summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * Document r294286, less v481gjb2016-03-141-0/+3
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r294445, loader.efi terminal emulation support.gjb2016-03-141-0/+4
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r294446, Beastie menu now available with UEFI.gjb2016-03-141-1/+3
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r294680, netwait update for late-attaching NICs.gjb2016-03-141-1/+4
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r295367, OpenSSH 7.1p2.gjb2016-03-141-0/+3
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r295264, bsdinstall(8) supports installing ZFS on EFIgjb2016-03-141-1/+4
| | | | | | | | | | | | | | systems. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r294999, initial EFI ZFS boot support.gjb2016-03-141-0/+5
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r295475, UEFI support for ZFS boot environments.gjb2016-03-141-1/+5
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r295524, ixgbe(4) update to version 3.1.13-k.gjb2016-03-141-1/+3
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r295691, 'insecure-lan-zones' option in unbound(8) enabledgjb2016-03-141-0/+5
| | | | | | | | | | | | | | in preference of listing AS112 zones separately. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r295690, unbound-control-setup removal.gjb2016-03-141-0/+4
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
| * Document r296317, OpenSSL update to 1.0.1s.gjb2016-03-141-0/+3
| | | | | | | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-114-16/+45
|\ \ | |/
| * Update releng/10.3 to RC2 in preparation for 10.3-RC2 builds.marius2016-03-111-1/+1
| | | | | | | | Approved by: re (implicit)
| * MFS r296629:smh2016-03-102-14/+43
| | | | | | | | | | | | | | | | ZFS send fails to transmit some holes PR: 207714 Approved by: re (gjb) Sponsored by: Multiplay
| * Switch the pkg(8) repository to use the 10.3 release package set formarius2016-03-101-1/+1
| | | | | | | | | | | | | | | | | | consistent DVD image creation. This is a direct commit to releng/10.3. Submitted by: gjb Approved by: re (implicit)
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-092-1/+31
|\ \ | |/
| * MFC r296419 (by kib):dim2016-03-072-1/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the link_elf_obj.c, handle sections of type SHT_AMD64_UNWIND same as SHT_PROGBITS. This is needed after the clang 3.8 import, which generates that type for .eh_frame section, which had SHT_PROGBITS type before. Reported by: Nikolai Lifanov <lifanov@mail.lifanov.com> PR: 207729 Tested by: dim (previous version) Sponsored by: The FreeBSD Foundation MFC r296428: Since kernel modules can now contain sections of type SHT_AMD64_UNWIND, the boot loader should not skip over these anymore while loading images. Otherwise the kernel can still panic when it doesn't find the .eh_frame section belonging to the .rela.eh_frame section. Unfortunately this will require installing boot loaders from sys/boot before attempting to boot with a new kernel. Reviewed by: kib Approved by: re (marius)
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-074-7/+11
|\ \ | |/
| * Merge 296424 from stable/10 - contains the following changes to -current:dwmalone2016-03-064-7/+11
| | | | | | | | | | | | | | | | | | r295924: Make sure that hash-based db files fsync befor closing/syncing. r295925: We no longer need O_SYNC pwd_mkd r295465: We no longer need O_SYNC on services_mkdb r295800: We no longer need O_SYNC on cap_mkdb Approved by: re (marius)
* | Revert "Import patch from https://reviews.freebsd.org/D5186"Renato Botelho2016-03-074-11/+7
| | | | | | | | This reverts commit 3882f7f0612f5660c6287cfa1ba025f2843a1957.
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-0410-40/+4
|\ \ | |/
| * - Copy stable/10@296371 to releng/10.3 in preparation for 10.3-RC1marius2016-03-044-4/+4
| | | | | | | | | | | | | | | | | | builds. - Update newvers.sh to reflect RC1. - Update __FreeBSD_version to reflect 10.3. - Update default pkg(8) configuration to use the quarterly branch. Approved by: re (implicit)
| * Re-enable SSLv2 support to restore ABI.jkim2016-03-046-36/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Excerpt from CHANGES: Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via the version-flexible SSLv23_method() will need to explicitly call either of: SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2); or SSL_clear_options(ssl, SSL_OP_NO_SSLv2); as appropriate. Even if either of those is used, or the application explicitly uses the version-specific SSLv2_method() or its client and server variants, SSLv2 ciphers vulnerable to exhaustive search key recovery have been removed. Specifically, the SSLv2 40-bit EXPORT ciphers, and SSLv2 56-bit DES are no longer available. Approved by: re (marius, gjb), so (delphij)
| * MFC 285730gnn2016-03-031-1/+1
| | | | | | | | | | | | | | | | Only report the lack of ALTQ support if pfctl is using verbose (-v) mode. PR: 194935 Submitted by: Jim Thompson Approved by: re (gjb)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-03-031-2/+3
|\ \ | |/
| * MFC: r296025:kp2016-03-031-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pf: Fix possible out-of-bounds write In the DIOCRSETADDRS ioctl() handler we allocate a table for struct pfr_addrs, which is processed in pfr_set_addrs(). At the users request we also provide feedback on the deleted addresses, by storing them after the new list ('bcopy(&ad, addr + size + i, sizeof(ad));' in pfr_set_addrs()). This means we write outside the bounds of the buffer we've just allocated. We need to look at pfrio_size2 instead (i.e. the size the user reserved for our feedback). That'd allow a malicious user to specify a smaller pfrio_size2 than pfrio_size though, in which case we'd still read outside of the allocated buffer. Instead we allocate the largest of the two values. Reported By: Paul J Murphy <paul@inetstat.net> PR: 207463 Approved by: re (marius)
* | Import review D5409Renato Botelho2016-03-022-5/+14
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-03-02396-1141/+2335
|\ \ | |/
| * Merge OpenSSL 1.0.1s. This is a security update.delphij2016-03-02389-1121/+2322
| | | | | | | | | | Relnotes: yes Approved by: re (so@ implicit)
| * MFC r295969:ae2016-03-022-2/+2
| | | | | | | | | | | | | | | | Fix bug in filling and handling ipfw's O_DSCP opcode. Due to integer overflow CS4 token was handled as BE. PR: 207459 Approved by: re (gjb)
| * MFC r295995:bdrewery2016-03-021-11/+1
| | | | | | | | | | | | | | BDECFLAGS has not been available since r82604 removed /etc/defaults/make.conf. Approved by: re (gjb)
| * MFC [Hyper-V]: r296028sephe2016-03-013-6/+9
| | | | | | | | | | | | | | | | | | | | | | | | hyperv: Wait 5 seconds for hyperv result, instead of 500ms This addresses various devices (network, stoarge) attach failure. Approved by: re (gjb) Reported by: Hongxiong Xian <v-hoxian microsoft com> Tested by: Hongxiong Xian <v-hoxian microsoft com> Sponsored by: Microsoft OSTC Differential Revision: https://reviews.freebsd.org/D5435
| * MFC r295944:jimharris2016-02-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | nvme: fix intx handler to not dereference ioq during initialization This was a regression from r293328, which deferred allocation of the controller's ioq array until after interrupts are enabled during boot. Approved by: re (gjb) Sponsored by: Intel
* | Enable syscons, used by installer. It should fix #4387Renato Botelho2016-03-021-1/+0
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-2852-149501/+149720
|\ \ | |/
| * Update stable/10 to BETA3 in preparation for 10.3-BETA3 builds.marius2016-02-261-1/+1
| | | | | | | | Approved by: re (implicit)
| * MFC: r295906marius2016-02-265-6/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix and clean up usage of DMA and TSO segments: - At Intel it is believed that most of their products support "only" 40 DMA segments so lower {EM,IGB}_MAX_SCATTER accordingly. Actually, 40 is more than plenty to handle full size TSO packets so it doesn't make sense to further distinguish between MAC variants that really can do 64 DMA segments. Moreover, capping at 40 DMA segments limits the stack usage of {em,igb}_xmit() that - given the rare use of more than these - previously hardly was justifiable, while still being sufficient to avoid the problems seen with em(4) and EM_MAX_SCATTER set to 32. - In igb(4), pass the actually supported TSO parameters up the stack. Previously, the defaults set in if_attach_internal() were applied, i. e. a maximum of 35 TSO segments, which made supporting more than these in the driver pointless. However, this might explain why no problems were seen with IGB_MAX_SCATTER at 64. - In em(4), take the 5 m_pullup(9) invocations performed by em_xmit() in the TSO case into account when reporting TSO parameters upwards. In the worst case, each of these calls will add another mbuf and, thus, the requirement for an additional DMA segment. So for best performance, it doesn't make sense to advertize a maximum of TSO segments that typically will require defragmentation in em_xmit(). Again, this leaves enough room to handle full size TSO packets. - Drop TSO macros from if_lem.h given that corresponding MACS don't support TSO in the first place. Reviewed by: erj, sbruno, jeffrey.e.pieper_intel.com Approved by: re (gjb)
| * MFC r295830davidcs2016-02-254-1064/+110
| | | | | | | | | | | | Remove dead code. Code Cleanup. Improve clarity in debug messages Approved by:re (marius)
| * MFC r295823davidcs2016-02-252-42/+56
| | | | | | | | | | | | | | | | | | | | Modified the use of bxe_grc_dump() function so that it can be invoked directly at any potential error path, where a fwdump is needed. The fwdump (a.k.a grcdump) is stored in a driver buffer. The sysctl grcdump_done indicates if a fwdump was taken and waiting to be retrieved. The sysctl trigger_grcdump can be used to manually trigger a fwdump. Approved by:re (marius)
| * MFC r294854davidcs2016-02-252-147795/+147789
| | | | | | | | | | | | | | Upgrade FW to 5.4.56 Update driver version to 3.10.26 Approved by:re (marius)
| * MFC r295273:tuexen2016-02-251-7/+11
| | | | | | | | | | | | | | | | | | | | In FreeBSD 10 and higher the driver announces SCTP checksum offloading support also for 82598, which doesn't support it. The legacy code has a check for it, which was missed when the code for dealing with CSUM_IP6_* was added. Add the same check for FreeBSD 10 and higher. Approved by: re (marius) Differential Revision: D5192
| * MFC r295323:erj2016-02-2524-333/+1457
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update em(4) to 7.6.1; update igb(4) to 2.5.3. Major changes: - Add i219/i219(2) hardware support. (Found on Skylake generation and newer chipsets.) - Further to the last Skylake support diff, this one also includes support for the Lewisburg chipset (i219(3)). - Add a workaround to an igb hardware errata. All 1G server products need to have IPv6 extension header parsing turned off. This should be listed in the specification updates for current 1G server products, e.g. for i350 it's errata #37 in this document: http://www.intel.com/content/dam/www/public/us/en/documents/specification-updates/ethernet-controller-i350-spec-update.pdf - Avoton (i354) PHY errata workaround added And a bunch of minor fixes, as well as #defines for things that the current em(4)/igb(4) drivers don't implement. MFC r287465: igb(4): Update and fix HW errata - HW errata workaround for IPv6 offload w/ extension headers - Edited start of if_igb.c (Device IDs / #includes) to match ixgbe/ixl Approved by: re (gjb) Sponsored by: Intel Corporation
| * MFC r295549:tuexen2016-02-2511-106/+161
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Loopback addresses are 127.0.0.0/8, not 127.0.0.1/32. MFC r295668: Improve the teardown of the SCTP stack. MFC r295670: Whitespace changes. MFC r295708: Address a warning reported by D5245 / PVS. MFC r295709: Code cleanup which will silence a warning in PVS / D5245. MFC r295710: Add protection code for issues reported by PVS / D5245. MFC r295771: Fix reporting of mapped addressed in getpeername() and getsockname() for IPv6 SCTP sockets. This bugs were found because of an issue reported by PVS / D5245. MFC r295772: Add some protection code. MFC r295773: Add protection code. MFC r295805: Use the SCTP level pointer, not the interface level. MFC r295929: Don't leak an address in an error path. Approved by: re (marius)
| * MFH 295796 (based on)araujo2016-02-251-2/+3
| | | | | | | | | | | | | | | | | | | | | | Fix regression introduced on 272446r. lagg(4) supports the protocol none, where it disables any traffic without disabling the lagg(4) interface itself. PR: 206478 Submitted by: Erin Clark <erin.clark.ix@gmail.com> Reviewed by: rpokala, bapt Approved by: re (glebius) Differential Revision: https://reviews.freebsd.org/D5188
| * MFC r294933,r294949,r294952,r294953,r294957,r294965,r294967,r294968,r295017,bdrewery2016-02-244-144/+106
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r295026,r295027,r295029,r295030,r295649: r294933: Drop any previous fd when setting a new one. r294949: filemon_ioctl: Handle error from devfs_get_cdevpriv(9). r294952: filemon_ioctl: Lock the associated filemon handle before writing to it. r294953: filemon_comment has nothing to do with wrappers so move it out of filemon_wrapper.c. r294957: filemon_dtr: Lock the associated filemon handle before writing to it. r294965: filemon: Use process_exit EVENTHANDLER to capture process exit. r294967: filemon: Trace fork via process_fork event. r294968: Follow-up r294967: Mark flags unused. r295017: filemon: Use process_exec EVENTHANDLER to capture sys_execve. r295026: filemon_open: Don't record a process to trace here. r295027: filemon: Track the process pointer rather than a pid. r295029: Document the purpose and non-purpose of filemon(4). r295030: Note the double fork behavior with filemon. r295649: filemon: Fix panic when fork1() is called from kproc_create(). Approved by: re (marius)
| * MFC 295636,295637:jhb2016-02-242-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix issues with tracing Linux/i386 binaries. 295636: Sign extend the error value for failing Linux/i386 system calls. This restores the mapping of Linux errors to native FreeBSD errno values after the refactoring in r288424. 295637: Correct the ABI name for Linux/i386 binaries under FreeBSD/i386. This allows truss to work for these binaries again after r288424. Approved by: re (marius)
| * MFC r295717:kib2016-02-241-0/+9
| | | | | | | | | | | | | | | | After nullfs rmdir operation, reclaim the directory vnode which was unlinked. Otherwise the vnode stays cached, causing leak. This is similar to r292961 for regular files. Approved by: re (marius)
* | Remove ixgbe from wrap kernelsRenato Botelho2016-02-262-2/+0
| |
* | The ixgbe is now built as an amd64 module. Remove the driver from kernel.Luiz Otavio O Souza2016-02-261-1/+0
| |
OpenPOWER on IntegriCloud