BSD Commit Log Search

   Reject receive transfers whose descriptor frame length exceeds the data
   actually transferred.  The descriptor carries a 12-bit frame length and
   the chip accepts frames up to 4095 bytes, but a receive transfer only has
   MCLBYTES minus the descriptor for frame data.

   Trusting the descriptor produced an mbuf extending past its cluster.
   A fragmented IPv4 datagram then carried it into m_cat(), where a default
   kernel panics on a DIAGNOSTIC assertion.

   Report and diff from Acts1631.

   ok miod@ claudio@ kettenis@

   sys/macppc: increase MAXDSIZ to 3Gb

   OK: kettenis@

   Remove support for "fpu disabled" traps in the kernel. This used to be needed
   to allow VIS instructions to be used in the kernel, but the last use of them
   was removed in 2003.

   ok claudio@

   fix comment in uhid_xb360gp_report_descr, erroneously stating REPORT SIZE when it is REPORT COUNT. from Lucas de Sena ( lucas () seninha ! org ). No functional change.

   uhidev_intr: reject payloads that exceed their declared input report
   sizes. Lower priority bug where a malicious/compromised USB device can
   overwrite memory.

   Report and diff from Acts1631. ok deraadt@

   Fix destination address in virtual alias check.

   OK miod@

   Sometimes a specific address family will be broken or have sub-optimal
   connectivity, and require manual overrides.

   Allow -4 and -6 to specify using IPv4 or IPv6.  Defaults don't change and
   use whatever your system is configured to use first.

   OK sthen@ kn@

   Pass the repoid to entity_new and simply use repo_id(rp) to get that
   now that repo_id handles NULL pointers.

   OK tb@

   In repo_id() if rp is NULL return 0 as id which is not a valid repo id itself.

   OK tb@

   Improve error message when RB_FIND fails because the MFT hash was not yet
   added to the tree.

   OK tb@

   rpki-client: reject URIs with // except at the start of the authority

   This way each CA repo can only be addressed by a single URI, fixing a
   bypass of the recently introduced counters.

   Reported by Ties de Kock

   discussed with job
   ok claudio

   Kill an errx check in main.

   uri can never be NULL and move the file size check to rrdp_handle_file.

   Problem reported by Ties de Kock
   OK tb@

   In publish_done() check for MIN_FILE_SIZE after base64 decoding the input.

   The base64 decoding function ignore any space character and so the
   final length of the decoded blob can be smaller then expected if the
   input string contains many spaces. Doing the check after is safe since
   the base64 decode works even with an empty input.

   On top of this fix a memory leak of the pctx in all error paths.

   OK tb@

   fix interactive_loop() indentation; ok deraadt@

   carpGroupDemote must be in range 0..255

   OK sthen@

   Activate linker relaxation on riscv64

   Now that ld.lld and the rest of the ecosystem (eg lang/go) copes with
   it, enable linker relaxation in clang. This lets ld.lld rewrite branches
   to produce smaller and faster code.

   Reminded by Brad, ok kettenis@

   rge now needs "firmload"

   EC_POINT_point2oct.3: reword point compression

   There was a double use of 'use'. Also be a bit more explicit about the
   trade off involved.

   Use ssh -Q addressfamily to determine if IPv6 is supported.

   Add ssh -Q addressfamily.  ok djm@

   sync

   Remove unused local variable in lpt_gsc_probe().

   Fix NULL dereferences in sppp authentication.

   From acts1631
   ok mvs bket

   Remove unused alpha_shadow_zero variable.

   Remove unused alpha_pal_cflush() and alpha_pal_wrvptptr().

   relayd: macros are only expanded for append and set

   ok kirill@

   relayd: add "glob" and "glob ignorecase" matching keywords

   In addition to the recent "pattern", the cookie, header, path, query and url
   keys and values now accept "glob" and "glob ignorecase". The keywords can also
   be given before "file" and then apply to every key read from it.

   Without a keyword the old type defaults stay as they were. Header names are
   case-insensitive (RFC 9110), so "glob" on a header name is treated as "glob
   ignorecase". The "pattern" stays case-sensitive. The defaults are now clearly
   documented.

   The parser is stricter now!  The following are errors now:
   - a matching keyword together with "set" or "append"
   - a matching keyword without a key or file, except with "log"
   - "file" without a preceding lookup type
   - a duplicate lookup type in the same rule

   Valid configs keep working, configs that were silently misinterpreted before
   are now rejected.

    [3 lines not shown]

   Remove amountpipekva variable and related computations. This variable used
   to matter until rev 1.19 27 years ago, when the "direct write" code was
   removed.

   Do not compile cache stat counters if SMALL_KERNEL.

   rpki-client: drop some redundant parentheses in return statements

   Almost all of the code omits them, so be consistent. The remaining
   two are special: to_encode() is rather complicated and CBS_strdup()
   is upstream code.

   ok job