BSD Commit Log Search

   bettertls/verify: resuls -> results

   sync

   revert upstream commit 947b9f55b5f327e14368a48fb6ce10242ea29bf3

   It breaks cpp -traditional -dM

   https://github.com/llvm/llvm-project/issues/200085

   add SipHash.h from llvm-22.1.6 which is shipped as a third party header

   sync after updating llvm to 22.1.6

   update build infrastructure for llvm-21.1.6

   thanks for all the help with testing and fixing things up

   merge lldb-21.1.6

   import lldb from LLVM-21.1.6

   merge lld-21.1.6

   import lld from LLVM-21.1.6

   merge clang-21.1.6

   import clang from LLVM-21.1.6

   merge llvm-21.1.6

   import llvm from LLVM-21.1.6

   Make qwx show the firmware's regulatory domain in debug logs, like iwx does.

   Add support for 40MHz channels to qwx.

   Also fix setting of 11n phy parameters during the association flow.
   The NODE_HT flag isn't set yet when qwx_assoc() runs. We need to apply
   11n-related peer parameters in qwx_run().

   Tested by phessler@ and myself.

   ok mlarkin@ phessler@

   Make qwx only allocate a new mbuf when a free Rx ring slot is available.

   Avoids pointless alloc and free when the ring is already full.

   avoid calling bus_dmamap_create() from interrupt context in qwx

   ok mlarkin@ phessler@

   Handle country code events sent by qwx firmware.

   Seems to fix the issues where association was unreliable.

   Tested by phessler@, robert@, and myself.

   ok mlarkin@ phessler@

   Use correct X position for redrawing wide characters.

   Note that the workaround for the ambiguous return value can also be used for timegm()

   OK tb@

   free exec_package allocations in check_exec() error paths

   from Andrew Griffiths at Calif, ok kettenis@

   acme-client: use _get0_ instead of _getm_ for const correctness

   The revokeproc doesn't modify the Validity, so use a const ASN1_TIME and
   switch to X509_get0_notBefore()/X509_get0_notAfter().

   suggested by job a long time ago

   acme-client: fix timegm(3) invocations

   Use the tm.tm_wday = -1 sentinel check and switch X509notbefore() and
   X509notafter() to use a time_t * output parameter since an in-band error
   doesn't work for them for the same reason it doesn't work for timegm(3).
   The error check remains against -1 to keep the diff small, but should
   perhaps be changed to use a Boolean 0/1 approach.

   Of course, with the aggressive push to very short-lived certificates in
   the WebPKI, negative epoch times won't happen here in practice.

   ok florian

   vmd: Unbreak using images supplied with vmctl -b

   My previous fix for reused filedescriptors broke using images
   supplied with "vmctl -b": In that case, kernfd remained to be set
   to -1, thus passing that filedescriptor to the child process failed.

   To resolve this, dup vm->vm_kernel right before passing the descriptor
   with proc_compose().  This fixes -b and the keeps original fix
   working.

   In the error path I rely on vm_stop()/vm_remove() closing vm->vm_kernel.
   Therefore, remove the redundant close().

   ok mlarkin@ deraadt@

   Replace OF_getprop() to get "compatible" string with OF_getpropstr().

   ok kettenis@

   Introduce new FDT functions OF_getpropstr() and OF_freepropstr().

   OF_getpropstr() is a clone of OF_getprop(), designed for retrieving
   strings, and differs as following:

   - Do dynamic allocation of the destination buffer using malloc().
   - Guarantee a NUL termination of the returned string.

   A deraadt@ and kettenis@ collaboration.

   ok kettenis@

   unzero'd padding bytes in struct reg and struct fpreg (both machine dependent)
   leak kernel stack contents.
   from Andrew Griffiths at Calif

   A privileged guest can program an out-of-layout Virtio 1.x `queue_avail`
   address for the `vioscsi` device and then notify the queue. The host-side
   `vioscsi` device process dereferences a pointer derived from the unchecked
   offset and terminates with `SIGSEGV`.
   from Quarkslab
   ok hshoexer, mlarkin

   A privileged guest can notify an invalid virtio-scsi queue index. The
   host-side `vioscsi` device process uses the guest-controlled value as an array
   index without a bounds check, interprets adjacent process memory as virtqueue
   metadata, and terminates with `SIGSEGV`.
   from Quarkslab
   ok hshoexer, mlarkin