Merge branch 'freebsd/13-stable/main' into hardened/13-stable/master * freebsd/13-stable/main: base: remove if_wg(4) and associated utilities, manpage
base: remove if_wg(4) and associated utilities, manpage After length decisions, we've decided that the if_wg(4) driver and related work is not yet ready to live in the tree. This driver has larger security implications than many, and thus will be held to more scrutiny than other drivers. Requested by: secteam Approved by: re
Merge branch 'freebsd/current/main' into hardened/current/master * freebsd/current/main: wlandebug.8: remove Xref for missing manpages if_wg: close the sockets if wg_socket_bind() failed if_wg: stop holding creds in wg_socket_init() if_wg: fix the !INET6 support tests: netinet: add missing up from local change if_wg: import latest fixup work from the wireguard-freebsd project
| Delta | File | |
|---|---|---|
| +0 | -8,443 | sys/dev/if_wg/module/crypto/zinc/selftest/chacha20poly1305.c |
| +0 | -4,266 | sys/dev/if_wg/module/crypto/zinc/poly1305/poly1305-x86_64.pl |
| +0 | -4,106 | sys/dev/if_wg/module/crypto/zinc/chacha20/chacha20-x86_64.pl |
| +3,462 | -0 | sys/dev/if_wg/if_wg.c |
| +0 | -3,021 | sys/dev/if_wg/module/poly1305-x86_64.S |
| +0 | -2,834 | sys/dev/if_wg/module/chacha20-x86_64.S |
| +3,462 | -22,670 | 69 files not shown |
| +7,583 | -44,913 | 75 files |
if_wg: import latest fixup work from the wireguard-freebsd project
This is the culmination of about a week of work from three developers to
fix a number of functional and security issues. This patch consists of
work done by the following folks:
- Jason A. Donenfeld <Jason at zx2c4.com>
- Matt Dunwoodie <ncon at noconroy.net>
- Kyle Evans <kevans at FreeBSD.org>
Notable changes include:
- Packets are now correctly staged for processing once the handshake has
completed, resulting in less packet loss in the interim.
- Various race conditions have been resolved, particularly w.r.t. socket
and packet lifetime (panics)
- Various tests have been added to assure correct functionality and
tooling conformance
- Many security issues have been addressed
- if_wg now maintains jail-friendly semantics: sockets are created in
[29 lines not shown]| Delta | File | |
|---|---|---|
| +0 | -8,443 | sys/dev/if_wg/module/crypto/zinc/selftest/chacha20poly1305.c |
| +0 | -4,266 | sys/dev/if_wg/module/crypto/zinc/poly1305/poly1305-x86_64.pl |
| +0 | -4,106 | sys/dev/if_wg/module/crypto/zinc/chacha20/chacha20-x86_64.pl |
| +3,454 | -0 | sys/dev/if_wg/if_wg.c |
| +0 | -3,021 | sys/dev/if_wg/module/poly1305-x86_64.S |
| +0 | -2,834 | sys/dev/if_wg/module/chacha20-x86_64.S |
| +3,454 | -22,670 | 67 files not shown |
| +7,564 | -44,908 | 73 files |
Merge branch 'hardened/current/master' into hardened/current/uninit-autoinit
| Delta | File | |
|---|---|---|
| +0 | -111,817 | contrib/libstdc++/configure |
| +72,183 | -0 | lib/clang/liblldb/LLDBWrapLua.cpp |
| +71,590 | -432 | tools/tools/locale/etc/final-maps/widths.txt |
| +31,726 | -39,305 | share/ctypedef/ja_JP.eucJP.src |
| +59,521 | -0 | sys/contrib/dev/iwm/iwm-9000-34.fw.uu |
| +59,517 | -0 | sys/contrib/dev/iwm/iwm-9260-34.fw.uu |
| +294,537 | -151,554 | 60,534 files not shown |
| +10,288,584 | -10,879,881 | 60,540 files |
Merge branch 'freebsd/current/master' into hardened/current/master * freebsd/current/master: Remove RADIX_MPATH config option. Import kernel WireGuard support Reduce MAXPHYS back to 128KB on 32bit architectures. Store MPIDR register in pcpu. iconv(1): Add EXAMPLE Remove unused options. _ARM_ARCH_5E is always defined, we not support older CPUs.
Import kernel WireGuard support Data path largely shared with the OpenBSD implementation by Matt Dunwoodie <ncon at nconroy.net> Reviewed by: grehan at freebsd.org MFC after: 1 month Sponsored by: Rubicon LLC, (Netgate) Differential Revision: https://reviews.freebsd.org/D26137
Import kernel WireGuard support Data path largely shared with the OpenBSD implementation by Matt Dunwoodie <ncon at nconroy.net> Reviewed by: grehan at freebsd.org MFC after: 1 month Sponsored by: Rubicon LLC, (Netgate) Differential Revision: https://reviews.freebsd.org/D26137