httpd: convert imsg handling to imsg_get_ and remove IMSG_SIZE_CHECK macro
Second attempt, since the first one still had a bug. I overlooked the
fact that in "config_getserver", the imsg data was passed through
again to "config_getserver_config" and read there once more.
OK claudio@
fix up how aggr tries to scavange a flowid for the mbuf.
Samuel Thibault on misc@ noticed that aggr(4) wasn't balancing
traffic over ports like trunk(4) did, because aggr(4) relies on
mbuf flowids where trunk(4) parses and hashes packets onto ports
as a matter of course.
if the ports don't do RSS hashing and set a flowid, aggr(4) was
supposed to use the port interface index as a cheap way to populate
a flowid, which it did, but i forgot to also
SET(m->m_pkthdr.csum_flags, M_FLOWID).
this tweaks the use of flowids in the transmit path too. if a flowid
isnt set it'll fall back to the mbuf receive interface index. locally
generated traffic should have a flowid set most of the time cos
most traffic is tcp, and tcp generates flowid.
x11/xscreensaver: change from patching configure to patching configure.ac
and start using autoconf. Will make later changes easier. While there,
regen PLIST to include libexec/xscreensaver/worldpieces.
OK sthen@
pf(4) pf_state_import() can be bit more paranoid
Add sanity check for queue priority assigned to state
via 'set prio' rule action. The priority must fit
to bounds used by kernel (<= IFQ_MAXPRIO)
Issue reported and patch submitted by Acts1631
OK renaud@, OK henning@
update to caddy-2.11.8
"This patch release is a big batch of bug fixes and security hardening,
plus a handful of small additions. This release is cut from our 2.11
maintenance branch: fixes are backported from master. We recommend
upgrading, especially if you serve PHP or use {host} in file paths."
https://github.com/caddyserver/caddy/releases/tag/v2.11.8
unveil: Limit count of visited covers to ps_uvvcount, this avoids an
infinite loop with a particular construction of unveils.
from Acts1631
from dgl@
this is errata/8.0/009_unveil.patch.sig