CVS commit: src/sys/arch/xen/xen
Module Name:src Committed By: cherry Date: Fri Jul 28 07:42:41 UTC 2017 Modified Files: src/sys/arch/xen/xen: pci_intr_machdep.c Log Message: APIC related macros are mixed with IOAPIC related ones. This needs separation. Until then, band-aid it. This fixes pci-passthrough build failures on XEN3_DOMU pointed out by msaitoh@ To generate a diff of this commit: cvs rdiff -u -r1.19 -r1.20 src/sys/arch/xen/xen/pci_intr_machdep.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/pci
Module Name:src Committed By: msaitoh Date: Fri Jul 28 09:12:40 UTC 2017 Modified Files: src/sys/dev/pci: if_wm.c Log Message: Qemu's e1000e emulation (82574L)'s SPI has only 64 words. I've never seen on real 82574 hardware with such small SPI ROM. Check sc->sc_nvm_wordsize before accessing higer address words to prevent timeout. To generate a diff of this commit: cvs rdiff -u -r1.533 -r1.534 src/sys/dev/pci/if_wm.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/pci
Module Name:src Committed By: msaitoh Date: Fri Jul 28 10:21:10 UTC 2017 Modified Files: src/sys/dev/pci: if_wm.c Log Message: Check some wm_nvm_read()'s return vale. To generate a diff of this commit: cvs rdiff -u -r1.534 -r1.535 src/sys/dev/pci/if_wm.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/pci
Module Name:src Committed By: knakahara Date: Fri Jul 28 10:34:58 UTC 2017 Modified Files: src/sys/dev/pci: if_wm.c Log Message: add comment about confusing wm_rxeof() calling. pointed out by msaitoh@n.o. To generate a diff of this commit: cvs rdiff -u -r1.535 -r1.536 src/sys/dev/pci/if_wm.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/kern
Module Name:src Committed By: martin Date: Fri Jul 28 12:28:48 UTC 2017 Modified Files: src/sys/kern: kern_malloc.c Log Message: Avoid integer overflow in kern_malloc(). Reported by Ilja Van Sprundel. XXX Time to kill malloc() completely! To generate a diff of this commit: cvs rdiff -u -r1.145 -r1.146 src/sys/kern/kern_malloc.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/usb
Module Name:src Committed By: skrll Date: Fri Jul 28 13:23:01 UTC 2017 Modified Files: src/sys/dev/usb: if_ural.c Log Message: Free the RX list if ural_alloc_rx_list fails part way through. Reported by Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.51 -r1.52 src/sys/dev/usb/if_ural.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/altq
Module Name:src Committed By: riastradh Date: Fri Jul 28 13:53:17 UTC 2017 Modified Files: src/sys/altq: altq_cbq.c altq_hfsc.c altq_jobs.c altq_priq.c Log Message: Zero buffers copied to userland to avoid stack disclosure. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.30 -r1.31 src/sys/altq/altq_cbq.c cvs rdiff -u -r1.26 -r1.27 src/sys/altq/altq_hfsc.c cvs rdiff -u -r1.10 -r1.11 src/sys/altq/altq_jobs.c cvs rdiff -u -r1.23 -r1.24 src/sys/altq/altq_priq.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/altq
Module Name:src Committed By: riastradh Date: Fri Jul 28 13:58:47 UTC 2017 Modified Files: src/sys/altq: altq_wfq.c Log Message: Reject negative indices. (Would be nice to change the types too, and it's *probably* safe to replace int by u_int, but I'm reluctant to touch the ioctl definitions without at least a modicum more thought. Also one of them is a u_long, because why not?) >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.21 -r1.22 src/sys/altq/altq_wfq.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/i386/conf
Module Name:src Committed By: maxv Date: Fri Jul 28 13:59:07 UTC 2017 Modified Files: src/sys/arch/i386/conf: GENERIC Log Message: Disable vm86 by default. The use case is limited, and the potential for damage is too high. This code is fragile, and relies on a certain number of assumptions, some of which are not be totally true. For example, it relies on the fact that a 16bit process cannot perform a syscall, but verily it can. The slighest confusion in the trap frame can lead to ring0 exploits. Also, I'm not convinced that it interacts well with the compatibility layers. To generate a diff of this commit: cvs rdiff -u -r1.1157 -r1.1158 src/sys/arch/i386/conf/GENERIC Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/x86/x86
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:12:26 UTC 2017 Modified Files: src/sys/arch/x86/x86: cpu.c Log Message: cpu_trace is no more, remove vestige of it that broke ALL kernel. To generate a diff of this commit: cvs rdiff -u -r1.131 -r1.132 src/sys/arch/x86/x86/cpu.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/x86/x86
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:13:11 UTC 2017 Modified Files: src/sys/arch/x86/x86: pmap.c Log Message: #if DIAGNOSTIC panic ---> KASSERTMSG To generate a diff of this commit: cvs rdiff -u -r1.255 -r1.256 src/sys/arch/x86/x86/pmap.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/i386/conf
Module Name:src Committed By: maxv Date: Fri Jul 28 14:13:13 UTC 2017 Modified Files: src/sys/arch/i386/conf: GENERIC XEN3_DOM0 XEN3_DOMU Log Message: Disable svr4 and ibcs2 by default. These options are not well-tested, of a limited use case, and the potential for damage is too high. Vulnerabilities were presented at DEFCON 25 - I see that at least one of them can be exploited to get ring0 privileges. To generate a diff of this commit: cvs rdiff -u -r1.1158 -r1.1159 src/sys/arch/i386/conf/GENERIC cvs rdiff -u -r1.113 -r1.114 src/sys/arch/i386/conf/XEN3_DOM0 cvs rdiff -u -r1.77 -r1.78 src/sys/arch/i386/conf/XEN3_DOMU Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/opencrypto
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:13:56 UTC 2017 Modified Files: src/sys/opencrypto: ocryptodev.c Log Message: Don't disclose uninitialized 32-bit word if cryptodev_session fails. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.8 -r1.9 src/sys/opencrypto/ocryptodev.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/opencrypto
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:16:29 UTC 2017 Modified Files: src/sys/opencrypto: ocryptodev.c Log Message: Avert userland-controlled integer overflow. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.9 -r1.10 src/sys/opencrypto/ocryptodev.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netsmb
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:20:46 UTC 2017 Modified Files: src/sys/netsmb: smb_usr.c Log Message: Reject allocations for too-small buffers from userland. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.16 -r1.17 src/sys/netsmb/smb_usr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/x86/pci
Module Name:src Committed By: maxv Date: Fri Jul 28 14:26:51 UTC 2017 Modified Files: src/sys/arch/x86/pci: msipic.c pci_addr_fixup.c pci_intr_machdep.c pci_msi_machdep.c Log Message: Don't include malloc.h. To generate a diff of this commit: cvs rdiff -u -r1.10 -r1.11 src/sys/arch/x86/pci/msipic.c cvs rdiff -u -r1.9 -r1.10 src/sys/arch/x86/pci/pci_addr_fixup.c cvs rdiff -u -r1.40 -r1.41 src/sys/arch/x86/pci/pci_intr_machdep.c cvs rdiff -u -r1.12 -r1.13 src/sys/arch/x86/pci/pci_msi_machdep.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netsmb
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:37:27 UTC 2017 Modified Files: src/sys/netsmb: smb_subr.c smb_subr.h smb_usr.c Log Message: Plug another overflow: refuse bogus sa_len from user. To generate a diff of this commit: cvs rdiff -u -r1.37 -r1.38 src/sys/netsmb/smb_subr.c cvs rdiff -u -r1.21 -r1.22 src/sys/netsmb/smb_subr.h cvs rdiff -u -r1.17 -r1.18 src/sys/netsmb/smb_usr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netsmb
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:40:42 UTC 2017 Modified Files: src/sys/netsmb: smb_usr.c Log Message: Reject negative ioc_setupcnt. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 src/sys/netsmb/smb_usr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netsmb
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:45:59 UTC 2017 Modified Files: src/sys/netsmb: smb_dev.c Log Message: Reject negative offset/count for smb read/write. Not clear that this is actually a problem for the kernel -- might overwrite user's buffers or return garbage to user, but that's their own damn fault. But it's hard to imagine that negative offset/count ever makes sense, and I haven't ruled out a problem for the kernel. To generate a diff of this commit: cvs rdiff -u -r1.49 -r1.50 src/sys/netsmb/smb_dev.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/ic
Module Name:src Committed By: riastradh Date: Fri Jul 28 14:49:55 UTC 2017 Modified Files: src/sys/dev/ic: ciss.c Log Message: Reject negative indices from userland. To generate a diff of this commit: cvs rdiff -u -r1.36 -r1.37 src/sys/dev/ic/ciss.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/ic
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:02:52 UTC 2017 Modified Files: src/sys/dev/ic: isp_netbsd.c Log Message: Reject out-of-bounds channel index. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.88 -r1.89 src/sys/dev/ic/isp_netbsd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/kern
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:16:39 UTC 2017 Modified Files: src/sys/kern: kern_ktrace.c Log Message: Clamp the length we use, not the length we don't. Avoids uninitialized memory disclosure to userland. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.170 -r1.171 src/sys/kern/kern_ktrace.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:34:07 UTC 2017 Modified Files: src/sys/compat/common: vfs_syscalls_12.c vfs_syscalls_43.c src/sys/compat/ibcs2: ibcs2_misc.c src/sys/compat/linux/common: linux_file64.c linux_misc.c src/sys/compat/linux32/common: linux32_dirent.c src/sys/compat/osf1: osf1_file.c src/sys/compat/sunos: sunos_misc.c src/sys/compat/sunos32: sunos32_misc.c src/sys/compat/svr4: svr4_misc.c src/sys/compat/svr4_32: svr4_32_misc.c src/sys/rump/kern/lib/libsys_sunos: rump_sunos_compat.c Log Message: Fail, don't panic, on bad dirents from file system. Controllable via puffs from userland. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.33 -r1.34 src/sys/compat/common/vfs_syscalls_12.c cvs rdiff -u -r1.59 -r1.60 src/sys/compat/common/vfs_syscalls_43.c cvs rdiff -u -r1.113 -r1.114 src/sys/compat/ibcs2/ibcs2_misc.c cvs rdiff -u -r1.58 -r1.59 src/sys/compat/linux/common/linux_file64.c cvs rdiff -u -r1.238 -r1.239 src/sys/compat/linux/common/linux_misc.c cvs rdiff -u -r1.17 -r1.18 src/sys/compat/linux32/common/linux32_dirent.c cvs rdiff -u -r1.43 -r1.44 src/sys/compat/osf1/osf1_file.c cvs rdiff -u -r1.170 -r1.171 src/sys/compat/sunos/sunos_misc.c cvs rdiff -u -r1.77 -r1.78 src/sys/compat/sunos32/sunos32_misc.c cvs rdiff -u -r1.157 -r1.158 src/sys/compat/svr4/svr4_misc.c cvs rdiff -u -r1.77 -r1.78 src/sys/compat/svr4_32/svr4_32_misc.c cvs rdiff -u -r1.1 -r1.2 \ src/sys/rump/kern/lib/libsys_sunos/rump_sunos_compat.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/kern
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:37:23 UTC 2017 Modified Files: src/sys/kern: vfs_getcwd.c Log Message: Don't walk off the end of the dirent buffer. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.51 -r1.52 src/sys/kern/vfs_getcwd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/amd64/conf
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:40:38 UTC 2017 Modified Files: src/sys/arch/amd64/conf: ALL Log Message: Add some more bogus compat options to amd64/ALL for compile-testing. To generate a diff of this commit: cvs rdiff -u -r1.60 -r1.61 src/sys/arch/amd64/conf/ALL Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/ibcs2
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:47:23 UTC 2017 Modified Files: src/sys/compat/ibcs2: ibcs2_exec_coff.c Log Message: Check for NUL termination within the buffer we have. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.26 -r1.27 src/sys/compat/ibcs2/ibcs2_exec_coff.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/ibcs2
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:50:04 UTC 2017 Modified Files: src/sys/compat/ibcs2: ibcs2_exec_coff.c Log Message: Make sure we have enough space in the buffer before reading it. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.27 -r1.28 src/sys/compat/ibcs2/ibcs2_exec_coff.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/ibcs2
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:51:35 UTC 2017 Modified Files: src/sys/compat/ibcs2: ibcs2_exec_coff.c Log Message: Make sure we move forward over the buffer. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.28 -r1.29 src/sys/compat/ibcs2/ibcs2_exec_coff.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: riastradh Date: Fri Jul 28 15:52:53 UTC 2017 Modified Files: src/sys/dev: vndvar.h Log Message: Tweak whitespace to make this definition more greppable. To generate a diff of this commit: cvs rdiff -u -r1.35 -r1.36 src/sys/dev/vndvar.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/share/man/man4/man4.pmax
Module Name:src Committed By: flxd Date: Fri Jul 28 15:58:24 UTC 2017 Modified Files: src/share/man/man4/man4.pmax: intro.4 sii.4 Log Message: * sii(4) was never used in VAXstation 3100 (uses si(4) and is NCR-based). * Reference scsi(4) in sii(4). * Add more machines to pmax/intro(4). * Small fixes. To generate a diff of this commit: cvs rdiff -u -r1.20 -r1.21 src/share/man/man4/man4.pmax/intro.4 cvs rdiff -u -r1.13 -r1.14 src/share/man/man4/man4.pmax/sii.4 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/amd64/conf
Module Name:src Committed By: maxv Date: Fri Jul 28 16:10:29 UTC 2017 Modified Files: src/sys/arch/amd64/conf: GENERIC XEN3_DOM0 XEN3_DOMU Log Message: After a careful review, and all things considered, disable compat43 by default on amd64. The use case is limited, the potential for damage too high, and it is safer to run a BSD4.3 binary on i386 since the kernel does not have to go through netbsd32 - which may not correctly reproduce i386. To generate a diff of this commit: cvs rdiff -u -r1.461 -r1.462 src/sys/arch/amd64/conf/GENERIC cvs rdiff -u -r1.136 -r1.137 src/sys/arch/amd64/conf/XEN3_DOM0 cvs rdiff -u -r1.75 -r1.76 src/sys/arch/amd64/conf/XEN3_DOMU Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/share/man/man4/man4.pmax
Module Name:src Committed By: wiz Date: Fri Jul 28 16:11:03 UTC 2017 Modified Files: src/share/man/man4/man4.pmax: intro.4 Log Message: New sentence, new line. To generate a diff of this commit: cvs rdiff -u -r1.21 -r1.22 src/share/man/man4/man4.pmax/intro.4 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: riastradh Date: Fri Jul 28 16:19:20 UTC 2017 Modified Files: src/sys/dev: vnd.c Log Message: Put in a litany of judicious bounds checks around vnd headers. Thought I was done with this crap after I rewrote vndcompress(1)! >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.259 -r1.260 src/sys/dev/vnd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: riastradh Date: Fri Jul 28 16:22:01 UTC 2017 Modified Files: src/sys/dev: vnd.c Log Message: Fix indentation. u_intN_t -> uintN_t. ntohl -> be32toh. No functional change intended. To generate a diff of this commit: cvs rdiff -u -r1.260 -r1.261 src/sys/dev/vnd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: riastradh Date: Fri Jul 28 16:30:41 UTC 2017 Modified Files: src/sys/dev: vnd.c Log Message: Appease toxic bullshit warning from gcc. If you have a better way to write a useful bounds check that happens to always pass on LP64 but doesn't always on LP32, without making it fail to compile on LP64 or making it an #ifdef conditional on LP32, please put it in here instead. To generate a diff of this commit: cvs rdiff -u -r1.261 -r1.262 src/sys/dev/vnd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/svr4
Module Name:src Committed By: riastradh Date: Fri Jul 28 16:55:48 UTC 2017 Modified Files: src/sys/compat/svr4: svr4_stream.c Log Message: Fix some of the multitudinous holes in svr4 streams. We should never have enabled this by default; it is a minefield. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.88 -r1.89 src/sys/compat/svr4/svr4_stream.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/svr4
Module Name:src Committed By: riastradh Date: Fri Jul 28 16:57:12 UTC 2017 Modified Files: src/sys/compat/svr4: svr4_lwp.c Log Message: Zero stack data before copyout. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.19 -r1.20 src/sys/compat/svr4/svr4_lwp.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/opencrypto
Module Name:src Committed By: riastradh Date: Fri Jul 28 17:14:04 UTC 2017 Modified Files: src/sys/opencrypto: ocryptodev.c Log Message: Avoid another userland-controlled integer overflow. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.10 -r1.11 src/sys/opencrypto/ocryptodev.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat
Module Name:src Committed By: riastradh Date: Fri Jul 28 17:38:36 UTC 2017 Modified Files: src/sys/compat/svr4: svr4_signal.c src/sys/compat/svr4_32: svr4_32_signal.c Log Message: Fix indexing of svr4 signals. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.66 -r1.67 src/sys/compat/svr4/svr4_signal.c cvs rdiff -u -r1.28 -r1.29 src/sys/compat/svr4_32/svr4_32_signal.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/svr4
Module Name:src Committed By: riastradh Date: Fri Jul 28 17:43:46 UTC 2017 Modified Files: src/sys/compat/svr4: svr4_stream.c Log Message: Feebly attempt to get this reference counting less bad. This svr4 streams code is bad and it should feel bad. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.89 -r1.90 src/sys/compat/svr4/svr4_stream.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/svr4
Module Name:src Committed By: riastradh Date: Fri Jul 28 17:52:47 UTC 2017 Modified Files: src/sys/compat/svr4: svr4_stream.c Log Message: Check bounds in svr4_sys_putmsg. Check more svr4_strmcmd bounds. svr4 streams code is still a disaster. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.90 -r1.91 src/sys/compat/svr4/svr4_stream.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/ibcs2
Module Name:src Committed By: riastradh Date: Fri Jul 28 17:57:48 UTC 2017 Modified Files: src/sys/compat/ibcs2: ibcs2_ioctl.c Log Message: Zero buffers in ibcs2 ioctl to avoid disclosing stack to userland. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.45 -r1.46 src/sys/compat/ibcs2/ibcs2_ioctl.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet
Module Name:src Committed By: maxv Date: Fri Jul 28 19:16:41 UTC 2017 Modified Files: src/sys/netinet: tcp_timer.c tcp_usrreq.c tcp_var.h Log Message: Remove TCP_COMPAT_42. This feature is a workaround for a bug in the TCP stack of BSD4.2. Having such features just does not make any sense, and looking at the code, I'm not sure it actually works. To generate a diff of this commit: cvs rdiff -u -r1.91 -r1.92 src/sys/netinet/tcp_timer.c cvs rdiff -u -r1.214 -r1.215 src/sys/netinet/tcp_usrreq.c cvs rdiff -u -r1.178 -r1.179 src/sys/netinet/tcp_var.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch
Module Name:src Committed By: maxv Date: Fri Jul 28 19:26:16 UTC 2017 Modified Files: src/sys/arch/acorn32/conf: EB7500ATX GENERIC INSTALL LOWMEM_WSCONS NC src/sys/arch/amd64/conf: ALL src/sys/arch/amiga/conf: DRACO GENERIC GENERIC.in src/sys/arch/epoc32/conf: GENERIC src/sys/arch/hp300/conf: GENERIC INSTALL src/sys/arch/mipsco/conf: GENERIC INSTALL RC3230 src/sys/arch/newsmips/conf: GENERIC src/sys/arch/pmax/conf: GENERIC GENERIC64 src/sys/arch/prep/conf: GENERIC src/sys/arch/sgimips/conf: GENERIC32_IP12 GENERIC32_IP2x GENERIC32_IP3x GENERIC64_IP2x GENERIC64_IP3x src/sys/arch/sun3/conf: DISKLESS DISKLESS3X GENERIC GENERIC3X INSTALL INSTALL3X RAMDISK RAMDISK3X Log Message: Remove TCP_COMPAT_42 from the config files. Pass 1. To generate a diff of this commit: cvs rdiff -u -r1.61 -r1.62 src/sys/arch/acorn32/conf/EB7500ATX cvs rdiff -u -r1.120 -r1.121 src/sys/arch/acorn32/conf/GENERIC cvs rdiff -u -r1.76 -r1.77 src/sys/arch/acorn32/conf/INSTALL cvs rdiff -u -r1.70 -r1.71 src/sys/arch/acorn32/conf/LOWMEM_WSCONS cvs rdiff -u -r1.69 -r1.70 src/sys/arch/acorn32/conf/NC cvs rdiff -u -r1.61 -r1.62 src/sys/arch/amd64/conf/ALL cvs rdiff -u -r1.180 -r1.181 src/sys/arch/amiga/conf/DRACO cvs rdiff -u -r1.314 -r1.315 src/sys/arch/amiga/conf/GENERIC cvs rdiff -u -r1.132 -r1.133 src/sys/arch/amiga/conf/GENERIC.in cvs rdiff -u -r1.13 -r1.14 src/sys/arch/epoc32/conf/GENERIC cvs rdiff -u -r1.194 -r1.195 src/sys/arch/hp300/conf/GENERIC cvs rdiff -u -r1.60 -r1.61 src/sys/arch/hp300/conf/INSTALL cvs rdiff -u -r1.88 -r1.89 src/sys/arch/mipsco/conf/GENERIC cvs rdiff -u -r1.30 -r1.31 src/sys/arch/mipsco/conf/INSTALL cvs rdiff -u -r1.47 -r1.48 src/sys/arch/mipsco/conf/RC3230 cvs rdiff -u -r1.129 -r1.130 src/sys/arch/newsmips/conf/GENERIC cvs rdiff -u -r1.190 -r1.191 src/sys/arch/pmax/conf/GENERIC cvs rdiff -u -r1.24 -r1.25 src/sys/arch/pmax/conf/GENERIC64 cvs rdiff -u -r1.181 -r1.182 src/sys/arch/prep/conf/GENERIC cvs rdiff -u -r1.29 -r1.30 src/sys/arch/sgimips/conf/GENERIC32_IP12 cvs rdiff -u -r1.108 -r1.109 src/sys/arch/sgimips/conf/GENERIC32_IP2x cvs rdiff -u -r1.111 -r1.112 src/sys/arch/sgimips/conf/GENERIC32_IP3x cvs rdiff -u -r1.4 -r1.5 src/sys/arch/sgimips/conf/GENERIC64_IP2x \ src/sys/arch/sgimips/conf/GENERIC64_IP3x cvs rdiff -u -r1.72 -r1.73 src/sys/arch/sun3/conf/DISKLESS cvs rdiff -u -r1.57 -r1.58 src/sys/arch/sun3/conf/DISKLESS3X \ src/sys/arch/sun3/conf/INSTALL3X cvs rdiff -u -r1.172 -r1.173 src/sys/arch/sun3/conf/GENERIC cvs rdiff -u -r1.126 -r1.127 src/sys/arch/sun3/conf/GENERIC3X cvs rdiff -u -r1.58 -r1.59 src/sys/arch/sun3/conf/INSTALL cvs rdiff -u -r1.53 -r1.54 src/sys/arch/sun3/conf/RAMDISK cvs rdiff -u -r1.41 -r1.42 src/sys/arch/sun3/conf/RAMDISK3X Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/doc
Module Name:src Committed By: wiz Date: Fri Jul 28 19:31:59 UTC 2017 Modified Files: src/doc: 3RDPARTY Log Message: binutils-2.29 out. To generate a diff of this commit: cvs rdiff -u -r1.1458 -r1.1459 src/doc/3RDPARTY Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/external/gpl3/gcc/dist/gcc/config/i386
Module Name:src Committed By: maya Date: Fri Jul 28 22:23:05 UTC 2017 Modified Files: src/external/gpl3/gcc/dist/gcc/config/i386: i386.c Log Message: Apply upstream patch: Incorrect codegen from rdseed intrinsic use (CVE-2017-11671) We should not expand call arguments in between flags reg setting and flags reg using instructions, as it may expand with flags reg clobbering insn (ADD in this case). Attached patch moves expansion out of the link. Also, change zero-extension to non-flags reg clobbering sequence in case we perform zero-extension with and. 2017-03-25 Uros Bizjak To generate a diff of this commit: cvs rdiff -u -r1.12 -r1.13 src/external/gpl3/gcc/dist/gcc/config/i386/i386.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/external/gpl3/gcc.old/dist/gcc/config/i386
Module Name:src Committed By: maya Date: Fri Jul 28 22:24:27 UTC 2017 Modified Files: src/external/gpl3/gcc.old/dist/gcc/config/i386: i386.c Log Message: Apply upstream patch: Incorrect codegen from rdseed intrinsic use (CVE-2017-11671) We should not expand call arguments in between flags reg setting and flags reg using instructions, as it may expand with flags reg clobbering insn (ADD in this case). Attached patch moves expansion out of the link. Also, change zero-extension to non-flags reg clobbering sequence in case we perform zero-extension with and. 2017-03-25 Uros Bizjak To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 \ src/external/gpl3/gcc.old/dist/gcc/config/i386/i386.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/doc
Module Name:src Committed By: wiz Date: Fri Jul 28 22:53:32 UTC 2017 Modified Files: src/doc: 3RDPARTY Log Message: expat-2.2.2 security fix release out. To generate a diff of this commit: cvs rdiff -u -r1.1459 -r1.1460 src/doc/3RDPARTY Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/ibcs2
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:05:54 UTC 2017 Modified Files: src/sys/compat/ibcs2: ibcs2_stat.c Log Message: Don't drop vnode ref until we're done with mount in ibcs2_stat(v)fs. Nothing else guarantees the mount will stick around. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.48 -r1.49 src/sys/compat/ibcs2/ibcs2_stat.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/ibcs2
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:14:00 UTC 2017 Modified Files: src/sys/compat/ibcs2: ibcs2_stat.c Log Message: Little happy on the commit trigger. Actually use the out label. To generate a diff of this commit: cvs rdiff -u -r1.49 -r1.50 src/sys/compat/ibcs2/ibcs2_stat.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/linux/common
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:14:59 UTC 2017 Modified Files: src/sys/compat/linux/common: linux_time.c Log Message: Only let the superuser set the compat_linux timezone. Not really keen to invent a new kauth cookie for this useless purpose. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.37 -r1.38 src/sys/compat/linux/common/linux_time.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/ic
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:19:29 UTC 2017 Modified Files: src/sys/dev/ic: bwi.c Log Message: Check for M_EXT in m->m_flags, whether m is NULL, after MCLGET. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.31 -r1.32 src/sys/dev/ic/bwi.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/ic
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:31:20 UTC 2017 Modified Files: src/sys/dev/ic: dm9000.c Log Message: Check for MCLGET failure in dme_alloc_receive_buffer. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.11 -r1.12 src/sys/dev/ic/dm9000.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/ic
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:34:49 UTC 2017 Modified Files: src/sys/dev/ic: dp83932.c Log Message: Plug mbuf leak on MCLGET failure in sonic_rxintr. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.40 -r1.41 src/sys/dev/ic/dp83932.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/ic
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:45:22 UTC 2017 Modified Files: src/sys/dev/ic: i82596.c Log Message: Null out sc_rx_mbuf[i] after m_freem to avoid double-free later. >From Ilja Van Sprundel. Also null out sc_tx_mbuf[i] after m_freem, out of paranoia. XXX Not entirely clear to how tx mbufs are freed, but no way to test this since it's ews4800mips- and hp700-only, so not keen to make any more elaborate changes... To generate a diff of this commit: cvs rdiff -u -r1.36 -r1.37 src/sys/dev/ic/i82596.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/pci
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:47:48 UTC 2017 Modified Files: src/sys/dev/pci: if_et.c Log Message: Check for MCLGET failure in et_newbuf. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.14 -r1.15 src/sys/dev/pci/if_et.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/pci
Module Name:src Committed By: riastradh Date: Sat Jul 29 01:54:56 UTC 2017 Modified Files: src/sys/dev/pci: if_ipw.c Log Message: Null out sbuf->m on failure to avoid double-free later. >From Ilja Van Sprundel. Also null out sbuf->map out of paranoia. To generate a diff of this commit: cvs rdiff -u -r1.64 -r1.65 src/sys/dev/pci/if_ipw.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/mac68k/nubus
Module Name:src Committed By: riastradh Date: Sat Jul 29 02:17:44 UTC 2017 Modified Files: src/sys/arch/mac68k/nubus: if_netdock_nubus.c Log Message: Avoid memory leak in netdock_get. If top is null, this is the first time through and nothing else will free m. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.25 -r1.26 src/sys/arch/mac68k/nubus/if_netdock_nubus.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/newsmips/apbus
Module Name:src Committed By: riastradh Date: Sat Jul 29 02:21:30 UTC 2017 Modified Files: src/sys/arch/newsmips/apbus: if_sn.c Log Message: Avoid memory leak in sonic_get. If this is the first time around, top is null and nothing else will free m. >From Ilja Van Sprundel. To generate a diff of this commit: cvs rdiff -u -r1.38 -r1.39 src/sys/arch/newsmips/apbus/if_sn.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/linux/common
Module Name:src Committed By: riastradh Date: Sat Jul 29 02:31:22 UTC 2017 Modified Files: src/sys/compat/linux/common: linux_time.c Log Message: Put suser check in the right function: settimeofday, not gettimeofday. While here, remove wrong comment. Noted by kre@. To generate a diff of this commit: cvs rdiff -u -r1.38 -r1.39 src/sys/compat/linux/common/linux_time.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: isaki Date: Sat Jul 29 03:05:51 UTC 2017 Modified Files: src/sys/dev: audio.c audiovar.h Log Message: Improve audio_set_vchan_defaults(). - Correct confused input/output parameters. - Remove sc->{sc_channels, sc_precision, sc_frequency}. They are the same as sc->sc_vchan_params.{channels, precision, sample_rate}. The input parameter of audio_set_vchan_defaults() is now only sc->sc_vchan_params. Fix PR kern/52437 To generate a diff of this commit: cvs rdiff -u -r1.375 -r1.376 src/sys/dev/audio.c cvs rdiff -u -r1.58 -r1.59 src/sys/dev/audiovar.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/sbus
Module Name:src Committed By: macallan Date: Sat Jul 29 03:29:49 UTC 2017 Modified Files: src/sys/dev/sbus: mgx.c mgxreg.h Log Message: - use hardware to draw bitmap fonts - while there enable font loading etc. To generate a diff of this commit: cvs rdiff -u -r1.9 -r1.10 src/sys/dev/sbus/mgx.c cvs rdiff -u -r1.4 -r1.5 src/sys/dev/sbus/mgxreg.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/sbus
Module Name:src Committed By: macallan Date: Sat Jul 29 03:32:00 UTC 2017 Modified Files: src/sys/dev/sbus: mgx.c Log Message: make comment match code... To generate a diff of this commit: cvs rdiff -u -r1.10 -r1.11 src/sys/dev/sbus/mgx.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys
Module Name:src Committed By: riastradh Date: Sat Jul 29 04:02:49 UTC 2017 Modified Files: src/sys/compat/common: vfs_syscalls_43.c src/sys/sys: vfs_syscalls.h Log Message: Declare mountcompatnames in sys/vfs_syscalls.h to kill nested extern. To generate a diff of this commit: cvs rdiff -u -r1.60 -r1.61 src/sys/compat/common/vfs_syscalls_43.c cvs rdiff -u -r1.22 -r1.23 src/sys/sys/vfs_syscalls.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/common
Module Name:src Committed By: riastradh Date: Sat Jul 29 04:08:47 UTC 2017 Modified Files: src/sys/compat/common: if_43.c Log Message: Kill needless nested extern of vec_compat_cvtcmd/ioctl. Already declared in if_43.h. To generate a diff of this commit: cvs rdiff -u -r1.13 -r1.14 src/sys/compat/common/if_43.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet
Module Name:src Committed By: maxv Date: Sat Jul 29 05:08:48 UTC 2017 Modified Files: src/sys/netinet: tcp_subr.c Log Message: Forgot to commit this file yesterday. To generate a diff of this commit: cvs rdiff -u -r1.270 -r1.271 src/sys/netinet/tcp_subr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/share/man/man4
Module Name:src Committed By: maxv Date: Sat Jul 29 05:46:29 UTC 2017 Modified Files: src/share/man/man4: options.4 Log Message: Remove TCP_COMPAT_42. To generate a diff of this commit: cvs rdiff -u -r1.467 -r1.468 src/share/man/man4/options.4 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet
Module Name:src Committed By: maxv Date: Sat Jul 29 05:48:16 UTC 2017 Modified Files: src/sys/netinet: files.netinet Log Message: Remove TCP_COMPAT_42. To generate a diff of this commit: cvs rdiff -u -r1.27 -r1.28 src/sys/netinet/files.netinet Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: isaki Date: Sat Jul 29 05:55:58 UTC 2017 Modified Files: src/sys/dev: audio.c Log Message: const-ify. To generate a diff of this commit: cvs rdiff -u -r1.376 -r1.377 src/sys/dev/audio.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/i386/conf
Module Name:src Committed By: maxv Date: Sat Jul 29 05:59:08 UTC 2017 Modified Files: src/sys/arch/i386/conf: XEN3_DOM0 XEN3_DOMU Log Message: Disable COMPAT_386BSD_MBRPART on Xen - not enabled in GENERIC. To generate a diff of this commit: cvs rdiff -u -r1.114 -r1.115 src/sys/arch/i386/conf/XEN3_DOM0 cvs rdiff -u -r1.78 -r1.79 src/sys/arch/i386/conf/XEN3_DOMU Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: isaki Date: Sat Jul 29 06:00:47 UTC 2017 Modified Files: src/sys/dev: audio.c Log Message: 0 -> NULL in audioattach() To generate a diff of this commit: cvs rdiff -u -r1.377 -r1.378 src/sys/dev/audio.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/compat/sys
Module Name:src Committed By: maxv Date: Sat Jul 29 06:12:50 UTC 2017 Modified Files: src/sys/compat/sys: socket.h Log Message: Only compat_43 needs compat_osock. Note that the use of vec_compat_ifioctl is racy. To generate a diff of this commit: cvs rdiff -u -r1.14 -r1.15 src/sys/compat/sys/socket.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch
Module Name:src Committed By: maxv Date: Sat Jul 29 06:29:32 UTC 2017 Modified Files: src/sys/arch/i386/conf: files.i386 src/sys/arch/i386/i386: autoconf.c locore.S machdep.c src/sys/arch/xen/conf: files.compat src/sys/arch/xen/x86: autoconf.c Log Message: Remove the remaining parts of compat_oldboot. To generate a diff of this commit: cvs rdiff -u -r1.379 -r1.380 src/sys/arch/i386/conf/files.i386 cvs rdiff -u -r1.103 -r1.104 src/sys/arch/i386/i386/autoconf.c cvs rdiff -u -r1.146 -r1.147 src/sys/arch/i386/i386/locore.S cvs rdiff -u -r1.785 -r1.786 src/sys/arch/i386/i386/machdep.c cvs rdiff -u -r1.26 -r1.27 src/sys/arch/xen/conf/files.compat cvs rdiff -u -r1.18 -r1.19 src/sys/arch/xen/x86/autoconf.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: isaki Date: Sat Jul 29 06:30:56 UTC 2017 Modified Files: src/sys/dev: audio.c Log Message: Fix error handling of ring buffers allocation in audioattach(). NULL dereference, dead code, reference to uninitialized variable, and mutex leak. XXX In the current implementation, if audio_alloc_ring() returns error, it is not guaranteed that ringbuf->s.start will be NULL. To generate a diff of this commit: cvs rdiff -u -r1.378 -r1.379 src/sys/dev/audio.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: isaki Date: Sat Jul 29 06:33:45 UTC 2017 Modified Files: src/sys/dev: audio.c Log Message: Fix a resource leak on error handling in audio_alloc_ring(). To generate a diff of this commit: cvs rdiff -u -r1.379 -r1.380 src/sys/dev/audio.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: isaki Date: Sat Jul 29 06:36:21 UTC 2017 Modified Files: src/sys/dev: audio.c Log Message: Use do .. while (0) for macros. To generate a diff of this commit: cvs rdiff -u -r1.380 -r1.381 src/sys/dev/audio.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev
Module Name:src Committed By: isaki Date: Sat Jul 29 06:45:35 UTC 2017 Modified Files: src/sys/dev: audio.c Log Message: "bits" sounds better than "name" for argument name. I feel expression (name / NBBY) a little strange. To generate a diff of this commit: cvs rdiff -u -r1.381 -r1.382 src/sys/dev/audio.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.