<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/lib/libc/tests/secure, branch main</title>
<subtitle>FreeBSD source tree</subtitle>
<id>https://cgit-dev.freebsd.org/src/atom?h=main</id>
<link rel='self' href='https://cgit-dev.freebsd.org/src/atom?h=main'/>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/'/>
<updated>2025-06-11T23:16:22Z</updated>
<entry>
<title>include: ssp: fortify &lt;signal.h&gt;</title>
<updated>2025-06-11T23:16:22Z</updated>
<author>
<name>Ricardo Branco</name>
<email>rbranco@suse.de</email>
</author>
<published>2025-05-18T17:55:23Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=b0334450aa527ccbac7a3c37d1ba75ef96c7be91'/>
<id>urn:sha1:b0334450aa527ccbac7a3c37d1ba75ef96c7be91</id>
<content type='text'>
sig2str(3)

Reviewed by: imp, kib, des, jilles
Pull Request: https://github.com/freebsd/freebsd-src/pull/1696
Closes: https://github.com/freebsd/freebsd-src/pull/1696
</content>
</entry>
<entry>
<title>libc: Add getenv_r() function.</title>
<updated>2025-04-27T06:29:32Z</updated>
<author>
<name>Dag-Erling Smørgrav</name>
<email>des@FreeBSD.org</email>
</author>
<published>2025-04-27T06:29:10Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=873420ca1e6e8a2459684f5b5d3e557a8ef75928'/>
<id>urn:sha1:873420ca1e6e8a2459684f5b5d3e557a8ef75928</id>
<content type='text'>
This is a calque of the NetBSD function of the same name.

MFC after:	never
Relontes:	yes
Sponsored by:	Klara, Inc.
Reviewed by:	kevans
Differential Revision:	https://reviews.freebsd.org/D49979
</content>
</entry>
<entry>
<title>libc: tests: fix the gethostname() and getdomainname() tests</title>
<updated>2025-03-20T04:44:26Z</updated>
<author>
<name>Kyle Evans</name>
<email>kevans@FreeBSD.org</email>
</author>
<published>2025-03-20T04:43:23Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=22178cb29f03a3b7bf919f3605e0cd5d6b18fa0a'/>
<id>urn:sha1:22178cb29f03a3b7bf919f3605e0cd5d6b18fa0a</id>
<content type='text'>
Instead of relying on any particular domainname and hostname to succeed,
spin up a jail before we execute the test with them set to some known,
fixed values.  This allows them to be meaningfully tested -- previously,
they were skipped much more often than not.

Reported by:	jlduran
Reviewed by:	jlduran, markj
Differential Revision:	https://reviews.freebsd.org/D49237
</content>
</entry>
<entry>
<title>libc: tests: allow fortified test cases to require root</title>
<updated>2025-03-20T04:44:25Z</updated>
<author>
<name>Kyle Evans</name>
<email>kevans@FreeBSD.org</email>
</author>
<published>2025-03-20T04:43:14Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=09cdbf042f825fc41762b5d5365ad930fec18b99'/>
<id>urn:sha1:09cdbf042f825fc41762b5d5365ad930fec18b99</id>
<content type='text'>
An upcoming test will require root to create a jail with its own
domainname/hostname to avoid external requirements on the test runner
as we want to fetch them with valid and plausible sizes.

Generate test headers for all cases to reduce churn in future diffs as
metadata is added to individual tests, or in case other test options
are added to correspond to different metadata to set.

Reviewed by:	jlduran, markj
Differential Revision:	https://reviews.freebsd.org/D49236
</content>
</entry>
<entry>
<title>libc: tests: fix luacheck warnings in the fortification test generator</title>
<updated>2025-03-20T04:44:25Z</updated>
<author>
<name>Kyle Evans</name>
<email>kevans@FreeBSD.org</email>
</author>
<published>2025-03-20T04:42:57Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=85242b59d17dcbfbc82afea9d4232006df074210'/>
<id>urn:sha1:85242b59d17dcbfbc82afea9d4232006df074210</id>
<content type='text'>
All of these are simple shadowing that don't need to happen; we're
passing the shadowed value through in every case anyways, just use it
in the closure in a more lua-natural fashion.

While we're here, lint the generator every time we generate tests to
ensure that we don't regress without having to remember to manually
run luacheck.

Reported by:	jlduran
Reviewed by:	jlduran, markj
Differential Revision:	https://reviews.freebsd.org/D49235
</content>
</entry>
<entry>
<title>lib/libc/string: apply SSP hardening and tests to memset_explicit</title>
<updated>2024-11-14T22:10:00Z</updated>
<author>
<name>Robert Clausecker</name>
<email>fuz@FreeBSD.org</email>
</author>
<published>2024-10-25T16:00:44Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=8983acc8dee56533f5281ca912e09a51dfacc35b'/>
<id>urn:sha1:8983acc8dee56533f5281ca912e09a51dfacc35b</id>
<content type='text'>
Reviewed by:	emaste, kevans
Differential Revision:	https://reviews.freebsd.org/D47286
</content>
</entry>
<entry>
<title>include: ssp: fortify &lt;sys/socket.h&gt;</title>
<updated>2024-07-13T05:16:26Z</updated>
<author>
<name>Kyle Evans</name>
<email>kevans@FreeBSD.org</email>
</author>
<published>2024-07-13T05:16:12Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=1f155d48f878495d31592c59cab82f975c210ad8'/>
<id>urn:sha1:1f155d48f878495d31592c59cab82f975c210ad8</id>
<content type='text'>
The entire recv*() implementation set is ripe for opportunities to
validate, so do what we can with what we have.

Reviewed by:	markj
Sponsored by:	Klara, Inc.
Sponsored by:	Stormshield
Differential Revision:	https://reviews.freebsd.org/D45686
</content>
</entry>
<entry>
<title>include: ssp: fortify &lt;sys/select.h&gt;</title>
<updated>2024-07-13T05:16:25Z</updated>
<author>
<name>Kyle Evans</name>
<email>kevans@FreeBSD.org</email>
</author>
<published>2024-07-13T05:16:12Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=2aba0eea3ffffce74f9d8df20e0aaf49ea6d76c3'/>
<id>urn:sha1:2aba0eea3ffffce74f9d8df20e0aaf49ea6d76c3</id>
<content type='text'>
Notably sanity check indices passed to the FD_*() macros against the
size of the fd_set itself.

Reviewed by:	markj
Sponsored by:	Klara, Inc.
Sponsored by:	Stormshield
Differential Revision:	https://reviews.freebsd.org/D45685
</content>
</entry>
<entry>
<title>include: ssp: fortify &lt;sys/uio.h&gt;</title>
<updated>2024-07-13T05:16:25Z</updated>
<author>
<name>Kyle Evans</name>
<email>kevans@FreeBSD.org</email>
</author>
<published>2024-07-13T05:16:12Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=1ace24b30cad59c8ae509d0c690aa55b8df73136'/>
<id>urn:sha1:1ace24b30cad59c8ae509d0c690aa55b8df73136</id>
<content type='text'>
Check both the buffer size of the iov object itself, as well as that
of each indidvidually io base.

Reviewed by:	markj
Sponsored by:	Klara, Inc.
Sponsored by:	Stormshield
Differential Revision:	https://reviews.freebsd.org/D45684
</content>
</entry>
<entry>
<title>include: ssp: fortify &lt;sys/random.h&gt;</title>
<updated>2024-07-13T05:16:25Z</updated>
<author>
<name>Kyle Evans</name>
<email>kevans@FreeBSD.org</email>
</author>
<published>2024-07-13T05:16:11Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=062d9380b98663eb2a4a3d7ce9e919e743984060'/>
<id>urn:sha1:062d9380b98663eb2a4a3d7ce9e919e743984060</id>
<content type='text'>
That is to say, fortify getrandom(2).

Reviewed by:	markj
Sponsored by:	Klara, Inc.
Sponsored by:	Stormshield
Differential Revision:	https://reviews.freebsd.org/D45683
</content>
</entry>
</feed>
