summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Merge OpenSSL 0.9.8m into head.simon2010-03-13239-19820/+4291
|\ | | | | | | | | | | | | | | | | | | | | This also "reverts" some FreeBSD local changes so we should now be back to using entirely stock OpenSSL. The local changes were simple $FreeBSD$ lines additions, which were required in the CVS days, and the patch for FreeBSD-SA-09:15.ssl which has been superseded with OpenSSL 0.9.8m's RFC5746 'TLS renegotiation extension' support. MFC after: 3 weeks
| * Import OpenSSL 0.9.8m.simon2010-02-28235-19809/+4292
| |
| * Import DTLS fix from upstream OpenSSL 0.9.8 branch:simon2009-08-231-15/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | Fix DTLS fragment bug - out-of-sequence message handling which could result in NULL pointer dereference in dtls1_process_out_of_seq_message(). Note that this will not get FreeBSD Security Advisory as DTLS is experimental in OpenSSL. Security: CVE-2009-1387 Obtained from: OpenSSL CVS http://cvs.openssl.org/chngview?cn=17958
| * Import DTLS fix from upstream OpenSSL 0.9.8 branch:simon2009-08-231-1/+2
| | | | | | | | | | | | | | | | | | | | | | Do not access freed data structure. Note that this will not get FreeBSD Security Advisory as DTLS is experimental in OpenSSL. Security: CVE-2009-1379 Obtained from: OpenSSL CVS http://cvs.openssl.org/chngview?cn=18156
| * Import DTLS fix from upstream OpenSSL 0.9.8 branch:simon2009-08-231-1/+10
| | | | | | | | | | | | | | | | | | | | | | Fix fragment handling memory leak. Note that this will not get FreeBSD Security Advisory as DTLS is experimental in OpenSSL. Security: CVE-2009-1378 Obtained from: OpenSSL CVS http://cvs.openssl.org/filediff?f=openssl/ssl/d1_both.c&v1=1.4.2.13&v2=1.4.2.15
| * Import DTLS fix from upstream OpenSSL 0.9.8 branch:simon2009-08-233-0/+19
| | | | | | | | | | | | | | | | | | | | | | Fix memory consumption bug with "future epoch" DTLS records. Note that this will not get FreeBSD Security Advisory as DTLS is experimental in OpenSSL. Security: CVE-2009-1377 Obtained from: OpenSSL CVS http://cvs.openssl.org/chngview?cn=18187
* | Fix build after typo.rnoland2010-03-131-1/+1
| | | | | | | | | | Reported by: Sergey V. Dyatko <sergey.dyatko@gmail.com> MFC after: 3 days
* | Small style(9) cleanups.ed2010-03-135-10/+13
| |
* | Correct a typo.jkoshy2010-03-131-1/+1
| | | | | | | | Submitted by: Rahul Saxena <rahul dot k dot saxena at gmail dot com>
* | Use an unique directory name instead of hardcoded /tmp/.diskless.jh2010-03-131-2/+2
| | | | | | | | | | | | | | | | | | A malicious user could create a file named /tmp/.diskless and cause the script to misbehave. PR: conf/141258 Reported by: Jon Passki MFC after: 1 week
* | Add support for Intel Pineview chips, aka IGDrnoland2010-03-133-3/+15
| | | | | | | | | | | | | | | | Slightly modified version of the submitted patch. PR: 143427 Submitted by: Mamoru Sumida <msumida@mvc.biglobe.ne.jp> MFC after: 3 days
* | Change the 'amt' parameter in format_k2 from int to unsigned long longbrucec2010-03-131-1/+1
| | | | | | | | | | | | | | | | | | to match the values passed in and prevent the SIZE field being corrupted when more than 2TB is allocated. PR: bin/129706 Approved by: rrs (mentor) MFC after: 1 week
* | Free the memory allocated via strdup.brucec2010-03-131-0/+1
| | | | | | | | | | | | | | PR: bin/113881 Submitted by: Alexander Drozdov dzal_mail mtu-net.ru Approved by: rrs (mentor) MFC after: 1 week
* | Remove COMPAT_43TTY from stock kernel configuration files.ed2010-03-139-9/+0
| | | | | | | | | | | | | | | | COMPAT_43TTY enables the sgtty interface. Even though its exposure has only been removed in FreeBSD 8.0, it wasn't used by anything in the base system in FreeBSD 5.x (possibly even 4.x?). On those releases, if your ports/packages are less than two years old, they will prefer termios over sgtty.
* | o) Use octeon_fpa_alloc_phys in a situation in which we don't need a usablejmallett2010-03-131-81/+86
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pointer, rather than octeon_fpa_alloc. o) Report half duplex status properly. o) Do not unconditionally update the last known link status in the softc. If report_link isn't set, when octeon_rgmx_config_speed is called the first time it will tell the driver (essentially) that we have already marked the interface up. Likewise, don't change media speed and duplex if only the link status is at issue. [1] o) Remove manual changing of link state and let octeon_rgmx_config_speed do the heavy lifting. [1] Reviewed by: [1] imp Sponsored by: Packet Forensics
* | Make this conform to the other top-level Makefile subdir listings withimp2010-03-131-13/+77
| | | | | | | | | | | | one file per line. Suggested by: bde
* | Fix spelling of noreorder.jmallett2010-03-131-1/+1
| |
* | Correct bugs fixed but not merged from my own tree.delphij2010-03-131-2/+3
| | | | | | | | | | Pointy hat to: delphij MFC after: 1 month
* | sh: Add tests for " and $ inside `.jilles2010-03-121-0/+43
| |
* | The proper fix for the delayed SCTP checksum is torrs2010-03-127-10/+8
| | | | | | | | | | | | | | | | | | | | have the delayed function take an argument as to the offset to the SCTP header. This allows it to work for V4 and V6. This of course means changing all callers of the function to either pass the header len, if they have it, or create it (ip_hl << 2 or sizeof(ip6_hdr)). PR: 144529 MFC after: 2 weeks
* | fix type in commentticso2010-03-121-1/+1
| |
* | Add support of Intel Pineview chips, aka IGD.rnoland2010-03-121-4/+20
| | | | | | | | MFC after: 3 days
* | Follow up commit to reindent the code.delphij2010-03-121-13/+13
| | | | | | | | MFC after: 1 month
* | Two optimizations to MI strlen(3) inspired by David S. Miller'sdelphij2010-03-121-12/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | blog posting [1]. - Use word-sized test for unaligned pointer before working the hard way. Memory page boundary is always integral multiple of a word alignment boundary. Therefore, if we can access memory referenced by pointer p, then (p & ~word mask) must be also accessible. - Better utilization of multi-issue processor's ability of concurrency. The previous implementation utilized a formular that must be executed sequentially. However, the ~, & and - operations can actually be caculated at the same time when the operand were different and unrelated. The original Hacker's Delight formular also offered consistent performance regardless whether the input would contain characters with their highest-bit set, as it catches real nul characters only. These two optimizations has shown further improvements over the previous implementation on microbenchmarks on i386 and amd64 CPU including Pentium 4, Core Duo 2 and i7. [1] http://vger.kernel.org/~davem/cgi-bin/blog.cgi/2010/03/08#strlen_1 MFC after: 1 month
* | flowtable_get_hashkey is only used by a DDB function - move under #ifdef DDBkmacy2010-03-121-14/+13
| | | | | | | | pointed out by jkim@
* | Add pci ids for Intel Ironlake chipsets.rnoland2010-03-121-0/+4
| | | | | | | | | | | | | | | | These behave just like g45 for agp. Tested by: Torfinn Ingolfsen MFC after: 3 days
* | Fix a style(9) nit.jkim2010-03-121-2/+1
| |
* | re-update copyright to 2010kmacy2010-03-121-1/+1
| | | | | | | | pointed out by danfe@
* | Tidy up callout for select(2) and read timeout.jkim2010-03-121-3/+6
| | | | | | | | | | | | | | | | | | | | - Add a missing callout_drain(9) before the descriptor deallocation.[1] - Prefer callout_init_mtx(9) over callout_init(9) and let the callout subsystem handle the mutex for callout function. PR: kern/144453 Submitted by: Alexander Sack (asack at niksun dot com)[1] MFC after: 1 week
* | Implement Rx checksum offloading for Yukon EC, Yukon Ultra,yongari2010-03-122-47/+204
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Yukon FE and Yukon Ultra2. These controllers provide very simple checksum computation mechanism and it requires additional pseudo header checksum computation in upper stack. Even though I couldn't see much performance difference with/without Rx checksum offloading it may help notebook based controllers. Actually controller can compute two checksum value by giving different starting position of checksum computation on received frame. However, for long time, Marvell's checksum offloading engine have been known to have several silicon bugs so don't blindly trust computed partial checksum value. Instead, compute partial checksum twice by giving the same checksum computation position and compare the result. If the value is different it's clear indication of hardware bug. This configuration lose IP checksum offloading capability but I think it's better to take safe route. Note, Rx checksum offloading for Yukon XL was still disabled due to known silicon bug.
* | Reorder interrupt handler a bit such that producer/consumeryongari2010-03-121-16/+16
| | | | | | | | | | | | | | | | index of status block is read first before acknowledging the interrupts. Otherwise bge(4) may get stale status block as acknowledging an interrupt may yield another status block update. Reviewed by: marius
* | Update to upstream version 2.3fanf2010-03-123-41/+91
| | | | | | | | | | | | | | | | Add -V (display version) and -S (list controlling symbols per #if with nesting information) options, and improve unifdefall debug output. Done committing 0 revisions to SVN Obtained from: http://dotat.at/prog/unifdef
* | Now fix functionality of 'netstat -f netgraph' that hasn't workedglebius2010-03-123-3/+7
| | | | | | | | | | | | | | | | | | | | | | | | starting from netgraph import in 1999. netstat(8) used pointer to node as node address, oops. That didn't work, we need the node ID in brackets to successfully address a node. We can't look into ng_node, due to inability to include netgraph/netgraph.h in userland code. So let the node make a hint for a userland, storing the node ID in its private data. MFC after: 2 weeks
* | Fix 'netstat -f netgraph', which I had broken in r163463 ling timeglebius2010-03-121-0/+18
| | | | | | | | | | | | | | ago in 2006. This linked list is actually needed for userland. PR: kern/140446 Submitted by: Adrian Steinmann <ast marabu.ch>
* | Force commit to correct Bug ID:pjd2010-03-120-0/+0
| | | | | | | | Obtained from: OpenSolaris, Bug ID 6920880
* | Remove bogus assertion.pjd2010-03-121-3/+0
| | | | | | | | | | | | Reported by: Johan Ström <johan@stromnet.se> Obtained from: OpenSolaris, Bug ID 6827260 MFC after: 1 week
* | Fix typo in macro name and macro usage.uqs2010-03-122-2/+3
| | | | | | | | | | | | Found by: make manlint Reviewed by: ru Approved by: harti, philip (mentor)
* | The flow-table module retrieves the destination and sourceqingli2010-03-121-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | address as well as the transport protocol port information from the outbound packets. The routing code is generic and compares every byte in the given sockaddr object. Therefore the temporary sockaddr objects must be cleared due to padding bytes. In addition, the port information must be stripped or the route search will either fail or return the incorrect route entry. Unit testing is done using OpenVPN over the if_tun interface. MFC after: 7 days
* | Fix several typos in macros or macro misusage.uqs2010-03-1223-33/+20
| | | | | | | | | | | | Found by: make manlint Reviewed by: ru Approved by: philip (mentor)
* | With the recent change of the sctp checksum to support offload,rrs2010-03-121-0/+19
| | | | | | | | | | | | | | | | | | | | | | no delayed checksum was added to the ip6 output code. This causes cards that do not support SCTP checksum offload to have SCTP packets that are IPv6 NOT have the sctp checksum performed. Thus you could not communicate with a peer. This adds the missing bits to make the checksum happen for these cards. PR: 144529 MFC after: 2 weeks
* | Mask disk_idx to avoid panic because of extra bits set.mav2010-03-121-6/+8
| | | | | | | | | | PR: kern/102211 Submitted by: yoichi
* | Regen:brooks2010-03-121-870/+1202
| | | | | | | | | | | | | | | | * Hart: rev 671 of pcidevs.txt; 22-01-2008 (D-M-Y). * Boemler: vendors.txt (2010-03126) PR: kern/133733 MFC after: 1 week
* | - Enable kernel stack guard page.neel2010-03-122-8/+23
| | | | | | | | | | - Unmap the unused kernel stack page that we cannot use because it is not aligned on a (PAGE_SIZE * 2) boundary.
* | - With the introduction of -A, -B and -3, not all combinations ofedwin2010-03-122-86/+188
| | | | | | | | | | | | | | | | | | arguments makes sense anymore. For example, what would a combination of -3 (show three months) and -y (show the whole year) do? We will abort on these cases. - Move the debug option -d to -H (from highlight), while -d is now used for setting the day of "today" so that -y and friends can be tested.
* | fix stats reporting sysctlkmacy2010-03-121-17/+17
| |
* | - restructure flowtable to support ipv6kmacy2010-03-126-172/+763
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - add a name argument to flowtable_alloc for printing with ddb commands - extend ddb commands to print destination address or 4-tuples - don't parse ports in ulp header if FL_HASH_ALL is not passed - add kern_flowtable_insert to enable more generic use of flowtable (e.g. system calls for adding entries) - don't hash loopback addresses - cleanup whitespace - keep statistics per-cpu for per-cpu flowtables to avoid cache line contention - add sysctls to accumulate stats and report aggregate MFC after: 7 days
* | Make the ddb command "show tlb" SMP friendly.neel2010-03-124-11/+69
| | | | | | | | It now accepts an argument to dump out the tlb of a particular cpu.
* | Fix the previous attempt to fix kernel builds of HEAD on 7.x. Use thejhb2010-03-122-2/+2
| | | | | | | | | | __gnu_inline__ attribute for PMAP_INLINE when using the 7.x compiler to match what 7.x uses for PMAP_INLINE.
* | o) Send packets being queued for transmission up to BPF if there's a listener.jmallett2010-03-121-2/+58
| | | | | | | | | | | | | | | | | | o) Properly configure the CAM to handle IFF_PROMISC and note where IFF_ALLMULTI handling would go if we didn't already force the NIC to receive all multicast traffic. Reviewed by: imp Sponsored by: Packet Forensics
* | implement listing of a subset of pipes/queues/schedulers.luigi2010-03-113-91/+264
| | | | | | | | | | The filtering of the output is done in the kernel instead of userland to reduce the amount of data transfered.
OpenPOWER on IntegriCloud