Only intermediate CAs and BGPsec certificates are allowed in a Manifest
fileList. Check this is the case, otherwise stop processing the cert.
Missing check reported by Xie Yifan
ok claudio job
The current implementation leads to an "xstate buffer too small" error
on newer machines with an xstate area bigger than 1KiB. Allocate the
buffer dynamically from PT_GETXSTATE_INFO kernel info.
ok anton@
lacp is better supported by aggr(4). users of lacp in trunk(4)
should migrate to aggr(4).
trunk(4) and the lacp support inside it is one of the last chunks
of code that still requires the netlock in the ethernet stack. the
last time i tried to fix this i ended up writing aggr(4), and nothing
about this code has improved since then. the other protos such as
failover and loadbalance are trivial in comparison and will be easy
to improve in the future.
discussed with and no objections from many
(UX3407QA and UX3407RA) that need different device trees. This means
the letters at the end of the model number are meaningful so adjust the
entry for the ASUS Vivobook S 15 as well.
ok tobhe@
This converts more macros to C99 initializers. Rename flags and tags
arguments by appending val because they collide with the field names.
The remainder are whitespace changes.
ok kenjiro
This is documented upstream https://github.com/perl/perl5/issues/23405
A simple trigger is
perl -c -wE 'for my ($x, $y) (Bar->foo) {}'
Suggested by James Cook <falsifian () falsifian ! org>
Tested and OK gkoehler@
This improves readability and column alignment for large file systems,
leaving more space for displaying the mountpoint on the same line.
OK asou@ sthen@
This is a first pass at tidying up the unsightly mess that is asn1t.h.
For better or worse, we have expanded the macros internally, and in base
only rpki-client uses the templates. They are generally rarely used.
Fortunately.
Having C99 initializers helps a lot with debugging templated ASN.1 by
combining cc -E with clang-format. They make the macros more readable,
look tidier and help with grep.
ok kenjiro
can specify action the rule executes when limit is
reached. By default when limit is reached the limiter
overrides action specified by rule to no-match.
If administrator wants to block packet instead then
rule with limiter should be changed to:
pass in from any to any state limiter test (block)
OK dlg@
In asn1t.h r1.18 (commit 9b72422d) I removed the app_items member from
ASN1_ADB and failed to fix up the ASN1_ADB_END() macro that populates
the ASN1_ADB. This means ASN1_ADB_END() tried to initialize one member
too many and would thus cause a compilation failure, so nobody uses this
with LibreSSL. Internally, we have expanded all its uses.
We could leave it broken or fix it up. Take the opportunity to add an
unused adb_cb() argument instead, making the macro invocation compatible
with OpenSSL.
ok jsing kenjiro
When formatting two input files in a row, a line length set with .ll
in the first file leaked to the second file.
Also, mandoc used the changed line length for the page footer,
whereas groff resets .ll before the page footer.
Fix this as follows:
1. Set defrmargin only at program startup, based on -O width / paper.
2. Copy defrmargin to maxrmargin whenever starting an input file or footer.
3. Let .ll / setwidth() only change maxrmargin, not defrmargin.
execute commands on the smtp server in old sendmail implementations.
This was obviously added as a joke, probably added for testing Enhanced
Status Code, and basically only changes the text of the 500 error
message, but with it came a lot of exta plumbing. While I appreciate the
joke, it's very obscure and especially the filter plumbing takes up
unneeded space.
OK millert@, chris@
No objection from kirill@
KVA TLB entries can exist under PCID_TEMP after pmap_map_ptes() + interrupts
so KVA shootdowns must invalidate PCID_TEMP too
ok deraadt, mlarkin discussion and approval guenther
of minus signs, the intended behaviour is decreasing the line length, for
even numbers, increasing it. The code in term_setwidth() resulted in
incorrect behaviour in two cases: for more than two signs, the line length
wasn't changed at all because a2roffsu() was called incorrectly and failed,
and if the second sign was negative, a negative width was passed to the
setwidth() callbacks, which they aren't prepared to handle.
Fix this by iterating over all signs to find the correct iop operation
code (0=absolute, 1=increase, -1=decrease). Also improve code clarity
by making the width argument of the setwidth() callbacks unsigned and
removing some ugly casts in these callbacks.
wskdb. It doesn't attempt to map all additional keysyms, only those that
are required in the shell and for programming.
It is similar to the applealu_iso variant that can be specified in X11
with setxkbmap.
ok miod@
requirements only diffuse through to the bus dma API when we allocate
memory; at that point we already have IOVA allocated, so it's hard to
apply the right alignment. The good thing is that we basically cannot
run out of an IOMMU domain's IOVA (which for us is per device), so we
can easily bump the alignment of each DMA map. This helps qwz(4) FW
come up on the Orion O6.
mode we probably have a GIC with MSI support that should give us have
plenty of MSI vectors for us to use. Improves qwz(4) behavior on the
Orion O6.
ok kettenis@
