| created | 2019-08-24T16:58:46Z |
|---|---|
| begin | 2019-08-21T00:00:00Z |
| end | 2019-08-22T00:00:00Z |
| path | src/sys |
| commits | 4 |
| date | 2019-08-21T02:18:33Z | |||
|---|---|---|---|---|
| author | jsg | |||
| files | src/sys/dev/pci/vga_pci_common.c | log | diff | annotate |
| src/sys/dev/pci/drm/amd/amdgpu/amdgpu_devlist.h | log | diff | annotate | |
| message |
Add simple amdgpu pci id devlist for the ramdisk to determine if aperture is needed. Skip SI/CIK ids as we don't build amdgpu with SI/CIK support (radeondrm covers these) and skip VEGA20 ids we don't match on as they are flagged AMD_EXP_HW_SUPPORT. |
|||
| date | 2019-08-21T15:32:18Z | |||
|---|---|---|---|---|
| author | florian | |||
| files | src/sys/net/if.c | log | diff | annotate |
| src/sys/netinet6/in6_ifattach.c | log | diff | annotate | |
| src/sys/netinet6/in6_ifattach.h | log | diff | annotate | |
| src/sys/netinet6/ip6_input.c | log | diff | annotate | |
| message |
Remove support for semantically opace interface identifiers (RFC 7217) for IPv6 link local addresses. Some hosting and VM providers route customer IPv6 prefixes to link local addresses derived from ethernet MAC addresses (RFC 2464). This leads to hard to debug IPv6 connectivity problems and is probably not worth the effort. RFC 7721 lists 4 weaknesses: 3.1. Correlation of Activities over Time & 3.2. Location Tracking These are still possible with RFC 7217 addresses for an adversary connected to the same layer 2 network (think conference wifi). Since the link local prefix stays the same (fe80::/64) the link local addresses do not change between different networks. An adversary on the same layer 2 network can probably track ethernet MAC addresses via different means, too. 3.3. Address Scanning & 3.4. Device-Specific Vulnerability Exploitation These now become possible, however, as noted above a layer 2 adversary was probably able to do this via different means. People concerned with these weaknesses are advised to use ifconfig lladdr random. OK benno input & OK kn |
|||
| date | 2019-08-21T16:14:34Z | |||
|---|---|---|---|---|
| author | visa | |||
| files | src/sys/arch/mips64/include/pmap.h | log | diff | annotate |
| src/sys/arch/mips64/mips64/context.S | log | diff | annotate | |
| src/sys/arch/mips64/mips64/pmap.c | log | diff | annotate | |
| message |
Fix a race in invalidation of remote TLB entries. If a CPU updates a pmap concurrently with the activation of that pmap on another CPU, invalidation of TLB entries might be incomplete. It is also possible that a CPU altogether stops updating its TLB. Prevent the race by synchronizing pmap activations and logic that determines where to send TLB invalidation IPIs. To avoid mutex wait without ability to process IPIs, the context switch code is adjusted to call pmap_activate() with interrupts enabled. In practice, interrupts up to IPL_SCHED are still disabled on context switch. |
|||
| date | 2019-08-21T20:44:09Z | |||
|---|---|---|---|---|
| author | cheloha | |||
| files | src/sys/arch/amd64/isa/clock.c | log | diff | annotate |
| src/sys/arch/i386/isa/clock.c | log | diff | annotate | |
| src/sys/arch/macppc/macppc/clock.c | log | diff | annotate | |
| src/sys/conf/param.c | log | diff | annotate | |
| src/sys/kern/kern_sysctl.c | log | diff | annotate | |
| src/sys/sys/kernel.h | log | diff | annotate | |
| src/sys/sys/sysctl.h | log | diff | annotate | |
| message |
sysctl(2): add kern.utc_offset: successor to the DST/TIMEZONE options(4) The DST and TIMEZONE options(4) are incompatible with KARL, so we need some other way to compensate for an RTC running with a known offset. Enter kern.utc_offset, an offset in minutes East of UTC. TIMEZONE has always been minutes West, but this is inconsistent with how everyone else talks about timezones, hence the flip. TIMEZONE has the advantage of being compiled into the binary. Our new sysctl(2) has no such luck, so it needs to be set as early as possible in boot, from sysctl.conf(5), so we can correct the kernel clock from the RTC's local time to UTC before daemons like ntpd(8) and cron(8) start. To encourage this, kern.utc_offset is made immutable after the securelevel(7) is raised to 1. Prompted by yasuoka@. Discussed with deraadt@, kettenis@, yasuoka@. Additional testing by yasuoka@. ok deraadt@, yasuoka@ |
|||