Re: tunnel interface rxprio config

2019-04-17 Thread Claudio Jeker
On Sun, Apr 14, 2019 at 05:33:07PM +1000, David Gwynne wrote: > ive been working on RFC 2983 support, with extended functionality. > > rfc 2983 is "Differentiated Services and Tunnels", and discusses where > prio values should go and come from on tunnel ingress and egress. we > currentl support se

Re: [PATCH] [www] cvsync.html - use class="cmdbox"

2019-04-17 Thread Theo Buehler
On Wed, Apr 17, 2019 at 11:41:18PM +0100, Raf Czlonka wrote: > On Wed, Apr 17, 2019 at 10:53:54PM BST, Theo Buehler wrote: > > On Wed, Apr 17, 2019 at 11:34:56PM +0200, Solene Rapenne wrote: > > > On Wed, Apr 17, 2019 at 09:55:26PM +0100, Raf Czlonka wrote: > > > > Hi all, > > > > > > > > Similar

Re: update to PF pfctl(8) and pf.conf(5) manpages

2019-04-17 Thread Jason McIntyre
On Thu, Apr 18, 2019 at 02:40:09AM +0200, Alexandr Nedvedicky wrote: > Hello Ingo, > > thank you for all your suggestions. I've accepted all of them. > updated diff is below. > > let me just share some thoughts and clarifications here. > morning. i have to say upfront that i dislike this idea

Re: dwxe: resetting interface on watchdog timeout

2019-04-17 Thread Sebastien Marie
On Wed, Apr 17, 2019 at 04:32:04PM -0700, Jungle Boogie wrote: > On Wed 17 Apr 2019 9:44 AM, Sebastien Marie wrote: > > Hi, > > > > With a pine64, I am experimenting regulary dwxe watchdog > > timeout. Usually it is a sign that something doesn't work in the driver > > itself. > > Good to know th

Re: update to PF pfctl(8) and pf.conf(5) manpages

2019-04-17 Thread Alexandr Nedvedicky
Hello Ingo, thank you for all your suggestions. I've accepted all of them. updated diff is below. let me just share some thoughts and clarifications here. > > I don't feel strongly about mentioning the defaults either way. > But i tend to think that if something is important enough to provide

Re: dwxe: resetting interface on watchdog timeout

2019-04-17 Thread Jungle Boogie
On Wed 17 Apr 2019 9:44 AM, Sebastien Marie wrote: Hi, With a pine64, I am experimenting regulary dwxe watchdog timeout. Usually it is a sign that something doesn't work in the driver itself. Good to know this isn't just affecting my three devices. Let's hope this patch gets some feedback and

Re: [PATCH] [www] cvsync.html - use class="cmdbox"

2019-04-17 Thread Raf Czlonka
On Wed, Apr 17, 2019 at 10:53:54PM BST, Theo Buehler wrote: > On Wed, Apr 17, 2019 at 11:34:56PM +0200, Solene Rapenne wrote: > > On Wed, Apr 17, 2019 at 09:55:26PM +0100, Raf Czlonka wrote: > > > Hi all, > > > > > > Similar to other pages[0][1], use class="cmdbox", add prompt character > > > wher

Re: [PATCH] [www] cvsync.html - use class="cmdbox"

2019-04-17 Thread Theo Buehler
On Wed, Apr 17, 2019 at 11:34:56PM +0200, Solene Rapenne wrote: > On Wed, Apr 17, 2019 at 09:55:26PM +0100, Raf Czlonka wrote: > > Hi all, > > > > Similar to other pages[0][1], use class="cmdbox", add prompt character > > where appropriate, and remove superfluous indentation while there. > > > >

Re: [PATCH] [www] cvsync.html - use class="cmdbox"

2019-04-17 Thread Solene Rapenne
On Wed, Apr 17, 2019 at 09:55:26PM +0100, Raf Czlonka wrote: > Hi all, > > Similar to other pages[0][1], use class="cmdbox", add prompt character > where appropriate, and remove superfluous indentation while there. > > [0] https://www.openbsd.org/anoncvs.html > [1] https://www.openbsd.org/ddb.htm

[PATCH] [www] cvsync.html - use class="cmdbox"

2019-04-17 Thread Raf Czlonka
Hi all, Similar to other pages[0][1], use class="cmdbox", add prompt character where appropriate, and remove superfluous indentation while there. [0] https://www.openbsd.org/anoncvs.html [1] https://www.openbsd.org/ddb.html Regards, Raf Index: cvsync.html ==

Re: libevent: Protect integer multiplications (min_heap)

2019-04-17 Thread Otto Moerbeek
On Wed, Apr 17, 2019 at 11:34:36AM -0400, Ted Unangst wrote: > Theo de Raadt wrote: > > So the diff presented falls short of what should be done here; > > insufficient lines deleted. > > we're not getting to the fun part yet, but this unfold some complex operations > to assist human readers. > >

Re: dwxe: resetting interface on watchdog timeout

2019-04-17 Thread Mike Larkin
On Wed, Apr 17, 2019 at 09:44:43AM +0200, Sebastien Marie wrote: > Hi, > > With a pine64, I am experimenting regulary dwxe watchdog > timeout. Usually it is a sign that something doesn't work in the driver > itself. > > The problem I am facing currently is when watchdog timeout occurs, > the inte

Re: libevent: Protect integer multiplications (min_heap)

2019-04-17 Thread Ted Unangst
Theo de Raadt wrote: > So the diff presented falls short of what should be done here; > insufficient lines deleted. we're not getting to the fun part yet, but this unfold some complex operations to assist human readers. -min_child -= min_child == s->n || min_heap_elem_greater(s->p[min_ch

Re: Switch powerpc to big PIC

2019-04-17 Thread Mark Kettenis
> Date: Tue, 5 Feb 2019 21:57:31 +0100 (CET) > From: Mark Kettenis > > The architecture already has big PIE. The issue is that clang doesn't > support secure-plt for small pic. I haven't entirely figured out > what's going on here and we probably need some further fixes to clang > here. On the

Re: pfctl should check pfctl.astack is not overrun

2019-04-17 Thread Klemens Nanni
On Wed, Apr 17, 2019 at 03:06:16PM +0200, Petr Hoffmann wrote: > I noticed pfctl crashes on segfault when anchors go too deep: Yes, I've already seen this at some point but didn't get around to fixing it properly - thanks for the reminder. > It seems there is no check we fit into pfctl.astack[].

pfctl should check pfctl.astack is not overrun

2019-04-17 Thread Petr Hoffmann
Hi, I noticed pfctl crashes on segfault when anchors go too deep: --8<--- $ cat ~/pf.conf | head -5 anchor foo { anchor foo { anchor foo { anchor foo { anchor foo { $ grep anchor ~/pf.conf | wc -l   66 $ /sbin/pfctl -nf ~/pf.conf Segmentation fault (core dump

dwxe: resetting interface on watchdog timeout

2019-04-17 Thread Sebastien Marie
Hi, With a pine64, I am experimenting regulary dwxe watchdog timeout. Usually it is a sign that something doesn't work in the driver itself. The problem I am facing currently is when watchdog timeout occurs, the interface is unusable. And so I need another system connected permanently to serial i