games/freeciv: update to 3.2.6 release (+)
3.2.6 is a bugfix release in the freeciv-3.2 series fixing two
security vulnerabilities in savegame/scenario file handling,
and a number of other bugs.
Release notes: https://freeciv.fandom.com/wiki/NEWS-3.2.6
games/wesnoth: update to 1.8.18 release (+)
What's new in version 1.18.8:
Updated translations: Bengali, Chinese (Simplified), Czech, German, Hebrew, Hungarian, Portuguese (Brazil), Spanish
CMake build system: Make Boost::system optional with boost 1.69 or later (necessary for compatibility with 1.89 and later).
Resolved not all translations being available for selection on Windows builds.
Release notes: https://github.com/wesnoth/wesnoth/blob/1.18.8/changelog.md
devel/codemark: Update to 0.7.30
Declare the missing libzstd dependency: the zstd-sys crate picks up the
system zstd via pkg-config and links against it, but the port relied on
archivers/zstd and pkgconf being pulled in transitively by other build
dependencies.
buf: Avoid calling bufdomain() on newly initialized bufs
bufinit() inserts newly initialized bufs into the QUEUE_EMPTY queue, at
which point they haven't yet been assigned a domain. Thus, bufdomain()
returns &bdomain[-1], which trips the array-bounds sanitizer.
This is harmless since we don't use the result in that case, but let's
avoid the invalid access to begin with. This is sufficient to let an
amd64 kernel boot to a login prompt with -fsanitize=array-bounds
configured.
Reported by: Andrew Griffiths <andrew at calif.io>
Reviewed by: rlibby, kib
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D59381
pw: use _PWDASH pseudo-fd for "-" in pw_checkfd
pw_checkfd() returned the character "-" (45) for the "-" argument,
which was ambiguous with a real file descriptor.
MFC After: 1 week
