FreeBSD source tree https://cgit-dev.freebsd.org/src-test/atom?h=releng%2F9.2 2014-12-10T08:36:40Z 2014-12-10T08:36:40Z Xin LI delphij@FreeBSD.org 2014-12-10T08:36:40Z urn:sha1:88fb734f8bb9945dbfb5d547c60ba45597bc9aa2 Security: FreeBSD-SA-14:28.file Security: CVE-2014-3710, CVE-2014-8116, CVE-2014-8117 Fix BIND remote denial of service vulnerability. Security: FreeBSD-SA-14:29.bind Security: CVE-2014-8500 Approved by: so 2013-07-26T18:27:13Z Hiroki Sato hrs@FreeBSD.org 2013-07-26T18:27:13Z urn:sha1:a64e3560f5a1beaf36f1a5637a8c3e8ed5ff5b50 - Add a leaf node CTL_NET.PF_ROUTE.0.AF.NET_RT_DUMP.0.FIB. This returns routing table with the specified FIB number, not td->td_proc->p_fibnum. - Add check_namevarlist() to check if ${name}_var is reserved in rc.subr or not. - Fix a bug in ipv6_prefix_IF. It did not work with the 64-bit prefix notation like 2001:db8:1:1. - Use eui64 flag in ifconfig(8) instead of network6_getladdr()[*] for interface indentifier part. - Fix address range specification with ifconfig(8) options such as: * inet 192.0.2.1-10 netmask 255.255.255.0 (inet range spec + ifconfig options) * inet6 2001:db8:1::1-f prefixlen 60 (inet6 range spec + ifconfig options) If prefixlen or netmask option is specified with CIDR notation at the same time, the option is used. - Do not set ND6_IFF_ACCEPT_RTADV on if_bridge(4) interfaces when ipv6_enable=yes. Approved by: re (marius) 2013-07-24T13:07:29Z Andriy Gapon avg@FreeBSD.org 2013-07-24T13:07:29Z urn:sha1:94efdb8f7daae8454c233bfe8791346d8b9f7a3c Approved by: re (kib) 2013-07-24T10:12:50Z Andrey A. Chernov ache@FreeBSD.org 2013-07-24T10:12:50Z urn:sha1:e6ebddbe4bcd23f111674aee5339e4d43f1e04d8 range, but ACM formula we use have internal state (and return value) in the [1, 0x7ffffffe] range, so our RAND_MAX (0x7fffffff) is never reached because it is off by one, zero is not reached too. Correct both RAND_MAX and rand(3) return value, shifting last one to the 0 by 1 subtracted, resulting POSIXed [0, 0x7ffffffd(=new RAND_MAX)] range. 2) Add a checks for not overflowing on too big seeds. It may happens on the machines, where sizeof(unsigned int) > 32 bits. This change is binary compatible because range is reduced, not expanded, so no bump is needed. Reviewed by: bde Approved by: re (glebius) 2013-07-12T20:06:52Z Dimitry Andric dim@FreeBSD.org 2013-07-12T20:06:52Z urn:sha1:ebc5415284bdba439e6f4c0c06786cee48303690 Approved by: re (delphij) 2013-07-12T14:58:09Z Michael Tuexen tuexen@FreeBSD.org 2013-07-12T14:58:09Z urn:sha1:60dee4ab090381ed0f848e88feb92d87ecfd1547 Fix a bug where SCTP_ENABLE_STREAM_RESET is not handled by sctp_opt_info(). MFC r253105: Fix the handling of SCTP_CURRENT_ASSOC and SCTP_ALL_ASSOC in sctp_opt_info(). Approved by: re@ 2013-07-12T01:56:05Z Hiroki Sato hrs@FreeBSD.org 2013-07-12T01:56:05Z urn:sha1:8cd3fee9bbbcac69ba0d33ce7faf76376d76cdb6 Update references. 2013-07-10T19:42:07Z Mikolaj Golub trociny@FreeBSD.org 2013-07-10T19:42:07Z urn:sha1:cbe481a78e8a2723e4c33ccff06b105932c7767f In r227839, when removing libkvm dependency on procfs(5), kvm_uread() function, used for reading from /proc/pid/mem, was removed too. This change broke ABI. Bring kvm_uread() back so that the ABI is kept. In head soname is going to be bumped instead. Reported by: rmh Discussed on: arch Suggested by: jilles 2013-07-10T14:11:51Z Dag-Erling Smørgrav des@FreeBSD.org 2013-07-10T14:11:51Z urn:sha1:da3890f7f434383bd2293b214c1247d18316d002 2013-07-10T14:06:35Z Dag-Erling Smørgrav des@FreeBSD.org 2013-07-10T14:06:35Z urn:sha1:14bb8835dfeb2e27485f4ba2d7725b86c82716a0