devel/goreleaser: update to 2.20.0
This update fixes a security issue where in some configurations,
key material could be leaked into dist/artifacts.json.
Only 2.19.0 is affected; quarterly users need not update.
Changelog: https://github.com/goreleaser/goreleaser/releases/tag/v2.20.0
Security: GHSA-9422-8p9m-393x
don't leak an interface reference in an error path in rport_set_parent().
if_unit takes an interface reference, but the ifp0 == ifp check
didn't release it. if you tried to add an rport as it's own parent
then you'd leak a ref and get stuck if you tried to destroy it in
the future.
found and fixed by tom smyth
Do not schedule sc_brtimeout timeout(9) while IFF_RUNNING flag is not
set on brigge interface. bridge_stop() does not disable timeout if
IFF_RUNNING flag is missing. Both bridgectl_ioctl() and bridge_rtage()
are kernel locked and bridge_rtage() has no sleep points, so
timeout_del() is enough in bridgectl_ioctl().
Reported by Tom Smyth. OK deraadt bluhm.
Move `sc_ifa' initialization after ether_ifattach() did if_sadl
allocation. Otherwise ifp->if_sadl is NULL and sdltosa(ifp->if_sadl)
causes NULL dereference.
Reported by Tom Smyth. OK claudio.
comp: remove binutils=234 support; mark files unconditionally obsolete
They were only marked as obsolete for 239, and we're at 242 now,
and they're still obsolete.
mac syscalls: add kern_ implementations
Where the kern_ interfaces map trivially to the syscall interface, follow
the syscall name even if awkward (e.g., sys___mac* -> kern___mac*).
Otherwise use shorter names.
Effort: CHERI upstreaming
Sponsored by: DARPA, AFRL
Pull Request: https://github.com/freebsd/freebsd-src/pull/2284
[clang-repl] Restore the lookup of out-of-line definitions' predecessors (#229780)
Undoing the out-of-line definition of a member removes it from the
lookup table of its semantic context, its class or namespace, and then
makes its surviving previous declaration visible again. But the previous
declaration was made visible in the lookup table of the lexical context,
the enclosing context of the definition. The member was then not found
in its class or namespace anymore, but in the enclosing context instead:
struct K { static int s; };
int K::s = 4;
%undo
int K::s = 5; // error: no member named 's' in 'K'
Make the previous declaration visible in its own semantic context.
Assisted-by: Claude Opus 5.5
net/sendme: patch for rust libc issue on netbsd/aarch64
NetBSD/aarch64 (AAPCS64) defines __ALIGNBYTES as sizeof(__int128_t) - 1
(sys/arch/arm/include/cdefs.h). With 3, CMSG_NXTHDR() lands in padding,
reads cmsg_len 0 and noq-udp spins forever on the first received datagram.
