FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=stable%2F9 2016-11-30T01:41:40Z 2016-11-30T01:41:40Z Brooks Davis brooks@FreeBSD.org 2016-11-30T01:41:40Z urn:sha1:e4af16734ce3ca416d82a71b158a27d125334a26 Allocate a struct ifreq rather than using a (wrong) computed size for the BIOCSETIF ioctl. The kernel always copies an entire struct ifreq and IPv4 addresses will always fit in an ifreq. On systems with pointers larger than 64-bits, the computed size will be less than the size of struct ifreq, potentially resulting in the kernel attempting to copyin memory from outside the allocation. Reviewed by: jhb Obtained from: CheriBSD Sponsored by: DARPA, AFRL Differential Revision: https://reviews.freebsd.org/D8445 2016-06-10T14:10:51Z Enji Cooper ngie@FreeBSD.org 2016-06-10T14:10:51Z urn:sha1:15a108eb2c8358b0b38a0c661fa362caba60da73 MFC r299460: r299460 (by cem): fsck_ffs: Don't overrun mount device buffer Maybe this case is impossible. Either way, when attempting to "/dev/"-prefix a non-global device name, check that we do not overrun the f_mntfromname buffer. In this case, truncating (with strlcpy or similar) would not be useful, since the f_mntfromname result of getmntpt() is passed directly to open(2) later. CID: 1006789 2016-06-06T13:32:15Z Pedro F. Giffuni pfg@FreeBSD.org 2016-06-06T13:32:15Z urn:sha1:0b39b223c6ed38836ab62f40bd69473ef4edb3bd dhclient(1): correct obvious mismatch in get_char(). Correct switch between current and previous line buffers when encountering a carriage return in the input. CID: 1305719 Obtained from: OpenBSD (CVS rev. 1.30) 2016-05-06T01:38:12Z Pedro F. Giffuni pfg@FreeBSD.org 2016-05-06T01:38:12Z urn:sha1:917ac5cf06ae00d6850eaa9cccdb4f0aa747f26e restore: fix memory and resource handle leaks. CID: 272297, 1007784 2016-05-03T15:06:29Z Pedro F. Giffuni pfg@FreeBSD.org 2016-05-03T15:06:29Z urn:sha1:cbfa1510f5980c8d7b60d54e8b86cb3a31c09f3a ifconfig: prevent some improbable signed integer overflows. ic_nchans, from struct:ieee80211req_chaninfo, is an unsigned int. Use an unsigned index to prevent overflowing the index. Adopt unsigned integers in other cases where it is useful to be aware of the unsigned quantities and there is no risk of the values being negative. 2016-04-30T09:43:01Z Enji Cooper ngie@FreeBSD.org 2016-04-30T09:43:01Z urn:sha1:0e5509194a8393b509cce3d4c1d309ddc7873286 r272871 (by hrs): MFC r271909: Revert changes in r269180. It could cause -c N option to enter an infinite loop if no reply packet is received. 2016-04-29T03:06:42Z Pedro F. Giffuni pfg@FreeBSD.org 2016-04-29T03:06:42Z urn:sha1:5258123590e3a62471672ff7cf446af3bdb291d0 fsck_ffs: use uint32_t for closedisk(). fs_ncg is of type uint32_t, and we were indexing it with an int. Fixed this using an unsigned type. Reviewed by: mckusick 2016-04-26T12:00:04Z Andrey V. Elsukov ae@FreeBSD.org 2016-04-26T12:00:04Z urn:sha1:f243d60aae7619b96c74bb3c668b490300a4dcb3 Fix the problem, when gpart(8) can't write both bootcode and partcode in one command due to wrong file size limit. Do not use bootcode size to calculate partsize limit. Also add report message about successful partcode writing. 2016-03-18T13:30:40Z Alexander Motin mav@FreeBSD.org 2016-03-18T13:30:40Z urn:sha1:a3843441668b691177aaaccab7575bcaa60f2fe2 For example, it allows quite useful `geom disk list` command. 2016-03-14T00:42:19Z Enji Cooper ngie@FreeBSD.org 2016-03-14T00:42:19Z urn:sha1:2abc000a05c8436a9f1b1271db339aeb6d3d4be8 MFC r294973: Add pidfile support to ggated(8) The tests will manipulate the system daemon today, which can cause undesired service interruption when the tests are run. This change allows the geom_gate tests to be run with an arbitrary ggated(8) daemon / geom_gate(4) device pairing. Other changes: - Sort #includes - Use a more common idiom for parsing options with getopt(3)