summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Start splitting ip_fw2.c and ip_fw.h into smaller components.luigi2009-12-1512-1531/+1857
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | At this time we pull out from ip_fw2.c the logging functions, and support for dynamic rules, and move kernel-only stuff into netinet/ipfw/ip_fw_private.h No ABI change involved in this commit, unless I made some mistake. ip_fw.h has changed, though not in the userland-visible part. Files touched by this commit: conf/files now references the two new source files netinet/ip_fw.h remove kernel-only definitions gone into netinet/ipfw/ip_fw_private.h. netinet/ipfw/ip_fw_private.h new file with kernel-specific ipfw definitions netinet/ipfw/ip_fw_log.c ipfw_log and related functions netinet/ipfw/ip_fw_dynamic.c code related to dynamic rules netinet/ipfw/ip_fw2.c removed the pieces that goes in the new files netinet/ipfw/ip_fw_nat.c minor rearrangement to remove LOOKUP_NAT from the main headers. This require a new function pointer. A bunch of other kernel files that included netinet/ip_fw.h now require netinet/ipfw/ip_fw_private.h as well. Not 100% sure i caught all of them. MFC after: 1 month
* ntpd 4.2.4p8 is now in the tree, ntptrace is dead RIP.roberto2009-12-152-10/+1
| | | | Security: CVE-2009-3563
* Merge 4.2.4p8 into contrib (r200452 & r200454).roberto2009-12-1590-66096/+28506
|\ | | | | | | | | | | | | Subversion is being difficult here so take a hammer and get it in. MFC after: 2 weeks Security: CVE-2009-3563
| * ntptrace is being phased out completely.roberto2009-12-120-0/+0
| |
| * Update ntp vendor code to 4.2.4p8.roberto2009-12-12195-89773/+28529
| | | | | | | | | | | | | | This is mainly to fix CVE-2009-3563, a remote DOS. MFC after: 3 days Security: CVE-2009-3563
| * Prevent a buffer overflow in ntpq. Patch taken from the PR databaseroberto2009-04-191-2/+2
| | | | | | | | | | | | | | | | | | | | | | after being committed to the official ntp tree and present in 4.2.4p7-rc2. It will be MFH to the upcoming 7.2 pending re approval. Obtained from: https://support.ntp.org/bugs/show_bug.cgi?id=1144 MFC after: 3 days Security: http://www.securityfocus.com/bid/34481 CVE-2009-0159
| * Re-apply patch from bin/92839 to avoid two possible buffer overflows. For anroberto2008-09-072-2/+5
| | | | | | | | | | | | | | unknown reason, this seems to have never been applied to vendor sources. PR: bin/92839 Submitted by: Helge Oldach <freebsdntpd@oldach.net>
| * Update instructions with svn usage.roberto2008-08-181-6/+11
| |
| * Move FREEBSD-upgrade as well.roberto2008-08-181-0/+45
| |
| * Move FREEBSD-Xlist in a more proper location.roberto2008-08-181-0/+3
| |
* | Merge libkqueue test suite through r119rwatson2009-12-153-15/+18
| | | | | | | | Submitted by: Mark Heily <mark@heily.com>
* | Add missing #include <sys/ktr.h>.bms2009-12-151-0/+1
| | | | | | | | | | Submitted by: Hideki Yamamoto MFC after: 1 week
* | implement a new match option,luigi2009-12-154-0/+91
| | | | | | | | | | | | | | | | | | | | | | | | | | | | lookup {dst-ip|src-ip|dst-port|src-port|uid|jail} N which searches the specified field in table N and sets tablearg accordingly. With dst-ip or src-ip the option replicates two existing options. When used with other arguments, the option can be useful to quickly dispatch traffic based on other fields. Work supported by the Onelab project. MFC after: 1 week
* | fix the indentation for addr: valuesluigi2009-12-151-0/+2
| | | | | | | | MFC after: 3 days
* | The named process needs to have a "working directory" that it candougb2009-12-152-95/+97
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | write to. This is specified in "options { directory }" in named.conf. So, create /etc/namedb/working with appropriate permissions, and update the entry in named.conf to match. In addition to specifying the working directory, file and path names in named.conf can be specified relative to the directory listed. However, since that directory is now different from /etc/namedb (where the configuration, zone, rndc.*, and other files are located) further update named.conf to specify all file names with fully qualified paths. Also update the comment about file and path names so users know this should be done for all file/path names in the file. This change will eliminate the 'working directory is not writable' messages at boot time without sacrificing security. It will also allow for features in newer versions of BIND (9.7+) to work as designed.
* | Tell upper layer vge(4) supports long frames. This should be doneyongari2009-12-141-1/+3
| | | | | | | | | | | | | | after ether_ifattach(), as ether_ifattach() initializes it with ETHER_HDR_LEN. While I'm here remove setting if_mtu, it's already handled in ether_ifattach().
* | Add apple-boot and apple-ufs.rpaulo2009-12-141-0/+2
| | | | | | | | Submitted by: nwhitehorn
* | Don't report current link status if interface is not UP.yongari2009-12-141-0/+4
| | | | | | | | | | If interface is not UP, the current link status wouldn't reflect the negotiated status.
* | Remove _FDE quirk handling as these quirks are automatically repairedjkim2009-12-141-57/+4
| | | | | | | | by ACPICA layer since ACPICA 20091214.
* | Merge ACPICA 20091214.jkim2009-12-1431-330/+859
| |
* | Report media change result to caller instead of returning successyongari2009-12-141-2/+3
| | | | | | | | without regard to the result.
* | Whenever link state change interrupt is raised, vge_tick() isyongari2009-12-141-4/+4
| | | | | | | | | | | | | | | | | | | | called and vge(4) used to drive auto-negotiation timer(mii_tick) in vge_tick(). Therefore the mii_tick was not called for every hz such that auto-negotiation complete was never handled in vge(4). Use mii_pollstat to extract current negotiated speed/duplex instead of mii_tick. The latter is valid only for auto-negotiation case. While I'm here change the confusing function name vge_tick() to vge_link_statchg().
* | Sort function prototyes.yongari2009-12-141-48/+44
| |
* | We don't have to reload EEPROM in vge_reset(). Because vge_reset()yongari2009-12-141-17/+17
| | | | | | | | | | | | is called in vge_init_lock(), vge(4) always used to reload EEPROM. Also add more comment why vge(4) clears VGE_CHIPCFG0_PACPI bit. While I'm here add missing new line in vge_reset().
* | Set ATA_CHECKS_CABLE when appropriate.marius2009-12-141-1/+17
| | | | | | | | | | Reviewed by: mav MFC after: 1 week
* | Increase output queue size from 64 to 255.yongari2009-12-142-4/+2
| |
* | Improve the markupdougb2009-12-141-2/+5
| | | | | | | | Submitted by: ru
* | Add MSI support for VT613x controllers.yongari2009-12-142-5/+25
| |
* | Save PHY address by reading VGE_MIICFG register. For PCIeyongari2009-12-142-4/+22
| | | | | | | | | | | | | | | | controllers(VT613x), we assume the PHY address is 1. Use the saved PHY address in MII register access routines and remove accessing VGE_MIICFG register. While I'm here save PCI express capability register which will be used in near future.
* | Add Microsoft and NetBSD partition types handling.rpaulo2009-12-143-0/+41
| |
* | Introduce vge_flags member in softc. The vge_flags member willyongari2009-12-142-7/+7
| | | | | | | | | | | | record device specific bits. Remove vge_link and use vge_flags. While here, move clearing link state before mii_mediachg() as mii_mediachg() may affect link state.
* | Move the scan for max_keylen into route.c::route_init(),luigi2009-12-143-26/+11
| | | | | | | | | | | | | | and make max_keylen an argument for rn_init(). This removes an unnecessary dependency on domain.h from radix.c MFC after: 7 days
* | style(9).yongari2009-12-141-105/+105
| |
* | Add more Apple partition types.rpaulo2009-12-141-0/+6
| |
* | Simplify partition type parsing by using a data-oriented model.rpaulo2009-12-143-63/+68
| | | | | | | | While there add more Apple and Linux partition types.
* | s/u_intXX_t/uintXX_t/gyongari2009-12-142-10/+10
| |
* | Remove unnecessary return statement.yongari2009-12-141-22/+0
| |
* | Use ANSI function definations.yongari2009-12-141-95/+38
| |
* | Don't panic on failure to attach if we fail before or during thegavin2009-12-141-4/+5
| | | | | | | | | | | | | | | | | | | | | | if_alloc() of ifp. This fixes the panic reported in the PR, but not the attach failure. PR: kern/139079 Tested by: Steven Noonan <steven uplinklabs.net> Reviewed by: thompsa Approved by: ed (mentor) MFC after: 2 weeks`
* | Clear VGE_TXDESC_Q bit for transmitted frames. The VGE_TXDESC_Q bityongari2009-12-141-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | seems to work like a tag that indicates 'not list end' of queued frames. Without having a VGE_TXDESC_Q bit indicates 'list end'. So the last frame of multiple queued frames has no VGE_TXDESC_Q bit. The hardware has peculiar behavior for VGE_TXDESC_Q bit handling. If the VGE_TXDESC_Q bit of descriptor was set the controller would fetch next descriptor. However if next descriptor's OWN bit was cleared but VGE_TXDESC_Q was set, it could confuse controller. Clearing VGE_TXDESC_Q bit for transmitted frames ensure correct behavior.
* | Add old read_mac_addr routine to this module sincejfv2009-12-141-0/+42
| | | | | | | | a customer report of an Invalid MAC Address has occurred.
* | Fix typo in register definition.yongari2009-12-141-4/+4
| |
* | Use PCIR_BAR instead of hard-coded value.yongari2009-12-141-5/+2
| |
* | Overhaul bus_dma(9) usage and fix various things.yongari2009-12-143-697/+845
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | o Separate TX/RX buffer DMA tag from TX/RX descriptor ring DMA tag. o Separate RX buffer DMA tag from common buffer DMA tag. RX DMA tag has different restriction compared to TX DMA tag. o Add 40bit DMA address support. o Adjust TX/RX descriptor ring alignment to 64 bytes from 256 bytes as documented in datasheet. o Added check to ensure TX/RX ring reside within a 4GB boundary. Since TX/RX ring shares the same high address register they should have the same high address. o TX/RX side bus_dmamap_load_mbuf_sg(9) support. o Add lock assertion to vge_setmulti(). o Add RX spare DMA map to recover from DMA map load failure. o Add optimized RX buffer handler, vge_discard_rxbuf which is activated when vge(4) sees bad frames. o Don't blindly update VGE_RXDESC_RESIDUECNT register. Datasheet says the register should be updated only when number of available RX descriptors are multiple of 4. o Use __NO_STRICT_ALIGNMENT instead of defining VGE_FIXUP_RX which is only set for i386 architecture. Previously vge(4) also performed expensive copy operation to align IP header on amd64. This change should give RX performance boost on amd64 architecture. o Don't reinitialize controller if driver is already running. This should reduce number of link state flipping. o Since vge(4) drops a driver lock before passing received frame to upper layer, make sure vge(4) is still running after re-acquiring driver lock. o Add second argument count to vge_rxeof(). The argument will limit number of packets could be processed in RX handler. o Rearrange vge_rxeof() not to allocate RX buffer if received frame was bad packet. o Removed if_printf that prints DMA map failure. This type of message shouldn't be used in fast path of driver. o Reduce number of allowed TX buffer fragments to 6 from 7. A TX descriptor allows 7 fragments of a frame. However the CMZ field of descriptor has just 3bits and the controller wants to see fragment + 1 in the field. So if we have 7 fragments the field value would be 0 which seems to cause unexpected results under certain conditions. This change should fix occasional TX hang observed on vge(4). o Simplify vge_stat_locked() and add number of available TX descriptor check. o vge(4) controllers lack padding short frames. Make sure to fill zero for the padded bytes. This closes unintended information disclosure. o Don't set VGE_TDCTL_JUMBO flag. Datasheet is not clear whether this bit should be set by driver or write-back status bit after transmission. At least vendor's driver does not set this bit so remove it. Without this bit vge(4) still can send jumbo frames. o Don't start driver when vge(4) know there are not enough RX buffers. o Remove volatile keyword in RX descriptor structure. This should be handled by bus_dma(9). o Collapse two 16bits member of TX/RX descriptor into single 32bits member. o Reduce number of RX descriptors to 252 from 256. The VGE_RXDESCNUM is 16bits register but only lower 8bits are valid. So the maximum number of RX descriptors would be 255. However the number of should be multiple of 4 as controller wants to update 4 RX descriptors at a time. This limits the maximum number of RX descriptor to be 252. Tested by: Dewayne Geraghty (dewayne.geraghty <> heuristicsystems dot com dot au) Carey Jones (m.carey.jones <> gmail dot com) Yoshiaki Kasahara (kasahara <> nc dor kyushu-u dot ac dotjp)
* | Pass all IEs to net80211.rpaulo2009-12-141-18/+5
| | | | | | | | | | | | PR: 141376 Submitted by: Paul <onemda at gmail.com> MFC after: 1 week
* | Remove the MTX_SPIN flag to the shared code MUTEXjfv2009-12-141-2/+1
| | | | | | | | | | as it was causing a panic, also took the opportunity to rename the lock for clarity.
* | Prefer bus_alloc_resource_any(9) to bus_alloc_resource(9).yongari2009-12-141-4/+4
| |
* | Fix spelling in comment.yongari2009-12-141-3/+3
| |
* | Prefer device_printf(9) to printf(9).yongari2009-12-141-5/+4
| |
* | Remove register keyword.yongari2009-12-141-3/+3
| |
OpenPOWER on IntegriCloud