FreshBSD

Avoid TCP log messages which are false positives.

This is https://svnweb.freebsd.org/changeset/base/322812, just for
alternate TCP stacks.

XMFC with:         322812

Make lit :: shtest-format.py supported on Windows again

It was marked as unsupported on Windows in r311230 because on some Win10 
machines it failed or caused hang. The problem was that on these machines
system bash (C:\Windows\System32\bash.exe) was used which requires paths to be
passed like '/mnt/c/path/to/my/script' instead of 'C:\path\to\my\script'.

TODO: we should make lit detect if system bash is used instead of msys and set
appropriate path format.

feat(gui): up to 6 additional domains with 256 char length - migration file

Ticket: #23544

Missed one.

Sponsored by:        Absolight

Update MASTER_SITES

PR:                221724
Submitted by:        xmj

Avoid TCP log messages which are false positives.

The check for timestamps are too early to handle SYN-ACK correctly.
So move it down after the corresponing processing has been done.

PR:                216832
Obtained from:        antonfb at hesiod.org
MFC after:        1 week

Revert r311552: [Bash-autocompletion] Add support for static analyzer flags

This reverts commit r311552 because it broke ubsan and asan bots.

[coroutines] CoroBegin from inner coroutines should be considered for spills

Summary:
If a coroutine outer calls another coroutine inner and the inner coroutine body is inlined 
into the outer, coro.begin from the inner coroutine should be considered for spilling if 
accessed across suspends.

Prior to this change, coroutine frame building code was not considering any coro.begins 
for spilling.
With this change, we only ignore coro.begin for the current coroutine, but, any 
coro.begins that were inlined into the current coroutine are eligible for spills.

Fixes PR34267

Reviewers: GorNishanov

Subscribers: qcolombet, llvm-commits, EricWF

Differential Revision: https://reviews.llvm.org/D37062

databases/cego: update 2.34.0 -> 2.35.0

- Fix in CegoDistManager::checkKey ( used for verify tableset admin
  commend ). Check for foreign key has been redesigned
- Fix in CegoBTreeCursor::getFirst, _pAttrCond has to be checked
  for 0, otherwise a core dump may occur ( detected with verify
  tableset admin command )
- In CegoViewObject::toChain() the view object reference string has
  to return complete information including the tableset. Otherwise,
  references to foreign tableset objects with the view will not work
  correctly.
- Fix in CegoDistCursor to support multiple view references in a
  query ( e.g. select a from v1 where exists select * from v1 ... )
  In the past, this might lead to infinite loops, since just the view
  select reference was used. Now the reference is cloned.
  The usage of clones results in several fixes for the CegoSelect::clone
  and underlying clone methods
- The previous problem regarding query cache is a result of the new
  introduced select cloning. The extended query id string should solve
  the problem
- Fix in CegoSelect::getId, the values of the parent join buffer
  have also be added to the query id string, otherwise, nested queries
  which references attributes to parent join buffer can not be
  distinguished
- Introduced simple selects, e.g. select 1, select sysdate, etc for

    [4 lines not shown]

- Update to 1.01

Changes:        http://search.cpan.org/dist/Unicode-CaseFold/Changes

Update to 0.43

Changes:        http://search.cpan.org/dist/Math-GMPf/CHANGES

[Reassociate] Don't canonicalize x + (-Constant * y) -> x - (Constant * y)..

..if the resulting subtract will be broken up later.  This can cause us to get
into an infinite loop.

x + (-5.0 * y)      -> x - (5.0 * y)       ; Canonicalize neg const
x - (5.0 * y)       -> x + (0 - (5.0 * y)) ; Break up subtract
x + (0 - (5.0 * y)) -> x + (-5.0 * y)      ; Replace 0-X with X*-1.

PR34078

Update to 0.1.11

Changes:        https://github.com/Azure/azure-ruby-asm-core/blob/master/ChangeLog.md

Update to 2.10.31

Changes:        https://github.com/aws/aws-sdk-ruby/releases

Update to 2.10.31

Changes:        https://github.com/aws/aws-sdk-ruby/releases

Update to 2.10.31

Changes:        https://github.com/aws/aws-sdk-ruby/releases

Update to 0.423

Changes:        http://search.cpan.org/dist/List-MoreUtils/Changes

Update to 0.3.6

Changes:        https://github.com/liufengyun/hashdiff/blob/master/changelog.md

Do not add $FreeBSD$ to the patch files.

Sponsored by:        Absolight

* Use HTTPS master site

PR:                221726
Submitted by:        Johannes Jost Meixner

* Add a patch from upstream to sanitize input for the bookmark command

Submitted by:        Alexander Batischev

Bump Portrevision
add ssl to USES

[Bash-autocompletion] Add support for static analyzer flags

Summary:
This is a patch for clang autocomplete feature.

It will collect values which -analyzer-checker takes, which is defined in
clang/StaticAnalyzer/Checkers/Checkers.inc, dynamically.
First, from ValuesCode class in Options.td, TableGen will generate C++
code in Options.inc. Options.inc will be included in DriverOptions.cpp, and
calls OptTable's addValues function. addValues function will add second
argument to Option's Values class. Values contains string like "foo,bar,.."
which is handed to Values class
in OptTable.

Reviewers: v.g.vassilev, teemperor, ruiu

Subscribers: hiraditya, cfe-commits

Differential Revision: https://reviews.llvm.org/D36782

security/strongswan: partially sync with upstream

Taken from: FreeBSD

Framework: partially sync with upstream

Taken from: HardenedBSD

net/shadowsocks-libev: sync with upstream

Taken from: HardenedBSD

net/asterisk13: sync with upstream

Taken from: HardenedBSD

mail/p5-Mail-Sendmail: sync with upstream

Taken from: HardenedBSD

devel/p5-DateTime: sync with upstream

Taken from: HardenedBSD

emulators/open-vm-tools: sync with upstream

Taken from: HardenedBSD

dns/unbound: sync with upstream

Taken from: HardenedBSD

security/vuxml: sync with upstream

Taken from: HardenedBSD

devel/libffi: sync with upstream

Taken from: HardenedBSD

*/*: sync with upstream

Taken from: HardenedBSD

Update to 1.1.1

With hat:        puppet

feat(middlewared): implement group.delete

Ticket:        #25565

Remove USES=objc:compiler, R doesn't use any objective c code and this breaks
R-Cran-* on FreeBSD 10

Reported by:        pkg-fallout
With hat:        portmgr

Document vulnerabilities of mail/phpmailer

Correct typo. Fixes #7802

(cherry picked from commit 61a8cc10858e49051a6976ccc7464ec34fd3ffce)

Correct typo. Fixes #7802

mail/phpmailer: Update from 5.2.23 to 5.2.24

Changelog:

- SECURITY Fix: XSS vulnerability in one of the code examples, CVE-2017-11503.
  The code_generator.phps example did not filter user input prior to output.
  This file is distributed with a .phps extension, so it it not normally
  executable unless it is explicitly renamed, so it is safe by default. There
  was also an undisclosed potential XSS vulnerability in the default exception
  handler (unused by default). Patches for both issues kindly provided by
  Patrick Monnerat of the Fedora Project.
- Handle bare codes (an RFC contravention) in SMTP server responses
- Make message timestamps more dynamic - calculate the date separately
  for each message
- Include timestamps in HTML-format debug output
- Improve Turkish, Norwegian, Serbian, Brazilian Portuguese &
  simplified Chinese translations
- Correction of Serbian ISO language code from sr to rs
- Fix matching of multiple entries in Host to match IPv6 literals
  without breaking port selection (see #1094, caused by a3b4f6b)
- Better capture and reporting of SMTP connection errors

Reported by: Ken J. <tweakerz at shaw.ca>
MFH:         2017Q3

Add basic support for new ACPI NFIT-based NVDIMMs.

Ticket:        #25473
(cherry picked from commit 94b1420eea09247a1c888478617c7592556f2d5a)

Add basic support for new ACPI NFIT-based NVDIMMs.

Ticket:        #25473

Set MK_LLD_IS_LD to MK_LLD_BOOTSTRAP for cross-tools

LLD_BOOTSTRAP is intended to control the linker used to link world and
kernel, while LLD_IS_LD is intended to control the linker installed in
that world.

Force LLD_IS_LD equal to LLD_BOOTSTRAP for the cross-tools build and
install phase, so that lld will be installed as the ld to run on the
host, when LLD_BOOTSTRAP is set.

PR:                221543
Reviewed by:        dim
Sponsored by:        The FreeBSD Foundation
Differential Revision:        https://reviews.freebsd.org/D12072

Switch WWW to https.

fix(middlewared): use default value for Int, if not required

Update to 1.1.33.

Merge pull request #284 from freenas/FIX-25645

Fix 25645

FIx inconsistent sshd config generation

Ticket: #25625

[globalisel][tablegen] Add support for ImmLeaf without SDNodeXForm

Summary:
This patch adds support for predicates on imm nodes but only for ImmLeaf and not for 
PatLeaf or PatFrag and only where the value does not need to be transformed before being 
rendered into the instruction.

The limitation on PatLeaf/PatFrag/SDNodeXForm is due to differences in the necessary 
target-supplied C++ for GlobalISel.

Depends on D36085

Reviewers: ab, t.p.northover, qcolombet, rovka, aditya_nandakumar

Reviewed By: rovka

Subscribers: kristof.beyls, javed.absar, igorb, llvm-commits

Differential Revision: https://reviews.llvm.org/D36086

Add new mlx5ib(4) driver to the kernel source tree which supports
Remote DMA over Converged Ethernet, RoCE, for the ConnectX-4 series of
PCI express network cards.

There is currently no user-space support and this driver only supports
kernel side non-routable RoCE V1. The krping kernel module can be used
to test this driver. Full user-space support including RoCE V2 will be
added as part of the ongoing upgrade to ibcore from Linux 4.9. Otherwise
this driver is feature equivalent to mlx4ib(4). The mlx5ib(4) kernel
module will only be built when WITH_OFED=YES is specified.

MFC after:                2 weeks
Sponsored by:                Mellanox Technologies

FIx inconsistent sshd config generation

Ticket: #25625

Fix mix of spaces and tabs in src/freenas/etc/ix.rc.d/ix-sshd