BSD Commit Log Search

   Rework the IdleHoldTimer and how fast reconnects are implemented.

   On first error bgpd should allow a fast reconnect - this is especially
   helpful for passive sessions. The way this was implemented was error
   prone with a special case in session_accept().

   Adjust the FSM so that on the first IDLE transistion the session uses
   a IdleHoldTime of 0 sec but then increased to INTERVAL_IDLE_HOLD_INITIAL.
   At the same time the outgoing connection is delatyed via ConnectRetryTimer.
   Doing this moves the session quickly into active state and allows new
   connections in but delays the reconnect like before.

   Additionally the STATE_ACTIVE / EVNT_START FSM case is adjusted to initiate
   a connect immediatly. This allows a 'bgpctl nei X up' to work also for
   sessions in ACTIVE state. Also passive sessions will initiate a connection
   in this case, which is a new behaviour.

   OK tb@

   Use peer_dump_done() in the EXPORT_NONE and EXPORT_DEFAULT_ROUTE cases of
   peer_dump().

   peer_dump_done() calls peer_blast_done() and it issues the End-Of-RIB
   marker. This unifies all the peer_dump finalizers to use peer_dump_done().

   OK tb@

   Switch a few uint32_t to unsigned int where it makes sense.

   Instead of mixing uint32_t with unsigned long long use unsigned int for
   those. In most cases those are simple counts that can't get too big.
   The same is the case for max_prefix and max_out_prefix. There is no good
   reason to use uint32_t there.

   OK tb@

   In struct rde_peer_stats use unsigned long long instead of uint64_t to
   simplify printing the values out.

   OK tb@

   Use correct cursor position for range end, GitHub issue 5414.

   Increase escape-time for tmux's own queries (refresh-client -l and
   window size) as well, GitHub issue 5388 from Jackson Edmonds.

   verify that ChannelTimeout in a Match block is effective

   verify that RekeyLimit in a Match block is effective

   fix ChannelTimeout and RekeyLimit not being applied in sshd_config
   Match blocks; reported by Alex Harrison

   s/= - 1/= -1/; from serity---

   bn_mul_div: use (unsigned long long) instead of (uint64_t) to print with %llu

   Don't use SCSI_DATA_IN for patrol read commands that don't have a data
   buffer.  Noticed while looking into crashes reported by job@ but doesn't
   fix anything.

   ok dlg@

   Enable on Spacemit K3.

   Add add ECDSA tests (based on the RSA tests)

   relayd: add ECDSA support to the CA privsep engine

   Add an EC_KEY_METHOD that forwards the sign operation to the CA process,
   clone the existing RSA engine. ssl_load_pkey() now handles both RSA
   and EC keys and attaches the cert hash accordingly.

   The engine and signing code was migrated from smtpd from (op@) with
   some tweaks by me.

   OK op@

   vmd(8): validate memory ranges in vmd before vmm(4).

   While vmm(4) does its own check on the number of memory ranges, do
   the check in vmd(8) to fail fast and provide feedback to the user.

   Report and diff by Andrew Griffiths.

   ok @hshoexer

   authpf(8) read_config() should chop off trailing white space

   if administrator mistakenly types into configuration file

   anchor=authpf_test

   where 'authpf_test' is followed by white space, the authpf(8)
   is going to use anchor 'authpf_test ' instead of the 'authpf_test'
   which is defined in pf.conf(5) as 'anchor authpf_test/*'

   issue kindly reported and patch submitted by

   Avinash Duduskar <avinash.duduskar (_at_) gmail (_dot_) com>

   OK sashan@

   Bring back up_generate_addpath_all() using the rib entry queue

   add-path send all can take a fair amount of shortcuts compared to the
   other add-path send modes. The rib entry queue (struct pq_entry) holds
   all the information to update the adj-rib-out.

   For general updates just walk the pq list and insert / withdraw all
   paths. A path can only be once on the list so the code just needs to
   walk it and call up_process_prefix for updates. If up_process_prefix()
   returns UP_FILTERED or UP_EXCLUDED then try to withdraw the prefix. This
   uses the same codepath as for any withdraw in the queue.

   Tested on the NLNOG ring looking glass server.
   OK tb@

   Change cellused/size to 16 bits and time to 32 bits in grid_line and add
   the OSC 133 positions (size stays the same).

   Disambigulate all warnings about CCR corruption

   OK tb@

   Correctly include status line in pane height.

   Document how unveil(2) permissions correspond to various pledge(2) promises.

   unveil considers the operation that happens at namei(9) time, but pledge has a
   deeper integration into subsystems, therefore pledge can be more precise.

   This change is the result of various experiments. For example the "unix" promise
   allows creating files when calling bind(2) on an AF_UNIX socket, we found
   requiring the "cpath" promise along with "unix" either required extensive
   changes or made the promise set too broad. Similiar applies to connect(2) and
   "wpath". Instead document that the unveil permissions "c", "w" and "r"
   correspond to a larger set of pledge promises.

   ok deraadt

   Clean trailing slashes from FWURL

   job@ noticed sysupgrade passes urls with trailing slashes that
   aren't valid on firmware.openbsd.org.

   make dwpcie_rk3568_link_up less pedantic about what it considers "up".

   ie, only report whether the pcie link is up, don't look at the state
   of the up link too. this matches linux behaviour fwiw.

   after a warm boot (ie, reboot), the re(4) in my rk3528 based radxa
   e20c didnt attach because the pcie link was in a power saving state
   instead of the ready state this code was expecting.

   jmatthew@ and i have also tested this on a bunch of rk356x boards too.

   ok jmatthew@ kettenis@

   Remove bits to disable removing empty lines since actually we want to do
   that - zoom added them in the first place.

   Copy the home directory if it comes from getpwuid.

   Add unzoomed width and height formats and use them for the sizes shown
   in panes mode, reported by tb@.

   Guard x as well as y to avoid overflow, GitHub issue 5409 from Park
   Seongjae.

   use strncmp instead of memcmp in complt()

   cpos is not necessarely shorter than lh->l_name length, so we might end
   up memcmp'ing out of bounds.

   from Han Boetes (hboetes at gmail)

   fix NULL-deref in parsexp; from Han Boetes (hboetes at gmail)