summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Provide the USB device release number along with other parametersiedowse2005-08-231-4/+4
| | | | | | | | so that devd can match on it. This field was already available to usbd and is used by a number of usbd.conf entries, so now it is possible to transfer those entries to devd.conf. Submitted by: Anish Mistry
* End the MALLOC_DEFINE macro without the semi-colon, the caller suppliesphk2005-08-231-1/+1
| | | | | | that. Spotted by: Flexelint
* The mtu check in bridge_enqueue is bogus as the maximum Ethernet frame isthompsa2005-08-231-7/+0
| | | | | | | | | | actually 1514, so comparing the mbuf length which includes the Ethernet header to the interface MTU is wrong. The check was a little over the top so just remove it. Approved by: mlaier (mentor) MFC after: 3 days
* Verify if we can actually read the data at given offset.pjd2005-08-232-6/+13
| | | | Reported by: Martin <nakal@nurfuerspam.de>
* - Document the led(4) interface for the Thinklightmarkus2005-08-231-1/+19
| | | | | | | - Bump .Dd Approved by: brueffer MFC after: 3 days
* Document the diagnostic message printed at startup time. Keep thejkoshy2005-08-231-7/+26
| | | | | | | | | list of diagnostic messages sorted. Document the recently introduced EOPNOTSUPP error return. Repair sort ordering for the list of error descriptions. MFC after: 3 days
* Add documentation for the BIOCLOCK and BIOCSETWF ioctl commands. Alsocsjp2005-08-231-1/+10
| | | | | | | modify the documentation for BIOCSETF to note that it sets the read filter. Pointed out by: simon
* Remove unnecessary IPSEC includes.andre2005-08-232-16/+0
| | | | | MFC after: 2 weeks Sponsored by: TCP/IP Optimization Fundraise 2005
* Don't loop back packets that have been routed by pf. This fixes an endlessmlaier2005-08-231-1/+2
| | | | | | | | | loop where the same packet is sent over and over again. Obtained from: OpenBSD Reported by: Sergey Lapin Tested by: Sergey Lapin MFC after: 7 days
* Add a -h option to tell cmp not to follow symbolic links.brian2005-08-235-7/+123
| | | | | MFC after: 3 weeks Sponsored by: Sophos/ActiveState
* Apply fix for "pr82261 DMA-support on Sparc64 broken"sos2005-08-232-5/+42
| | | | | | The Acer chip or wiring that SUN uses has problems that this patch tries to work around. Original patch by Marius Strobl, hacked into shape by me..
* Fix a couple of typosbrian2005-08-231-1/+1
|
* Back out the removal of LK_NOWAIT from the VOP_LOCK() call intruckman2005-08-231-7/+37
| | | | | | | | | | | | | | | | | | vlrureclaim() in vfs_subr.c 1.636 because waiting for the vnode lock aggravates an existing race condition. It is also undesirable according to the commit log for 1.631. Fix the tiny race condition that remains by rechecking the vnode state after grabbing the vnode lock and grabbing the vnode interlock. Fix the problem of other threads being starved (which 1.636 attempted to fix by removing LK_NOWAIT) by calling uio_yield() periodically in vlrureclaim(). This should be more deterministic than hoping that VOP_LOCK() without LK_NOWAIT will block, which may not happen in this loop. Reviewed by: kan MFC after: 5 days
* FreeBSD unconditionally supports write filters now.csjp2005-08-231-2/+0
|
* Fix multiple typos in the mutex names. This fixes false positive (and prettyemax2005-08-231-4/+4
| | | | | | strange looking too) LORs I have seen on my system. Pointy hat to goes to me. MFC after: 1 day
* Add support for processing the "bd_locked" flag offered by the bpfcsjp2005-08-231-2/+3
| | | | stats structure.
* FreeBSD now supports BIOCLOCK. So we can use it now.csjp2005-08-231-4/+0
| | | | Reviewed by: mlaier
* Correct the check if a plex is accessible in case it is not up.le2005-08-221-1/+1
| | | | This makes degraded RAID5 plexes actually work.
* o Fix a logic error when not doing mbuf cluster allocation.andre2005-08-221-4/+5
| | | | | | | o Change an old panic() to a clean function exit. MFC after: 2 weeks Sponsored by: TCP/IP Optimization Fundraise 2005
* Pass the PDE from pmap_remove() to pmap_remove_page() so that the latteralc2005-08-221-7/+8
| | | | procedure doesn't have to recompute it.
* Introduce two new ioctl(2) commands, BIOCLOCK and BIOCSETWF. These commandscsjp2005-08-223-24/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | enhance the security of bpf(4) by further relinquishing the privilege of the bpf(4) consumer (assuming the ioctl commands are being implemented). Once BIOCLOCK is executed, the device becomes locked which prevents the execution of ioctl(2) commands which can change the underly parameters of the bpf(4) device. An example might be the setting of bpf(4) filter programs or attaching to different network interfaces. BIOCSETWF can be used to set write filters for outgoing packets. Currently if a bpf(4) consumer is compromised, the bpf(4) descriptor can essentially be used as a raw socket, regardless of consumer's UID. Write filters give users the ability to constrain which packets can be sent through the bpf(4) descriptor. These features are currently implemented by a couple programs which came from OpenBSD, such as the new dhclient and pflogd. -Modify bpf_setf(9) to accept a "cmd" parameter. This will be used to specify whether a read or write filter is to be set. -Add a bpf(4) filter program as a parameter to bpf_movein(9) as we will run the filter program on the mbuf data once we move the packet in from user-space. -Rather than execute two uiomove operations, (one for the link header and the other for the packet data), execute one and manually copy the linker header into the sockaddr structure via bcopy. -Restructure bpf_setf to compensate for write filters, as well as read. -Adjust bpf(4) stats structures to include a bd_locked member. It should be noted that the FreeBSD and OpenBSD implementations differ a bit in the sense that we unconditionally enforce the lock, where OpenBSD enforces it only if the calling credential is not root. Idea from: OpenBSD Reviewed by: mlaier
* On x86 processors, turn off any 'INTERRUPT' capabilities on PMCsjkoshy2005-08-221-3/+13
| | | | | | if the CPU does not have its local APIC enabled. MFC after: 3 days
* Return EOPNOTSUPP instead of EINVAL if a PMC allocation requestjkoshy2005-08-221-1/+15
| | | | | | | | specifies a PMC capability (e.g., sampling) that is not supported by hardware. Return EINVAL early if the PMC class passed in is not recognized. MFC after: 3 days
* Print PMC capabilities at module load time.jkoshy2005-08-221-3/+9
| | | | MFC after: 3 days
* Document IP_MINTTL socket option.andre2005-08-221-1/+9
| | | | | MFC after: 2 weeks Sponsored by: TCP/IP Optimization Fundraise 2005
* Add socketoption IP_MINTTL. May be used to set the minimum acceptableandre2005-08-227-0/+32
| | | | | | | | | | | | | | | | | TTL a packet must have when received on a socket. All packets with a lower TTL are silently dropped. Works on already connected/connecting and listening sockets for RAW/UDP/TCP. This option is only really useful when set to 255 preventing packets from outside the directly connected networks reaching local listeners on sockets. Allows userland implementation of 'The Generalized TTL Security Mechanism (GTSM)' according to RFC3682. Examples of such use include the Cisco IOS BGP implementation command "neighbor ttl-security". MFC after: 2 weeks Sponsored by: TCP/IP Optimization Fundraise 2005
* Always quote the entire TCP header when responding and allocate an mbufandre2005-08-221-4/+24
| | | | | | | | | | | | cluster if needed. Fixes the TCP issues raised in I-D draft-gont-icmp-payload-00.txt. This aids in-the-wild debugging a lot and allows the receiver to do more elaborate checks on the validity of the response. MFC after: 2 weeks Sponsored by: TCP/IP Optimization Fundraise 2005
* Handle pure layer 2 broad- and multicasts properly and simplify relatedandre2005-08-221-19/+3
| | | | | | | | checks. PR: kern/85052 Submitted by: Dmitrij Tejblum <tejblum at yandex-team.ru> MFC after: 3 days
* Fix problem on Promise "mio" controllers and 48bit mode caused by last commitsos2005-08-221-0/+9
|
* Spell powersavesleep correctly.brian2005-08-222-2/+2
|
* When looking for new lines in diff output, grep for '^[>+]' instead ofcperciva2005-08-221-1/+1
| | | | | | | '^>', in order to catch both normal and unified diffs. Problem reported by: volker at vwsoft dot com via -stable MFC after: 3 days
* Most users probably aren't interested in locating 13000+ files namedcperciva2005-08-222-2/+2
| | | | | | | | [0-9a-f]{64}, so exclude portsnap's compressed snapshots from locate's indexing. Suggested by: silby MFC after: 3 days
* Change pmap_extract() and pmap_extract_and_hold() to use PG_FRAME ratheralc2005-08-221-2/+6
| | | | | | | | than ~PDRMASK to extract the physical address of a superpage from a PDE. The use of ~PDRMASK is problematic if the PDE has PG_NX set. Specifically, the PG_NX bit will be included in the physical address if ~PDRMASK is used. Reviewed by: peter
* SADB_UPDATE did not return an error when key length is invalid.ume2005-08-221-2/+2
| | | | Obtained from: KAME
* Add relationship between offence and beer.grog2005-08-221-0/+5
| | | | Submitted by: philip
* Turn off sampling modes on the AMD64 till the time I can track downjkoshy2005-08-221-0/+5
| | | | | | the reason for the double fault seen when sampling under load. MFC after: 3 days
* if_ral_pccard does not depend on pccard module directly, but ratherimp2005-08-221-1/+0
| | | | | | | depends, like all other pccard drivers, indirectly through kobj on pccard. Therefore, it is not appropriate to force pccard to be loaded when if_ral.ko is loaded. This makes it possible to load if_ral w/o loading pccard.ko on, eg, pci only systems.
* Set the mountpoint path in the superblock (fs_fsmnt) at mount-timessouhlal2005-08-211-1/+2
| | | | | so that it appears in the various messages (not cleanly unmounted, filesystem full, etc). This has been broken since rev 1.261.
* In ng_callout() assert that supplied arguments are non-NULL.glebius2005-08-211-3/+4
|
* Stop callout before freeing memory, so it won't panic from softclock.pjd2005-08-211-0/+4
| | | | | Reported by: Jonatan B <onatan@gmail.com> MFC after: 3 days
* Before freeing memory, assert that there is no pending callout.pjd2005-08-211-0/+1
| | | | MFC after: 3 days
* Don't set the COMPLETE flag in an inodedep structure before the relatedtegge2005-08-211-1/+1
| | | | inode has been written.
* By default, when doing crypto work in software, start as many threadspjd2005-08-212-6/+13
| | | | | | as we have active CPUs and bind each thread to its own CPU. MFC after: 3 days
* Remove stale comment (we now always start worker thread).pjd2005-08-211-5/+0
| | | | MFC after: 3 days
* mp_ncpus is always (properly) initialized, even on UP kernels, so just use it.pjd2005-08-211-5/+0
|
* Commit correct version of the change and note the name of the newandre2005-08-211-1/+1
| | | | | | sysctl: net.inet.icmp.quotelen and defaults to 8 bytes. Pointy hat to: andre
* Add a sysctl to change to length of the quotation of the originalandre2005-08-212-1/+17
| | | | | | | | | | | | packet in an ICMP reply. The minimum of 8 bytes is internally enforced. The maximum quotation is the remaining space in the reply mbuf. This option is added in response to the issues raised in I-D draft-gont-icmp-payload-00.txt. MFC after: 2 weeks Spnsored by: TCP/IP Optimizations Fundraise 2005
* Fix basic rates set for 802.11a/g operating modes. This can significantlydamien2005-08-212-22/+47
| | | | | | improve transfer rates in 802.11a/g. Fix IFS settings in ral(4) too. MFC after: 6 days
* Add an option to have ICMP replies to non-local packets generated withandre2005-08-212-1/+29
| | | | | | | | | | | the IP address the packet came through in. This is useful for routers to show in traceroutes the actual path a packet has taken instead of the possibly different return path. The new sysctl is named net.inet.icmp.reply_from_interface and defaults to off. MFC after: 2 weeks
* Enhanced WME (802.11e) support.damien2005-08-212-5/+65
|
OpenPOWER on IntegriCloud