summaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-03-302-2/+2
|\
| * MFC r296095:pfg2016-03-271-1/+1
| | | | | | | | | | | | | | | | rpc: fix failure to clear string by passing the wrong size to memset. Noted by NetBSD's PR/21014 Obtained from: NetBSD (CVS Rev. 1.24, 1.25)
| * MFC r297137:kib2016-03-241-1/+1
| | | | | | | | Fix typo.
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-03-211-0/+1
|\ \ | |/
| * MFC r296707:bdrewery2016-03-181-0/+1
| | | | | | | | Add missing CLEANFILES.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-03-1410-17/+24
|\ \ | |/
| * MFH (r296633): upgrade to 7.2p2 (fixes xauth command injection bug)des2016-03-122-5/+5
| | | | | | | | | | | | | | | | MFH (r296634): re-add aes-cbc to server-side default cipher list MFH (r296651, r296657): fix gcc build of pam_ssh PR: 207679 Security: CVE-2016-3115
| * MFC r295416:bdrewery2016-03-121-1/+1
| | | | | | | | Fix the gcc build after r295407.
| * MFC r268620,r294876,r294877:bdrewery2016-03-121-6/+3
| | | | | | | | | | | | | | | | | | r268620: Make generation of nslexer.c more robust. r294876: nslexer.c does not depend on nsparser.h. r294877: Replace nslexer.l->nslexer.c custom rule with a -D CFLAG.
| * MFC r295407:kib2016-03-127-6/+16
| | | | | | | | Make libc __pthread_map_stacks_exec() interposed.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-03-071-1/+5
|\ \ | |/
| * MFC:dwmalone2016-03-061-1/+5
| | | | | | | | | | | | | | | | | | r295924: Make sure that hash-based db files fsync befor closing/syncing. r295925: We no longer need O_SYNC pwd_mkd r295465: We no longer need O_SYNC on services_mkdb r295800: We no longer need O_SYNC on cap_mkdb This should improve the performance of building db files.
* | Revert "Import patch from https://reviews.freebsd.org/D5186"Renato Botelho2016-03-071-5/+1
| | | | | | | | This reverts commit 3882f7f0612f5660c6287cfa1ba025f2843a1957.
* | Import review D5409Renato Botelho2016-03-022-5/+14
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-221-3/+10
|\ \ | |/
| * MFH (r294326): fall back to standard / configured CA storedes2016-02-201-3/+10
| | | | | | | | | | PR: 193871 Approved by: re (gjb)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-172-2/+1
|\ \ | |/
| * MFH (r295536): fix double-free error when SSL connection failsdes2016-02-171-1/+0
| | | | | | | | | | | | PR: 206774 Submitted by: Christian Heckendorf <heckendorfc@gmail.com> Approved by: re (glebius)
| * MFH (r295535): use insecure-lan-zones option instead of hardcoded listdes2016-02-171-1/+1
| | | | | | | | | | Approved by: re (glebius) Relnotes: yes
* | Import patch from https://reviews.freebsd.org/D5186Renato Botelho2016-02-151-1/+5
| | | | | | | | | | This is a new approach to fix pfSense ticket #4523. The fix we had in place works but makes the process really slow for big user databases.
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-02-134-3/+20
|\ \ | |/
| * MFC 295174:jhb2016-02-111-3/+4
| | | | | | | | | | | | | | - Note that devctl(8) will appear in 10.3 first. - Add missing devctl_set_driver entry to namelist in devlist(3). Approved by: re (gjb)
| * MFC 287442,287537,288944:jhb2016-02-103-0/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix corruption of coredumps due to procstat notes changing size during coredump generation. The changes in r287442 required some reworking since the 'fo_fill_kinfo' file op does not exist in stable/10. 287442: Detect badly behaved coredump note helpers Coredump notes depend on being able to invoke dump routines twice; once in a dry-run mode to get the size of the note, and another to actually emit the note to the corefile. When a note helper emits a different length section the second time around than the length it requested the first time, the kernel produces a corrupt coredump. NT_PROCSTAT_FILES output length, when packing kinfo structs, is tied to the length of filenames corresponding to vnodes in the process' fd table via vn_fullpath. As vnodes may move around during dump, this is racy. So: - Detect badly behaved notes in putnote() and pad underfilled notes. - Add a fail point, debug.fail_point.fill_kinfo_vnode__random_path to exercise the NT_PROCSTAT_FILES corruption. It simply picks random lengths to expand or truncate paths to in fo_fill_kinfo_vnode(). - Add a sysctl, kern.coredump_pack_fileinfo, to allow users to disable kinfo packing for PROCSTAT_FILES notes. This should avoid both FILES note corruption and truncation, even if filenames change, at the cost of about 1 kiB in padding bloat per open fd. Document the new sysctl in core.5. - Fix note_procstat_files to self-limit in the 2nd pass. Since sometimes this will result in a short write, pad up to our advertised size. This addresses note corruption, at the risk of sometimes truncating the last several fd info entries. - Fix NT_PROCSTAT_FILES consumers libutil and libprocstat to grok the zero padding. 287537: Follow-up to r287442: Move sysctl to compiled-once file Avoid duplicate sysctl nodes. 288944: Fix core corruption caused by race in note_procstat_vmmap This fix is spiritually similar to r287442 and was discovered thanks to the KASSERT added in that revision. NT_PROCSTAT_VMMAP output length, when packing kinfo structs, is tied to the length of filenames corresponding to vnodes in the process' vm map via vn_fullpath. As vnodes may move during coredump, this is racy. We do not remove the race, only prevent it from causing coredump corruption. - Add a sysctl, kern.coredump_pack_vmmapinfo, to allow users to disable kinfo packing for PROCSTAT_VMMAP notes. This avoids VMMAP corruption and truncation, even if names change, at the cost of up to PATH_MAX bytes per mapped object. The new sysctl is documented in core.5. - Fix note_procstat_vmmap to self-limit in the second pass. This addresses corruption, at the cost of sometimes producing a truncated result. - Fix PROCSTAT_VMMAP consumers libutil (and libprocstat, via copy-paste) to grok the new zero padding. Approved by: re (gjb)
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-02-092-8/+12
|\ \ | |/
| * MFH (r265214, r294333, r294407, r294467): misc prop fixesdes2016-02-071-7/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MFH (r285975, r287143): register mergeinfo for security fixes MFH (r294497, r294498, r295139): internal documentation MFH (r294328): upgrade to openssh 6.7p1, re-add libwrap MFH (r294332): upgrade to openssh 6.8p1 MFH (r294367): update pam_ssh for api changes MFH (r294909): switch usedns back on MFH (r294336): upgrade to openssh 6.9p1 MFH (r294495): re-enable dsa keys MFH (r294464): upgrade to openssh 7.0p1 MFH (r294496): upgrade to openssh 7.1p2 Approved by: re (gjb) Relnotes: yes
| * MFC r294597:wblock2016-02-061-1/+6
| | | | | | | | | | | | Add a standards compliance note for strtok_r Approved by: re (marius@)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-0315-80/+786
|\ \ | |/
| * MFC 278320,278336,278830,285621:jhb2016-02-015-0/+413
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add devctl(8): a utility for manipulating new-bus devices. Note that this version does not include the 'suspend' and 'resume' commands present in HEAD as those depend on larger changes to the suspend and resume code in the kernel. 278320: Add a new device control utility for new-bus devices called devctl. This allows the user to request administrative changes to individual devices such as attach or detaching drivers or disabling and re-enabling devices. - Add a new /dev/devctl2 character device which uses ioctls for device requests. The ioctls use a common 'struct devreq' which is somewhat similar to 'struct ifreq'. - The ioctls identify the device to operate on via a string. This string can either by the device's name, or it can be a bus-specific address. (For unattached devices, a bus address is the only way to locate a device.) Bus drivers register an eventhandler to claim unrecognized device names that the driver recognizes as a valid address. Two buses currently support addresses: ACPI recognizes any device in the ACPI namespace via its full path starting with "\" and the PCI bus driver recognizes an address specification of 'pci[<domain>:]<bus>:<slot>:<func>' (identical to the PCI selector strings supported by pciconf). - To make it easier to cut and paste, change the PnP location string in the PCI bus driver to output a full PCI selector string rather than 'slot=<slot> function=<func>'. - Add a devctl(3) interface in libdevctl which provides a wrapper around the ioctls and is the preferred interface for other userland code. - Add a devctl(8) program which is a simple wrapper around the requests supported by devctl(3). - Add a resource_unset_value() function that can be used to remove a hint from the kernel environment. This is used to clear a hint.<driver>.<unit>.disabled hint when re-enabling a boot-time disabled device. 278336: Unbreak the build (memchr is explicitly required by devctl(9) after r278320) 278830: install the man page... 285621: Fix formatting. Approved by: re (marius)
| * MFC r284539, r284630, r284688, r284877, r285217, r285218,grehan2016-02-012-58/+317
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r286837, r286838, r288470, r288522, r288524, r288826, r289001 Pull in bhyve bug fixes and changes to allow UEFI booting. This provides Windows support. Tested on Intel and AMD with: - Arch Linux i386+amd64 (kernel 4.3.3) - Ubuntu 15.10 server 64-bit - FreeBSD-CURRENT/amd64 20160127 snap - FreeBSD 10.2 i386+amd64 - OpenBSD 5.8 i386+amd64 - SmartOS latest - Windows 10 build 1511' Huge thanks to Yamagi Burmeister who submitted the patch and did the majority of the testing. r284539 - bootrom mem allocation support r284630 - Add SO_REUSEADDR when starting debug port r284688 - Fix a regression in "movs" emulation r284877 - verify_gla() non-zero segment base fix r285217 - Always assert DCD and DSR in the uart r285218 - devmem nodes moved to /dev/vmm.io/ r286837 - Add define for SATA Check-Power-Mode r286838 - Add simple (no-op) SATA cmd emulations r288470 - Increase virtio-blk indirect descs r288522 - Firmware guest query interface r288524 - Fix post-test typo r288826 - Clean up SATA unimplemented cmd msg r289001 - Add -l option to specify userboot path Submitted by: Yamagi Burmeister Approved by: re (kib)
| * MFC revisions 294860,294862,294892-294893,294922dteske2016-02-016-7/+19
| | | | | | | | | | | | | | | | | | | | r294860: Add keep_tite configuration option r294862: Bump copyrights r294892: Remove unused function prototype r294893: Fix a crash if `-D' is used without `-t title' r294922: Fix fatal warn when compiling under GCC 5.2.0 Approved by: re (marius)
| * MFC r294691:sobomax2016-01-301-8/+16
| | | | | | | | | | | | Fix readpassphrase(3) when it's called with stdin being closed. Approved by: re (delphij)
| * MFC r294515:brooks2016-01-281-7/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | Fix the implementations of PSEUDO_NOERROR and PSEUDO. The PSEUDO* macros should not declare <syscall>, only _<syscall> and __sys_<syscall>. This was causing the interposing C wrappers to be ignored due to link order. Reviewed by: kib Obtained from: CheriBSD (4e8e13c90fc6a80e1520de44a6864cfd78b3b56d) Sponsored by: DARPA, AFRL Differential Revision: https://reviews.freebsd.org/D4097
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-011-1/+3
|\ \ | |/
| * MFC r294565: sem: Don't free nameinfo that is still in list when open()jilles2016-01-271-1/+3
| | | | | | | | | | | | | | | | | | | | | | fails. This bug could be reproduced easily by calling sem_open() with O_CREAT | O_EXCL on a semaphore that is already open in the process. The struct sem_nameinfo would be freed while still in sem_list and later calls to sem_open() or sem_close() could access freed memory. PR: 206396
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-275-11/+37
|\ \ | |/
| * MFC r294694:tuexen2016-01-271-2/+7
| | | | | | | | sctp_sendx() needs to provide the assoc_id back.
| * MFC r294688:tuexen2016-01-271-0/+7
| | | | | | | | sctp_sendv() needs to fill in the association id on return.
| * MFC r293868: Default to en_US.ISO8859-1 if no localedteske2016-01-272-0/+9
| |
| * MFH (r291197): markup fixesdes2016-01-261-3/+9
| |
| * Revert r279010:pfg2016-01-261-6/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | tdelete(3): don't delete the node we are about to return. The original change, from NetBSD, was bogus; introduced a memory leak and and broke POSIX. By reverting we actually match NetBSD's latest revision. This is a direct commit to 10 since this function was rewritten in 11-current. Reported by: Markiyan Kushnir Obtained from: NetBSD (CVS rev. 1.7, 1.8)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-2528-66/+2078
|\ \ | |/
| * MFC r293858vangyzen2016-01-231-2/+3
| | | | | | | | | | | | | | | | | | libthr: const-ify two variables Make the default umutex and urwlock initializers const, because they can be, and as a microoptimization. Sponsored by: Dell Inc.
| * MFC r294234: utimensat(2): Correct description of [EINVAL] error.jilles2016-01-211-3/+6
| |
| * Add strlcat and strlcpy to libstand on ia64. This is conceptually partian2016-01-201-0/+1
| | | | | | | | | | of the MFC done in r294342, but since ia64 is gone in -current this is a direct commit to 10-stable to add the functions.
| * MFC r293856:brooks2016-01-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | Avoid reading pass the end of the source buffer when it is not NUL terminated. If this buffer is adjacent to an unmapped page or a version of C with bounds checked is used this may result in a crash. PR: 206178 Submitted by: Alexander Cherepanov <cherepan@mccme.ru>
| * MFC r293855:brooks2016-01-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | Avoid reading pass the end of the source buffer when it is not NUL terminated. If this buffer is adjacent to an unmapped page or a version of C with bounds checked is used this may result in a crash. PR: 206177 Submitted by: Alexander Cherepanov <cherepan@mccme.ru>
| * MFC r292337, r292552, r292553:ian2016-01-191-8/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build mount_smbfs for arm. Also sort the subdirs. Avoid unaligned memory accesses when encoding netbios names in libsmb. The current code for encoding a netbios name converts each byte to a 16-bit value and stores the result by casting a char* to u_short*, resulting in alignment faults on strict-alignment platforms. This change reimplements the encoding routine using only byte accesses to memory. There is no particular reason to work with 16-bit values just because the encoding process creates two bytes of output for every byte of input. Working a byte at at time also avoids endian problems for big-endian platforms. Make the building of libsmb and mount_smbfs unconditional, now that r292552 has eliminated alignment and endian problems that were making it fail on some platforms. PR: 180438 PR: 189415 Relnotes: Yes
| * Default __MAKE_SHELL to /bin/sh when generating aton_ether_subr.c viangie2016-01-191-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | `gen_ether_subr`. __MAKE_SHELL is only defined when installworld is run on stable/10, which breaks workflows dealing with source trees mounted with noexec [*] This is a direct commit to stable/10 Reported by: Mark Martinec <Mark.Martinec+freebsd@ijs.si> Sponsored by: EMC / Isilon Storage Division
| * MFC r292583:ian2016-01-191-6/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow dhcp/bootp server-provided values to be overriden from environment variables in loader(8) and other libstand applications. Sometimes a dhcp server provides incorrect information along with the IP address. It would be useful to have a way to override this with locally-supplied information, such as command line parameters passed from a prior-stage bootloader. This change allows pre-existing env vars to take precedence over values delivered by the dhcp or bootp server. The bootp/dhcp code in libstand automatically creates environment variables from the data provided by the server (dhcp.root-path, dhcp.domain-name, etc). It also transcribes the values to some global variables such as 'rootpath' and 'hostname'. This change does two things: When adding dhcp.* vars to the environment, don't replace existing vars/values. When setting the global vars rootpath and hostname, use the dhcp.root-path and dhcp.host-name env var values if they exist. This allows the platform-specific part of loader(8) to obtain override values in some platform-specific way and store them in the environment before opening the network device. The set of values that can be overriden is currently limited to just string options. The values that are delivered as binary data are things that probably shouldn't be overridden (IP, netmask, gateway, etc). The original patch this evolved from was submitted by martymac@ PR: 202098 Relnotes: Yes
| * MFC r292234, r292527:ian2016-01-191-2/+2
| | | | | | | | Add strlcat() and strlcpy() to libstand and libstand32.
OpenPOWER on IntegriCloud