compat/freebsd32: set uio_rw for trailer's uio in freebsd32_sendfile()
PR: 297516
Reported by: asomers
Fixes: dfad790c8cca ("sendfile: stop abusing kern_writev()")
Sponsored by: The FreeBSD Foundation
MFC after: 3 days
netipsec/xform_ipcomp.c: fix sockaddr type set in ipcomp6_nonexp_encapcheck()
Noted and reviewed by: markj
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D58646
PF_KEY socket: limit the length of copied socket address
for SADB_UPDATE op SADB_X_EXT_NEW_ADDRESS_SRC/DST extensions, by
checking the sa_len matching the address family requirements before
doing the copy.
Also convert KEY_SETSECASIDX() and KEY_SETSECSPIDX() to functions and
apply the sa_len clamping there.
See https://github.com/0xdeadbeefnetwork/pfkey-sadb-overflow
PR: 297264
Tested by: Wafa Hamzah <wafah at nvidia.com> (previous version)
Reviewed by: markj
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D58646
kern/sys_process.c: make vmspace_rwmem() similar to io functions
In particular, if there were any bytes moved, and then vm_fault()
faulted, do not return an error, but report the short io instead.
PR: 297512
Reviewed by: markj
Tested by: Stéphane D'Alu <sdalu at sdalu.com>
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D58838
kern/kern_proc.c: do not throw out read data in get_ps_strings()
Since vmspace_iop()/proc_readmem() might return -1 on error from
vmspace_rwmem(), account for this and stop reading but return already
accumulated data if any, instead of returning an error.
PR: 297512
Reported and tested by: Stéphane D'Alu <sdalu at sdalu.com>
Reviewed by: markj
Fixes: e1b0d051bbf7 ("proc: Allow to make proc_rwmem() operate on a consistent address space")
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D58838
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Rename www/lua-stream-nginx-module to www/nginx-module-lua-stream
to follow the nginx-module-* naming scheme for dedicated 3rd-party
module ports and adjust the consumers. Relax the BUILD_DEPENDS to
an unversioned dependency while here, matching the LUA option.
While here, rename the internal NJS_QJS_CFLAGS variable to
_NJS_QJS_CFLAGS so it is no longer treated as an option helper.
Sponsored by: Netzkommune GmbH
Increase the default mlock limit from 64k to 256k
The current default has been unchanged for 14 years. Increase it to
keep pace with modern hardware and software. security/pinentry-gnome,
in particular, can sometimes need 112 kB.
PR: 297452
MFC after: 2 weeks
Sponsored by: ConnectWise
Reviewed by: cye, emaste
Differential Revision: https://reviews.freebsd.org/D58811
www/code-server: Update to 4.132.0
Update to code-server 4.132.0, which bundles VS Code 1.132.0.
Changelog: https://github.com/coder/code-server/releases
Sponsored by: Netzkommune GmbH
graphics/qgis-ltr: Update to 3.44.13
In preparation for a major release upgrade from 3.x to 4.x in
graphics/qgis, move the current version 3.44 from graphics/qgis
to graphics/qgis-ltr.
- Switch from Qt5 to Qt6
- Use PDF4QT for better rendering in PDF
- Resolve FreeBSD-specific issues when using the QGIS-internal versions
of spatialindex and lazperf
Changelog: From 3.40.15 to 3.44.13
https://github.com/qgis/QGIS/compare/final-3_40_15%5E...final-3_44_13
graphics/qgis: Update to 4.2.1
Major release update from QGIS 3.x to 4.x, which brings many changes
and new features.
Users who previously used 3.x can transfer their configuration to
separate configuration directories in 4.x. This happens automatically
upon the first launch, unless the user declines it. The configuration
for 3.x versions is therefore preserved.
Since many, but not yet all, of the plugins familiar from 3.x work in
the 4.x versions, you can continue working with QGIS 3.x for now. To do
so, replace the existing installation from graphics/qgis with the one
from graphics/qgis-ltr, where 3.x versions will continue to be
maintained until further notice.
- 4.x versions are real Qt6 ones
- Use PDF4QT for better rendering in PDF
When building in an unclean environment, the port should now be
[5 lines not shown]
if_vmx: fix panic during kldload
Just like vmxnet3_intr_disable_all, iflib may invoke this routine
before vmxnet3_attach_post() has run, which is before the top-level
shared data area is initialized and the device made aware of it.
PR: 294312
Sponsored by: Dell Inc.
(cherry picked from commit 01b0690c495e1043a72cae9ee945f9f2c2adc216)
if_vmx: fix panic during kldload
Just like vmxnet3_intr_disable_all, iflib may invoke this routine
before vmxnet3_attach_post() has run, which is before the top-level
shared data area is initialized and the device made aware of it.
PR: 294312
Sponsored by: Dell Inc.
(cherry picked from commit 01b0690c495e1043a72cae9ee945f9f2c2adc216)
editors/vim-classic: Adjust MASTER_SITES so DISTNAME, WRKSRC need not be set.
Fix minor comment nits while we are here.
Submitted by: fuz
Approved by: fuz
www/kineto: Update g20211104 => g20250122 (last commit)
Changelog:
* Add a disable proxy flag (-P) to completely disable /x/ proxy and turn
off gemini:// link rewriting for external links.
* Add missing closing paragraph tags on HTML template.
* Add .gitignore.
* Update Gemini protocol link.
* Update documentation with new flag.
Commit:
https://git.sr.ht/~sircmpwn/kineto/commit/1f4e0667bc21b3210d2fa868a940a3efbb23e050
While here pet portclippy.
PR: 297066
Approved by: Corey <corey at electrickite.org> (maintainer, timeout 19 days)
Sponsored by: UNIS Labs
