisition/release per generated syncookie. Locking is now integrated with the bucket row locking of syncache itself and syncookies no longer add any additional lock overhead. - Syncookie secrets are different for and stored per syncache buck row. Secrets expire after 16 seconds and are reseeded on-demand. - The computational overhead for syncookie generation and verification is one MD5 hash computation as before. - Syncache can be turned off and run with syncookies only by setting the sysctl net.inet.tcp.syncookies_only=1. This implementation extends the orginal idea and first implementation of FreeBSD by using not only the initial sequence number field to store information but also the timestamp field if present. This way we can keep track of the entire state we need to know to recreate the session in its original form. Almost all TCP speakers implement RFC1323 timestamps these days. For those that do not we still have to live with the known shortcomings of the ISN only SYN cookies. The use of the timestamp field causes the timestamps to be randomized if syncookies are enabled. The idea of SYN cookies is to encode and include all necessary information about the connection setup state within the SYN-ACK we send back and thus to get along without keeping any local state until the ACK to the SYN-ACK arrives (if ever). Everything we need to know should be available from the information we encoded in the SYN-ACK. A detailed description of the inner working of the syncookies mechanism is included in the comments in tcp_syncache.c. Reviewed by: silby (slightly earlier version) Sponsored by: TCP/IP Optimization Fundraise 2005
* - Change the example CFLAGS entry to match our default in sys.mk.ru2006-09-131-3/+7
| | | | | | - Document that -fno-strict-aliasing is required for -O2. Prodded by: users of stable@
* Remove duplicated code. Declare functions non-static that shouldn't bescottl2006-09-131-43/+33
| | | | inlined.
* dd a series of regression tests to validate that privilege requirements arerwatson2006-09-1332-0/+4026
| | | | | | | | | | | | implemented properly for a number of kernel subsystems. In general, they try to exercise the privilege first as the root user, then as a test user, in order to determine when privilege is being checked. Currently, these tests do not compare inside/outside jail, and probably should be enhanced to do that. Sponsored by: nCircle Network Security, Inc. Obtained from: TrustedBSD Project
* Fix a lock leak in an error case.pjd2006-09-131-1/+1
| | | | | Reported by: netchild Reviewed by: rwatson
* initialize variable (WARNS=6)charnier2006-09-131-0/+1
|
* compile under WARNS=6charnier2006-09-132-5/+3
|
* Reduce the number of errors under WARNS=6charnier2006-09-131-9/+5
|
* document that PAE kernels needs twice the value of non-PAE kernelsjmg2006-09-131-1/+5
| | | | | | for KVA_PAGES, and that it it likely needed for >4GB memory boxes.. MFC after: 3 days
* Busmaster DMA address fix in VIA 6421 case.sos2006-09-121-1/+1
|
* Remove redundant defines alerady set by Makefile.fekan2006-09-121-3/+0
|
* Format mask lacks one bit.sos2006-09-121-1/+1
| | | | Reported by: jkim
* Style sync.obrien2006-09-121-2/+0
|
* Put the osta.c license on osta.h. The license is the same.imp2006-09-121-0/+15
| | | | Approved by: scottl@
* Add FBSDID, rename local variable time to not conflict with time()charnier2006-09-121-7/+11
|
* Bump date, per ru@imp2006-09-121-1/+1
|
* Trim some unneeded includes.jhb2006-09-121-2/+0
|
* Add my birthday to the calendar, sadly I am only the fifth youngest.alexbl2006-09-121-0/+1
| | | | Approved by: novel
* Move to more global Makefile.tgt vs. having to define in the leaves.obrien2006-09-121-4/+0
|
* Default to big endian ARM if "TARGET_BIG_ENDIAN" is defined, and set an ARMobrien2006-09-121-0/+4
| | | | target default.
* Default to big endian ARM if "TARGET_BIG_ENDIAN" is defined (& targeting ARM).obrien2006-09-121-0/+4
|
* Craft the FreeBSD/ARM ABI by hacking the New ARM ABI source.obrien2006-09-121-0/+24
| | | | Submitted by: cognet
* Default vector to big endian ARM if "TARGET_BIG_ENDIAN" is defined.obrien2006-09-121-4/+11
|
* Build 'ld' supporting a big endian ARM if "TARGET_BIG_ENDIAN" is defined.obrien2006-09-121-1/+5
|
* Configure for for big endian if TARGET_BYTES_BIG_ENDIAN is defined.obrien2006-09-121-2/+2
|
* WARNS=6 chocked on unitialized variable.charnier2006-09-121-1/+1
|
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-1212-7/+131
| | | | | | | | | | | | | | | | | | | | | | exists to allow the mandatory access control policy to properly initialize mbufs generated by the firewall. An example where this might happen is keep alive packets, or ICMP error packets in response to other packets. This takes care of kernel panics associated with un-initialize mbuf labels when the firewall generates packets. [1] I modified this patch from it's original version, the initial patch introduced a number of entry points which were programmatically equivalent. So I introduced only one. Instead, we should leverage mac_create_mbuf_netlayer() which is used for similar situations, an example being icmp_error() This will minimize the impact associated with the MFC Submitted by: mlaier [1] MFC after: 1 week This is a RELENG_6 candidate
* - Revert making bus_generic_add_child() the default for BUS_ADD_CHILD().jhb2006-09-112-1/+2
| | | | | | | | | Instead, we want busses to explicitly specify an add_child routine if they want to support identify routines, but by default disallow having outside drivers add devices. - Give smbus(4) an explicit bus_add_child() method. Requested by: imp
* Add note about identify routines needing to use BUS_ADD_CHILD ratherimp2006-09-111-0/+6
| | | | | than device_add_child. The latter is only for busses adding children, not children drivers telling a bus that they have an instance...
* Fix issues found by Coverity (223392, 223393) due to TSO additionspdeuskar2006-09-111-2/+4
| | | | Submitted by: Matthew Jacob
* Minor overhaul of SMBus support:jhb2006-09-1116-281/+327
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Change smbus_callback() to pass a void * rather than caddr_t. - Change smbus_bread() to pass a pointer to the count and have it be an in/out parameter. The input is the size of the buffer (same as before), but on return it will contain the actual amount of data read back from the bus. Note that this value may be larger than the input value. It is up to the caller to treat this as an error if desired. - Change the SMB_BREAD ioctl to write out the updated struct smbcmd which will contain the actual number of bytes read in the 'count' field. To preserve the previous ABI, the old ioctl value is mapped to SMB_OLD_BREAD which doesn't copy the updated smbcmd back out to userland. I doubt anyone actually used the old BREAD anyway as it was rediculous to do a bulk-read but not tell the using program how much data was actually read. - Make the smbus driver and devclass public in the smbus module and push all the DRIVER_MODULE()'s for attaching the smbus driver to various foosmb drivers out into the foosmb modules. This makes all the foosmb logic centralized and allows new foosmb modules to be self-contained w/o having to hack smbus.c everytime a new smbus driver is added. - Add a new SMB_EINVAL error bit and use it in place of EINVAL to return an error for bad arguments (such as invalid counts for bread and bwrite). - Map SMB bus error bits to EIO in smbus_error(). - Make the smbus driver call bus_generic_probe() and require child drivers such as smb(4) to create device_t's via identify routines. Previously, smbus just created one anonymous device during attach, and if you had multiple drivers that could attach it was just random chance as to which driver got to probe for the sole device_t first. - Add a mutex to the smbus(4) softc and use it in place of dummy splhigh() to protect the 'owner' field and perform necessary synchronization for smbus_request_bus() and smbus_release_bus(). - Change the bread() and bwrite() methods of alpm(4), amdpm(4), and viapm(4) to only perform a single transaction and not try to use a loop of multiple transactions for a large request. The framing and commands to use for a large transaction depend on the upper-layer protocol (such as SSIF for IPMI over SMBus) from what I can tell, and the smb(4) driver never allowed bulk read/writes of more than 32-bytes anyway. The other smb drivers only performed single transactions. - Fix buffer overflows in the bread() methods of ichsmb(4), alpm(4), amdpm(4), amdsmb(4), intpm(4), and nfsmb(4). - Use SMB_xxx errors in viapm(4). - Destroy ichsmb(4)'s mutex after bus_generic_detach() to avoid problems from child devices making smb upcalls that would use the mutex during their detach methods. MFC after: 1 week Reviewed by: jmg (mostly)
* Add a new ddb command 'show lapic' to dump details about the local APICjhb2006-09-112-0/+140
| | | | | | registers for the current CPU. MFC after: 3 days
* Actually hook up the IPI_INVLCACHE IDT vectors backingjhb2006-09-112-2/+9
| | | | | | | | | pmap_invalidate_cache() in the SMP case so pmap_mapdev() in multiuser doesn't panic with a trap 30. I broke this many months ago when I added pmap_invalidate_cache() as early parts of the PAT work. Patience from: jmg Pointy hat: jhb
* Fix a NULL pointer dereference of ro->ro_rt->rt_flags by checking for theandre2006-09-111-1/+1
| | | | | | | validity of ro->ro_rt first. This prevents crashing on any non-normally routed IP packet. Coverity CID: 162 (incorrectly, it was re-introduced by previous commit)
* Add support for a few more Serverworks and lookalikes chips.sos2006-09-112-9/+15
|
* Update to fit latest USB cleanup crusade.sos2006-09-111-2/+2
|
* Add prototype for bus_generic_add_child() missed in previous commit.jhb2006-09-111-0/+3
|
* Add a default method for BUS_ADD_CHILD() that just callsjhb2006-09-112-1/+8
| | | | | | | | | | | | | device_add_child_ordered(). Previously, a device driver that wanted to add a new child device in its identify routine had to know if the parent driver had a custom bus_add_child method and use BUS_ADD_CHILD() in that case, otherwise use device_add_child(). Getting it wrong in either direction would result in panics or failure to add the child device. Now, BUS_ADD_CHILD() always works isolating child drivers from having to know intimate details about the parent driver. Discussed with: imp MFC after: 1 week
* Add myself as OpenSSL janitor/maintainer.simon2006-09-111-0/+1
|
* Give the ACPI I/O rman's unique description strings to make 'devinfo -u'jhb2006-09-111-2/+2
| | | | | | output less confusing. MFC after: 3 days
* - Fix rman_manage_region() to be a lot more intelligent. It now checksjhb2006-09-113-25/+47
| | | | | | | | | | | for overlaps, but more importantly, it collapses adjacent free regions. This is needed to cope with BIOSen that split up ports for system devices (like IPMI controllers) across multiple system resource entries. - Now that rman_manage_region() is not so dumb, remove extra logic in the x86 nexus drivers to populate the IRQ rman that manually coalesced the regions. MFC after: 1 week
* CF devices are ATA not ATAPI.sos2006-09-111-1/+3
|
* Define build 'as' TARGET_BYTES_BIG_ENDIAN if "TARGET_BIG_ENDIAN" is defined.obrien2006-09-111-0/+3
| | | | This is needed for bi-sex architectures.
* null commit to provide commit message to previousmjacob2006-09-111-1/+1
| | | | | | at the request of Sam Leffler: The previous commit established min and maxtags for VMware pseudo disks to fix a submitted PR.
* PR: 103130mjacob2006-09-111-1/+1
| | | | | Submitted by: Shusuke Shinomiya MFC after: 1 day
* Regen.ru2006-09-111-2/+7
|
* Document the new know, WITHOUT_ASSERT_DEBUG.ru2006-09-111-0/+4
|
OpenPOWER on IntegriCloud