CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/07/30 23:04:06 Modified files: lib/libcrypto/aes: aes.h lib/libcrypto/bf: blowfish.h lib/libcrypto/bn: bn.h lib/libcrypto/des: des.h ecb_enc.c Log message: Remove more *_options() stuff The public symbols were removed. Some prototypes and in the case of DES even the implementation remained. ok jsing
CVS: cvs.openbsd.org: src
CVSROOT:/cvs
Module name:src
Changes by: guent...@cvs.openbsd.org2023/07/30 22:01:07
Modified files:
sys/arch/amd64/amd64: cpu.c locore.S vector.S
sys/arch/amd64/conf: Makefile.amd64
sys/arch/amd64/include: codepatch.h
Log message:
On CPUs with eIBRS ("enhanced Indirect Branch Restricted Speculation")
or IBT enabled the kernel, the hardware should the attacks which
retpolines were created to prevent. In those cases, retpolines
should be a net negative for security as they are an indirect branch
gadget. They're also slower.
* use -mretpoline-external-thunk to give us control of the code
used for indirect branches
* default to using a retpoline as before, but marks it and the
other ASM kernel retpolines for code patching
* if the CPU has eIBRS, then enable it
* if the CPU has eIBRS *or* IBT, then codepatch the three different
retpolines to just indirect jumps
make clean && make config required after this
ok kettenis@
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: guent...@cvs.openbsd.org2023/07/30 19:33:57 Modified files: sys/arch/amd64/amd64: codepatch.c sys/arch/amd64/include: codepatch.h Log message: The replacement code passed to codepatch_replace() can usefully be const. suggested by bluhm@
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2023/07/30 11:28:19 Modified files: sys/arch/riscv64/dev: stfclock.c Log message: Add JH7110 I2C clocks. ok jsing@
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/07/30 10:43:53 Modified files: sys/lib/libz : zlib.h Log message: sync with userland's zlib.h
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/07/30 10:43:28 Modified files: lib/libz : compress.3 Log message: sync compress.3 with zlib.h ok jmc
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/07/30 10:42:57 Modified files: lib/libz : zlib.h Log message: Merge some doc comment updates from upstream
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2023/07/30 10:42:01 Modified files: lib/libz : gzguts.h Log message: Pull in two #undef from upstream's develop branch ok guenther
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: k...@cvs.openbsd.org2023/07/30 06:52:03 Modified files: sys/netinet6 : nd6_nbr.c Log message: Check for NULL before de-referencing a pointer, not after. More complete solution after tb@ pointed out what Coverity missed. ok tb@
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2023/07/30 06:16:21 Modified files: sys/dev/pci/drm/include/linux: gfp.h Log message: change __GFP_KSWAPD_RECLAIM from 0 to M_NOWAIT aja@ reported a panic where __i915_gpu_coredump() used a combination of gfp flags which resulted in neither M_WAITOK or M_NOWAIT.
CVS: cvs.openbsd.org: src
CVSROOT:/cvs Module name:src Changes by: yasu...@cvs.openbsd.org 2023/07/30 02:46:03 Modified files: sys/dev/pci: azalia.c Log message: Attach "Intel 700 Series HD Audio" (0x51ca). The audio device on vaio VJPK23, azalia doesn't match because its subclass is audio not hd audio. ok jsg
