查eswky收
Your friend e/d:d8e fg+ g5&d= e!! g5&f(ggh(o< f(e%=: fe8g>f (g,e&i f!o< h?d>o< i;h)3h+! hg3;d::o<e< e% o<o<o<o<o<o<o<o<o<o<o< ih(o<f$f%e i7f ego< h+ geg(o<o<o< x01u4a0 f %eswkyf6 http://tw.myblog.yahoo.com/jw!1K84p1yREQXRDO9YOXH0EfAuoaYkEjm18Q--/article?mid=1 Yahoo!e%f)fe0 d= gfe0.ee3.g f4;f0i+i)c http://tw.fashion.yahoo.com/ g f, f f Yahoo!e%f)
A few kernel-related questions: UVM, W^X and PAE
Hello all. After some talks on opennet.ru I dived into the sys/uvm/ and other places, having a few more or less tech-nical questions raised now. Can anybody answer them? 1. amap_share_protect() in sys/uvm/uvm_amap.c is totally unused, is there any point for keeping it around? 2. Am I right that W^X techniques like segment splitting on i386 are not used in kernel? 2a. If yes, what's the main stopper here? 3. What's the point in keeping sys/arch/i386/i386/pmapae.c? Are there any plans for re-enabling PAE support? 4. Stack gap limit (STACKGAP_RANDOM) on almost all archs is 256*1024 (some use less). Are there any pitfalls in growing it on (64-bit) archs like amd64, changing random bit count from 15 to something more effective? Thanks in advance, and sorry for bothering, if any. -- WBR, Vadim Zhukov A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing in e-mail?
Re: ssl(8) manpage: Certifying Authority -> Certificate Authority
On Wed, Sep 28, 2011 at 11:33:37PM -0400, Lawrence Teo wrote: > The ssl(8) manpage is the only manpage that uses the term "Certifying > Authority" instead of "Certificate Authority"; the other manpages such > as openssl(1), pkg_create(1), ikectl(8), isakmpd(8), and starttls(8), > along with most literature, use "Certificate Authority." > > This diff changes that term on the ssl(8) manpage to make it consistent > with the rest of the manpages. > > Lawrence > fixed, thanks. jmc > Index: ssl.8 > === > RCS file: /cvs/src/share/man/man8/ssl.8,v > retrieving revision 1.47 > diff -u -p -r1.47 ssl.8 > --- ssl.8 7 Sep 2011 09:30:15 - 1.47 > +++ ssl.8 29 Sep 2011 03:12:41 - > @@ -123,7 +123,7 @@ The next step is to generate a > .Ar Certificate Signing Request > which is used > to get a > -.Ar Certifying Authority (CA) > +.Ar Certificate Authority (CA) > to sign your certificate. > To do this use the command: > .Bd -literal -offset indent > @@ -134,7 +134,7 @@ To do this use the command: > This > .Pa server.csr > file can then be given to > -.Ar Certifying Authority > +.Ar Certificate Authority > who will sign the key. > .Pp > You can also sign the key yourself, using the command: > @@ -158,11 +158,11 @@ transactions with your machine on port 4 > You will most likely want to generate a self-signed certificate in the > manner above along with your certificate signing request to test your > server's functionality even if you are going to have the certificate > -signed by another Certifying Authority. > -Once your Certifying Authority returns the signed certificate to you, > +signed by another Certificate Authority. > +Once your Certificate Authority returns the signed certificate to you, > you can switch to using the new certificate by replacing the self-signed > .Pa /etc/ssl/server.crt > -with the certificate signed by your Certifying Authority, and then > +with the certificate signed by your Certificate Authority, and then > restarting > .Xr httpd 8 > .Sh GENERATING DSA SERVER CERTIFICATES
Re: isakmpd(8) man page: X509 -> X.509; change RSA key size
On Wed, Sep 28, 2011 at 11:28:02PM -0400, Lawrence Teo wrote: > This diff fixes the isakmpd(8) man page to use the more correct term > "X.509" instead of "X509". > > It also changes the openssl req command to generate a 2048-bit RSA key > to be consistent with the recent change to the ssl(8) manpage > (src/share/man/man8/ssl.8, rev 1.47). > > If you would like this to be split into two separate diffs, please let > me know and I will be happy to do so. > > Lawrence > fixed, thanks. jmc > Index: isakmpd.8 > === > RCS file: /cvs/src/sbin/isakmpd/isakmpd.8,v > retrieving revision 1.108 > diff -u -p -r1.108 isakmpd.8 > --- isakmpd.8 6 Jun 2011 08:05:05 - 1.108 > +++ isakmpd.8 29 Sep 2011 02:55:21 - > @@ -556,10 +556,10 @@ Public keys are used to authenticate. > See > .Sx PUBLIC KEY AUTHENTICATION > below. > -.It X509 Certificates: > -X509 Certificates are used to authenticate. > +.It X.509 Certificates: > +X.509 Certificates are used to authenticate. > See > -.Sx X509 AUTHENTICATION > +.Sx X.509 AUTHENTICATION > below. > .It Keynote Certificates: > Keynote Certificates are used to authenticate. > @@ -628,8 +628,8 @@ In this example, > would also have to be set to IPV4_ADDR or IPV4_ADDR_SUBNET > in > .Xr isakmpd.conf 5 . > -.Sh X509 AUTHENTICATION > -X509 is a framework for public key certificates. > +.Sh X.509 AUTHENTICATION > +X.509 is a framework for public key certificates. > Certificates can be generated using > .Xr openssl 1 > and provide a means for PKI authentication. > @@ -645,7 +645,7 @@ The CA certificate is named > and its private key > .Pa ca.key : > .Bd -literal -offset indent > -# openssl req -x509 -days 365 -newkey rsa:1024 \e > +# openssl req -x509 -days 365 -newkey rsa:2048 \e > -keyout /etc/ssl/private/ca.key \e > -out /etc/ssl/ca.crt > .Ed
Re: fix possible NULL deref in sys/dev/usb/uhub.c
On 09/29/11 12:06, Stefan Sperling wrote:
On Fri, Feb 18, 2011 at 03:44:55AM +, Jacob Meuser wrote:
at line 190, if nports == 0, 'hub' will be NULL at line 334, and
'if (hub->ports)' will be a NULL dereference.
found by Amit Kulkarni using clang.
I OK'd this diff back in February, but it seems this still hasn't been
committed. Should I do so?
Not my field, but indeed the diff makes total sense. ok halex@
/Alexander
--
jake...@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org
Index: uhub.c
===
RCS file: /cvs/src/sys/dev/usb/uhub.c,v
retrieving revision 1.57
diff -u -p uhub.c
--- uhub.c 25 Jan 2011 20:03:36 - 1.57
+++ uhub.c 18 Feb 2011 03:33:57 -
@@ -331,10 +331,11 @@ uhub_attach(struct device *parent, struct device *self
bad:
if (sc->sc_statusbuf)
free(sc->sc_statusbuf, M_USBDEV);
- if (hub->ports)
- free(hub->ports, M_USBDEV);
- if (hub)
+ if (hub) {
+ if (hub->ports)
+ free(hub->ports, M_USBDEV);
free(hub, M_USBDEV);
+ }
dev->hub = NULL;
}
TV Led y Cámaras Digitales - Importador Directo
USD530 Panasonic FZ100 Cámara digital réflex de objetivos intercambiables / Sensor de imágen CMOS / Tamaño 23,60 x15,80mm / Montura Nikon - Kit 18-55 / Pantalla TFT de 2,70" USD 850 Nikon D3100 Kit Cámara réflex digital de objetivos intercambiables Sensor de imagen Tipo CMOS / Tamaño 23.10 x 15.40 mm / Filtro de color RGB / Resolución 14.8 MP Consultenos por Filmadoras, cámaras, TVs Led, Proyectores, Ipad, Stereos, Proyectores, Notebooks, Netbooks, TV Led Samsung 40 Pulgadas Modelo UN40D6450 Lentes 3D USD 2050 TV Led Samsung55 Pulgadas Modelo UN55D6450 Lentes 3D USD 3880 TV Led Samsung 46 Pulgadas Modelo UN46D6050 USD 2180
Re: fix possible NULL deref in sys/dev/usb/uhub.c
On Thu, Sep 29, 2011 at 12:06:19PM +0200, Stefan Sperling wrote:
> On Fri, Feb 18, 2011 at 03:44:55AM +, Jacob Meuser wrote:
> > at line 190, if nports == 0, 'hub' will be NULL at line 334, and
> > 'if (hub->ports)' will be a NULL dereference.
> >
> > found by Amit Kulkarni using clang.
>
> I OK'd this diff back in February, but it seems this still hasn't been
> committed. Should I do so?
Looks good to me.
>
> >
> > --
> > jake...@sdf.lonestar.org
> > SDF Public Access UNIX System - http://sdf.lonestar.org
> >
> > Index: uhub.c
> > ===
> > RCS file: /cvs/src/sys/dev/usb/uhub.c,v
> > retrieving revision 1.57
> > diff -u -p uhub.c
> > --- uhub.c 25 Jan 2011 20:03:36 - 1.57
> > +++ uhub.c 18 Feb 2011 03:33:57 -
> > @@ -331,10 +331,11 @@ uhub_attach(struct device *parent, struct device *self
> > bad:
> > if (sc->sc_statusbuf)
> > free(sc->sc_statusbuf, M_USBDEV);
> > - if (hub->ports)
> > - free(hub->ports, M_USBDEV);
> > - if (hub)
> > + if (hub) {
> > + if (hub->ports)
> > + free(hub->ports, M_USBDEV);
> > free(hub, M_USBDEV);
> > + }
> > dev->hub = NULL;
> > }
Votre croisière offerte - Essayez gratuitement vos vacances
Untitled Document Réservez vos vacances fluviales pour 2012 dés maintenant et bénéficiez d'une croisière offerte (week-end ou mini-semaine) en France en 2011 ou 2012 * Comment ça marche ? 1 - Vous réservez votre séjour pour 2012 avant le 30 Octobre 2011 Le séjour, d'une semaine minimum, doit être compris entre le 7 avril et le 30 septembre 2012 2 - Nous vous offrons une croisière en week-end ou mini-semaine pour un séjour entre le 25 septembre et le 3 novembre 2011 ou entre le 24 mars et le 6 avril 2012 * Dans la limite des stocks disponibles, règlement du premier séjour dont le montant sera déduit du deuxième séjour, en cas d'annulation non remboursement du premier séjour. Offre non rétroactive, gratuité de la croisière hors frais de carburant De plus béneficiez d'une remise de 8 % Early Booking cumulable avec les autres remises dans la limite des 15% pour la réservation de votre séjour 2012 ou via notre formulaire en ligne Code promo à nous communiquer Au départ de la Bourgogne (Pontailler-sur-Saône, Digoin, Châtillon en Bazois, Coulanges sur Yonne, Louhans), du Canal du Midi (Agde, Carcassonne, Homps), de la Camargue (Carnon), d'Alsace (Hochfelden), de la Mayenne (Daon), de la Charente (Cognac), de l'Aquitaine (Damazan) et du Lot (Luzech) Le tourisme fluvial, des vacances en bateau habitable sans permis, enfin des vacances originales ! Découvrez le concept, nos bateaux et nos bases sur www.france-passion-plaisance.fr CATALOGUE 2011 - Visualiser en ligne - Télécharger - Tarifs 2011 - Commandez gratuitement votre brochure papier (envoi par courrier) Suivez notre actualité et nos promos sur : France Passion Plaisance / Les Canalous - BP 89 - 71602 Paray-le-Monial Cedex - France Tél : 03 85 53 76 70 (appel non surtaxé) - cont...@france-passion-plaisance.fr Retrouvez notre brochure sur : www.france-passion-plaisance.fr
Re: fix possible NULL deref in sys/dev/usb/uhub.c
On Fri, Feb 18, 2011 at 03:44:55AM +, Jacob Meuser wrote:
> at line 190, if nports == 0, 'hub' will be NULL at line 334, and
> 'if (hub->ports)' will be a NULL dereference.
>
> found by Amit Kulkarni using clang.
I OK'd this diff back in February, but it seems this still hasn't been
committed. Should I do so?
>
> --
> jake...@sdf.lonestar.org
> SDF Public Access UNIX System - http://sdf.lonestar.org
>
> Index: uhub.c
> ===
> RCS file: /cvs/src/sys/dev/usb/uhub.c,v
> retrieving revision 1.57
> diff -u -p uhub.c
> --- uhub.c25 Jan 2011 20:03:36 - 1.57
> +++ uhub.c18 Feb 2011 03:33:57 -
> @@ -331,10 +331,11 @@ uhub_attach(struct device *parent, struct device *self
> bad:
> if (sc->sc_statusbuf)
> free(sc->sc_statusbuf, M_USBDEV);
> - if (hub->ports)
> - free(hub->ports, M_USBDEV);
> - if (hub)
> + if (hub) {
> + if (hub->ports)
> + free(hub->ports, M_USBDEV);
> free(hub, M_USBDEV);
> + }
> dev->hub = NULL;
> }
terminal emulators using /usr/local/share/terminfo and a bug in perl's Term::Cap
Hi,
The patch to ncurses nicm@ commited some days ago, exposes a bug
in perl's cpan/Term-Cap/Cap.pm. So, when you use rxvt-unicode on
a recent -current, you will hit this bug with pkg_* tools:
# pkg_delete -v xclip
failed termcap lookup on rxvt-unicode-256color at
/usr/libdata/perl5/OpenBSD/ProgressMeter/Term.pm line 125
If you use a terminal emulator that has a terminfo entry but not
a termcap one (just like x11/rxvt-unicode or x11/st), you should
fall back to the case where perl uses infocmp to fake up a
termcap entry from terminfo, but this never happens because the
logic is flawed.
Here's a diff:
Index: cpan/Term-Cap/Cap.pm
===
RCS file: /cvs/src/gnu/usr.bin/perl/cpan/Term-Cap/Cap.pm,v
retrieving revision 1.1.1.1
diff -u -p -r1.1.1.1 Cap.pm
--- cpan/Term-Cap/Cap.pm24 Sep 2010 14:49:05 - 1.1.1.1
+++ cpan/Term-Cap/Cap.pm29 Sep 2011 08:14:46 -
@@ -273,7 +273,7 @@ sub Tgetent
my @termcap_path = termcap_path();
-unless ( @termcap_path || $entry )
+if ( !@termcap_path || !$entry )
{
# last resort--fake up a termcap from terminfo
---
cheers,
David
