Re: iked: add a tag macro for EAP identity

2017-06-01 Thread Mike Belopuhov
On 1 June 2017 at 10:57, Stuart Henderson wrote: > > I have an iked VPN box that needs to restrict access to certain > resources by user. For connections using a client cert this can be > done by using PF tags based on the ID from the cert, but this > falls short for EAP. > > This diff adds an $ea

Re: i386 clang: fix libc build

2017-06-01 Thread Mark Kettenis
> Date: Thu, 1 Jun 2017 13:33:05 +0200 > From: Christian Weisgerber > > >From kettenis@'s corresponding commit on amd64: > > Remove branch prediction hints from conditional branch instructions. > These hints are not recognized by clang's builtin assembler and > the opcode prefixes they gen

i386 clang: fix libc build

2017-06-01 Thread Christian Weisgerber
>From kettenis@'s corresponding commit on amd64: Remove branch prediction hints from conditional branch instructions. These hints are not recognized by clang's builtin assembler and the opcode prefixes they generate have been no-ops for all CPUs after the Pentium 4. Admittedly, CPUs <= Pe

Re: efiboot serial console support

2017-06-01 Thread YASUOKA Masahiko
Yes, I think this is the proper fix. Please commit. ok yasuoka On Thu, 1 Jun 2017 10:41:57 +0200 Patrick Wildt wrote: > On Thu, Jun 01, 2017 at 10:27:28AM +0200, Stefan Sperling wrote: >> On Tue, May 30, 2017 at 02:31:48PM +0200, YASUOKA Masahiko wrote: >> > + status = EFI_CALL(BS->LocateHandl

fix missed beacon handling bugs in iwn(4) and iwm(4)

2017-06-01 Thread Stefan Sperling
Prevent both drivers from sending additional probe requests while we're already waiting for some response from the AP. Check the ic_mgt_timer for this purpose. Fixes misbehaviour when hardware sends many "missed beacon" interrupts. We ended up flooding the AP with probe requests because the ic_mgt_

iked: add a tag macro for EAP identity

2017-06-01 Thread Stuart Henderson
I have an iked VPN box that needs to restrict access to certain resources by user. For connections using a client cert this can be done by using PF tags based on the ID from the cert, but this falls short for EAP. This diff adds an $eapid macro that can be used instead. If eapid isn't set (non-EAP

Re: efiboot serial console support

2017-06-01 Thread Patrick Wildt
On Thu, Jun 01, 2017 at 10:27:28AM +0200, Stefan Sperling wrote: > On Tue, May 30, 2017 at 02:31:48PM +0200, YASUOKA Masahiko wrote: > > + status = EFI_CALL(BS->LocateHandle, ByProtocol, &serio_guid, 0, &sz, 0); > > + if (status == EFI_BUFFER_TOO_SMALL) { > > + handles = alloc(sz); >

Re: efiboot serial console support

2017-06-01 Thread Stefan Sperling
On Tue, May 30, 2017 at 02:31:48PM +0200, YASUOKA Masahiko wrote: > + status = EFI_CALL(BS->LocateHandle, ByProtocol, &serio_guid, 0, &sz, 0); > + if (status == EFI_BUFFER_TOO_SMALL) { > + handles = alloc(sz); > + status = EFI_CALL(BS->LocateHandle, ByProtocol, &seri

Re: let's add PF_LOCK()

2017-06-01 Thread Alexandr Nedvedicky
Hello, > > diff -r 6abbb123112a .hgtags > > --- /dev/null Thu Jan 01 00:00:00 1970 + > > +++ b/.hgtags Wed May 31 10:42:50 2017 +0200 > > @@ -0,0 +1,1 @@ > > +d545881e2652dbc0c057691a39a095bce92f441f pf-lock.baseline > > Please be careful and don't include VCS's goo in diffs. > I