summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* It was reported that when using nss_ldap, getgrent(3) would behavenectar2004-01-092-10/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | incorrectly when encountering `large' groups (many members and/or many long member names). The reporter tracked this down to the glibc NSS module compatibility code (nss_compat.c): it would prematurely record that a NSS module was finished iterating through its database in some cases. Two aspects are corrected: 1. nss_compat.c recorded that a NSS module was finished iterating whenever the module reported something other than SUCCESS. The correct logic is to continue iteration when the module reports either SUCCESS or RETURN. The __nss_compat_getgrent_r and __nss_compat_getpwent_r routines are updated to reflect this. 2. An internal helper macro __nss_compat_result is used to map glibc NSS status codes to BSD NSS status codes (e.g. NSS_STATUS_SUCCESS -> NS_SUCCESS). It provided the obvious mapping. When a NSS routine is called with a too-small buffer, the convention in the BSD NSS code is to report RETURN. (This is used to implement reentrant APIs such as getpwnam_r(3).) However, the convention in glibc for this case is to set errno = ERANGE and overload TRYAGAIN. __nss_compat_result is updated to handle this case. PR: bin/60287 Reported by: Lachlan O'Dea <odela01@ca.com>
* This commit was generated by cvs2svn to compensate for changes in r124287,des2004-01-091-1/+1
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Don't output the terminating '\0' (already fixed in OpenSSH CVS)des2004-01-091-1/+1
| |
| * Remove obsolete files on the vendor branch.des2004-01-0838-2023/+0
| |
* | Fix a warning when NATM is not defined. In this case s is not used.harti2004-01-091-0/+2
| |
* | Egg on my face: UsePAM was off by default.des2004-01-091-1/+1
| | | | | | | | Pointed out by: Sean McNeil <sean@mcneil.com>
* | The private data section of ndis_packets has a 'packet flags' bytewpaul2004-01-094-4/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | which has two important flags in it: the 'allocated by NDIS' flag and the 'media specific info present' flag. There are two Windows macros for getting/setting media specific info fields within the ndis_packet structure which can behave improperly if these flags are not initialized correctly when a packet is allocated. It seems the correct thing to do is always set the NDIS_PACKET_ALLOCATED_BY_NDIS flag on all newly allocated packets. This fixes the crashes with the Intel Centrino wireless driver. My sample card now seems to work correctly. Also, fix a potential LOR involving ndis_txeof() in if_ndis.c.
* | Sync with Creative's 8010.h rev 1.51.obrien2004-01-092-74/+147
| |
* | Dike out some very Linux-specific parts that we can't compile with.obrien2004-01-091-0/+8
| | | | | | | | Also protect AC97_MUTE which is also defined in our own ac97.h.
* | This commit was generated by cvs2svn to compensate for changes in r124273,obrien2004-01-091-2/+42
|\ \ | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | Vendor import revision 1.9 of ac97_codec.h (we renamed the file) fromobrien2004-01-091-2/+42
| | | | | | | | | | | | http://cvs.sourceforge.net/viewcvs.py/emu10k1/emu10k1/ac97_codec.h
* | | Implement NdisOpenFile()/NdisCloseFile()/NdisMapFile()/NdisUnmapFile().wpaul2004-01-093-10/+125
| | | | | | | | | | | | | | | | | | | | | | | | | | | By default, we search for files in /compat/ndis. This can be changed with a systcl. These routines are used by some drivers which need to download firmware or microcode into their respective devices during initialization. Also, remove extraneous newlines from the 'built-in' sysctl/registry variables.
* | | Add a GraphViz-exporting ngctl(8) "dot" command. You can now creategreen2004-01-095-11/+203
| | | | | | | | | | | | | | | | | | | | | very useful .dot files of your netgraph(4) to quickly visualize the nodes, hooks and edges. An example of this can be found here: http://people.freebsd.org/~green/sample-netgraph-dot.ps If anyone would like to refine the output further, please do so.
* | | Also, don't crash in the netgraph disconnect node if the interface isgreen2004-01-091-1/+2
| | | | | | | | | | | | detached from the other direction.
* | | Don't try to ifpromisc() on an interface that's deleted already.green2004-01-091-4/+4
| | |
* | | Improve the expressiveness of ttyinfo (^T) when dealing with threadsrwatson2004-01-081-7/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | in slightly less usual states: If the thread is on a run queue, display "running" if the thread is actually running, otherwise, "runnable". If the thread is sleeping, and it's on a sleep queue, display the name of the queue, otherwise "unknown" -- previously, in this situation we would display "iowait". If the thread is waiting on a lock, display *lockname. If the thread is suspended, display "suspended" -- previously, in this situation we would display "iowait". If the thread is waiting for an interrupt, display "intrwait" -- previously, in this situation we would display "iowait". If the thread is in a state not handled by the above, display "unknown" -- previously, we would print "iowait". Among other things, this avoids displaying "iowait" when the foreground process turns out to be suspended waiting for a debugger to properly attach.
* | | Drop the sigacts mutex around calls to stopevent() to avoid sleepingrwatson2004-01-081-2/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | holding the mutex. Because the sigacts pointer can't change while the process is "live" (proc locking (x)), we know our pointer is still valid. In communication with: truckman Reviewed by: jhb
* | | Do not emit comments when -n is specified.phk2004-01-081-5/+10
| | |
* | | - Enable recursive acquisition of the mutex synchronizing access to thealc2004-01-082-8/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | free pages queue. This is presently needed by contigmalloc1(). - Move a sanity check against attempted double allocation of two pages to the same vm object offset from vm_page_alloc() to vm_page_insert(). This provides better protection because double allocation could occur through a direct call to vm_page_insert(), such as that by vm_page_rename(). - Modify contigmalloc1() to hold the mutex synchronizing access to the free pages queue while it scans vm_page_array in search of free pages. - Correct a potential leak of pages by contigmalloc1() that I introduced in revision 1.20: We must convert all cache queue pages to free pages before we begin removing free pages from the free queue. Otherwise, if we have to restart the scan because we are unable to acquire the vm object lock that is necessary to convert a cache queue page to a free page, we leak those free pages already removed from the free queue.
* | | Use the saved params for LBA-CHS conversion. Fixes PC98 bug.sos2004-01-081-4/+3
| | |
* | | Some integrated Davicom cards in sparc64 boxes have an all zerosmux2004-01-084-0/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MAC address in the EEPROM, and we need to get it from OpenFirmware. This isn't very pretty but time is lacking to do this in a better way this near 5.2-RELEASE. This is a RELENG_5_2 candidate. Original version by: Marius Strobl <marius@alchemy.franken.de> Tested by: Pete Bentley <pete@sorted.org> Reviewed by: jake
* | | Limiters and sanity checks for TCP MSS (maximum segement size)andre2004-01-088-4/+200
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | resource exhaustion attacks. For network link optimization TCP can adjust its MSS and thus packet size according to the observed path MTU. This is done dynamically based on feedback from the remote host and network components along the packet path. This information can be abused to pretend an extremely low path MTU. The resource exhaustion works in two ways: o during tcp connection setup the advertized local MSS is exchanged between the endpoints. The remote endpoint can set this arbitrarily low (except for a minimum MTU of 64 octets enforced in the BSD code). When the local host is sending data it is forced to send many small IP packets instead of a large one. For example instead of the normal TCP payload size of 1448 it forces TCP payload size of 12 (MTU 64) and thus we have a 120 times increase in workload and packets. On fast links this quickly saturates the local CPU and may also hit pps processing limites of network components along the path. This type of attack is particularly effective for servers where the attacker can download large files (WWW and FTP). We mitigate it by enforcing a minimum MTU settable by sysctl net.inet.tcp.minmss defaulting to 256 octets. o the local host is reveiving data on a TCP connection from the remote host. The local host has no control over the packet size the remote host is sending. The remote host may chose to do what is described in the first attack and send the data in packets with an TCP payload of at least one byte. For each packet the tcp_input() function will be entered, the packet is processed and a sowakeup() is signalled to the connected process. For example an attack with 2 Mbit/s gives 4716 packets per second and the same amount of sowakeup()s to the process (and context switches). This type of attack is particularly effective for servers where the attacker can upload large amounts of data. Normally this is the case with WWW server where large POSTs can be made. We mitigate this by calculating the average MSS payload per second. If it goes below 'net.inet.tcp.minmss' and the pps rate is above 'net.inet.tcp.minmssoverload' defaulting to 1000 this particular TCP connection is resetted and dropped. MITRE CVE: CAN-2004-0002 Reviewed by: sam (mentor) MFC after: 1 day
* | | Add the PCI ID for yet another bge chip: the Altima 1002.wpaul2004-01-082-0/+3
| | | | | | | | | | | | Submitted by: Pavel Gubin <pg@rainbow.ie.tusur.ru>
* | | Add the NDISAPI option.wpaul2004-01-081-0/+1
| | |
* | | Always clean all files, including ones under ACPI_DEBUG when doing anjl2004-01-081-7/+9
| | | | | | | | | | | | "make clean".
* | | MFlibpthread: Add a simple work-around for deadlocking on recursivedeischen2004-01-082-44/+82
| | | | | | | | | | | | readlocks on a rwlock while there are writers waiting.
* | | Add a simple work-around for deadlocking on recursive read locksdeischen2004-01-086-96/+172
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | on a rwlock while there are writers waiting. We normally favor writers but when a reader already has at least one other read lock, we favor the reader. We don't track all the rwlocks owned by a thread, nor all the threads that own a rwlock -- we just keep a count of all the read locks owned by a thread. PR: 24641
* | | * firewiresimokawa2004-01-083-18/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add tcode_str[] and improve debug message. * sbp If max_speed is negative, use the maximum speed which the ohci chip supports. The default max_speed is -1. * if_fwe If tx_speed is negative, use the maximum speed which the ohci chip supports. The default tx_speed is 2.
* | | Cosmetics: rearrange the dependency list to match that of ssh and sshd.ru2004-01-081-2/+5
| | | | | | | | | | | | Reviewed by: des
* | | Fixed static linkage.ru2004-01-082-4/+10
| | | | | | | | | | | | Reviewed by: des
* | | If path mtu discovery is enabled set the DF bit in all cases weandre2004-01-082-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | send packets on a tcp connection. PR: kern/60889 Tested by: Richard Wendland <richard@wendland.org.uk> Approved by: re (scottl)
* | | Do not set the ip_id to zero when DF is set on packet andandre2004-01-081-12/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | restore the general pre-randomid behaviour. Setting the ip_id to zero causes several problems with packet reassembly when a device along the path removes the DF bit for some reason. Other BSD and Linux have found and fixed the same issues. PR: kern/60889 Tested by: Richard Wendland <richard@wendland.org.uk> Approved by: re (scottl)
* | | Correct the definition of the ndis_miniport_interrupt structure:wpaul2004-01-083-10/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the ni_dpccountlock member is an ndis_kspin_lock, not an ndis_spin_lock (the latter is too big). Run if_ndis.c:ndis_tick() via taskqueue_schedule(). Also run ndis_start() via taskqueue in certain circumstances. Using these tweaks, I can now get the Broadcom BCM5701 NDIS driver to load and run. Unfortunately, the version I have seems to suffer from the same bug as the SMC 83820 driver, which is that it creates a spinlock during its DriverEntry() routine. I'm still debating the right way to deal with this.
* | | Use += instead of = with DPADD / LDADD.des2004-01-081-2/+2
| | |
* | | Regenerate config.h; I don't know why this didn't hit CVS yesterday.des2004-01-081-36/+107
| | |
* | | Enable GSSAPI support. [1]des2004-01-083-8/+10
| | | | | | | | | | | | | | | | | | Also remove some duplicates from ssh's SRCS. Submitted by: [1] Björn Grönvall <bg@sics.se>
* | | fixed improper routing-message flagsuz2004-01-081-1/+1
| | | | | | | | | | | | Obtained from: KAME
* | | The transmit frame status is stored in the last transmit descriptor for thetruckman2004-01-084-6/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | frame, not the first. It is probably also not safe to free the mbuf chain as soon as the OWN bit is cleared on the first descriptor since the chip may not be done copying the frame into the transmit FIFO. Revert the part of of busdma conversion (if_dc.c rev 1.115) which changed dc_txeof() to look for the status in the first descriptor and free the mbuf chain when processing the first descriptor for the frame, and revert the matching changes elsewhere in the driver. This part of the busdma change caused the driver to report spurious collisions and output errors, even when running in full-duplex mode. Reverting the mbuf chain handling slightly complicates dc_dma_map_txbuf(), since it is responsible for setting the OWN bits on the descriptors, but does not normally have direct access to the mbuf chain. Tested by: Dejan Lesjak <dejan.lesjak at ijs.si> alpha/<Intel 21143 10/100BaseTX> "Xin LI" <delphij at frontfree.net> i386/<Macronix 98713 10/100BaseTX> Wiktor Niesiobedzki <bsd at w.evip.pl> i386/<3Com OfficeConnect 10/100B> Reviewed by: mux
* | | Remove extraneous unlock. This fixes a panic seen when manipulating staticsam2004-01-071-1/+1
| | | | | | | | | | | | entries in the ARP table.
* | | Correct an instance of an erroneous "it's".ceri2004-01-071-1/+1
| | | | | | | | | | | | | | | | | | PR: docs/59937 Submitted by: Ada Lim <ada@bsd.org> MFC After: 1 day
* | | Comsetic tweaks: use PCPU_GET(cpumask) and CPU_ABSENT().jhb2004-01-071-5/+5
| | | | | | | | | | | | Tested by: Dejan Lesjak <dejan.lesjak@ijs.si>
* | | Correct capitalization.grog2004-01-071-1/+1
| | | | | | | | | | | | Submitted by: ru
* | | Add 'device wlan' to synopsis.wpaul2004-01-071-1/+2
| | |
* | | Netgear WG511T card is a CardBus not a PCI card.blackend2004-01-072-2/+2
| | | | | | | | | | | | | | | PR: docs/61039 Submitted by: Michael Lestinsky <michael@lestinsky.de>
* | | Correct and simplify the implementation of RtlEqualUnicodeString().wpaul2004-01-071-22/+23
| | |
* | | Add a tip on how to print a manual page.blackend2004-01-071-0/+7
| | | | | | | | | | | | | | | PR: docs/61033 Submitted by: mi@
* | | man ftpd says that "by default, anonymous users cannot modify existing files."anholt2004-01-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | However, the code did allow deletion of files. Make deleting require the -m flag, too. PR: bin/60809 Submitted by: Alexander Melkov <melkov@comptek.ru>
* | | It appears drivers may call NdisWriteErrorLogEntry() with lockswpaul2004-01-071-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | held. However, if we need to translate a unicode message table message, ndis_unicode_to_ascii() might malloc() some memory, which causes a warning from witness. Avoid this by using some stack space to hold the translated message. (Also bounds check to make sure we don't overrun the stack buffer.)
* | | When draining the tx queue reclaim any node references held in packets.sam2004-01-071-1/+10
| | | | | | | | | | | | | | | This fixes a problem when operating as an AP where clients would get stuck in the node table because the reference count never went to zero.
* | | When ath_hal_stoptxdma returns an error dma is still likely stoppedsam2004-01-071-1/+1
| | | | | | | | | | | | | | | so don't just stop trying to send a beacon frame or we'll be more likely to lose sync. This only seems to happen on some older chips.
OpenPOWER on IntegriCloud