BSD Commit Log Search

   distfile has been rerolled, update distinfo

   No longer prefix an underscore to symbol names put in kvm_mkdb's database.

   Do not allow TIOCSCTTY, TIOCNOTTY, or TIOCSPGRP on the pty master.  Return
   ENOTTY for all 3 of these.  They could create incoherent session states,
   leading to dangerous UAF reported by openai (unfortunately their proposed
   patch was batshit crazy and made the situation worse, due to not identifying
   this as root cause, and writing code to support the condition).  with claudio
   various versions ok kettenis kirill and others

   Update qt6-qtwebengine to 6.11.3

   Update opensddm to 0.21.2

   - Add bsd_auth support to benefit from LOGIN_SETWSCONSGROUP.

   nvgre should check IFF_RUNNING in SIOCSLIFPHYRTABLE.

   this makes it consistent with the other tunnel ioctl paths.

   get rid of the ifmedia bits in the ethernet tunnels.

   the ifmedia ioctls werent wired up on these interfaces, so all this
   was doing was wasting space in the softcs. so no functional change.

   call etherbridge_up and _down in nvgre_up and _down.

   etherbridge_up is needed to start aging entries in the etherbridge code.

   reported by tom smyth
   "looks good" jmatthew@

   Update to JRuby 10.1.3.0

   Correctly return EINVAL for invalid input in harmony_get_port().

   Update to cooklang-chef 0.11.0.

   No need to provide an empty gl_clear_latched_intr callback in the
   ncr53c9x_glue struct, for it is optional.

   Remove unusod ioasic_submatch().

   Make multiple statements work within an if() condition by adding the
   implied, but not written, {} braces.

   Remove a bunch of *intr_disestablish() functions which are never used.

   Remove unused regdump().

   Remove redundant bootdev_debug declarations.

   Move a bunch of global variables to the softc. NFCI

   Oops. Missed one MAXPARTITIONS -> maxparts in checklabel().

   Update to poppler-26.11.0.

   No breakage.

   vmd(8): Actually check alignment

   The alignment check tested offset and xfer_sz with &&, so it only
   rejected a request when both were misaligned.  offset is now always a
   multiple of VIRTIO_BLK_SECTOR_SIZE, so that half is dead code; check
   xfer_sz alone and fail when it is not a multiple of the sector size.
   Also report the correct direction in the warning.

   ok dv@

   vmd(8): Reject vioblk requests beyond the disk capacity

   vioblk_io() converted the guest-controlled sector to a byte offset and
   passed it to the backend without comparing it against the disk capacity.
   With a raw image on a regular file, pwritev() extends the file, so a
   privileged guest could write past the configured size and exhaust the
   host filesystem.

   Pass the sector number to vioblk_io() as an unsigned value and defer the
   conversion to a byte offset until after the bounds check.  Once the full
   transfer length is known, reject a start beyond capacity or a transfer
   that crosses the end, then convert to off_t.  The check is done in
   unsigned arithmetic; the subtraction order avoids underflow and it never
   multiplies the attacker-controlled sector.

   From Acts1631, thanks!

   ok dv@

   Build libtommath as a shared library and adapt consumers

   ok pascal@ (moarvm/nqp/rakudo maintainer)

   typo; from mlarkin

   update to routinator-0.16.1

   www/pipe-viewer: Update to 0.5.9

   This is strictly an improvement, and MAINTAINER has not been responsive to
   updates of this port recently.

   Convert checkdisklabel() into a wrapper around a call to the
   new checklabel() with a partition limit of MAXPARTITIONS16.

   No functional change.

   Prodded by deraadt@

   graphics/lcms2: Update to 2.20

   with tweaks sthen@, tweaks & ok tb@

   Add MI 52-Partition disklabel functions into tree.

   None are currently invoked, so no functional change.

   Prodded by deraadt@

   Set variable _permit_setugid to test setuid and setgid binaries.
   Cleanup regress Makefile a bit.