FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=releng%2F8.1 2011-12-23T15:00:37Z 2011-12-23T15:00:37Z Colin Percival cperciva@FreeBSD.org 2011-12-23T15:00:37Z urn:sha1:795d49c5e0f91633fcd118c32d4adff995fdbd00 Add an API for alerting internal libc routines to the presence of "unsafe" paths post-chroot, and use it in ftpd. [11:07] Fix a buffer overflow in telnetd. [11:08] Make pam_ssh ignore unpassphrased keys unless the "nullok" option is specified. [11:09] Add sanity checking of service names in pam_start. [11:10] Approved by: so (cperciva) Approved by: re (bz) Security: FreeBSD-SA-11:06.bind Security: FreeBSD-SA-11:07.chroot Security: FreeBSD-SA-11:08.telnetd Security: FreeBSD-SA-11:09.pam_ssh Security: FreeBSD-SA-11:10.pam 2010-06-11T15:26:15Z Edward Tomasz Napierala trasz@FreeBSD.org 2010-06-11T15:26:15Z urn:sha1:5b7559d42a6f2161a1df5450ace4616e4efdf7ca Don't use pointer to 64 bit value (id_t) to point to 32 bit value (uid_t). Found with: Coverity Prevent CID: 7466, 7467 Approved by: re (kib) 2010-06-11T15:21:12Z Edward Tomasz Napierala trasz@FreeBSD.org 2010-06-11T15:21:12Z urn:sha1:5ad296377c282a5dda439fce64690498f7018031 Found with: Coverity Prevent CID: 7517 Approved by: re (kib) 2010-06-02T20:35:56Z Edward Tomasz Napierala trasz@FreeBSD.org 2010-06-02T20:35:56Z urn:sha1:4d01f7c33b91aca4ba936059c401f61a3684e3d8 Make acl_get_perm_np(3) work with NFSv4 ACLs. Reviewed by: kientzle@ Approved by: re (kib) 2010-05-30T08:38:41Z Ulrich Spörlein uqs@FreeBSD.org 2010-05-30T08:38:41Z urn:sha1:182140f04a19da8300fed34506d5b6a9d9e3d7ce These features will first appear in 8.1, soon to be released Approved by: re (kib) 2010-05-27T03:15:04Z Colin Percival cperciva@FreeBSD.org 2010-05-27T03:15:04Z urn:sha1:31b99bfe49cfb0820286cb7a3613dbc2f612208c the jail(8) command. [10:04] Fix a one-NUL-byte buffer overflow in libopie. [10:05] Correctly sanity-check a buffer length in nfs mount. [10:06] Approved by: so (cperciva) Approved by: re (kensmith) Security: FreeBSD-SA-10:04.jail Security: FreeBSD-SA-10:05.opie Security: FreeBSD-SA-10:06.nfsclient 2010-05-20T18:46:11Z Edward Tomasz Napierala trasz@FreeBSD.org 2010-05-20T18:46:11Z urn:sha1:674d3a9960ac1dd51dccc79e19c6007e61014301 Make branding less intrusive - in acl_set(3), in case ACL brand is ACL_BRAND_UNKNOWN, do what the programmer says instead of failing. 2010-05-20T18:45:07Z Edward Tomasz Napierala trasz@FreeBSD.org 2010-05-20T18:45:07Z urn:sha1:0941e62812dfd795fc7fcf6326552d9eec24fee8 Make it possible to actually use NFSv4 permission bits with acl_set_perm(3) and acl_delete_perm(3). It went undetected, because neither setfacl(1) nor Samba use this routines. D'oh. 2010-05-19T22:03:45Z Gordon Tetlow gordon@FreeBSD.org 2010-05-19T22:03:45Z urn:sha1:db86a57ecee9dfdaabde125fd23a03a590f2e591 Fix a bug due to a type conversion from 64 to 32 bits. The side effect of this type conversion is the high bits which were used to indicate if a special character was a literal or special were dropped. As a result, all special character were treated as special, even if they were supposed to be literals. Approved by: mentor (wes@) 2010-05-13T23:28:20Z Xin LI delphij@FreeBSD.org 2010-05-13T23:28:20Z urn:sha1:42ddb8f1db2d400e0ebe34fc666480d0634c26f8 Two optimizations to MI strlen(3) inspired by David S. Miller's blog posting [1]. - Use word-sized test for unaligned pointer before working the hard way. Memory page boundary is always integral multiple of a word alignment boundary. Therefore, if we can access memory referenced by pointer p, then (p & ~word mask) must be also accessible. - Better utilization of multi-issue processor's ability of concurrency. The previous implementation utilized a formular that must be executed sequentially. However, the ~, & and - operations can actually be caculated at the same time when the operand were different and unrelated. The original Hacker's Delight formular also offered consistent performance regardless whether the input would contain characters with their highest-bit set, as it catches real nul characters only. These two optimizations has shown further improvements over the previous implementation on microbenchmarks on i386 and amd64 CPU including Pentium 4, Core Duo 2 and i7. [1] http://vger.kernel.org/~davem/cgi-bin/blog.cgi/2010/03/08#strlen_1