summaryrefslogtreecommitdiff
path: root/contrib
Commit message (Collapse)AuthorAgeFilesLines
* Import tzdata 2019c.Gordon Tetlow2019-10-2312-193/+633
| | | | | | | | Approved by: so Security: FreeBSD-EN-19:18.tzdata Notes: svn path=/releng/12.0/; revision=353915
* Fix insufficient message length validation in bsnmp library.Gordon Tetlow2019-08-061-0/+5
| | | | | | | | | Approved by: so Security: FreeBSD-SA-19:20.bsnmp Security: CVE-2019-5610 Notes: svn path=/releng/12.0/; revision=350646
* Fix multiple vulnerabilities in bzip2.Gordon Tetlow2019-08-0619-87/+84
| | | | | | | | | | Approved by: so Security: FreeBSD-SA-19:18.bzip2 Security: CVE-2016-3189 Security: CVE-2019-12900 Notes: svn path=/releng/12.0/; revision=350643
* Fix incorrect exception handling.Gordon Tetlow2019-08-061-1/+3
| | | | | | | | Approved by: so Security: FreeBSD-EN-19:15.libunwind Notes: svn path=/releng/12.0/; revision=350642
* Fix multiple telnet client vulnerabilities.Gordon Tetlow2019-07-243-8/+12
| | | | | | | | | Approved by: so Security: FreeBSD-SA-19:12.telnet Security: CVE-2019-0053 Notes: svn path=/releng/12.0/; revision=350281
* Import tzdata 2019b.Gordon Tetlow2019-07-0220-381/+720
| | | | | | | | | Approved by: so Approved by: re (implicit) Security: FreeBSD-EN-19:12.tzdata Notes: svn path=/releng/12.0/; revision=349620
* Update ntpd to 4.2.8p13 to fix authenticated denial of service.Gordon Tetlow2019-05-14206-8256/+18329
| | | | | | | | | Approved by: so Security: FreeBSD-SA-19:04.ntp Security: CVE-2019-8936 Notes: svn path=/releng/12.0/; revision=347589
* Update hostapd/wpa_supplicant to 2.8 to fix multiple vulnerabilities.Gordon Tetlow2019-05-14451-15160/+80310
| | | | | | | | | | | | | | | Approved by: so Security: FreeBSD-SA-19:03.wpa Security: CVE-2019-9494 Security: CVE-2019-9495 Security: CVE-2019-9496 Security: CVE-2019-9497 Security: CVE-2019-9498 Security: CVE-2019-9499 Security: CVE-2019-11555 Notes: svn path=/releng/12.0/; revision=347587
* Import tzdata 2019a.Gordon Tetlow2019-05-1414-65/+203
| | | | | | | | Approved by: so Security: FreeBSD-EN-19:08.tzdata Notes: svn path=/releng/12.0/; revision=347584
* MFS12 r342667: Import tzdata 2018h, 2018iEd Maste2019-01-0913-168/+841
| | | | | | | | Approved by: so Security: FreeBSD-EN-19:04.tzdata Notes: svn path=/releng/12.0/; revision=342897
* MFS12 r342291: Update sqlite3-3.23.1 --> sqlite3-3.26.0 (3260000)Ed Maste2019-01-0924-9335/+41967
| | | | | | | | | PR: 234113 Approved by: so Security: FreeBSD-EN-19:03.sqlite Notes: svn path=/releng/12.0/; revision=342895
* MFH (r339812): add default value for local_unbound_tlsDag-Erling Smørgrav2018-11-075-1/+25
| | | | | | | | | | MFH (r339995): run unbound-anchor if root.key is empty (PR 232555) MFH (r340037): turn off so-reuseport by default Approved by: re (gjb) Notes: svn path=/stable/12/; revision=340219
* MFC r339848: mport tzdata 2018gPhilip Paeps2018-10-318-75/+92
| | | | | | | Approved by: re (kib) Notes: svn path=/stable/12/; revision=339937
* MFC r339451: objcopy: restore behaviour required by GCC's buildEd Maste2018-10-251-0/+143
| | | | | | | | | | | | | | | | | | | | | | | In r339350 filter_reloc() was removed, to fix the case of stripping statically linked binaries with relocations (which may come from ifunc use, for example). As a side effect this changed the behaviour when stripping object files - the output was broken both before and after r339350, in different ways. Unfortunately GCC's build process relies on the previous behaviour, so: - Revert r339350, restoring filter_reloc(). - Fix an unitialized variable use (commited as r3638 in ELF Tool Chain). - Change filter_reloc() to omit relocations referencing removed symbols, while retaining relocations with no symbol reference. - Retain the entire relocation section if it references the dynamic symbol table (fix from kaiw in D17596). PR: 232176 Approved by: re (gjb, kib) Sponsored by: The FreeBSD Foundation Notes: svn path=/stable/12/; revision=339726
* MFC r339503: Import tzdata 2018fPhilip Paeps2018-10-2327-466/+1262
| | | | | | | Approved by: re (kib) Notes: svn path=/stable/12/; revision=339629
* - Prune svn:mergeinfo from the new branch, as nothing has been mergedGlen Barber2018-10-191-1/+1
| | | | | | | | | | | | | | | here. - Remove debugging from GENERIC* kernel configurations - Enable MALLOC_PRODUCTION - Default dumpdev=NO - Remove UPDATING entry regarding debugging features - Switch 12.0 from -ALPHA10 to -BETA1 to prepare for builds. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation Notes: svn path=/stable/12/; revision=339435
* apropos/whatis: use output of manpath(1) to set defpaths if -M is notYuri Pankov2018-10-161-0/+31
| | | | | | | | | | | | | | specified. This fixes searching the paths specified in /usr/local/etc/man.d/*.conf, as currently apropos/whatis from mandoc suite aren't aware about them. PR: 227922 Reviewed by: bapt Approved by: re (gjb), kib (mentor) Differential Revision: https://reviews.freebsd.org/D17454 Notes: svn path=/head/; revision=339385
* elfcopy: delete filter_reloc, it is broken and unnecessaryEd Maste2018-10-131-128/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | elfcopy contained logic to filter individual relocations in STRIP_ALL mode. However, this is not valid; relocations emitted by the linker are required, unless they apply to an entire section being removed (which is handled by other logic in elfcopy). Note that filter_reloc was also buggy: for RELA relocation sections it operated on uninitialized rel.r_info resulting in invalid operation. The logic most likely needs to be inverted: instead of removing relocations because their associated symbols are being removed, we must keep symbols referenced by relocations. That said, in practice we do not encounter this code path today: objects being stripped are either dynamically linked binaries which retain .dynsym, or static binaries with no relocations. Just remove filter_reloc. This fixes certain cases including statically linked binaries containing ifuncs. Stripping binaries with relocations referencing removed symbols was already broken, and after this change may still be broken in a different way. PR: 232176 Reviewed by: kaiw, kib, markj Approved by: re (rgrimes) MFC after: 1 month Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D17519 Notes: svn path=/head/; revision=339350
* lld: set sh_link and sh_info for .rela.plt sectionsEd Maste2018-10-111-4/+6
| | | | | | | | | | | | | | | | ELF spec says that for SHT_REL and SHT_RELA sh_link should reference the associated string table and sh_info should reference the "section to which the relocation applies." ELF Tool Chain's elfcopy / strip use this (in part) to control whether or not the relocation entry is copied to the output. LLVM PR 37538 https://bugs.llvm.org/show_bug.cgi?id=37538 Approved by: re (kib) Obtained from: llvm r344226 (backported for 6.0) Notes: svn path=/head/; revision=339304
* Regenerate: remove GOST, enable DANE-TA now that we have OpenSSL 1.1.1.Dag-Erling Smørgrav2018-10-112-3/+3
| | | | | | | Approved by: re (gjb) Notes: svn path=/head/; revision=339303
* Try harder to sanitize the environment before running configure.Dag-Erling Smørgrav2018-10-102-14/+26
| | | | | | | | | Remove a workaround for older Unbound versions that used sbrk. Approved by: re (gjb) Notes: svn path=/head/; revision=339294
* Upgrade to 1.8.1.Dag-Erling Smørgrav2018-10-1048-312/+565
|\ | | | | | | | | | | | | Approved by: re (kib) Notes: svn path=/head/; revision=339278
| * Vendor import of Unbound 1.8.1.vendor/unbound/1.8.1Dag-Erling Smørgrav2018-10-091-147/+138
| | | | | | | | | | Notes: svn path=/vendor/unbound/dist/; revision=339264 svn path=/vendor/unbound/1.8.1/; revision=339265; tag=vendor/unbound/1.8.1
* | Upgrade Unbound to 1.8.0. More to follow.Dag-Erling Smørgrav2018-10-1092-685/+2946
|\| | | | | | | | | | | | | Approved by: re (kib) Notes: svn path=/head/; revision=339275
| * Vendor import of Unbound 1.8.0.vendor/unbound/1.8.0Dag-Erling Smørgrav2018-09-103-7/+11
| | | | | | | | | | Notes: svn path=/vendor/unbound/dist/; revision=338566 svn path=/vendor/unbound/1.8.0/; revision=338567; tag=vendor/unbound/1.8.0
* | MFV r339226 (peter): Record merge of serf-1.3.9.Glen Barber2018-10-081-0/+19
| | | | | | | | | | | | | | Sponsored by: The FreeBSD Foundation Notes: svn path=/projects/openssl111/; revision=339236
* | MFH r338661 through r339200.Glen Barber2018-10-05208-1597/+2220
|\ \ | | | | | | | | | | | | | | | | | | Sponsored by: The FreeBSD Foundation Notes: svn path=/projects/openssl111/; revision=339201
| * | Document signal handling in blacklistd(8).Kurt Lidl2018-10-051-2/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reviewed by: bcr@, 0mp@ Approved by: re (gjb@) MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D17423 Notes: svn path=/head/; revision=339199
| * | Remove invalid comments and correct some typos.Pawel Jakub Dawidek2018-10-042-9/+2
| | | | | | | | | | | | | | | | | | | | | Approved by: re (kib) Notes: svn path=/head/; revision=339178
| * | When the adist_free list is empty and we lose connection to the receiver wePawel Jakub Dawidek2018-10-042-9/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | move all elements from the adist_send and adist_recv lists back onto the adist_free list, but we don't wake consumers waitings for the adist_free list to become non-empty. This can lead to the sender process stopping audit trail files distribution and waiting forever. Fix the problem by adding the missing wakeup. While here slow down spinning on CPU in case of a short race in sender_disconnect() and add an explaination when it can occur. PR: 201953 Reported by: peter Approved by: re (kib) Notes: svn path=/head/; revision=339177
| * | When we look for a new trail file there might be a race between find trailPawel Jakub Dawidek2018-10-041-6/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | file name and opening it. This race was not properly handled, because we were copying new name before checking for openat(2) error and when we were trying again we were starting with the next trail file. This could result in skipping distribution of such a trail file. Fix this problem by checking for ENOENT first (only for .not_terminated files) and then updating (or not) tr_filename before restarting the search. PR: 200139 Reported by: peter Approved by: re (kib) Notes: svn path=/head/; revision=339176
| * | libelf: correct mips64el test to use ELF headerEd Maste2018-10-021-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libelf maintains two views of endianness: e_byteorder, and e_ident[EI_DATA] in the ELF header itself. e_byteorder is not always kept in sync, so use the ELF header endianness to test for mips64el. PR: 231790 Bisected by: sbruno Reviewed by: jhb Approved by: re (kib) MFC with: r338478 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D17380 Notes: svn path=/head/; revision=339083
| * | clang: allow ifunc resolvers to accept argumentsEd Maste2018-09-291-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously Clang required ifunc resolution functions to take no arguments, presumably because GCC documented ifunc resolvers as taking no arguments. However, GCC accepts resolvers accepting arguments, and our rtld passes CPU ID information (cpuid, hwcap, etc.) to ifunc resolvers. Just remove the check from the in-tree compiler for our in- tree compiler; a different (per-OS) approach may be required upstream. Reported by: mjg Approved by: re (rgrimes) MFC after: 1 week Relnotes: Yes Sponsored by: The FreeBSD Foundation Notes: svn path=/head/; revision=339019
| * | Pull in r329557 from upstream lld trunk (by George Rimar):Dimitry Andric2018-09-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ELF] - Allow LLD to produce file symbols. This is for PR36716 and this enables emitting STT_FILE symbols. Output size affect is minor: lld binary size changes from 52,883,408 to 52,949,400 clang binary size changes from 83,136,456 to 83,219,600 Differential revision: https://reviews.llvm.org/D45261 This fixes a regression in lld that made it stop emitting STT_FILE symbols, which ctfmerge relies upon to uniquify function table entries that reference STB_LOCAL symbols. Consequently, ctfmerge stopped emitting entries for static functions into the function table, and dtrace no longer gets type info for them. Approved by: re (kib) Reported by: markj PR: 230444 MFC after: 3 days Notes: svn path=/head/; revision=339013
| * | Cross-reference style.Makefile(5) from make(1) and make.conf(5).Mateusz Piotrowski2018-09-271-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reviewed by: krion, mat, sjg Approved by: re (gjb), krion (mentor), mat (mentor) Sponsored by: Bally Wulff Games & Entertainment GmbH Differential Revision: https://reviews.freebsd.org/D17170 Notes: svn path=/head/; revision=338960
| * | MFV r338797:Martin Matuska2018-09-207-2/+22
| |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Sync libarchive with vendor. Relevant vendor changes: PR #1019: Add allocation check for the zip_entry struct Oss-Fuzz #10192: Handle whitespace-only ACL fields correctly Approved by: re (kib) MFC after: 1 week Notes: svn path=/head/; revision=338827
| | * | Update vendor/libarchive/dist to git 0cda60af13e709e670af90553b2271bf194e7ccdMartin Matuska2018-09-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Relevant vendor changes: PR #1019: Add allocation check for the zip_entry struct Oss-Fuzz #10192: Handle whitespace-only ACL fields correctly Notes: svn path=/vendor/libarchive/dist/; revision=338797
| * | | Import mandoc 1.14.4Baptiste Daroussin2018-09-20187-1554/+2081
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Approved by: re (kib) MFC after: 1 week Notes: svn path=/head/; revision=338826
| * | | Pull in r325478 from upstream clang trunk (by Ivan A. Kosarev):Dimitry Andric2018-09-151-6/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [CodeGen] Initialize large arrays by copying from a global Currently, clang compiles explicit initializers for array elements into series of store instructions. For large arrays of built-in types this results in bloated output code and significant amount of time spent on the instruction selection phase. This patch fixes the issue by initializing such arrays with global constants that store the binary image of the initializer. Differential Revision: https://reviews.llvm.org/D43181 This should fix a compiler hang (and excessive memory usage) while building the science/rmg port. Approved by: re (kib) Reported by: yuri@tsoft.com See also: https://bugs.llvm.org/show_bug.cgi?id=38798 MFC after: 3 days Notes: svn path=/head/; revision=338697
| * | | Pull in r335365 from upstream llvm trunk (by Krzysztof Parzyszek):Dimitry Andric2018-09-141-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Initialize LiveRegs once in BranchFolder::mergeCommonTails This should fix '(TRI && "LivePhysRegs is not initialized."' assertions when building the lang/qt5-qml port in certain configurations. Approved by: re (kib) Reported by: Piotr Kubaj <pkubaj@anongoth.pl> PR: 231355 MFC after: 3 days Notes: svn path=/head/; revision=338689
| * | | lld: add -z interpose supportEd Maste2018-09-143-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | -z interpose sets the DF_1_INTERPOSE flag, marking the object as an interposer. Committed upstream as LLVM r342239. PR: 230604 Reported by: jbeich Reviewed by: markj Approved by: re (kib) MFC after: 1 week Relnotes: Yes Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D17172 Notes: svn path=/head/; revision=338682
* | | | Make sendmail work with OpenSSL 1.1 API. Taken from the ports tree.Jung-uk Kim2018-10-011-15/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://svnweb.freebsd.org/ports/head/mail/sendmail/files/patch-tls.c?revision=466240 Requested by: gshapiro Notes: svn path=/projects/openssl111/; revision=339079
* | | | Revert r338773. A patch from the ports tree will be committed.Jung-uk Kim2018-10-011-123/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Requested by: gshapiro Notes: svn path=/projects/openssl111/; revision=339078
* | | | libevent: eliminate in-tree usage of arc4random_addrandomEd Maste2018-09-251-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Apply r338059 to newly-added libevent 2.1.18. Sponsored by: The FreeBSD Foundation Notes: svn path=/projects/openssl111/; revision=338926
* | | | Copy libevent sources to contribEd Maste2018-09-24193-0/+139295
| | | | | | | | | | | | | | | | | | | | | | | | | | | | To replace the libevent embedded in ntp, for OpenSSL 1.1.1 compat. Notes: svn path=/projects/openssl111/; revision=338911
* | | | Make unbound buildable.Jung-uk Kim2018-09-191-3/+3
| | | | | | | | | | | | | | | | Notes: svn path=/projects/openssl111/; revision=338778
* | | | Make telnet(1) buildable.Jung-uk Kim2018-09-195-30/+30
| | | | | | | | | | | | | | | | Notes: svn path=/projects/openssl111/; revision=338777
* | | | Update Apache Serf to 1.9.3 to support OpenSSL 1.1.1.Jung-uk Kim2018-09-1941-525/+880
| | | | | | | | | | | | | | | | Notes: svn path=/projects/openssl111/; revision=338776
* | | | Revert r338774. Unrelated changes were committed with Apache Serf.Jung-uk Kim2018-09-1947-913/+558
| | | | | | | | | | | | | | | | Notes: svn path=/projects/openssl111/; revision=338775
* | | | Update Apache Serf to 1.3.9 to make it buildable with OpenSSL 1.1.1.Jung-uk Kim2018-09-1947-558/+913
| | | | | | | | | | | | | | | | Notes: svn path=/projects/openssl111/; revision=338774