FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=releng%2F11.0 2016-12-06T00:09:52Z 2016-12-06T00:09:52Z Gleb Smirnoff glebius@FreeBSD.org 2016-12-06T00:09:52Z urn:sha1:25aff0f987af341b76a60374cc9f46bc315105bb localedef: Fix ctype dump (fixed wide spread errors) See original commit for longer description. Errata Notice: EN-16:21 Approved by: so 2016-09-27T19:36:12Z Ed Maste emaste@FreeBSD.org 2016-09-27T19:36:12Z urn:sha1:336408d8fb8655e374326771dcd3211744216900 === bspatch === MFS r306213: bspatch Capsicumization, sanity checks, and other improvements r304691: bspatch: apply style(9) Make style changes (and trivial refactoring of open calls) now in order to reduce noise in diffs for future capsicum changes. r304807 (allanjude): Capsicumize bspatch Move all of the fopen() and open() calls to the top of main() Restrict each FD to least privilege (read/seek only, write only, etc) cap_enter(), and make all except the output FD read/seek only. r304821: bspatch: remove output file in the case of error r305486: bspatch: add sanity checks on sizes to avoid integer overflow Note that this introduces an explicit 2GB limit, but this was already implicit in variable and function argument types. This is based on the "non-cryptanalytic attacks against freebsd update components" anonymous gist. Further refinement is planned. r305737: bspatch: remove superfluous newlines from errx strings r305822: bspatch: use #define for header size instead of magic number r306026: bspatch: Remove backwards-compatibility sys/capability.h support bspatch previously included sys/capability.h or sys/capsicum.h based on __FreeBSD_version, as FreeBSD is the upstream for bsdiff and we may see this file incorporated into other third-party software. The Capsicum header is now installed as sys/capsicum.h in stable/10 and FreeBSD 10.3, so we can just use sys/capsicum.h and simplify the logic. With this change, bspatch is identical between head, stable/11 and releng/11.0. === portsnap === MFS r305648 (delphij): MFC r305469: Ensure that we always open only files that is named by explicitly using shell redirections instead of having gzip(1) to decide what file to open. Issue reported in the "non-cryptanalytic attacks against freebsd update components" anonymous gist. === libarchive === MFS r305754 (mm): MFC r305422: Sync libarchive with vendor Vendor issues fixed: PR #777: Multiple bugfixes for setup_acls() This includes a bugfix for a bug that caused ACLs not to be read properly for files and directories inside subdirectories and as a result not being stored or being incorrectly stored in tar archives. MFS r306321 (mm): MFC r305819: Sync libarchive with vendor including important security fixes. Issues fixed (FreeBSD): PR #778: ACL error handling Issue #745: Symlink check prefix optimization is too aggressive Issue #746: Hard links with data can evade sandboxing restrictions This update fixes the vulnerability #3 and vulnerability #4 as reported in "non-cryptanalytic attacks against FreeBSD update components". https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f Fix for vulnerability #2 has already been merged. Approved by: re (gjb), so (glebius) 2016-08-20T11:42:08Z Michael Tuexen tuexen@FreeBSD.org 2016-08-20T11:42:08Z urn:sha1:37f9784baadb50ce2e182700140d84c0bbdeaed7 * Use names for SCTP and UDPLite when reporting the input histogram. * Fix the output for scope statistics. Approved by: re (kib) 2016-08-19T18:14:33Z Bryan Drewery bdrewery@FreeBSD.org 2016-08-19T18:14:33Z urn:sha1:a34455d414b09b8134b24be37674cfe206e78158 MFC r303929,r303930,r303931,r303932,r303933: r303929: Fix -S with -b not atomically updating the destination file. r303930: Support -v for -l. r303931: Fix -S with -l not being atomic. r303932: Fix -b failure not restoring flags on the destination file. r303933: Squelch a false-positive Clang static analyzer warning. Approved by: re (gjb) 2016-08-19T17:48:47Z Bryan Drewery bdrewery@FreeBSD.org 2016-08-19T17:48:47Z urn:sha1:02c0075216354d044b2a80e962396193615cec29 MFC r303934,r303937,r303942: r303934: Support rmdir(2). r303937: Use proper argument length for rmdir(2) for r303934. r303942: Fix sorting in r303934. Approved by: re (gjb) 2016-08-15T08:20:37Z Baptiste Daroussin bapt@FreeBSD.org 2016-08-15T08:20:37Z urn:sha1:f4ef93994629e9be5a71ee27280c1fa3dee88cda truss: fix uninitialized trussinfo->curthread in add_threads()/enter_syscall trussinfo->curthread must be initialized before calling enter_syscall(), it is used by t->proc->abi->fetch_args(). Without that truss is segfaulting and the attached program also crash. Submitted by: Nikita Kozlov (nikita@gandi.net) Reviewed by: jhb Approved by: re (gjb) Differential Revision: https://reviews.freebsd.org/D7399 2016-08-09T19:20:53Z Dimitry Andric dim@FreeBSD.org 2016-08-09T19:20:53Z urn:sha1:b6d66342c82d716003d8d1832c51812dd8dba2d4 Fix a segfault in bsdgrep when parsing the invalid extended regexps "?" or "+" (these are invalid, because there is no preceding operand). When bsdgrep attempts to emulate GNU grep in discarding and ignoring the invalid ? or + operators, some later logic in tre_compile_fast() goes beyond the end of the buffer, leading to a crash. Fix this by bailing out, and reporting a bad pattern instead. Approved by: re (gjb, kib) Reported by: Steve Kargl 2016-08-02T14:14:36Z Gleb Smirnoff glebius@FreeBSD.org 2016-08-02T14:14:36Z urn:sha1:f4f76fbb39d086635ee35bc251aa39277c1e1445 The date format for ru_RU.UTF-8 locale has changed some time ago, adjust the ru_RU.UTF-8 calendar files. Approved by: re (kib) 2016-08-01T16:39:40Z Eric van Gyzen vangyzen@FreeBSD.org 2016-08-01T16:39:40Z urn:sha1:2a36bd13a92741e6d5b3b7c9f056b54e32075215 Fix markup for -j in cpuset(1) synopsis Approved by: re (kib) Sponsored by: Dell Inc. 2016-07-25T15:03:14Z Pedro F. Giffuni pfg@FreeBSD.org 2016-07-25T15:03:14Z urn:sha1:7177fe92713b1b0dd024cfcf92b960f3eff52f5d mail(1): Avoid closing negative file descriptors. CID: 1008105, 1008106 Approved by: re (gjb)