src-test2/lib, branch release/9.0.0 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F9.0.0 2011-12-23T15:00:37Z Fix a problem whereby a corrupt DNS record can cause named to crash. [11:06] 2011-12-23T15:00:37Z Colin Percival cperciva@FreeBSD.org 2011-12-23T15:00:37Z urn:sha1:7501ca43959525c0fffc939d2f3daf2fdf69e553 Add an API for alerting internal libc routines to the presence of "unsafe" paths post-chroot, and use it in ftpd. [11:07] Fix a buffer overflow in telnetd. [11:08] Make pam_ssh ignore unpassphrased keys unless the "nullok" option is specified. [11:09] Add sanity checking of service names in pam_start. [11:10] Approved by: so (cperciva) Approved by: re (bz) Security: FreeBSD-SA-11:06.bind Security: FreeBSD-SA-11:07.chroot Security: FreeBSD-SA-11:08.telnetd Security: FreeBSD-SA-11:09.pam_ssh Security: FreeBSD-SA-11:10.pam MFH r228410: check for null passphrases, since openssl doesn't 2011-12-11T17:32:37Z Dag-Erling Smørgrav des@FreeBSD.org 2011-12-11T17:32:37Z urn:sha1:691c2aa20a3d9cf525de73f0b1d86417a56d6373 Approved by: re (kib) Security: prevents users with unencrypted ssh keys (prohibited unless the nullok option is specified) from logging in by providing a bogus non-null passphrase. Merge r228040 from head to releng/9.0: 2011-11-28T22:24:22Z Robert Watson rwatson@FreeBSD.org 2011-11-28T22:24:22Z urn:sha1:929658b1fb33d377fefa1ece403ba1077db86df5 Cross-reference capsicum.4 from cap_enter.2 and cap_new.2. Sponsored by: Google, Inc. Approved by: re (kib) MFC r227661: 2011-11-26T08:23:25Z Konstantin Belousov kib@FreeBSD.org 2011-11-26T08:23:25Z urn:sha1:16bf182b7a2d83b0efcb14524437194da410549d Free unused allocation on error. Approved by: re (bz) MFC r227604: 2011-11-23T11:59:01Z David Xu davidxu@FreeBSD.org 2011-11-23T11:59:01Z urn:sha1:58e2c4a05775e2e162461c8c3be13343b18ff267 Pass CVWAIT flags to kernel, this should handle Timeout correctly for pthread_cond_timedwait when it uses kernel-based condition variable. Approved by: re (kib) MFC r227416: 2011-11-18T21:12:05Z Doug Barton dougb@FreeBSD.org 2011-11-18T21:12:05Z urn:sha1:685f8a0da0fa490201fa4e677efe465db79894ae Document that flock can return ENOLCK Approved by: re (kib) MFC r226836: 2011-11-02T08:23:40Z Sergey Kandaurov pluknet@FreeBSD.org 2011-11-02T08:23:40Z urn:sha1:dac571386e92d197de59c4665a4634c216301d0c Fix the manual section number for a cross-reference to open(2) and sort it. Approved by: re (kib) MFC r226790: 2011-11-01T16:11:44Z Sergey Kandaurov pluknet@FreeBSD.org 2011-11-01T16:11:44Z urn:sha1:5b9d7851feeff7cc9dff24b1c6306419dc2a1df2 Fix typo in timer_getoverrun cross-reference. Approved by: re (kib) MFC r226633: 2011-10-28T21:08:39Z Dimitry Andric dim@FreeBSD.org 2011-10-28T21:08:39Z urn:sha1:8d6bd30ae97758a51564018dcc29ee46a0c08aad Upgrade our copy of llvm/clang to r142614, from upstream's release_30 branch. This brings us very close to the 3.0 release, which is expected November 16, 2011. Approved by: re (kib) Remove extra debuggin gsupport that is turned on for head but turned off 2011-10-15T21:23:04Z Ken Smith kensmith@FreeBSD.org 2011-10-15T21:23:04Z urn:sha1:b8975c9bfdbad79940e9b54e748e23520d6b571d for stable branches: - shift to MALLOC_PRODUCTION - turn off automatic crash dumps - remove kernel debuggers, INVARIANT*[1], WITNESS* from GENERIC kernel config files [1] INVARIANT* left on for ia64 at least temporarily, marcel@ will test to see if they are still required as they had been for stable/8. Approved by: re (implicit)