summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-01-05inst: determine kernel for bootsetup from $bootfile and $cputypecinap_lenrek
2018-01-05sysinfo: #c/swap -> #¶/swapcinap_lenrek
2018-01-05stats: show amount of reclaimable pages (add -r flag)cinap_lenrek
reclaimable pages are user pages that are used for caches like the image cache, mount cache and swap cache.
2018-01-04pc kernel: fix wrong simd exception mask (fixes go bootstrap)cinap_lenrek
2018-01-02ape/libauth: remove auth_wep.$O from mkfilecinap_lenrek
2018-01-02ape: update auth.h header for APEcinap_lenrek
2018-01-02factotum(4): document dp9ik, update protocol listcinap_lenrek
2018-01-02libauth: simplify _attrfmt() using fmtprint() avoiding stack buffercinap_lenrek
2018-01-02libauth: remove auth_wep() function, and non-existing httpauth() declarationcinap_lenrek
2018-01-02factotum: remove legacy wep protocolcinap_lenrek
2018-01-01libauth: fix out of bounds memory access in _parseattr()cinap_lenrek
empty token would read ""[-1] accidentally in the AttrQuery case.
2018-01-01factotum: replace custom hex parsing code with dec16() avoding timing side ↵cinap_lenrek
channels
2017-12-31libmp: use constant time encode(2) routines instead of lookup tablescinap_lenrek
the encode(2) routines are constant time now, so use them instead of using lookup table that can leak information through cache timing side channel.
2017-12-31ape: make encXchr()/decXchr() functions availablecinap_lenrek
2017-12-31libc: constant time implementation for encode(2) routines, fix base32cinap_lenrek
the string encoding functions touch secret key material in a bunch of places (devtls, devcap), so make sure we do not leak information by cache timing side channels, making the encoding and decoding routines constant time. we also expose the alphabets through encXchr()/decXchr() functions so caller can find the end of a encoded string before calling decode function (for libmp). the base32 encoding was broken in several ways. inputs lengths of len%5 == [2,3,4] had output truncated and it was using non-standard alphabet. documenting the alphabet change in the manpage.
2017-12-31wifi: get rid of custom hextob() routine, use dec16(), avoid copies in ↵cinap_lenrek
parsekey()
2017-12-31aux/wpa: get rid of custom Hfmt() routine, just use encodefmt. use %E for ↵cinap_lenrek
mac addresses
2017-12-30libsec: implement SPKI fingerprinting for okCertificate()cinap_lenrek
Instead of only using a hash over the whole certificate for white/black-listing, now we can also use a hash over the Subject Public Key Info (SPKI) field of the certificate which contians the public key algorithm and the public key itself. This allows certificates to be renewed independendtly of the public key. X509dump() now prints the public key thumbprint in addition to the certificate thumbprint. tlsclient will print the certificate when run with -D flag. okCertificate() will print the public key thumbprint in its error string when no match has been found.
2017-12-30libsec: fix mistake: strnchr -> strchrcinap_lenrek
2017-12-30libsec: avoid unneccesary memory copies and redundant code in x509cinap_lenrek
getting rid of some functions that take Byte* and instead pass uchar* and length. keeping the signature and public key fields in CertX509 as Bits* allows ownership transfer by swapping pointers. use common code to copy CN from subject field.
2017-12-29libsec: get rid of dummy data[1] in Bytes and Ints types (thanks pr)cinap_lenrek
2017-12-29usbxhci: add missing pexit() in xhcirecover proc (thanks sam-d)cinap_lenrek
2017-12-29wifi: revert rate adoption divider, breaks arpunks wificinap_lenrek
2017-12-29/lib/bullshit: +convergedcinap_lenrek
2017-12-28devtls, devssl: avoid ~0UL comparsion (from drawterm)cinap_lenrek
2017-12-28devmnt: use u32int for tagmask, simplify alloctag()cinap_lenrek
2017-12-28wifi: don't implicitely update lastseen timestamp on nodelookup()cinap_lenrek
in case we continue to send traffic (like ping) with the ap gone, the sending would keep updating bss->lastseen which prevents the timeout to happen to switch bss.
2017-12-28etheriwl, etherwpi: limit transmit queue buffer bloat to 48k (at 22Mbit ≅ ↵cinap_lenrek
20ms)
2017-12-28wifi: don't assume Wifi.rates[] is sorted, return net data rate for mbps ↵cinap_lenrek
(50% theoretical)
2017-12-23arch(3): document #P/realmodemem filecinap_lenrek
2017-12-23devvga: removing #v/vgabios, use /dev/realmodemem insteadcinap_lenrek
2017-12-23kernel: convert textmode cga screen contents to kmesg only oncecinap_lenrek
screeninit() might be called again by devvga when switching to textmode, so only convert the text framebuffer to kmesg the first time.
2017-12-23auth(8): auth/debug tests both dp9ik and p9sk1cinap_lenrek
2017-12-23kernel: remove Ipifc.mbps, unused.cinap_lenrek
2017-12-22/lib/bullshit: blockchaincinap_lenrek
2017-12-21ip/tinc: handle and set ethertype for ipv6cinap_lenrek
2017-12-19upas/fs: more bugscinap_lenrek
2017-12-19upas/fs: fix precedence bugs, compare digest pointer to nilcinap_lenrek
2017-12-19ether8169: add Macv45 for RTL8111HN, rename Macv45 -> Macv42 (thanks qeed, ↵cinap_lenrek
sam-d)
2017-12-18nusb/ether: dont forward loopback packets on bridges, remove read ↵cinap_lenrek
nonblocking hack
2017-12-18devether: dont forward loopback packets on bridgescinap_lenrek
2017-12-18devbridge: disable write blocking on ethernetscinap_lenrek
2017-12-17bridge(3): clarify manpage, this is a layer2 bridgecinap_lenrek
yes, it peeks into IP packets to handle fragmentation when sending onto tunnel ports and does mss clamping. but it can carry arbitrary ethernet packets just fine (between ethernets).
2017-12-17pc, pc64: add devbridge to kernel configurationcinap_lenrek
2017-12-17devbridge: fix mss clampingcinap_lenrek
- use protocol constants from ip/ip.h and ip/ipv6.h - support mss clamping for ipv6 - fix padding bug on 64 bit machines (can't use sizeof(Tcphdr))
2017-12-17ip/tinc: handle single byte noop and end-of-option-list tcp options in ↵cinap_lenrek
clampmss()
2017-12-17wifi: use protocol constants from ip/ip.h and ip/ipv6.h for dmatproxy()cinap_lenrek
2017-12-16wifi: matt damon wifi bridging supportcinap_lenrek
2017-12-15ether: allow spoofing of source mac address for bridges; used by vmxcinap_lenrek
to implement layer 2 bridges in userspace, we disable to auto filling of the source mac address when bridge mode is enabled on the connection.
2017-12-13vmx(1): fix virtio network bloomfilteraiju