Waiting for 'high priority' events with kqueue

Hi, I'm working on adding support for "high priority" events to a user space event library. Conceptually, I need the equivalent of poll() with POLLPRI, but via kqueue. FreeBSD and Apple OSX provide this via the 'EV_OOBAND' flag to EV_SET. However, OpenBSD (and NetBSD) do not. Is there a way to w

PF support for IPv6 Extension Headers

Folks, What's the level f support of PF wrt IPv6 Extension Headers? pf.conf(5) talks about an implicit block rule for packets employing the routing header, but I've not been able to find anything about e.g., * Filtering packets on a per-EH-type-occurrence (e.g. "block packets that contain a Dest

explicit_bzero in pkcs5_pbkdf2

The intermediate values calculated in hmac_sha1 as part of pkcs5_pbkdf2 are not zeroed afterwards, so we leak a single-hashed version of the key on the stack in tk[]. Also, the correct RFC defining this is RFC 2104 - HMAC: Keyed-Hashing for Message Authentication not RFC 2202 - Test Cases

Re: Simple upd(4) sensors

On Wed, Jun 10, 2015 at 5:23 AM, Martin Pieuchot wrote: > On 02/06/15(Tue) 22:36, David Higgs wrote: > > Here are some new sensors for upd(4) devices. All exist on my device > except AtRateTimeToEmpty, which still seemed a logical addition given that > AtRateTimeToFull is already present. > > -

Re: [patch]rcs: xstrdup just wrappes strdup

On Wed, May 20, 2015 at 10:55:34AM +0200, Fritjof Bornebusch wrote: > On Tue, May 19, 2015 at 08:57:06PM +0200, Fritjof Bornebusch wrote: > > Hi, > > > > xstrdup just wrappes strdup, so there is no need to call xmalloc and > > strlcpy instead. > > > Ping > Use err() instead of errx(), so e

Double free in trunk(4)

During clone/destroy stress tests on pseudo-interfaces I found a double free easily reproducible with dhclient(8) running on top of a trunk(4). The problem comes from trunk_ether_delmulti() which is almost identical to carp's version except that it always free "mc". So when you do "# ifconfig tru

LibreSSL & 2038 problem

Hi folks, I read that 64-bit time issues have been fixed in LibreSSL, and that it is 2038 ready. We need to create certificates on 64-bit systems using RFC3779 that are valid beyond year 2038. RFC3779 support was removed in LibreSSL, back in release 2.1.4. I was wondering if there would be argume

Re: samba4 slow startup, shared libs?

On 2015/06/05 13:27, Mark Kettenis wrote: > > Date: Fri, 5 Jun 2015 11:15:38 +0100 > > From: Stuart Henderson > > > > net/samba4 is in the ports tree but not currently enabled in the build, > > we're still only using samba 3.x for various reasons, but unfortunately > > samba 3 is getting decreasi

Re: don't error for duplicate identical type definitions

> Any objections? Considering I am the one who requested it, obviously no objection :-) I've successfully tested this with ports that used to need ports/lang/gcc/4.9 . So as far as I am concerned, OK for me. > Index: c-decl.c > ===

Re: Simple upd(4) sensors

On 02/06/15(Tue) 22:36, David Higgs wrote: > Here are some new sensors for upd(4) devices. All exist on my device except > AtRateTimeToEmpty, which still seemed a logical addition given that > AtRateTimeToFull is already present. > - AtRateTimeToEmpty > - RunTimeToEmpty > - NeedReplacement > - O

teach binutils about more arm barrier options

The barrier instructions were introduced with armv7, armv6 had coprocessor style barriers. The un/unst options are listed under "alternative values of option are supported for DMB and DSB, but ARM recommends that you do not use them" in the documentation. This also allows non "sy"/0xf options for