src/sbin, branch releng/10.2

Fix patch(1) shell injection vulnerability via ed(1). [SA-15:18]

2015-08-05T22:05:12Z

Fix routed remote denial of service vulnerability. [SA-15:19] Approved by: re (so blanket)

MFS r285916:

2015-07-27T17:51:12Z

MFC r285796: nvmecontrol: read controller identify data before any log page operations Approved by: re (gjb) Sponsored by: Intel

MFC r282805:

2015-07-23T19:58:56Z

- Remove ND6_IFF_IGNORELOOP. This functionality was useless in practice because a link where looped back NS messages are permanently observed does not work with either NDP or ARP for IPv4. - draft-ietf-6man-enhanced-dad is now RFC 7527. Approved by: re (gjb)

MFC r271910, r273211:

2015-07-23T19:52:03Z

* Add -x waittime and -X timeout options for feature parity. These are equivalent to -W and -t options of ping(8). Different letters are used because both have already been used for another purposes in ping6(8). * Fix a problem that reply packets are not received when -i T option is set and (T < RTT). - Use select(2) for timeout instead of interval timer. Remove poll(2) support. - Use sigaction(2) instead of signal(3). - Exit in SIGINT handler when two signals are received and doing reverse DNS lookup as ping(8) does. - Remove redundant variables used for getaddrinfo(3). Approved by: re (gjb)

MFC: r285594

2015-07-21T15:50:14Z

New partition flag for gpart, writes the 0xee partition in the pmbr in the second slot, rather than the first. Works around Lenovo legacy GPT boot issue PR: 184910 Approved by: re (gjb), marcel Relnotes: yes Sponsored by: ScaleEngine Inc. Differential Revision: https://reviews.freebsd.org/D3140

MFC: r285529

2015-07-21T14:27:36Z

If ggated's exports_find() fails, the connection is removed before (trying to) report the problem to the client. sendfail() is called with an already closed socket and thus it fails to inform the client about the problem. Fix this by calling sendfail() before connection_remove(). PR: 195944 Submitted by: Fabian Keil Reviewed by: pjd Approved by: re (gjb)

MFC: r285531

2015-07-21T14:25:21Z

Unbreak ggatec and ggatel on i386 after r238119, which added two more 'struct g_gate_ctl_create' fields. While the behaviour was technically undefined on other architectures as well, on the reporter's amd64 systems the uninitialized bytes the kernel cares about were always zero so everything worked as expected. PR: 197309, 199559 Submitted by: ota@j.email.ne.jp, Fabian Keil Reviewed by: pjd Approved by: re (gjb)

MFC: r285037

2015-07-14T11:37:26Z

Add -b to the devlist usage info, forgotten in r260059. PR: 195094 Submitted by: robin.hahling@gw-computing.net Approved by: re (marius)

MFC: r284290, r284323

2015-07-13T13:14:51Z

Improve grammar. PR: 200673 Submitted by: Fabian Keil Obtained from: ElectroBSD Approved by: re (gjb)

MFC: r285029

2015-07-13T13:02:04Z

Fix an obviously wrong boolean operator. PR: 200983 Submitted by: David Bindeman Approved by: re (gjb)