Re: realloc(3) and MALLOC_MOVE

2017-01-27 Thread Otto Moerbeek
On Tue, Jan 24, 2017 at 10:07:23AM +0100, Otto Moerbeek wrote: > Hi, > > malloc(3) has the nice feature to move (subject to alignment > constraints) allocations that are between the max chunk size (half a > page) and a page size towards the end of the allocated page, to catch > more buffer overfl

Re: Help with the NET_LOCK()

2017-01-27 Thread Hrvoje Popovski
On 27.1.2017. 20:33, David Hill wrote: > On Fri, Jan 27, 2017 at 08:09:36PM +0100, Hrvoje Popovski wrote: >> On 27.1.2017. 19:14, David Hill wrote: splassert: yield: want 0 have 1 Starting stack trace... yield() at yield+0xac pool_get() at pool_get+0x1ca m_get() at m_get+0x

Re: [WWW] Reverse chronological order for faq/current.html

2017-01-27 Thread Raf Czlonka
On Tue, Jan 24, 2017 at 10:29:30AM GMT, Theo de Raadt wrote: > > On 2017/01/24 09:06, Raf Czlonka wrote: > > > Another way to look at it is, "Let me have a look if there's anything > > > new on faq/current.html - I open the page and, *without* moving > > > forward, can see straight away if somethin

Re: [WWW] Reverse chronological order for faq/current.html

2017-01-27 Thread Raf Czlonka
On Tue, Jan 24, 2017 at 10:26:21AM GMT, Stuart Henderson wrote: > On 2017/01/24 09:06, Raf Czlonka wrote: > > Another way to look at it is, "Let me have a look if there's anything > > new on faq/current.html - I open the page and, *without* moving > > forward, can see straight away if something new

Re: [WWW] Reverse chronological order for faq/current.html

2017-01-27 Thread Raf Czlonka
On Tue, Jan 24, 2017 at 01:13:03PM GMT, Nick Holland wrote: > On 01/24/17 04:06, Raf Czlonka wrote: > ... > > Another way to look at it is, "Let me have a look if there's anything > > new on faq/current.html - I open the page and, *without* moving > > forward, can see straight away if something new

Re: [WWW] Reverse chronological order for faq/current.html

2017-01-27 Thread Raf Czlonka
On Tue, Jan 24, 2017 at 09:13:51AM GMT, STeve Andre' wrote: > On 01/24/17 04:08, Theo de Raadt wrote: > > > Another way to look at it is, "Let me have a look if there's anything > > > new on faq/current.html - I open the page and, *without* moving > > > forward, can see straight away if something n

Re: [WWW] Reverse chronological order for faq/current.html

2017-01-27 Thread Raf Czlonka
On Tue, Jan 24, 2017 at 09:08:07AM GMT, Theo de Raadt wrote: > > Another way to look at it is, "Let me have a look if there's anything > > new on faq/current.html - I open the page and, *without* moving > > forward, can see straight away if something new has been added. No? > > Then I move on with

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Michael W. Lucas
On Fri, Jan 27, 2017 at 09:53:25PM +, Bob Beck wrote: >On Fri, Jan 27, 2017 at 14:12 Michael W. Lucas > Or a misconfiguration. ? show configs Configs follow. # cat /etc/httpd.conf include "/etc/sites/www3.conf" include "/etc/sites/www4.conf" www3.conf: server "www3.mwlucas.org" {

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Bob Beck
On Fri, Jan 27, 2017 at 15:23 Stuart Henderson wrote: > On 2017/01/27 22:09, Bob Beck wrote: > > > I think you have more issues than ocsp. if thats the same host you can't > > > have two different tls certs on the same ip. and you have them both on > > > *443 > > > > > > try using a separate ip

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Stuart Henderson
On 2017/01/27 22:09, Bob Beck wrote: > I think you have more issues than ocsp. if thats the same host you can't > have two different tls certs on the same ip. and you have them both on > *443 > > try using a separate ip for each Wasn't SNI support added to httpd already?

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Bob Beck
I think you have more issues than ocsp. if thats the same host you can't have two different tls certs on the same ip. and you have them both on *443 try using a separate ip for each On Fri, Jan 27, 2017 at 15:03 Michael W. Lucas wrote: > On Fri, Jan 27, 2017 at 09:53:25PM +, Bob Beck wr

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Bob Beck
On Fri, Jan 27, 2017 at 14:12 Michael W. Lucas wrote: > On Fri, Jan 27, 2017 at 02:50:29PM -0500, Michael W. Lucas wrote: > > > On Fri, Jan 27, 2017 at 06:49:06PM +, Stuart Henderson wrote: > > > > That looks like a web server bug, it shouldn't return a staple > > > Or a misconfiguration. sh

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Michael W. Lucas
On Fri, Jan 27, 2017 at 02:50:29PM -0500, Michael W. Lucas wrote: > On Fri, Jan 27, 2017 at 06:49:06PM +, Stuart Henderson wrote: > > That looks like a web server bug, it shouldn't return a staple > > in that case. What software are you using for that? > > > > OpenBSD httpd, of course. amd6

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Michael W. Lucas
On Fri, Jan 27, 2017 at 06:49:06PM +, Stuart Henderson wrote: > That looks like a web server bug, it shouldn't return a staple > in that case. What software are you using for that? OpenBSD httpd, of course. amd64 snapshot downloaded yesterday from ftp3.usa.openbsd.org. ==ml -- Michael W.

Re: Help with the NET_LOCK()

2017-01-27 Thread David Hill
On Fri, Jan 27, 2017 at 08:09:36PM +0100, Hrvoje Popovski wrote: > On 27.1.2017. 19:14, David Hill wrote: > >> splassert: yield: want 0 have 1 > >> Starting stack trace... > >> yield() at yield+0xac > >> pool_get() at pool_get+0x1ca > >> m_get() at m_get+0x28 > >> ip_ctloutput() at ip_ctloutput+0x4

Re: Help with the NET_LOCK()

2017-01-27 Thread Hrvoje Popovski
On 27.1.2017. 19:14, David Hill wrote: >> splassert: yield: want 0 have 1 >> Starting stack trace... >> yield() at yield+0xac >> pool_get() at pool_get+0x1ca >> m_get() at m_get+0x28 >> ip_ctloutput() at ip_ctloutput+0x4bf >> sogetopt() at sogetopt+0x7e >> sys_getsockopt() at sys_getsockopt+0xbf >>

Re: err with multiple TLS sites but one OCSP?

2017-01-27 Thread Stuart Henderson
On 2017/01/27 13:10, Michael W. Lucas wrote: > Hi, > > Not sure if this is an expected part of OCSP or a bug. > > I've configured two TLS sites on one host, one with OCSP stapling > (www3.mwlucas.org) and one without (www4.mwlucas.org). The OCSP site > works fine, but the non-OCSP site generates

Re: Help with the NET_LOCK()

2017-01-27 Thread David Hill
On Wed, Jan 25, 2017 at 11:14:57AM -0500, David Hill wrote: > On Wed, Jan 25, 2017 at 04:32:25PM +1000, Martin Pieuchot wrote: > > I just enabled the NET_LOCK() again and I'm looking for test reports. > > Please go build a kernel from sources or wait for the next snapshot, > > run it and report bac

err with multiple TLS sites but one OCSP?

2017-01-27 Thread Michael W. Lucas
Hi, Not sure if this is an expected part of OCSP or a bug. I've configured two TLS sites on one host, one with OCSP stapling (www3.mwlucas.org) and one without (www4.mwlucas.org). The OCSP site works fine, but the non-OCSP site generates an err. It *appears* that queries to the non-OCSP site ret

Re: add support for multiple transmit queues on interfaces

2017-01-27 Thread Simon Mages
I did some tests. The performance did not change. I think this is the expected behaviour. BR Simon 2017-01-23 7:35 GMT+01:00, David Gwynne : > hrvoje popovski hit a problem where the kernel would panic under load. > > i mistakenly called an interfaces qstart routine directly from > if_enqueue ra

Re: Scheduler ping-pong with preempt()

2017-01-27 Thread Simon Mages
Hi, i did my usual tests. current: req/s: 3898.20 variance: 0.84 current+diff: req/s: 3928.80 variance: 0.45 With this diff the messurements have been much more stable. The variance of the req/s messurements is now a lot smaller. Also the performance has increased. For the bandwidth/s case thi

retire ip6protosw

2017-01-27 Thread Alexander Bluhm
Hi, If I change the IPv4 pr_input function to the way IPv6 is implemented, I can get rid of struct ip6protosw and some wrapper functions. I think it more consistent to have less different structures. Most conversions are mechanical. Where the IPv4 and IPv6 fucntions were identical, I removed on

Re: lld: fix library search

2017-01-27 Thread Patrick Wildt
On Fri, Jan 27, 2017 at 10:05:38PM +1000, Patrick Wildt wrote: > Hi, > > Apparently if you convert a twine to a string (using str() on the Twine) > and setting that to a StringRef variable creates a broken string. This > means that the code never runs and thus never finds libc.so.x.y. It > falls

lld: fix library search

2017-01-27 Thread Patrick Wildt
Hi, Apparently if you convert a twine to a string (using str() on the Twine) and setting that to a StringRef variable creates a broken string. This means that the code never runs and thus never finds libc.so.x.y. It falls back to picking up the .a files instead. Apparently you have to provide a