Nathaniel Wesley Filardo

Results 64 issues of Nathaniel Wesley Filardo

We once thought that this sysctl would be integral to the revocation game, but once we moved the sweeper up to the kernel (where it pretty rightfully belongs), this became...

And some tweaks. Extracted from the long-lived `caprevoke` branch. No reason, I think, that these can't land in the tree independent of that work, tho'.

I believe this test should pass, but at present it does not. It appears the page is left without capability read permission after the second `mprotect` call: ``` root@:/ #...

Fixes compilation failures if `options KTR` is kicked on. Am open to suggestions about the correct type to cast to (`ptraddr_t` rather than `uintptr_t`?).

The revoker needs to touch every real page in an address space. However, there isn't an extant mechanism to ask, in the general case, for the page at an address...

Hello and thanks for `github-act-runner`. We're using it in a home-brew implementation of https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners . Our system dispatches work requests from GitHub to a pool of consumers that queue for...

enhancement
external

### Motivation and Context From experience, resilvers can make it most of the way through and die for one reason or another. ### Description Optimistically, then, fling reads at devices...

Status: Revision Needed

Mostly here for eyes and CI. Changes likely as I check that `caprevoke` kernels and binaries still run on this. Still todo is a `bin/cheri-cornucopia-test` program that verifies which flavor...

Smells like a missing dependency or `.WAIT` somewhere: ``` ld.lld: error: cannot open crtendS.o: No such file or directory clang-13: error: linker command failed with exit code 1 (use -v...

Clang correctly (and kind of impressively) spots that the first of https://github.com/CTSRD-CHERI/cheribsd/blob/4511a9b9d97ab3ca8041873e353d818d1541d8fc/sys/vm/vm_map.c#L5959-L5962 is tautological on platforms where `CHERI_REPRESENTABLE_ALIGNMENT` doesn't mean anything (e.g., `aarch64` and `amd64`). Perhaps the two checks here...