| created | 2020-03-23T22:01:26Z |
|---|---|
| begin | 2020-03-11T00:00:00Z |
| end | 2020-03-12T00:00:00Z |
| path | src/sys |
| commits | 17 |
| date | 2020-03-11T07:01:42Z | |||
|---|---|---|---|---|
| author | dlg | |||
| files | src/sys/net/if_aggr.c | log | diff | annotate |
| message |
properly limit indexing into the aggr_periodic_times array. coverity CID 1486819 pointed out by and ok tobhe@ |
|||
| date | 2020-03-11T07:27:08Z | |||
|---|---|---|---|---|
| author | guenther | |||
| files | src/sys/arch/amd64/include/codepatch.h | log | diff | annotate |
| message |
Take a swing at blocking Load-Value-Injection attacks against the kernel by using lfence in place of stac/clac on pre-SMAP CPUs. To quote from https://software.intel.com/security-software-guidance/insights/deep-dive-load-value-injection "If the OS makes use of Supervisor Mode Access Prevention (SMAP) on processors with SMAP enabled, then LVI on kernel load from user pages will be mitigated. This is because the CLAC and STAC instructions have LFENCE semantics on processors affected by LVI, and this serves as a speculation fence around kernel loads from user pages." ok deraadt@ |
|||
| date | 2020-03-11T09:59:31Z | |||
|---|---|---|---|---|
| author | otto | |||
| files | src/sys/arch/alpha/stand/installboot.c | log | diff | annotate |
| src/sys/arch/alpha/stand/boot/Makefile | log | diff | annotate | |
| src/sys/arch/alpha/stand/boot/filesystem.c | log | diff | annotate | |
| src/sys/arch/alpha/stand/boot/version | log | diff | annotate | |
| message |
Allow alpha boot(8) to read from an ffs2 filesystem and adapt its custom installboot to deal with ffs2. While there, fix the partition read code to deal with offsets > 2G; ok deraadt@ |
|||
| date | 2020-03-11T12:13:47Z | |||
|---|---|---|---|---|
| author | patrick | |||
| files | src/sys/dev/fdt/imxgpc.c | log | diff | annotate |
| message |
Power domains on i.MX8MQ can reference other power domains, which need to be enabled first. Notable users are the PCIe domains. ok kettenis@ |
|||
| date | 2020-03-11T12:17:42Z | |||
|---|---|---|---|---|
| author | patrick | |||
| files | src/sys/dev/fdt/imxccm.c | log | diff | annotate |
| message |
The NXP-provided device trees used to make use of the assigned-clocks properties to make sure that the PCIe clocks are configured correctly. While upstreaming these into Linux mainline, those have been removed. Instead the clock driver has the responsibility of setting these up on attach. For us we'll just hardcode the parent and enable the setting when we turn on the PCIe clocks. ok kettenis@ |
|||
| date | 2020-03-11T12:39:27Z | |||
|---|---|---|---|---|
| author | tobhe | |||
| files | src/sys/net80211/ieee80211_input.c | log | diff | annotate |
| message |
Make sure hdrlen is initialized. ok stsp@ |
|||
| date | 2020-03-11T13:04:02Z | |||
|---|---|---|---|---|
| author | jasper | |||
| files | src/sys/dev/usb/uplcom.c | log | diff | annotate |
| message |
Remove dead code which is actually duplicated a few lines above right after err is set. Coverity CID 975917 ok kettenis@ kn@ |
|||
| date | 2020-03-11T13:24:16Z | |||
|---|---|---|---|---|
| author | deraadt | |||
| files | src/sys/arch/arm/arm/locore.S | log | diff | annotate |
| message |
Anthony Steinhauser reports that 32-bit arm cpus have the same speculation problems as 64-bit models. After every eret, there must be a speculation barrier. ok kettenis |
|||
| date | 2020-03-11T13:41:53Z | |||
|---|---|---|---|---|
| author | deraadt | |||
| files | src/sys/arch/arm64/arm64/locore.S | log | diff | annotate |
| message |
In the sigtramp the fallback SYS_exit always works, there is no reason to spin trying things. ok kettenis |
|||
| date | 2020-03-11T13:42:15Z | |||
|---|---|---|---|---|
| author | deraadt | |||
| files | src/sys/arch/arm/arm/sigcode.S | log | diff | annotate |
| message |
In the sigtramp the fallback SYS_exit always works, there is no reason to spin trying things. ok kettenis |
|||
| date | 2020-03-11T15:45:03Z | |||
|---|---|---|---|---|
| author | claudio | |||
| files | src/sys/kern/kern_sig.c | log | diff | annotate |
| message |
Move the sigprop definition and the other bits under SIGPROP into kern_sig.c where they are currently added by the include. While doing that mark the sigprop array as const. OK mpi@ anton@ millert@ |
|||
| date | 2020-03-11T15:45:04Z | |||
|---|---|---|---|---|
| author | claudio | |||
| files | src/sys/sys/signalvar.h | log | diff | annotate |
| message |
Move the sigprop definition and the other bits under SIGPROP into kern_sig.c where they are currently added by the include. While doing that mark the sigprop array as const. OK mpi@ anton@ millert@ |
|||
| date | 2020-03-11T15:51:15Z | |||
|---|---|---|---|---|
| author | cheloha | |||
| files | src/sys/dev/pci/cz.c | log | diff | annotate |
| message |
cz(4): tsleep(9) -> tsleep_nsec(9), timeout_add(9) -> timeout_add_msec(9) Compile-tested on amd64. Driver is not built by default. ok deraadt@ |
|||
| date | 2020-03-11T16:38:42Z | |||
|---|---|---|---|---|
| author | mpi | |||
| files | src/sys/arch/amd64/amd64/vmm.c | log | diff | annotate |
| message |
Do not declare a variable inside a for () loop. Fix build with gcc. |
|||
| date | 2020-03-11T19:23:08Z | |||
|---|---|---|---|---|
| author | krw | |||
| files | src/sys/scsi/scsi_base.c | log | diff | annotate |
| message |
No need to pass 20000 to scsi_mode_sense[_big]() as the desired xs->timeout. Just set xs->timeout to 20000 and drop the parameter. No functional change. |
|||
| date | 2020-03-11T21:04:58Z | |||
|---|---|---|---|---|
| author | deraadt | |||
| files | src/sys/arch/arm/arm/cpuswitch7.S | log | diff | annotate |
| src/sys/arch/arm/arm/exception.S | log | diff | annotate | |
| src/sys/arch/arm/arm/irq_dispatch.S | log | diff | annotate | |
| message |
Anthony Steinhauser reports that 32-bit arm cpus have the same speculation problems as 64-bit models. "movs pc, lr" is the pre-VM legacy eret and as such also requires speculation blockers. Idiomatically spray "dsb nsh; ish" after each such occurance because it is cheap. (I find it very interesting 2/3 of these occur at end of a .o, so the instructions speculatively executed are from a randomly different .o file after each kernel relink...) ok kettenis |
|||
| date | 2020-03-11T22:21:28Z | |||
|---|---|---|---|---|
| author | sashan | |||
| files | src/sys/kern/uipc_socket.c | log | diff | annotate |
| message |
Fix unlimited recursion caused by local outbound bcast/mcast packet sent via spliced socket. Reported-by: [email protected] OK bluhm@ |
|||