svn commit: r316543 - stable/10/sys/kern
Author: brooks
Date: Wed Apr 5 21:08:26 2017
New Revision: 316543
URL: https://svnweb.freebsd.org/changeset/base/316543
Log:
MFC r316497:
Correct a kernel stack leak in 32-bit compat when vfc_name is short.
Don't zero unused pointer members again.
Per discussion with secteam we are not issuing an advisory for this
issue as we have no current evidence it leaks exploitable information.
Reviewed by: rwatson, glebius, delphij
Sponsored by: DARPA, AFRL
Modified:
stable/10/sys/kern/vfs_subr.c
Directory Properties:
stable/10/ (props changed)
Modified: stable/10/sys/kern/vfs_subr.c
==
--- stable/10/sys/kern/vfs_subr.c Wed Apr 5 20:11:05 2017
(r316542)
+++ stable/10/sys/kern/vfs_subr.c Wed Apr 5 21:08:26 2017
(r316543)
@@ -3357,12 +3357,11 @@ vfsconf2x32(struct sysctl_req *req, stru
{
struct xvfsconf32 xvfsp;
+ bzero(&xvfsp, sizeof(xvfsp));
strcpy(xvfsp.vfc_name, vfsp->vfc_name);
xvfsp.vfc_typenum = vfsp->vfc_typenum;
xvfsp.vfc_refcount = vfsp->vfc_refcount;
xvfsp.vfc_flags = vfsp->vfc_flags;
- xvfsp.vfc_vfsops = 0;
- xvfsp.vfc_next = 0;
return (SYSCTL_OUT(req, &xvfsp, sizeof(xvfsp)));
}
#endif
___
svn-src-stable-10@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-stable-10
To unsubscribe, send any mail to "svn-src-stable-10-unsubscr...@freebsd.org"
svn commit: r316555 - stable/10
Author: ngie Date: Thu Apr 6 05:04:20 2017 New Revision: 316555 URL: https://svnweb.freebsd.org/changeset/base/316555 Log: MFC r316368: r316368 (by jkim): Fix typos to stop removing new files. Modified: stable/10/ObsoleteFiles.inc Directory Properties: stable/10/ (props changed) Modified: stable/10/ObsoleteFiles.inc == --- stable/10/ObsoleteFiles.inc Thu Apr 6 05:02:03 2017(r316554) +++ stable/10/ObsoleteFiles.inc Thu Apr 6 05:04:20 2017(r316555) @@ -40,16 +40,16 @@ # 20170322: rename to _test to match the FreeBSD test suite name scheme OLD_FILES+=usr/tests/usr.bin/col/col -OLD_FILES+=usr/tests/usr.sbin/pw/pw_config_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_etcdir_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_lock_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_groupadd_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_groupdel_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_groupmod_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_useradd_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_userdel_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_usermod_test -OLD_FILES+=usr/tests/usr.sbin/pw/pw_usernext_test +OLD_FILES+=usr/tests/usr.sbin/pw/pw_config +OLD_FILES+=usr/tests/usr.sbin/pw/pw_etcdir +OLD_FILES+=usr/tests/usr.sbin/pw/pw_groupadd +OLD_FILES+=usr/tests/usr.sbin/pw/pw_groupdel +OLD_FILES+=usr/tests/usr.sbin/pw/pw_groupmod +OLD_FILES+=usr/tests/usr.sbin/pw/pw_lock +OLD_FILES+=usr/tests/usr.sbin/pw/pw_useradd +OLD_FILES+=usr/tests/usr.sbin/pw/pw_userdel +OLD_FILES+=usr/tests/usr.sbin/pw/pw_usermod +OLD_FILES+=usr/tests/usr.sbin/pw/pw_usernext # 20170214: Four files from ggate tests consolidated into one OLD_FILES+=usr/tests/sys/geom/class/gate/1_test OLD_FILES+=usr/tests/sys/geom/class/gate/2_test ___ svn-src-stable-10@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-stable-10 To unsubscribe, send any mail to "svn-src-stable-10-unsubscr...@freebsd.org"
svn commit: r316559 - in stable: 10/usr.sbin/ntp 11/usr.sbin/ntp
Author: cy Date: Thu Apr 6 06:11:04 2017 New Revision: 316559 URL: https://svnweb.freebsd.org/changeset/base/316559 Log: MFC r314946: Configure leap-second smearing (always). Leap-second smearing is an experimental option that may be specified in ntp.conf(5) and the -x option on the command line to spread the effect of a leap-second over an interval as specified by the leapsmearinterval config file statement. Recommended values are between 7200 (2 hours) and 86400 (24 hours). It is advised that leap-second smearing not be used for public NTP servers (https://www.meinbergglobal.com/download/burnicki/Leap\ %20Second%20Smearing%20With%20NTP.pdf). It is also advised that NTP clients not use a mix of NTP servers using leap-second smearing with NTP servers not using leap-second smearing as that could cause undefined client behaviour. Leap-second smearing was committed to ports net/ntp and net/ntp-devel by r426825 on 2016-11-22. Suggested by: des Modified: stable/10/usr.sbin/ntp/config.h Directory Properties: stable/10/ (props changed) Changes in other areas also in this revision: Modified: stable/11/usr.sbin/ntp/config.h Directory Properties: stable/11/ (props changed) Modified: stable/10/usr.sbin/ntp/config.h == --- stable/10/usr.sbin/ntp/config.h Thu Apr 6 05:36:35 2017 (r316558) +++ stable/10/usr.sbin/ntp/config.h Thu Apr 6 06:11:04 2017 (r316559) @@ -1336,7 +1336,7 @@ #define LDAP_API_FEATURE_X_OPENLDAP_THREAD_SAFE 1 /* leap smear mechanism */ -/* #undef LEAP_SMEAR */ +#define LEAP_SMEAR 1 /* Define to any value to include libseccomp sandboxing. */ /* #undef LIBSECCOMP */ ___ svn-src-stable-10@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-stable-10 To unsubscribe, send any mail to "svn-src-stable-10-unsubscr...@freebsd.org"
