Re: rpki-client: enforce RSC compliant filenames

2022-05-09 Thread Claudio Jeker
On Tue, May 10, 2022 at 08:38:32AM +0200, Theo Buehler wrote: > On Tue, May 10, 2022 at 08:28:10AM +0200, Claudio Jeker wrote: > > On Tue, May 10, 2022 at 08:05:00AM +0200, Theo Buehler wrote: > > > This moves valid_filename() to validate.c and splits out a helper > > > portable_filename() which ca

Re: rpki-client: enforce RSC compliant filenames

2022-05-09 Thread Theo Buehler
On Tue, May 10, 2022 at 08:28:10AM +0200, Claudio Jeker wrote: > On Tue, May 10, 2022 at 08:05:00AM +0200, Theo Buehler wrote: > > This moves valid_filename() to validate.c and splits out a helper > > portable_filename() which can be used from the RSC code. While moving > > valid_filename() is not

Re: rpki-client: enforce RSC compliant filenames

2022-05-09 Thread Claudio Jeker
On Tue, May 10, 2022 at 08:05:00AM +0200, Theo Buehler wrote: > This moves valid_filename() to validate.c and splits out a helper > portable_filename() which can be used from the RSC code. While moving > valid_filename() is not necessary, I thought it makes sense to keep the > two functions next t

rpki-client: enforce RSC compliant filenames

2022-05-09 Thread Theo Buehler
This moves valid_filename() to validate.c and splits out a helper portable_filename() which can be used from the RSC code. While moving valid_filename() is not necessary, I thought it makes sense to keep the two functions next to each other. I could not find a short name with valid_ prefix for po

Re: [External] : Re: move memory allocation in pfr_add_tables() outside of NET_LOCK()/PF_LOCK()

2022-05-09 Thread Alexandr Nedvedicky
Hello, On Tue, May 10, 2022 at 12:18:15AM +0200, Alexander Bluhm wrote: > On Mon, May 09, 2022 at 11:11:03PM +0200, Alexandr Nedvedicky wrote: > > > ... and then we insert a destroyed p > > > > yes. you are right. new diff addresses that with change as follows: > > > > @@ -1542,9 +1542,8 @@ pf

Re: [External] : Re: move memory allocation in pfr_add_tables() outside of NET_LOCK()/PF_LOCK()

2022-05-09 Thread Alexander Bluhm
On Mon, May 09, 2022 at 11:11:03PM +0200, Alexandr Nedvedicky wrote: > > ... and then we insert a destroyed p > > yes. you are right. new diff addresses that with change as follows: > > @@ -1542,9 +1542,8 @@ pfr_add_tables(struct pfr_table ...) > pfr_destroy_

Re: [External] : Re: pf.conf(5) clarify ICMP sloppy state handling

2022-05-09 Thread Stuart Henderson
On 2022/05/09 23:16, Alexandr Nedvedicky wrote: > Hello, > > I'm sorry I was too fast with commit. I've just committed > what's been suggested by bluhm@: That's totally ok, my diff is on top and wasn't written until you committed yours :-) > @@ -2186,6 +2186,7 @@ It cannot be used with >

Re: [External] : Re: pf.conf(5) clarify ICMP sloppy state handling

2022-05-09 Thread Alexander Bluhm
On Mon, May 09, 2022 at 10:08:24PM +0100, Stuart Henderson wrote: > This is helpful, but because it's so surprising that "pass proto icmp" > doesn't pass all icmp traffic, I think it would help to mention it where > "proto icmp" is described too. > > Also, the top of the text about "sloppy" just t

Re: [External] : Re: pf.conf(5) clarify ICMP sloppy state handling

2022-05-09 Thread Alexandr Nedvedicky
Hello, I'm sorry I was too fast with commit. I've just committed what's been suggested by bluhm@: @@ -2186,6 +2186,7 @@ It cannot be used with .Cm modulate state or .Cm synproxy state . +With this option ICMP replies can create states. .It Ar timeout seconds Chang

Re: [External] : Re: move memory allocation in pfr_add_tables() outside of NET_LOCK()/PF_LOCK()

2022-05-09 Thread Alexandr Nedvedicky
Hello, thanks for taking a look. > > + SLIST_FOREACH(q, &auxq, pfrkt_workq) { > > + if (!pfr_ktable_compare(p, q)) { > > + /* > > +* We need no lock here, because `p` is empty, > > +* th

Re: [External] : Re: pf.conf(5) clarify ICMP sloppy state handling

2022-05-09 Thread Stuart Henderson
This is helpful, but because it's so surprising that "pass proto icmp" doesn't pass all icmp traffic, I think it would help to mention it where "proto icmp" is described too. Also, the top of the text about "sloppy" just talks about the sloppy TCP connection tracker, I think perhaps it would be be

Re: ssh-add(1): fix NULL in fprintf

2022-05-09 Thread Martin Vahlensieck
On Mon, May 09, 2022 at 10:42:29AM -0600, Theo de Raadt wrote: > Martin Vahlensieck wrote: > > > if (!qflag) { > > - fprintf(stderr, "Identity removed: %s %s (%s)\n", path, > > - sshkey_type(key), comment); > > + fprintf(stderr, "Identity removed: %s %s%s%s%s

Re: move memory allocation in pfr_add_tables() outside of NET_LOCK()/PF_LOCK()

2022-05-09 Thread Alexander Bluhm
On Sun, May 08, 2022 at 06:15:49PM +0200, Alexandr Nedvedicky wrote: > OK ? 3 comments inline > 8<---8<---8<--8< > diff --git a/sys/net/pf_ioctl.c b/sys/net/pf_ioctl.c > index 8315b115474..1f036e1368f 100644 > --- a/sys/net/pf_ioctl.c > +++

Re: ssh-add(1): fix NULL in fprintf

2022-05-09 Thread Theo de Raadt
Martin Vahlensieck wrote: > if (!qflag) { > - fprintf(stderr, "Identity removed: %s %s (%s)\n", path, > - sshkey_type(key), comment); > + fprintf(stderr, "Identity removed: %s %s%s%s%s\n", path, > + sshkey_type(key), comment ? " (" : "

ssh-add(1): fix NULL in fprintf

2022-05-09 Thread Martin Vahlensieck
Hi When removing an identity from the agent using the private key file, ssh-add first tries to find the public key file. If that fails, it loads the public key from the private key file, but no comment is loaded. This means comment is NULL when it is used inside delete_one to print `Identity rem

Re: [External] : net lock priority

2022-05-09 Thread Alexandr Nedvedicky
Hello, On Mon, May 09, 2022 at 04:34:00PM +0200, Alexander Bluhm wrote: > On Sun, May 08, 2022 at 10:54:01PM +0200, Alexandr Nedvedicky wrote: > > what bothers me is the situation where there are > > more than one reader. The line 350 is executed by > > the first reader which drops the

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Job Snijders
On Mon, May 09, 2022 at 05:08:53PM +0200, Theo Buehler wrote: > On Mon, May 09, 2022 at 02:59:06PM +0200, Claudio Jeker wrote: > > On Mon, May 09, 2022 at 12:53:05PM +0200, Theo Buehler wrote: > > > Regarding the spec: > > > > > > * isn't it a bit unfortunate that the ResourceBlock contains an >

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Theo Buehler
On Mon, May 09, 2022 at 01:07:17PM +, Job Snijders wrote: > On Mon, May 09, 2022 at 12:11:22PM +0200, Claudio Jeker wrote: > > why does the draft allow for optional filenames? What the heck is the > > digest then covering some random gunk? > > Yes, that is entirely possible. Some folks in the

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Theo Buehler
On Mon, May 09, 2022 at 02:59:06PM +0200, Claudio Jeker wrote: > On Mon, May 09, 2022 at 12:53:05PM +0200, Theo Buehler wrote: > > Regarding the spec: > > > > * isn't it a bit unfortunate that the ResourceBlock contains an ipAddrBlocks > > member which isn't an IPAddrBlocks as in RFC 3779 but ra

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Claudio Jeker
On Mon, May 09, 2022 at 01:07:17PM +, Job Snijders wrote: > On Mon, May 09, 2022 at 12:11:22PM +0200, Claudio Jeker wrote: > > why does the draft allow for optional filenames? What the heck is the > > digest then covering some random gunk? > > Yes, that is entirely possible. Some folks in the

Re: [External] : net lock priority

2022-05-09 Thread Alexander Bluhm
On Sun, May 08, 2022 at 10:54:01PM +0200, Alexandr Nedvedicky wrote: > what bothers me is the situation where there are > more than one reader. The line 350 is executed by > the first reader which drops the lock. So the process > woken up by wakeup(rwl) are going to find out the >

vmm: give a lonely enum a friend, fixing `vmctl receive`

2022-05-09 Thread Dave Voutila
tech@, Another vmm/vmd update: fix `vmctl receive` on Intel hosts by adding another fault enum value to disambiguate fault reasons. It's expected that the guest will trigger nested page faults after being received by vmd. When you connect to the vm using `vmctl console` and interact with the gues

add support for AX210/AX211 devices to iwx(4)

2022-05-09 Thread Stefan Sperling
This patch adds support for AX210/AX211 devices to iwx(4). While this patch attempts to make a couple of devices work which are part of this device family, so far only one specific AX210 device has been tested: iwx0 at pci4 dev 0 function 0 "Intel Wi-Fi 6 AX210" rev 0x1a, msix iwx0: hw rev 0x420,

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Job Snijders
On Mon, May 09, 2022 at 12:11:22PM +0200, Claudio Jeker wrote: > why does the draft allow for optional filenames? What the heck is the > digest then covering some random gunk? Yes, that is entirely possible. Some folks in the working group requested the filename to be optional, I abided. In inter-

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Claudio Jeker
On Mon, May 09, 2022 at 12:53:05PM +0200, Theo Buehler wrote: > > As the various same-named-but-different 'parse' structs are not easily > > interchangeable without more refactoring, I marked them "XXX:". Perhaps > > we can work on that in tree? > > I'm fine with fixing that in-tree. Sorry about t

Re: uvm: Consider BUFPAGES_DEFICIT in swap_shortage

2022-05-09 Thread Martin Pieuchot
On 05/05/22(Thu) 10:56, Bob Beck wrote: > On Thu, May 05, 2022 at 10:16:23AM -0600, Bob Beck wrote: > > Ugh. You???re digging in the most perilous parts of the pile. > > > > I will go look with you??? sigh. (This is not yet an ok for that.) > > > > > On May 5, 2022, at 7:53 AM, Martin Pieuchot

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Theo Buehler
> As the various same-named-but-different 'parse' structs are not easily > interchangeable without more refactoring, I marked them "XXX:". Perhaps > we can work on that in tree? I'm fine with fixing that in-tree. Sorry about this mistake, I made it many times. I wish the various 'struct parse' wer

Re: rpki-client: add support for draft-ietf-sidrops-rpki-rsc in filemode

2022-05-09 Thread Claudio Jeker
On Sun, May 08, 2022 at 08:05:08PM +, Job Snijders wrote: > Dear Theo, fellow developers, > > Many thanks for the first review pass, much appreciated. > > > This is a good first step. I have a few initial comments inline. Once you > > fix > > those, review of the rest will be easier. > > >