![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.netbsd.org] / src / sys / kern
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.5.12.1 / (download) - annotate - [select for diffs], Tue Apr 17 00:08:26 2012 UTC (5 weeks, 4 days ago) by yamt
Branch: yamt-pagecache
Changes since 1.5: +4 -3
lines
Diff to previous 1.5 (colored) next main 1.6 (colored)
sync with head
Revision 1.6 / (download) - annotate - [select for diffs], Sat Nov 19 22:51:25 2011 UTC (6 months ago) by tls
Branch: MAIN
CVS Tags: yamt-pagecache-base5,
yamt-pagecache-base4,
netbsd-6-base,
netbsd-6,
jmcneill-usbmp-pre-base2,
jmcneill-usbmp-base9,
jmcneill-usbmp-base8,
jmcneill-usbmp-base7,
jmcneill-usbmp-base6,
jmcneill-usbmp-base5,
jmcneill-usbmp-base4,
jmcneill-usbmp-base3,
jmcneill-usbmp-base2,
jmcneill-usbmp-base,
jmcneill-usbmp,
HEAD
Changes since 1.5: +4 -3
lines
Diff to previous 1.5 (colored)
First step of random number subsystem rework described in <20111022023242.BA26F14A158@mail.netbsd.org>. This change includes the following: An initial cleanup and minor reorganization of the entropy pool code in sys/dev/rnd.c and sys/dev/rndpool.c. Several bugs are fixed. Some effort is made to accumulate entropy more quickly at boot time. A generic interface, "rndsink", is added, for stream generators to request that they be re-keyed with good quality entropy from the pool as soon as it is available. The arc4random()/arc4randbytes() implementation in libkern is adjusted to use the rndsink interface for rekeying, which helps address the problem of low-quality keys at boot time. An implementation of the FIPS 140-2 statistical tests for random number generator quality is provided (libkern/rngtest.c). This is based on Greg Rose's implementation from Qualcomm. A new random stream generator, nist_ctr_drbg, is provided. It is based on an implementation of the NIST SP800-90 CTR_DRBG by Henric Jungheim. This generator users AES in a modified counter mode to generate a backtracking-resistant random stream. An abstraction layer, "cprng", is provided for in-kernel consumers of randomness. The arc4random/arc4randbytes API is deprecated for in-kernel use. It is replaced by "cprng_strong". The current cprng_fast implementation wraps the existing arc4random implementation. The current cprng_strong implementation wraps the new CTR_DRBG implementation. Both interfaces are rekeyed from the entropy pool automatically at intervals justifiable from best current cryptographic practice. In some quick tests, cprng_fast() is about the same speed as the old arc4randbytes(), and cprng_strong() is about 20% faster than rnd_extract_data(). Performance is expected to improve. The AES code in src/crypto/rijndael is no longer an optional kernel component, as it is required by cprng_strong, which is not an optional kernel component. The entropy pool output is subjected to the rngtest tests at startup time; if it fails, the system will reboot. There is approximately a 3/10000 chance of a false positive from these tests. Entropy pool _input_ from hardware random numbers is subjected to the rngtest tests at attach time, as well as the FIPS continuous-output test, to detect bad or stuck hardware RNGs; if any are detected, they are detached, but the system continues to run. A problem with rndctl(8) is fixed -- datastructures with pointers in arrays are no longer passed to userspace (this was not a security problem, but rather a major issue for compat32). A new kernel will require a new rndctl. The sysctl kern.arandom() and kern.urandom() nodes are hooked up to the new generators, but the /dev/*random pseudodevices are not, yet. Manual pages for the new kernel interfaces are forthcoming.
Revision 1.2.6.3 / (download) - annotate - [select for diffs], Thu Mar 11 15:04:17 2010 UTC (2 years, 2 months ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.2.6.2: +5 -9
lines
Diff to previous 1.2.6.2 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)
sync with head
Revision 1.5 / (download) - annotate - [select for diffs], Mon Feb 1 16:14:58 2010 UTC (2 years, 3 months ago) by njoly
Branch: MAIN
CVS Tags: yamt-pagecache-base3,
yamt-pagecache-base2,
yamt-pagecache-base,
yamt-nfs-mp-base9,
yamt-nfs-mp-base11,
yamt-nfs-mp-base10,
uebayasi-xip-base4,
uebayasi-xip-base3,
uebayasi-xip-base2,
uebayasi-xip-base1,
uebayasi-xip-base,
uebayasi-xip,
rmind-uvmplock-nbase,
rmind-uvmplock-base,
rmind-uvmplock,
matt-mips64-premerge-20101231,
jruoho-x86intr-base,
jruoho-x86intr,
jmcneill-audiomp3-base,
jmcneill-audiomp3,
cherry-xenmp-base,
cherry-xenmp,
bouyer-quota2-nbase,
bouyer-quota2-base,
bouyer-quota2
Branch point for: yamt-pagecache
Changes since 1.4: +5 -9
lines
Diff to previous 1.4 (colored)
Switch SSP init output to aprint_debug() instead of aprint_normal() under DIAGNOSTIC ifdefs.
Revision 1.4 / (download) - annotate - [select for diffs], Mon Feb 1 12:58:04 2010 UTC (2 years, 3 months ago) by njoly
Branch: MAIN
Changes since 1.3: +5 -5
lines
Diff to previous 1.3 (colored)
Aprintify.
Revision 1.3 / (download) - annotate - [select for diffs], Sat Dec 26 21:41:14 2009 UTC (2 years, 4 months ago) by elad
Branch: MAIN
Changes since 1.2: +3 -3
lines
Diff to previous 1.2 (colored)
Put a space after ':'...
Revision 1.2.8.2 / (download) - annotate - [select for diffs], Wed May 13 17:21:56 2009 UTC (3 years ago) by jym
Branch: jym-xensuspend
Changes since 1.2.8.1: +78 -0
lines
Diff to previous 1.2.8.1 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)
Sync with HEAD. Commit is split, to avoid a "too many arguments" protocol error.
Revision 1.2.6.2 / (download) - annotate - [select for diffs], Mon May 4 08:13:47 2009 UTC (3 years ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.2.6.1: +78 -0
lines
Diff to previous 1.2.6.1 (colored) to branchpoint 1.2 (colored)
sync with head.
Revision 1.2.4.3 / (download) - annotate - [select for diffs], Sun Mar 15 19:49:34 2009 UTC (3 years, 2 months ago) by snj
Branch: netbsd-5
CVS Tags: netbsd-5-1-RELEASE,
netbsd-5-1-RC4,
netbsd-5-1-RC3,
netbsd-5-1-RC2,
netbsd-5-1-RC1,
netbsd-5-1-2-RELEASE,
netbsd-5-1-1-RELEASE,
netbsd-5-1,
netbsd-5-0-RELEASE,
netbsd-5-0-RC4,
netbsd-5-0-RC3,
netbsd-5-0-2-RELEASE,
netbsd-5-0-1-RELEASE,
netbsd-5-0,
matt-nb5-pq3-base,
matt-nb5-pq3,
matt-nb5-mips64-u2-k2-k4-k7-k8-k9,
matt-nb5-mips64-u1-k1-k5,
matt-nb5-mips64-premerge-20101231,
matt-nb5-mips64-premerge-20091211,
matt-nb5-mips64-k15,
matt-nb5-mips64,
matt-nb4-mips64-k7-u2a-k9b
Changes since 1.2.4.2: +3 -2
lines
Diff to previous 1.2.4.2 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)
Pull up following revision(s) (requested by christos in ticket #458): sys/kern/kern_ssp.c: revision 1.2 If sys/param.h is not included, the kernel compile fails on some platforms with SOFTINT_COUNT undefined (I noticed it on some evbarm kernels)
Revision 1.2.4.2 / (download) - annotate - [select for diffs], Sun Mar 15 19:43:48 2009 UTC (3 years, 2 months ago) by snj
Branch: netbsd-5
Changes since 1.2.4.1: +77 -0
lines
Diff to previous 1.2.4.1 (colored) to branchpoint 1.2 (colored)
Pull up following revision(s) (requested by christos in ticket #458): sys/conf/Makefile.kern.inc: revision 1.121 sys/conf/files: revision 1.940 sys/kern/init_main.c: revision 1.381 sys/kern/kern_ssp.c: revision 1.1 sys/kern/subr_autoconf.c: revision 1.168 sys/sys/device.h: revision 1.116 sys/sys/systm.h: revision 1.233 Unbreak ssp kernels. The issue here that when the ssp_init() call was deferred, it caused the return from the enclosing function to break, as well as the ssp return on i386. To fix both issues, split configure in two pieces the one before calling ssp_init and the one after, and move the ssp_init() call back in main. Put ssp_init() in its own file, and compile this new file with -fno-stack-protector. Tested on amd64. XXX: If we want to have ssp kernels working on 5.0, this change needs to be pulled up.
Revision 1.2.2.2 / (download) - annotate - [select for diffs], Tue Mar 3 18:32:56 2009 UTC (3 years, 2 months ago) by skrll
Branch: nick-hppapmap
Changes since 1.2.2.1: +78 -0
lines
Diff to previous 1.2.2.1 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)
Sync with HEAD.
Revision 1.2.8.1, Thu Feb 26 05:50:54 2009 UTC (3 years, 2 months ago) by jym
Branch: jym-xensuspend
Changes since 1.2: +0 -78
lines
FILE REMOVED
file kern_ssp.c was added on branch jym-xensuspend on 2009-05-13 17:21:56 +0000
Revision 1.2.6.1, Thu Feb 26 05:50:54 2009 UTC (3 years, 2 months ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.2: +0 -78
lines
FILE REMOVED
file kern_ssp.c was added on branch yamt-nfs-mp on 2009-05-04 08:13:47 +0000
Revision 1.2.4.1, Thu Feb 26 05:50:54 2009 UTC (3 years, 2 months ago) by snj
Branch: netbsd-5
Changes since 1.2: +0 -78
lines
FILE REMOVED
file kern_ssp.c was added on branch netbsd-5 on 2009-03-15 19:43:48 +0000
Revision 1.2.2.1, Thu Feb 26 05:50:54 2009 UTC (3 years, 2 months ago) by skrll
Branch: nick-hppapmap
Changes since 1.2: +0 -78
lines
FILE REMOVED
file kern_ssp.c was added on branch nick-hppapmap on 2009-03-03 18:32:56 +0000
Revision 1.2 / (download) - annotate - [select for diffs], Thu Feb 26 05:50:54 2009 UTC (3 years, 2 months ago) by kenh
Branch: MAIN
CVS Tags: yamt-nfs-mp-base8,
yamt-nfs-mp-base7,
yamt-nfs-mp-base6,
yamt-nfs-mp-base5,
yamt-nfs-mp-base4,
yamt-nfs-mp-base3,
nick-hppapmap-base4,
nick-hppapmap-base3,
nick-hppapmap-base2,
nick-hppapmap-base,
matt-premerge-20091211,
jymxensuspend-base,
jym-xensuspend-nbase,
jym-xensuspend-base
Branch point for: yamt-nfs-mp,
nick-hppapmap,
netbsd-5,
jym-xensuspend
Changes since 1.1: +3 -2
lines
Diff to previous 1.1 (colored)
If sys/param.h is not included, the kernel compile fails on some platforms with SOFTINT_COUNT undefined (I noticed it on some evbarm kernels)
Revision 1.1 / (download) - annotate - [select for diffs], Thu Feb 12 18:24:18 2009 UTC (3 years, 3 months ago) by christos
Branch: MAIN
Unbreak ssp kernels. The issue here that when the ssp_init() call was deferred, it caused the return from the enclosing function to break, as well as the ssp return on i386. To fix both issues, split configure in two pieces the one before calling ssp_init and the one after, and move the ssp_init() call back in main. Put ssp_init() in its own file, and compile this new file with -fno-stack-protector. Tested on amd64. XXX: If we want to have ssp kernels working on 5.0, this change needs to be pulled up.