src-test2/sbin, branch releng/11.2

Fix kernel stack disclosure in UFS/FFS.

2019-07-03T00:02:16Z

Approved by: so Security: FreeBSD-SA-19:10.ufs Security: CVE-2019-5601

MFC: r334443 (by cem@) MF stable/11: r334787

2018-06-07T15:51:23Z

dhclient(8): allow to supersede interface-mtu option In some cases broken DHCP servers might send invalid MTU value, so allow to use 'supersede' in dhclient.conf to override this. When superseded value is 0, MTU value is not updated at all. PR: 206721 Submitted by: novel@ Reported by: Approved by: re (gjb) Relnotes: yes (potentially surprising behavior change w/ broken dhcpd mtu) Differential Revision: https://reviews.freebsd.org/D15484

MFC r315733, r315737, r315740, r330054:

2018-05-18T14:57:58Z

r315733 (imp): Impelemnt ttys onifexists in init. Implement a new init(8) option in /etc/ttys. If this option is present on the entry in /etc/ttys, the entry will be active if and only if it exists. If the name starts with a '/', it will be considered an absolute path. If not, it will be a path relative to /dev. This allows one to turn off video console getty that aren't present (while running a getty on them even when they aren't the system console). Likewise with serial ports. It differs from onifconsole in only requiring the device exist rather than it be listed as one of the system consoles. r315737 (ngie): Unbreak world by adding sys/stat.h for stat(2) r315740 (imp): Simplify the code a little. r330054 (trasz): Improve missing tty handling in init(8). This removes a check that did nothing - it was checking for ENXIO, which, with devfs, is no longer returned - and was badly placed anyway, and replaces it with similar one that works, and is done just before starting getty, instead of being done when rereading ttys(5). From the practical point of view, this makes init(8) handle disappearing terminals (eg /dev/ttyU*) gracefully, without unneccessary getty restarts and resulting error messages. Reported by: Bart Ender, Andre Albsmeier PR: 228315 Blocks: 11.2-BETA2 Approved by: re (marius) Sponsored by: The FreeBSD Foundation

MFC r333458:

2018-05-17T10:01:47Z

Fix the printing of rule comments. Change uint8_t type of opcode argument to int in the print_opcode() function. Use negative value to print the rest of opcodes, because zero value is O_NOP, and it can't be uses for this purpose. Reported by: lev Approved by: re (gjb)

MFC r326571: ifconfig(8): Display extended compliance code string for SFP transceivers

2018-05-07T21:26:05Z

Approved by: re (marius, gjb)

MFC r333084:

2018-05-02T20:15:02Z

pfctl: Don't break connections on skipped interfaces on reload On reload we used to first flush everything, including the list of skipped interfaces. This can lead to termination of these connections if they send packets before the new configuration is applied. Note that this doesn't currently happen on 12 or 11, because of special EACCES handling introduced in r315514. This special behaviour in tcp_output() may change, hence the fix in pfctl. PR: 214613 Submitted by: Andreas Longwitz

MFC r331622:

2018-04-25T12:21:13Z

Allow to specify PCP on packets not belonging to any VLAN. Sponsored by: Mellanox Technologies

MFC r332403:

2018-04-19T15:07:53Z

Fix a typo.

MFC r332451:

2018-04-19T10:08:28Z

Fix indenting in ipv6.c file, use tabs instead of mixing tabs and spaces.

MFC r332449:

2018-04-19T10:06:53Z

Remove printing of "not" keyword from print_ip6() function. After r331668 handling of F_NOT flag done in one place by print_instruction() function. Also remove unused argument from print_ip[6]() functions.