bind(2): Lookup local address in current FIB if '*.bind_all_fibs' is active
When a protocol-specific 'bind_all_fibs' tunable is set to 0, a
listening socket will only receive traffic originating from the FIB
it was bound to. However, there are no checks to determine whether
an address exists in the target FIB when binding the socket, which can
lead to a situation where a socket and the address it was bound to
belong to different FIBs.
Prevent this footgun by looking up the requested address in the current
FIB if 'bind_all_fibs' is active and returning an error if the address
does not exist.
Sponsored by: Stormshield
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D58281
Reviewed by: glebius, pouria, markj
MFC after: 2 weeks
authpf(8) read_config() should chop off trailing white space
if administrator mistakenly types into configuration file
anchor=authpf_test
where 'authpf_test' is followed by white space, the authpf(8)
is going to use anchor 'authpf_test ' instead of the 'authpf_test'
which is defined in pf.conf(5) as 'anchor authpf_test/*'
issue kindly reported and patch submitted by
Avinash Duduskar <avinash.duduskar (_at_) gmail (_dot_) com>
OK sashan@
PR: 296958
MFC after: 1 week
Obtained from: OpenBSD, sashan <sashan at openbsd.org>, 2d12a8e44d
Sponsored by: Rubicon Communications, LLC ("Netgate")
exec: Avoid overflow when computing the size of the exec map
On a test system with 1024 cores the size of exec map exceeds 4GB, and
all of the operands in the size calculation are 32-bit integers.
Tested by: Jim Huang Chen <jim.chen.1827 at gmail.com>
MFC after: 1 week
Sponsored by: AMD (hardware)
devel/got: update to 0.127
User-visible changes:
- make 'got merge' accept tags as merge source argument
- do not raise errors when unversioned files are found during got rm -k
- add rm -s ? option for deleting unversioned files from the work tree
- add rm -I option for also deleting ignored unversioned files with rm -s ?
- make 'tog log' reload the work tree's base-commit info during Ctrl-L refresh
- fix failures due to trailing slashes in checkout -p path-prefix argument
sysutils/msktutil: fix breakage by using OPSYS
Despite passing poudriere testport and bulk and building and working,
this wasn't right. make -V PORTVERSION fails. It does not build.
Instead, thanks to jrm@, this hint from Mk/Uses/gssapi.mk:93 helps
It builds on 15.1 and 14.4, passses portlint, etc.
PR: 292735
(cherry picked from commit 7c4426d408ba4250bbdd96b1df2da98ff37fc151)
devel/rgbds: Update to 1.0.2
- Do not build tests by default
- Add external tests excluding nonfree, which omits the Pokémon and
Legend of Zelda disassemblies
ChangeLog: https://github.com/gbdev/rgbds/releases/tag/v1.0.2%2Bhotfix
MFH: 2026Q3
sysutils/msktutil: fix breakage by using OPSYS
Despite passing poudriere testport and bulk and building and working,
this wasn't right. make -V PORTVERSION fails. It does not build.
Instead, thanks to jrm@, this hint from Mk/Uses/gssapi.mk:93 helps
It builds on 15.1 and 14.4, passses portlint, etc.
PR: 292735
security/gssproxy: Add new Port
GSS Proxy allows processes to perform GSSAPI operations, such as
Kerberos authentication, through a privileged daemon. This separates
credential handling from the application and lets services access
keytabs and credential caches without holding the privileges directly.
WWW: https://github.com/gssapi/gssproxy
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
net/dogtag-ldap-sdk: Add new Port
Dogtag LDAP SDK provides the pure-Java LDAP client library used by
Dogtag PKI. It installs the ldapjdk.jar Java archive.
WWW: https://github.com/dogtagpki/ldap-sdk
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
security/dogtag-jss: Add new Port
Java Security Services provides a Java interface to Mozilla NSS.
It includes a Java security provider and native JNI libraries for
cryptographic operations, certificate handling, and symmetric-key
operations used by Dogtag PKI.
WWW: https://github.com/dogtagpki/jss
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jackson-jaxrs-providers: Add new Port
Jackson JAX-RS Providers integrate Jackson data binding with
applications using the classic javax.ws.rs API.
This package installs the common Jackson JAX-RS provider classes and the
JSON provider required by Dogtag PKI. Additional Jackson data format
providers are not included.
WWW: https://github.com/FasterXML/jackson-jaxrs-providers
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jackson-module-jaxb-annotations: Add new Port
Jackson Module JAXB Annotations adds support for using JAXB annotations
with Jackson data binding. This module targets the legacy javax.xml.bind
namespace provided by JAXB 2.3.
WWW: https://github.com/FasterXML/jackson-modules-base
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/resteasy: Add new Port
RESTEasy is an implementation of the Jakarta RESTful Web Services
specification using the classic javax.ws.rs namespace.
This port installs the RESTEasy core JAX-RS implementation, the Jackson 2
JSON provider, and the Servlet container initializer.
WWW: https://resteasy.dev/
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jakarta-xml-bind-api: Add new Port
Jakarta XML Binding defines a standard API for mapping Java classes to
XML representations. It supports marshalling Java objects into XML
documents and unmarshalling XML documents back into Java objects.
WWW: https://jakarta.ee/specifications/xml-binding/
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jackson-databind: Add new Port
Jackson Databind provides data binding between JSON content and Java
objects. It uses Jackson Core for streaming JSON processing and Jackson
Annotations for data-binding configuration.
WWW: https://github.com/FasterXML/jackson-databind
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jackson-core: Add new Port
Jackson Core provides the low-level streaming API and JSON parser and
generator implementation used by the Jackson data-processing suite. It
supports token-based JSON processing without requiring data binding.
WWW: https://github.com/FasterXML/jackson-core
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jackson-annotations: Add new Port
Jackson Annotations provides general-purpose annotations for the Jackson
data processor. These annotations are used on value and handler types
and do not contain the functionality that processes the annotations.
WWW: https://github.com/FasterXML/jackson-annotations
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/javax-ws-rs-api: Add new Port
The Java API for RESTful Web Services (JAX-RS) defines portable APIs for
developing RESTful web services and clients. This port provides the
classic javax.ws.rs namespace used by Java EE applications.
WWW: https://github.com/jakartaee/rest
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jaxb-api: Add new Port
Jakarta XML Binding API 2.3 provides the classic javax.xml.bind API for
mapping Java classes to XML representations. Although the Maven artifact
is named jakarta.xml.bind-api, version 2.3.3 still uses the
javax.xml.bind namespace.
This port installs only the JAXB API and does not include a JAXB runtime
implementation.
WWW: https://jakarta.ee/specifications/xml-binding/2.3/
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jboss-logging: Add new Port
JBoss Logging is a Java logging facade which can bind to different
logging managers. It allows applications to remain independent of a
particular logging implementation.
WWW: https://github.com/jboss-logging/jboss-logging
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
devel/jakarta-annotation-api: Add new Port
Jakarta Annotations defines a collection of annotations representing
common semantic concepts that enable a declarative programming style
across a variety of Java technologies.
The API uses the Java Platform Module System module name
jakarta.annotation.
WWW: https://jakarta.ee/specifications/annotations/
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port
