summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix unbound remote denial of service vulnerability.delphij2014-12-174-1/+54
| | | | | | Security: FreeBSD-SA-14:30.unbound Security: CVE-2014-8602 Approved by: so
* Bump BRANCH (forgotten in r275670)des2014-12-101-1/+1
| | | | Approved by: so
* Fix buffer overflow in stdio.delphij2014-12-107-30/+128
| | | | | | | | | | | | Security: FreeBSD-SA-14:27.stdio Security: CVE-2014-8611 Fix multiple vulnerabilities in file(1) and libmagic(3). Security: FreeBSD-SA-14:28.file Security: CVE-2014-3710, CVE-2014-8116, CVE-2014-8117 Approved by: so
* Forced commit to sys/conf/newvers.sh to mark the realgjb2014-11-110-0/+0
| | | | | | | 10.1-RELEASE point. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Set static abitag to the current value of __FreeBSD_version.gjb2014-11-111-1/+1
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Update releng/10.1 to -RELEASE status, and preparegjb2014-11-111-1/+1
| | | | | | | for final 10.1-RELEASE builds. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document incompatibility between bsdconfig(8) andgjb2014-11-111-0/+50
| | | | | | | | pkg(8) in 10.1-RELEASE, and provide steps to install the on-disc packages via alternative method. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Update the Intel ixl/ixlv drivers to fix a panic in the boot/installjfv2014-11-1111-11343/+1293
| | | | | | | | | | | | | | kernel if the system has a fiber-based Intel XL710 adapter installed. In addition ixl version 1.2.8 and ixlv version 1.1.18 give: - Improved VF stability (thanks to Ryan Stone for this) - RSS fixes - link detection in the ixlv driver - new sysctl's added - corrected media reporting Submitted by: jfv Approved by: re
* MFstable10 273998:jhb2014-11-101-6/+58
| | | | | | | | | | | | Rework the EXAMPLES section to be a bit clearer. - Add an example of using etcupdate diff. - Create a subsection on bootstrapping that is below the simple examples. This should make it clearer that 'etcupdate extract' is a one-time operation and not part of the common workflow. It also adds more suggestions on when bootstrapping is needed and additional steps to make future merges simpler. Approved by: re (delphij)
* Document SA-14:25, SA-14:26gjb2014-11-061-0/+12
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* MFC r274128:wblock2014-11-051-1/+1
| | | | | | Add the less-ambiguous freebsd-version command. Approved by: re
* [SA-14:25] Fix kernel stack disclosure in setlogin(2) / getlogin(2).des2014-11-043-30/+39
| | | | | | [SA-14:26] Fix remote command execution in ftp(1). Approved by: re (gjb)
* MFstable10 r274102:gjb2014-11-041-2/+2
| | | | | | | | | MFC r274095: Fix VOLUME_LABEL when BRANCH contains '-' and '.' characters. Approved by: re (hrs) Sponsored by: The FreeBSD Foundation
* Update the hardware page to reflect CPU updates/additionsgjb2014-11-032-4/+38
| | | | | | | | | | | | | added in head@r273941. Since the original commit requires changes to the doc/ repository after the release tag had already happened, (re)define entities in share/xml/release.ent that reflect doc@r45900 to prevent build breakage. Requested by: gavin Approved by: re (implicit, relnotes) Sponsored by: The FreeBSD Foundation
* Update releng/10.1 to -RC4 as part of the 10.1-RELEASE cycle.gjb2014-10-301-1/+1
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* MFS10 r273573, MFC r273356:neel2014-10-292-23/+39
| | | | | | | | | | Fix a race in pmap_emulate_accessed_dirty() that could trigger a EPT misconfiguration VM-exit. MFS10 r273807, MFC r273666: Don't pass the 'error' return from an I/O port handler directly to vm_run(). Approved by: re (kib)
* MFS10 r273814smh2014-10-291-0/+6
| | | | | | | | | | MFC r273704 Fix ATA CF ERASE breakage caused by 268205 PR: 194606 Approved by: re (marius) Sponsored by: Multiplay
* MFS10 r273767 / MFC r273638:mav2014-10-282-44/+19
| | | | | | | | | | | | | | Revert somewhat hackish geom_disk optimization, committed as part of r256880, and the following r273143 commit, supposed to workaround introduced issue by quite innocent-looking change. While there is no clear understanding why, but r273143 is accused in data corruption in some environments with high I/O load. I personally don't see any problem in that commit, and possibly it is just a trigger to some other bug somewhere, but better safe then sorry for now. Requested by: scottl@ Approved by: re (kib@)
* MFstable10 r273698:gjb2014-10-261-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MFC r273653: Fix a few issues with creating VOLUME_LABEL for the installation ISOs: - TYPE, BRANCH, and REVISION are only defined if OSRELEASE is not defined, so in situations where one might set OSRELEASE for an in-house ISO build, VOLUME_LABEL would be empty. - makefs(8) limits the volume label to 32 characters, which for the powerpc64 case, OSRELEASE expands to FreeBSD-11.0-CURRENT-powerpc-powerpc64. Even with removing the prefixing 'FreeBSD-', the string is 30 characters long, leaving zero room for suffixing the type of ISO media (BO for bootonly, CD for cdrom, and DVD for dvdrom). Resolve these by defining VOLUME_LABEL when defining OSRELEASE if unset. If OSRELEASE is defined by the builder, use the OSRELEASE from that definition as the VOLUME_LABEL. In addition, for cases where both TARGET and TARGET_ARCH are used for the VOLUME_LABEL, use TARGET_ARCH if it differs from TARGET. There are probably a few sharp edges here yet, but these problems are going to affect the powerpc/powerpc64 builds for 10.1-RELEASE, so the immediate concern is fixing the underlying problem at hand quickly, and less so about the elegance of the fix. Approved by: re (kib) Sponsored by: The FreeBSD Foundation
* Note to avoid using GENERIC kernel on i386 when usinggjb2014-10-251-0/+43
| | | | | | | | multi-disk ZFS pools, referencing an old UPDATING entry that predates 10.0-RELEASE. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r273399, OpenSSL updated to version 1.0.1j.gjb2014-10-241-3/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* MFS r273580: MFC r273577:delphij2014-10-244-5/+5
| | | | | | | Return BUS_PROBE_DEFAULT instead of BUS_PROBE_VENDOR or 0 for in-tree driver. This change was verified by Microsoft. Approved by: re (kib)
* Update releng/10.1 to -RC3 as part of the 10.1-RELEASE cycle.gjb2014-10-211-1/+1
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* MFstable10 r273429:gjb2014-10-211-2/+1
| | | | | | | | | | | MFC r273402: Fix an issue where a FreeBSD virtual machine provisioned in the Microsoft Azure service does not recognize the second attached disk on the system. PR: 194376 Approved by: re (delphij) Sponsored by: The FreeBSD Foundation
* Document the following security advisories:gjb2014-10-211-0/+27
| | | | | | | | | | FreeBSD-SA-14:20.rtsold FreeBSD-SA-14:21.routed FreeBSD-SA-14:22.namei FreeBSD-SA-14:23.openssl Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Fix rtsold(8) remote buffer overflow vulnerability. [SA-14:20]delphij2014-10-213-26/+22
| | | | | | | | Fix routed(8) remote denial of service vulnerability. [SA-14:21] Fix memory leak in sandboxed namei lookup. [SA-14:22] Approved by: re (so@ blanket)
* MFS r273149 (jkim): MFC: r273144, r273146delphij2014-10-21417-1050/+2498
| | | | | | | | Merge OpenSSL 1.0.1j. This is part of an upcoming FreeBSD security advisory. Approved by: re (so@ blanket)
* Add basic UEFI boot procedure manpageemaste2014-10-212-0/+157
| | | | | | MFS10 of r273385 (r273218,r273235 in HEAD) Approved by: re (gjb)
* MFstable10 r273354:gjb2014-10-211-6/+11
| | | | | | | | | | | | MFC r273204: Add more descriptive metadata to the ISO images. MFstable10 r273355: Fix label for the UEFI bootonly cd. PR: 165876 Approved by: re (hrs) Sponsored by: The FreeBSD Foundation
* MFS10 r273272 (r273143 in head):mav2014-10-201-3/+1
| | | | | | | | | Remove setting BIO_DONE flag for BIOs that have done() method. This fixes use-after-free, caused by geom_disk, completing same BIO twice to save extra allocation, and getting BIO_DONE set after the first. Approved by: re (hrs)
* MFC10 r273275 (r273168 in head):tuexen2014-10-203-17/+24
| | | | | | | | | | Fix the reported streams in a SCTP_STREAM_RESET_EVENT, if a sent incoming stream reset request was responded with failed or denied. Thanks to Peter Bostroem from Google for reporting the issue. Approved by: re (hrs) Sponsored 2y:
* MFS10 r273296 (r273219 in HEAD):emaste2014-10-201-0/+2
| | | | | | | | | | Do nothing in vt_upgrade if there is no vt driver Previously, if no drivers attached at boot we would panic with "vtbuf_fill_locked begin.tp_row 0 must be < screen height 0". PR: 192248 Approved by: re
* MFS10 r273294 (r273178 in HEAD):emaste2014-10-201-9/+42
| | | | | | | | | | | Update vt(4) for UEFI defaults and special keys vt(4) is the default console for UEFI boot [1], and the bitmapped kern.vt.spclkeys sysctl has been replaced with individual kern.vt.kbd_* enable sysctls. PR: 193710 Approved by: re
* MFS10 273238;jhb2014-10-171-2/+2
| | | | | | | | | | Properly set the timeout in a query_state. The global query_timeout configuration value is an integer count of seconds, it is not a timeval. Using memcpy() to copy a timeval from it put garbage into the tv_usec field. PR: 194025 Approved by: re (gjb)
* MFS10 r273232 (HEAD r257302 by rea):emaste2014-10-173-5/+5
| | | | | | | | | | | | binutils/bfd: fix printf-like format strings for "bfd *" arguments There is a special format argument '%B' that directly handles values of type 'bfd *', they must be used instead of '%s'. Manifestations of this bug can be seen in ld(1) error messages, for example, http://lists.freebsd.org/pipermail/freebsd-current/2013-August/043580.html http://lists.freebsd.org/pipermail/freebsd-current/2013-October/045404.html Approved by: re
* Fill in the security advisories section.gjb2014-10-171-1/+167
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document the current version of pkg(8) for the release.gjb2014-10-171-2/+2
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Remove empty sections.gjb2014-10-171-16/+0
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Rewrap a paragraph to conform to FDP style.gjb2014-10-171-4/+4
| | | | | | | Fix a wording nit while here. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r273199, support for building VM images for the Microsoftgjb2014-10-171-0/+9
| | | | | | | Azure platform. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r273101, support for building VM images as part of thegjb2014-10-171-0/+8
| | | | | | | release process. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r273098, options for displaying mkimg(1) internalsgjb2014-10-171-0/+37
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r272819, mkimg(1) QCOW and QCOW2 support.gjb2014-10-171-0/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Add a section for periodic(8) scripts.gjb2014-10-171-0/+9
| | | | | | | | Document r272430, 110.clean-tmps: avoid crossing filesystem mount boundaries when cleaning /tmp. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r272078, addition of /usr/lib32/compat to the defaultgjb2014-10-171-0/+7
| | | | | | | ld-elf32.so.1 search path. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* MFS10 r273057smh2014-10-171-1/+0
| | | | | | | | MFC r272324 Fix a missed merge introduced in r272883 Approved by: re@ (gjb) Sponsored by: Multiplay
* MFS10 r273161smh2014-10-171-7/+8
| | | | | | | | MFC r273158 Prevent ZFS leaking pool free space Approved by: re@ (gjb) Sponsored by: Multiplay
* MFstable10 r273198:gjb2014-10-166-16/+409
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MFC r273093, r273096: r273093: Merge the following from ^/projects/release-vmimage: r272436, r272437, r272792: r272436: Remove the first argument to panic(), which was initially intended to be the exit code, however when a non-zero exit code was returned to release/Makefile, this would prevent any remaining (and possibly successful) stages from being attempted. r272437: If the vm-base target fails, prevent the vm-image target from being run since it cannot possibly succeed. r272792: Add /usr/local/bin and /usr/local/sbin to PATH, needed if third-party software needs to use utilities outside of the base system during post-install stages (indexinfo is one culprit). r273096: Merge the following from ^/projects/release-vmimage: r273076, r273077, r273079, r273095: r273076: Add a separate make(1) target to release/Makefile to build FreeBSD virtual machine disk images for use on the Microsoft Azure service. For now, this target is not directly connected to the build, however can be manually invoked. The 'vm-azure' target invokes {amd64,i386}/mk-azure.sh, which does the heavy lifting to produce proper VHDs. mk-azure.sh uses a configuration file, defaulting to tools/azure.conf if otherwise unset. r273077: Clear VM_RC_LIST. r273079: Fix signal list to trigger umount(8). r273095: Output an informational message when mkimg(1) runs, so it does not appear that the process has stopped while waiting for a 'y/n' response when waagent is deprovisioned. Relnotes: yes Approved by: re (delphij) Sponsored by: The FreeBSD Foundation
* Merge r273184, r273185 from stable/10:glebius2014-10-162-2/+15
| | | | | | | | - Use rn_detachhead() instead of direct free(9) for radix tables. - Free radix mask entries on main radix destroy. PR: 194078 Approved by: re (gjb)
* MFS r273191: MFC r273060:delphij2014-10-161-1/+1
| | | | | | | | Use write_psize instead of write_asize when doing vdev_space_update. Without this change the accounting of L2ARC usage would be wrong and give 16EB free space because the number became negative and overflows. Approved by: re (gjb)
OpenPOWER on IntegriCloud