| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix Denial of Service vulnerability in libc's glob(3) functionality.
[13:02]
Security: CVE-2012-5688
Security: FreeBSD-SA-13:01.bind
Security: CVE-2010-2632
Security: FreeBSD-SA-13:02.libc
Approved by: so (simon, bz)
Notes:
svn path=/releng/9.0/; revision=246989
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add an API for alerting internal libc routines to the presence of
"unsafe" paths post-chroot, and use it in ftpd. [11:07]
Fix a buffer overflow in telnetd. [11:08]
Make pam_ssh ignore unpassphrased keys unless the "nullok" option is
specified. [11:09]
Add sanity checking of service names in pam_start. [11:10]
Approved by: so (cperciva)
Approved by: re (bz)
Security: FreeBSD-SA-11:06.bind
Security: FreeBSD-SA-11:07.chroot
Security: FreeBSD-SA-11:08.telnetd
Security: FreeBSD-SA-11:09.pam_ssh
Security: FreeBSD-SA-11:10.pam
Notes:
svn path=/releng/9.0/; revision=228843
|
|
|
|
|
|
|
|
|
|
|
| |
Cross-reference capsicum.4 from cap_enter.2 and cap_new.2.
Sponsored by: Google, Inc.
Approved by: re (kib)
Notes:
svn path=/releng/9.0/; revision=228106
|
|
|
|
|
|
|
|
|
| |
Document that flock can return ENOLCK
Approved by: re (kib)
Notes:
svn path=/releng/9.0/; revision=227682
|
|
|
|
|
|
|
|
|
| |
Fix the manual section number for a cross-reference to open(2) and sort it.
Approved by: re (kib)
Notes:
svn path=/stable/9/; revision=227014
|
|
|
|
|
|
|
|
|
| |
Fix typo in timer_getoverrun cross-reference.
Approved by: re (kib)
Notes:
svn path=/stable/9/; revision=226994
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
for stable branches:
- shift to MALLOC_PRODUCTION
- turn off automatic crash dumps
- remove kernel debuggers, INVARIANT*[1], WITNESS* from GENERIC
kernel config files
[1] INVARIANT* left on for ia64 at least temporarily, marcel@ will test
to see if they are still required as they had been for stable/8.
Approved by: re (implicit)
Notes:
svn path=/stable/9/; revision=226405
|
|
|
|
|
|
|
|
|
|
|
|
| |
conversion, conversion must fail and errno must be set to E2BIG.
PR: standards/160673
Submitted by: Henning Petersen <henning.petersen@t-online.de>
Reviewed by: pluknet
Approved by: re (kib), delphij (mentor)
Notes:
svn path=/head/; revision=225678
|
|
|
|
|
|
|
|
|
| |
the difference between sigwait() and sigtimedwait()/sigwaitinfo().
Approved by: re (bz)
Notes:
svn path=/head/; revision=225172
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
A "process descriptor" file descriptor is used to manage processes
without using the PID namespace. This is required for Capsicum's
Capability Mode, where the PID namespace is unavailable.
New system calls pdfork(2) and pdkill(2) offer the functional equivalents
of fork(2) and kill(2). pdgetpid(2) allows querying the PID of the remote
process for debugging purposes. The currently-unimplemented pdwait(2) will,
in the future, allow querying rusage/exit status. In the interim, poll(2)
may be used to check (and wait for) process termination.
When a process is referenced by a process descriptor, it does not issue
SIGCHLD to the parent, making it suitable for use in libraries---a common
scenario when using library compartmentalisation from within large
applications (such as web browsers). Some observers may note a similarity
to Mach task ports; process descriptors provide a subset of this behaviour,
but in a UNIX style.
This feature is enabled by "options PROCDESC", but as with several other
Capsicum kernel features, is not enabled by default in GENERIC 9.0.
Reviewed by: jhb, kib
Approved by: re (kib), mentor (rwatson)
Sponsored by: Google Inc
Notes:
svn path=/head/; revision=224987
|
|
|
|
|
|
|
| |
Approved by: re (kib)
Notes:
svn path=/head/; revision=224864
|
|
|
|
|
|
|
|
|
| |
PR: docs/159341
Submitted by: Garrett Cooper
Approved by: re (kib)
Notes:
svn path=/head/; revision=224701
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Decouple the path supervision using a separate HB timer per path.
* Add support for potentially failed state.
* Bring back RTO.min to 1 second.
* Accept packets on IP-addresses already announced via an ASCONF
* While there: do some cleanups.
Approved by: re@
MFC after: 2 months.
Notes:
svn path=/head/; revision=224641
|
|
|
|
|
|
|
|
|
| |
Approved by: re (kib)
Pointed out by: brueffer
Pointy hat to: gnn
Notes:
svn path=/head/; revision=224253
|
|
|
|
|
|
|
|
|
|
|
|
| |
on amd64.
Submitted by: Guillaume Morin (guillaume at morinfr.org)
Reviewed by: kib, jhb
Approved by: re (bz)
MFC after: 1 month
Notes:
svn path=/head/; revision=224246
|
|
|
|
|
|
|
|
|
|
|
| |
These system calls have already been implemented in the kernel; now we
hook up libc symbols so userspace can drive them.
Approved by: re (kib), mentor (rwatson)
Sponsored by: Google Inc
Notes:
svn path=/head/; revision=224227
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
-g, by reverting r219139. The LLVM PR referenced in that revision was
fixed in the mean time, and we imported a clang snapshot soon
afterwards, so the temporary workaround of disabling clang's integrated
assembler is no longer needed.
In this particular case, using e.g. DEBUG_FLAGS=-g causes clang to
output certain directives into assembly that our version of GNU as
chokes on.
Reported by: dougb
Approved by: re (kib)
Notes:
svn path=/head/; revision=224201
|
|
|
|
|
|
|
|
|
| |
delivered, not returned.
MFC after: 1 week
Notes:
svn path=/head/; revision=223967
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Formerly, in this case an error was returned but the pid was also returned
to the application, requiring the application to use unspecified behaviour
(the returned pid in error situations) to avoid zombies.
Now, reap the zombie and do not return the pid.
MFC after: 2 weeks
Notes:
svn path=/head/; revision=223907
|
|
|
|
|
|
|
| |
Requested by: arundel
Notes:
svn path=/head/; revision=223903
|
|
|
|
|
|
|
|
|
| |
- Document xdr_sizeof(3); from NetBSD
Discussed with: kib
Notes:
svn path=/head/; revision=223877
|
|
|
|
| |
Notes:
svn path=/head/; revision=223576
|
|
|
|
|
|
|
| |
assertion failures in _malloc_thread_cleanup().
Notes:
svn path=/head/; revision=223369
|
|
|
|
|
|
|
|
| |
The code is not quite right still, but it programs from deadlocking
on themselves if one enables new citrus code by mistake.
Notes:
svn path=/head/; revision=223296
|
|
|
|
|
|
|
| |
Approved by: philip (mentor)
Notes:
svn path=/head/; revision=223262
|
|
|
|
|
|
|
|
| |
This makes sctp_opt_info() compiliant with the latest version
of the socket API ID.
Notes:
svn path=/head/; revision=223225
|
|
|
|
| |
Notes:
svn path=/head/; revision=223217
|
|
|
|
|
|
|
|
|
|
| |
change to standard OpenBSD ISC license.
Obtained from: OpenBSD
MFC after: 2 weeks
Notes:
svn path=/head/; revision=223216
|
|
|
|
|
|
|
| |
MFC after: 2 weeks
Notes:
svn path=/head/; revision=223215
|
|
|
|
|
|
|
| |
MFC after: 2 weeks
Notes:
svn path=/head/; revision=223214
|
|
|
|
|
|
|
| |
MFC after: 1 week
Notes:
svn path=/head/; revision=223206
|
|
|
|
|
|
|
|
|
| |
This only applies to 9.0 and higher, since the type
of the values has changed since we introduced it.
So it can't be MFCed.
Notes:
svn path=/head/; revision=223180
|
|
|
|
|
|
|
| |
MFC after: 1 month.
Notes:
svn path=/head/; revision=223178
|
|
|
|
|
|
|
| |
MFC after: 1 month.
Notes:
svn path=/head/; revision=223154
|
|
|
|
|
|
|
|
|
|
| |
* Add support for SCTP_SENDV_NOINFO.
* Improve the error handling of sctp_sendv() and sctp_recv().
MFC after: 1 month
Notes:
svn path=/head/; revision=223152
|
|
|
|
|
|
|
|
|
| |
switched from long to int type in kernel.
Fixed by: pluknet
Notes:
svn path=/head/; revision=223136
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In particular add support for:
* SCTP_SNDINFO, SCTP_PRINFO, SCTP_AUTHINFO, SCTP_DSTADDRV4, and
SCTP_DSTADDRV6 cmsgs.
* SCTP_NXTINFO and SCTP_RCVINFO cmgs.
* SCTP_EVENT, SCTP_RECVRCVINFO, SCTP_RECVNXTINFO and SCTP_DEFAULT_SNDINFO
socket option.
* Special association ids (SCTP_FUTURE_ASSOC, ...)
* sctp_recvv() and sctp_sendv() functions.
MFC after: 1 month.
Notes:
svn path=/head/; revision=223132
|
|
|
|
| |
Notes:
svn path=/head/; revision=222600
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
As noted in Austin Group issue #370 (an interpretation has been issued),
failing posix_spawn() because an fd specified with
posix_spawn_file_actions_addclose() is not open is unnecessarily harsh, and
there are existing implementations that do not fail posix_spawn() for this
reason.
Reviewed by: ed
MFC after: 10 days
Notes:
svn path=/head/; revision=222511
|
|
|
|
|
|
|
|
| |
Submitted by: kan
Approved by: delphij (mentor)
Notes:
svn path=/head/; revision=222354
|
|
|
|
| |
Notes:
svn path=/head/; revision=222286
|
|
|
|
|
|
|
|
|
| |
The declaration in the header file is correct.
MFC after: 1 week
Notes:
svn path=/head/; revision=222037
|
|
|
|
|
|
|
|
|
|
|
|
| |
Some files keep the SUN4V tags as a code reference, for the future,
if any rewamped sun4v support wants to be added again.
Reviewed by: marius
Tested by: sbruno
Approved by: re
Notes:
svn path=/head/; revision=221869
|
|
|
|
|
|
|
|
| |
PR: docs/124468
X-MFC with: r218998
Notes:
svn path=/head/; revision=221845
|
|
|
|
|
|
|
|
|
|
| |
* Cleanup usage of iov's.
* Add support for SCTP_TIMEOUTS socketoption.
* Fix a bug in sctp_recvmsg(): return the msg_flags in case of an error.
* Fix a bug in the error handling of sctp_peeloff(): return the -1.
Notes:
svn path=/head/; revision=221512
|
|
|
|
|
|
|
|
|
| |
PR: docs/156796
Submitted by: Jean-Yves Migeon <jeanyves.migeon free.fr>
MFC after: 3 days
Notes:
svn path=/head/; revision=221401
|
|
|
|
|
|
|
|
|
|
|
|
| |
- While here, remove a few C comments that don't seem to contribute
anything additional to the man page.
PR: 146047
Submitted by: arundel
MFC after: 3 days
Notes:
svn path=/head/; revision=220975
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
vop_stdallocate() is filesystem agnostic and will run as slow as a
read/write loop in userspace; however, it serves to correctly
implement the functionality for filesystems that do not implement a
VOP_ALLOCATE.
Note that __FreeBSD_version was already bumped today to 900036 for any
ports which would like to use this function.
Also reserve space in the syscall table for posix_fadvise(2).
Reviewed by: -arch (previous version)
Notes:
svn path=/head/; revision=220791
|
|
|
|
|
|
|
| |
MFC after: 1 week
Notes:
svn path=/head/; revision=220646
|
|
|
|
|
|
|
|
| |
Reviewed by: uqs
MFC after: 5 days
Notes:
svn path=/head/; revision=220617
|