Re: malloc: handle to be cleaned chunks the same as regular ones

2023-02-24 Thread Theo Buehler
On Fri, Feb 24, 2023 at 08:13:13AM +0100, Otto Moerbeek wrote: > On Sat, Feb 18, 2023 at 04:12:08PM +0100, Otto Moerbeek wrote: > > > Hi, > > > > these recent sshd double free issue prompted me to look at malloc > > again. I have something bigger brewing, but this diff makes sure the > > to be cl

bgpd rtr support for ASPA

2023-02-24 Thread Claudio Jeker
For those people who enjoy pain here some code that allows bgpd to load ASPA records from a very current StayRTR cache. This implements mostly what draft-ietf-sidrops-8210bis-10 specifies. Now the version negotiation is a hot mess and the result is not pretty. In rtr.c most change is because I re

Re: [patch] Detect and mitigate uncontrolled ACPI GPE storms

2023-02-24 Thread Theo de Raadt
Brian Conway wrote: > Rationale: There have been a number of threads in the recent past on bugs@ > and misc@ with acpi0 spinning a CPU at 100% [1][2][3][4]. The immediate cause > is likely a buggy BIOS and its ACPI implementation. I do not believe this later statement. I think it is a boot-ti

Re: pledge utility

2023-02-24 Thread Theo de Raadt
There is no use case for a utility like this. pledge and unveil are during the operation of programs, not before they program runs. What you are proposing here does not actually work for anything more complicated than "ls". Mikhail wrote: > While reviewing Bob's presentation[1] on pledge and u

pledge utility

2023-02-24 Thread Mikhail
While reviewing Bob's presentation[1] on pledge and unveil I came across his idea about pledge utility which will take unveil paths, pledge promises and execute a program with the restrictions (slide 12). What do you think about the idea and implementation? [1] - https://www.openbsd.org/papers/Be

Re: [patch] Detect and mitigate uncontrolled ACPI GPE storms

2023-02-24 Thread Brian Conway
On Fri, Feb 24, 2023, at 6:52 AM, Dave Voutila wrote: > "Brian Conway" writes: > >> Greetings. I am soliciting feedback on a patch to detect and mitigate >> uncontrolled ACPI GPE interrupt storms. >> >> Rationale: There have been a number of threads in the recent past on bugs@ >> and misc@ with

Re: [patch] Detect and mitigate uncontrolled ACPI GPE storms

2023-02-24 Thread Dave Voutila
"Brian Conway" writes: > Greetings. I am soliciting feedback on a patch to detect and mitigate > uncontrolled ACPI GPE interrupt storms. > > Rationale: There have been a number of threads in the recent past on bugs@ > and misc@ with acpi0 spinning a CPU at 100% [1][2][3][4]. The immediate cau

Re: iwx(4) -77 firmware diff for testing

2023-02-24 Thread Mikhail
On Wed, Feb 22, 2023 at 03:31:28PM +0100, Stefan Sperling wrote: > Below is my work-in-progress diff to update iwx(4) to latest firmware. > Every system tracking -current should already have the new -77 firmware > images. > > The new images contain security fixes of (to me) unknown severity. > Un