summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* add note about gcc and aesni...jmg2013-09-101-0/+5
| | | | Approved by: re (gjb, kib)
* Back out r255440. /usr/bin/gcc @r255185 (2013-09-03) can build this.obrien2013-09-103-3/+3
| | | | Approved by: re (kib)
* Add a sendfile regression test for transmit length > file size.emaste2013-09-101-32/+64
| | | | | | | This test identified the issue fixed in FreeBSD-SA-13:11.sendfile. Sponsored by: The FreeBSD Foundation Approved by: re (glebius)
* ipfilter 5.1.2 no longer supports sysctl. Use ipf -V to determine ifcy2013-09-103-6/+4
| | | | | | | available (the kernel module is loaded or compiled into the kernel). Approved by: glebius (mentor) Approved by: re (blanket)
* Make a bump for r255426.glebius2013-09-101-1/+1
| | | | Approved by: re (gjb)
* Fix the length calculation for the final block of a sendfile(2)des2013-09-105-7/+57
| | | | | | | | | | | | | | | | | | | | transmission which could be tricked into rounding up to the nearest page size, leaking up to a page of kernel memory. [13:11] In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK at the socket layer rather than pass them on to the link layer without validation or credential checks. [SA-13:12] Prevent cross-mount hardlinks between different nullfs mounts of the same underlying filesystem. [SA-13:13] Security: CVE-2013-5666 Security: FreeBSD-SA-13:11.sendfile Security: CVE-2013-5691 Security: FreeBSD-SA-13:12.ifioctl Security: CVE-2013-5710 Security: FreeBSD-SA-13:13.nullfs Approved by: re
* Only use a clang'ism if ${CC} is clang.obrien2013-09-103-3/+3
| | | | | Reviewed by: sjg Approved by: re (kib)
* Call free() on the pointer returned from malloc().kib2013-09-101-8/+8
| | | | | | | Reported and tested by: Oliver Pinter <oliver.pntr@gmail.com> Sponsored by: The FreeBSD Foundation MFC after: 3 days Approved by: re (delphij)
* Go way past 11 and bump bhyve's max vCPUs to 16.grehan2013-09-102-4/+6
| | | | | | | | | | | | | This should be sufficient for 10.0 and will do until forthcoming work to avoid limitations in this area is complete. Thanks to Bela Lubkin at tidalscale for the headsup on the apic/cpu id/io apic ASL parameters that are actually hex values and broke when written as decimal when 11 vCPUs were configured. Approved by: re@
* MFV r247844 (illumos-gate 13975:ef6409bc370f)delphij2013-09-1011-34/+98
| | | | | | | | | | | Illumos ZFS issues: 3582 zfs_delay() should support a variable resolution 3584 DTrace sdt probes for ZFS txg states Provide a compatibility shim for Solaris's cv_timedwait_hires to help aid future porting. Approved by: re (ZFS blanket)
* Fix the aborting of association with the iterator using an emptytuexen2013-09-091-37/+35
| | | | | | | user initiated error cause (using SCTP_ABORT|SCTP_SENDALL). Approved by: re (delphij) MFC after: 1 week
* Emit the correct standard library dependency line for C++ programs. Indes2013-09-091-1/+1
| | | | | | | | the CLANG_IS_CC case, the default is now libc++. Only use libstdc++ if !CLANG_IS_CC or it was explicitly requested in CXXFLAGS. Submitted by: theraven Approved by: re (gjb)
* Pass -n (do not emit comments) when saving mtree information for futuredelphij2013-09-091-1/+1
| | | | | | | mergemaster(8) runs. MFC after: 3 days Approved by: re (kib)
* Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping usejhb2013-09-0925-50/+92
| | | | | | | | | | | | | an address in the first 2GB of the process's address space. This flag should have the same semantics as the same flag on Linux. To facilitate this, add a new parameter to vm_map_find() that specifies an optional maximum virtual address. While here, fix several callers of vm_map_find() to use a VMFS_* constant for the findspace argument instead of TRUE and FALSE. Reviewed by: alc Approved by: re (kib)
* The correct variable is apparently MACHINE_ARCH, not TARGET_ARCH.des2013-09-091-1/+1
| | | | Approved by: re (blanket)
* Make the primary name of the OF console device /dev/ofwcons, and onlynwhitehorn2013-09-091-7/+9
| | | | | | | | | | | | alias it to the contents of the output property if it is defined. This avoids a panic when booting machines (QEMU) where the output-device property is not defined. Since output-device is free-form and potentially conflicts with other entries in /dev, I also am not sure we should be doing the aliasing at all, but this at least makes things work again. Approved by: re (kib)
* These three files appeared in 6.0p1, which was imported into the vendordes2013-09-093-0/+558
|\ | | | | | | | | | | | | | | | | branch but never merged to head. They were inadvertantly left out when 6.1p1 was merged to head. It didn't make any difference at the time, because they were unused, but one of them is required for DNS-based host key verification. Approved by: re (blanket)
| * Apply upstream revision 1.151 (fix relative symlinks)des2013-08-131-1/+2
| |
| * Vendor import of OpenSSH 6.2p2.des2013-05-1712-30/+78
| |
| * The previous commit missed part of the patch. Re-apply.des2013-04-243-34/+29
| |
| * Apply a patch from OpenSSH bugzilla #2057 to silence "received disconnect"des2013-04-141-1/+5
| | | | | | | | errors in the common case (i.e. client intentionally disconnected).
| * Pull in a patchset from upstream to silence spurious "no such identitydes2013-04-024-14/+29
| | | | | | | | file" warnings.
* | Revert r255420. This seems to break some Powermac systems and will benwhitehorn2013-09-091-13/+1
| | | | | | | | | | | | | | revisited much later. Pointy hat to: me Approved by: re (kib, implicit due to breakage 10 minutes ago)
* | Attach only on hardware that is actually supported as opposed to hardwarenwhitehorn2013-09-092-3/+29
| | | | | | | | | | | | that seems like it has some of the problems we might want. Approved by: re (kib)
* | Raise artificial limits on number of CPUs and number of interrupts.nwhitehorn2013-09-093-4/+5
| | | | | | | | Approved by: re (kib)
* | Add POWER CPUs to the kernel's knowledge. This does not imply we currentlynwhitehorn2013-09-093-5/+17
| | | | | | | | | | | | | | actually run on any machines with POWER CPUs but avoids closing that door unnecessarily. Approved by: re (kib)
* | Add hook called when every new processor is brought online -- including thenwhitehorn2013-09-094-0/+22
| | | | | | | | | | | | | | BSP -- so that platform modules have a chance to add the new CPU to any internal bookkeeping. Approved by: re (kib)
* | Use a spin lock instead of a mutex to gate RTAS. This is required if RTASnwhitehorn2013-09-091-3/+3
| | | | | | | | | | | | calls are involved in interrupt handling. Approved by: re (kib)
* | Use the canonical bits for wired, etc. in the PTE. This is important fornwhitehorn2013-09-091-2/+3
| | | | | | | | | | | | | | interactions with certain kinds of hypervisors that look into the PTEs more closely than they should. Approved by: re (kib)
* | Remove unneeded mappings from libmap32.conf. Move it up one level anddes2013-09-092-4/+2
| | | | | | | | | | | | | | install it on powerpc64 in addition to amd64. Reviewed by: kib Approved by: re (blanket)
* | In r243868, the error message buffer errmsg have been changed fromdelphij2013-09-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | an on-stack array to a pointer and therefore sizeof(errmsg) would become 4 or 8 bytes depending on the architecture. Fix this by using ERRMSGL in place of sizeof(). Submitted by: J David <j.david.lists@gmail.com> MFC after: 3 days Approved by: re (kib)
* | Rework the tx credit mechanism between the cxgbe/tom drivernp2013-09-093-45/+85
| | | | | | | | | | | | | | and the card. This helps smooth out some burstiness in the exchange. Approved by: re (glebius)
* | Fix a miscalculation that caused cxgbe/tom to auto-incrementnp2013-09-091-1/+1
| | | | | | | | | | | | a TOE socket's tx buffer size too aggressively. Approved by: re (delphij)
* | Prior to r254304, we only began scanning the active page queue when thealc2013-09-081-74/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | amount of free memory was close to the point at which we would begin reclaiming pages. Now, we continuously scan the active page queue, regardless of the amount of free memory. Consequently, we are continuously calling pmap_ts_referenced() on active pages. Prior to this change, pmap_ts_referenced() would always demote superpage mappings in order to obtain finer-grained reference information. This made sense because we were coming under memory pressure and would soon have to begin reclaiming pages. Now, however, with continuous scanning of the active page queue, these demotions are taking a toll on performance. For example, on one of my test machines, the running time for the HPCC Random Access benchmark (also known as GUPS) has increased by 54%. To address this problem, I have replaced the demotion with a heuristic for periodically clearing the reference flag on superpage mappings. Reviewed by: kib Approved by: re (glebius) Sponsored by: EMC / Isilon Storage Division
* | Hook host(1) up to the build in the LDNS case.des2013-09-081-0/+4
| | | | | | | | Approved by: re (blanket)
* | Import Magerya Vitaly's ldns-host, and build it instead of the BIND versiondes2013-09-084-0/+1179
|\ \ | | | | | | | | | | | | | | | in the WITH_LDNS_UTILS case. Approved by: re (blanket)
| * | Import an LDNS-based implementation of host(1).des2013-08-263-0/+1150
| /
* | LDNS needs OpenSSL. This wasn't a problem as long as it was only builddes2013-09-081-0/+3
| | | | | | | | | | | | statically, since any program using it would have to link with it anyway. Approved by: re (blanket)
* | Use correct type for the vmx vlan filter tablebryanv2013-09-081-1/+1
| | | | | | | | Approved by: re (glebius, gjb)
* | Relese the interface in the last.trociny2013-09-081-1/+1
| | | | | | | | | | Reviewed by: glebius Approved by: re (kib)
* | Drain for the xbusy state for two places which potentially dokib2013-09-082-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | pmap_remove_all(). Not doing the drain allows the pmap_enter() to proceed in parallel, making the pmap_remove_all() effects void. The race results in an invalidated page mapped wired by usermode. Reported and tested by: pho Reviewed by: alc Sponsored by: The FreeBSD Foundation Approved by: re (glebius)
* | MFV (r255387): undo autoprop damagedes2013-09-081-1/+1
| | | | | | | | Approved by: re (glebius)
* | Fix verbose output line; needs <NL>markm2013-09-081-1/+1
| | | | | | | | | | Submitted by: Sean Bruno <sean_bruno@yahoo.com> Approved by: re (glebius)
* | Make libldns and libssh private.des2013-09-0816-3/+19
| | | | | | | | Approved by: re (blanket)
* | Add a stock libmap32.conf for amd64. The first two lines have no effectdes2013-09-082-0/+8
| | | | | | | | | | | | | | | | | | | | | | except to document the hardcoded standard library search path for 32-bit binaries. The third line performs the equivalent substitution for the private library directory. Ironically, these entries rely on functionality which is only available in the COMPAT_32BIT version of rtld-elf. Approved by: re (blanket)
* | Create a private library directory (LIBPRIVATEDIR) for libraries whichdes2013-09-085-20/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | we don't want to expose but which can't or shouldn't be static. To mark a library as private, define PRIVATELIB in its Makefile. It will be installed in LIBPRIVATEDIR, which is normally /usr/lib/private (or /usr/lib32/private for 32-bit libraries on 64-bit platforms). To indicate that a program or library depends on a private library, define USEPRIVATELIB in its Makefile. The correct version of LIBPRIVATEDIR will be added to its run-time library search path. Approved by: re (blanket)
* | Fix the build; Certain linkable symbols need to always be present.markm2013-09-076-19/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | Pass the pointy hat please. Also unblock the software (Yarrow) generator for now. This will be reverted; Yarrow needs to block until secure, not this behaviour of serving as soon as asked. Folks with specific requiremnts will be able to (can!) unblock this device with any write, and are encouraged to do so in /etc/rc.d/* scripting. ("Any" in this case could be "echo '' > /dev/random" as root).
* | Fix error in r252115: space for the softc needs to be allocated. Thisnwhitehorn2013-09-071-1/+1
| | | | | | | | seemed to be working by chance on most systems.
* | Tweak wording.des2013-09-071-8/+9
| |
* | Update to OpenPAM Nummularia.des2013-09-07215-14856/+17950
|\ \
OpenPOWER on IntegriCloud