simon [Sun, 13 Feb 2011 11:09:39 +0000 (11:09 +0000)]
MFS 218633:
Fix Incorrectly formatted ClientHello SSL/TLS handshake messages could
cause OpenSSL to parse past the end of the message.
Note: Applications are only affected if they act as a server and call
SSL_CTX_set_tlsext_status_cb on the server's SSL_CTX. This includes
Apache httpd >= 2.3.3, if configured with "SSLUseStapling On".
The very quick merge is done to get this fix into 7.4 / 8.2.
hrs [Fri, 11 Feb 2011 10:50:33 +0000 (10:50 +0000)]
Add more relnotes items for 8.2R:
qpi(4) pseudo bus driver added,
acpi(4) ACPI Reset Register handling changed,
tpm(4) added,
alc(4) freeze on boot with no cable fixed,
bge(4) BCM5718 support added,
re(4) 64-bit DMA addressing support,
rl(4) statistics counter support,
sk(4) station address bug fixed,
net.link.ifqmaxlen replaced IFQ_MAXLEN,
siftr(4) Statistical Information For TCP Research module added,
ada(4) kern.cam.ada.spindown_shutdown added,
dtrace(1) userland support added,
dtruss(1) added,
gpart(8) "recover" subcommand for GPT partition tables added,
tar(1) -b now supports up to 8192 as the blocksize,
sh(1) -u nounset option's $@, $*, and $! handling changed,
periodic(8) script to find installed ports with mismatched chekcsum,
ISC BIND 9.6-ESV-R2.
Approved by: re (implicit)
Some spelling mistakes were spotted by: pluknet
hrs [Tue, 8 Feb 2011 20:39:03 +0000 (20:39 +0000)]
Add more relnotes items for 8.2R:
[amd64] VM_KMEM_SIZE_SCALE=1 by default,
[amd64,i386] CPU topology detection for Intel CPUs improved,
bge(4) TXCSUM/RXCSUM confusion fixed,
bge(4) workaround for BCM5906/6906 added,
fxp(4) TSO over VLAN on 82550 and 82551 added,
ata(4) SiI chipsets on big endian systems fixed,
b64decode(1) -r break handling fixed, and
tzdata2010o.
hrs [Tue, 8 Feb 2011 17:04:52 +0000 (17:04 +0000)]
Add more relnotes items for 8.2R:
GENERIC now has KDB and KDB_TRACE by default,
vfs.ncsizefactor and vfs.ncnegfactor added,
opencrypto XTS-AES support,
axe(4) TX packet rate improvement,
rl(4) TX packet rate under high RX load improvement,
gconcat(8) kernel crash dump support,
geli(8) metadata version bump to 4,
geli(8) kern.geom.eli.overwrites added,
geli(8) key shift added,
geli(8) XTS-AES support and enabled by default,
geli(8) kern.geom.eli.debug=-1 support,
geli(8) resize command added,
geli(8) suspend/resume command added,
geli(8) -f option added,
geli(8) -J and -j options added,
lpr(1) issue of files on ZFS fixed,
watchdogd(8) MADV_PROTECTified, and
ee(1) updated to 1.5.2.
hrs [Sun, 6 Feb 2011 07:41:27 +0000 (07:41 +0000)]
Add relnotes entries for upcoming 8.2R (first round):
[ia64] DMA bounce buffer pool increased from 256 to 1024,
[powerpc] kern.hz 100->1000,
[powerpc] SMP support on MPC7400-based machines,
[powerpc] DMA bounce buffer support,
ddb(8) reset and reboot delay support,
ddb(8) show cdev,
memguard(9) improvement to use larger KVA,
aibs(4) added in favor of acpi_aiboost(4),
coretemp(4) Xeon 5500/5600 support,
ichwd(4) Intel NM10 Express chipset support,
video4linux API support in Linux emulation subsystem,
alc(4) AR8151/8152 support,
alc(4) poor UDP performance issue fixed,
bge(4) TSO fixed,
bce(4) flow control support,
bwi(4) for BCM430x and BCM431x added (but not in GENERIC yet),
bwn(4) padding issue fixed,
cxgb(4) new sysctls: nfilters, pkt_timestamp, core_clock,
em(4) 7.1.9,
igb(4) 2.0.7,
em(4) and igb(4) statistics counters as sysctl MIB objects,
em(4) and igb(4) now supports led(4),
epair(4) linkstate support,
iwn(4) 6000 series support, firmware version 9.221.4.1,
ixgbe(4) kernel module building, version 2.2.1,
mwlfw(4) kernel module building,
rl(4) WoL support, prefer_iomap knob added,
sis(4) stability issue fixed,
ste(4) prefer_iomap knob added,
sk(4) TX checksum offloading disabled by default,
altq(4) kernel module building,
IPsec flow distribution improved,
proxy ARP issue over Netgraph interfaces fixed,
an issue with IPv6 use_defaultzone=1 fixed,
ng_patch(4) added,
ng_ether(4) issue when associated IF is moved to another vnet fixed,
TCP BW*DELAY window limiting (inflight) disabled by default,
TCP path MTU discovery when <256 octets of MTU fixed,
TCP initial window increase algorithm in RFC 3390 improved,
VNET now supports IPv4 multicast routing,
ahci(4) NCQ and PMP disabled on VIA VT8251,
arcmsr(4) updated to version 1.20.00.17,
ata(4) device hints for initial ATA mode added,
ata(4) now checks also on controller side when ata_dma_check_80pin=1,
mpt(4) now reports max I/O size to the upper layer,
twa(4) updated to version 3.8.06.003,
ZFS version 15, metaslab code updated, various bug fixes,
vfs.zfs.vdec.max_pending reduced from 35 to 10,
arp(8) -an improvement,
calendar(1) improved,
dhclient(8) 10-second period changed,
du(1) -t threshold added,
gcore(1) -f added,
get{host,net,proto}*() returns ERANGE and NS_RETURN for too small buf,
gpart(8) resize command added,
ifconfig(8) CIDR subnet width parsing improved,
jot(1) bug fix,
newsyslog(8) -S pidfile option added,
pkill(8) -l option added,
pmcstat(8) now supports file and network socket for the event source,
pom(6) -p added,
powerd(8) -m -M added,
sh(1) SIGINT handling fixed,
sh(1) supports "</dev/null &",
sleep(1) SIGINFO support,
uname(1) -o added,
vi(1) bug fix,
zfs(8) set sharenfs supports sec keyword,
periodic(8) script for zfs scrub added,
tzdata2010l,
sysinstall(8) partition size changed, and
sysinstall(8) enables getty on serial console when no VGA.
kensmith [Mon, 31 Jan 2011 17:42:31 +0000 (17:42 +0000)]
Adjust package set for 8.2-RELEASE. Packages keep being removed due
to a 2Gb file limit in the FTP mirroring system that we hope to remove
before 8.3-RELEASE so I'm not adjusting what's in stable/8 at this
point, just releng/8.2.
jfv [Thu, 27 Jan 2011 00:36:54 +0000 (00:36 +0000)]
MFC ixgbe cummulative patch from stable/8
217712 Fix a couple of incorrect variable names in the sysctl code.
217713 - Panic on the 82598 adapter due to reading FCOE registers that don't exit
- Make phy detection dynamic so adapters that support multiple types of
media can be properly identified by the interface layer
- Performance patch to the flow director (ixgbe_atr) code
- Fix intermittent data corruption on the 82599
- Add missing support code for buffer size and descriptors when doing
jumbo frames, also add 16K cluster support.
- Release RX lock when calling stack, this removes LOR problems.
217795 Remove TX_UNLOCK from the error path in local_timer, there is no LOCK
217796 Add missing case for Direct Attach 82598 in the dynamic phy detection
217797 Performance: don't run flow control shared code if nothing has changed
bschmidt [Wed, 26 Jan 2011 17:20:34 +0000 (17:20 +0000)]
MFC r217511:
Pull ieee80211_ratectl_node_init() calls from drivers into net80211.
This fixes hostap mode for at least ral(4) and run(4), because there is
no sufficient call into drivers which could be used initialize the node
related ratectl variables.
jfv [Tue, 25 Jan 2011 22:25:50 +0000 (22:25 +0000)]
MFC stable/8 r217710
- Pieces of the failure path in em_xmit got deleted along
the way, correct this.
- local_timer had a leftover TX_UNLOCK without matching
LOCK in the error path, remove it.
yongari [Mon, 24 Jan 2011 21:03:22 +0000 (21:03 +0000)]
MFC r217548:
Rework RX filter programming by providing separate handler for
DP8381[56] and SiS 900/7016 controllers. After r212119, sis(4) no
longer reinitializes controller if ALLMULTI/PROMISC was changed.
However, RX filter handling code assumed some bits of the RX filter
is programmed by driver initialization. This caused ALLMULTI/PROMISC
configuration is ignored under certain conditions.
Fix that issue by reprogramming all bits of RX filter register.
While I'm here follow recommended RX filter programming steps
recommended by National DP8381[56] data sheet(RX filter should be
is disabled before programming).
Reported by: Paul Schenkeveld < freebsd () psconsult dot nl >
Tested by: Paul Schenkeveld < freebsd () psconsult dot nl >
Approved by: re (bz)
marius [Fri, 21 Jan 2011 14:05:11 +0000 (14:05 +0000)]
MFC: r217464, r217468, r217475
Add a manual page for rgephy(4) and reference it as appropriate. The
motivation for having rgephy.4 is to document the special media option
added in r217415 (MFC'ed to releng/8.2 in r217666).
marius [Fri, 21 Jan 2011 00:02:25 +0000 (00:02 +0000)]
MFC: r217415
- Allow IFM_FLAG0 to be set indicating that auto-negotiation with manual
configuration, which is used to work around issues with certain setups
(see r161237) by default, should not be triggered as it may in turn
cause harm in some edge cases.
- Even after masking the media with IFM_GMASK the result may have bits
besides the duplex ones set so just comparing it with IFM_FDX may lead
to false negatives.
- Announce PAUSE support also for manually selected 1000BASE-T, but for
all manually selected media types only in full-duplex mode. Announce
asymmetric PAUSE support only for manually selected 1000BASE-T.
- Simplify setting the manual configuration bits to only once after we
have figured them all out. This also means we no longer unnecessarily
update the hardware along the road.
- Remove a stale comment.
Reviewed by: yongari (plus additional testing)
Approved by: re (bz)
yongari [Thu, 20 Jan 2011 17:41:24 +0000 (17:41 +0000)]
MFC r217296:
For re(4) controllers that uses new jumbo frame scheme(RTL8168C/D/E),
limit maximum RX buffer size to RE_RX_DESC_BUFLEN instead of
blindly configuring it to 16KB. Due to lack of documentation, re(4)
didn't allow jumbo frame on these controllers. However it seems
controller is confused with jumbo frame such that it can DMA the
received frame to wrong address instead of splitting it into
multiple RX buffers. Of course, this caused panic.
Since re(4) does not support jumbo frames on these controllers,
make controller drop frame that is longer than RE_RX_DESC_BUFLEN
sized frame. Fortunately RTL810x controllers, which do not support
jumbo frame, have no such issues but this change also limited
maximum RX buffer size allowed to RTL810x controllers. Allowing
16KB RX buffer for controllers that have no such capability is
meaningless.
rmacklem [Thu, 20 Jan 2011 00:54:12 +0000 (00:54 +0000)]
MFC: r217242
Fix a bug in the client side krpc where it was, sometimes
erroneously, assumed that 4 bytes of data were in the first
mbuf of a list by replacing the bcopy() with m_copydata().
Also, replace the uses of m_pullup(), which can fail for
reasons other than not enough data, with m_copydata().
For the cases where it isn't known that there is enough
data in the mbuf list, check first via m_len and m_length().
This is believed to fix a problem reported by dpd at dpdtech.com
and george+freebsd at m5p.com.
deischen [Tue, 11 Jan 2011 19:43:35 +0000 (19:43 +0000)]
MFC: 217169
Make sure to always do source address selection on
an unbound socket, regardless of any multicast options.
If an address is specified via a multicast option, then
let it override normal the source address selection.
This fixes a bug where source address selection was
not being performed when multicast options were present
but without an interface being specified.
yongari [Mon, 10 Jan 2011 19:55:30 +0000 (19:55 +0000)]
MFC r217226:
Apply DMA address space restriction to controllers that have 4GB
DMA boundary bug and runs with PCI-X mode. watchdog timeout was
observed on BCM5704 which lives behind certain PCI-X bridge(e.g.
AMD 8131 PCI-X bridge). It's still not clear whether the root
cause came from that PCI-X bridge or not. The watchdog timeout
indicates the issue is in TX path. If the bridge reorders TX
mailbox write accesses it would generate all kinds of problems but
I'm not sure. This should be revisited.
Early MFC requested by re@ for inclusion in 8.2-RC2/7.4-RC2.
Tested by: Michael L. Squires (mikes <> siralan dot org)
Approved by: re (kensmith)
marius [Wed, 5 Jan 2011 13:40:35 +0000 (13:40 +0000)]
MFC: r216891
Extend the section in which interrupts are disabled in the TLB demap
functions, otherwise if we get preempted after checking whether a certain
pmap is active on the current CPU but before disabling interrupts we might
operate on an outdated state as the pmap might have been deactivated in
the meantime. As the same issue may arises when the TLB demap function is
interrupted by a TLB demap IPI, just entering a critical section before
the check isn't sufficient so we have to fully disable interrupts instead.
bschmidt [Sun, 2 Jan 2011 10:01:29 +0000 (10:01 +0000)]
MFC r216824:
The RX path is missing a few bus_dmamap_*() calls, this results in
modification of memory which was already free'd and eventually in:
wpi0: could not map mbuf (error 12)
wpi0: wpi_rx_intr: bus_dmamap_load failed, error 12
and an usuable device.
rmacklem [Wed, 29 Dec 2010 21:04:10 +0000 (21:04 +0000)]
MFC: r216691
Since VOP_READDIR() for ZFS does not return monotonically
increasing directory offset cookies, disable the UFS related
loop that skips over directory entries at the beginning of
the block for the experimental NFS server. This loop is
required for UFS since it always returns directory entries
starting at the beginning of the block that
the requested directory offset is in. In discussion with pjd@
and mckusick@ it seems that this behaviour of UFS should maybe
change, with this fix being an interim patch until then.
This patch only fixes the experimental server, since pjd@ is
working on a patch for the regular server.
nwhitehorn [Wed, 22 Dec 2010 14:49:18 +0000 (14:49 +0000)]
MFC r216469:
Fix the overflowing livefs ISO by removing man pages from the HFS part of
the hybrid disk. This is a stopgap until a better solution can be found,
but lets the powerpc release build complete for the time being.