[clang][docs] Add basic user documentation for Hardware-assisted AddressSanitizer (HWASan) (#220075)
Create a basic user-facing guide for Hardware-assisted AddressSanitizer
(HWASan / `-fsanitize=hwaddress`) covering:
- Overview of HWASan and detectable bug types
- Supported platforms
- Basic usage example and crash report
- Passing runtime options via `HWASAN_OPTIONS`
- Disabling instrumentation via attribute and feature check
- Link to `HardwareAssistedAddressSanitizerDesign` for details
Co-authored-by: Gemini <noreply at google.com>
---------
Co-authored-by: Vitaly Buka <vitalybuka at google.com>
Co-authored-by: Gemini <noreply at google.com>
iflib: Do not hold the ifnet lock across registration
iflib_device_register() acquired IFNET_WLOCK to preserve lock order
when ether_ifattach() was called with the context lock held. The context
lock is now released around ether_ifattach(), making registration-wide
ifnet serialization unnecessary.
Keeping IFNET_WLOCK across driver attachment also allows synchronous
interface event handlers to recurse on it. The rtnetlink interface-group
dump does so through if_foreach_group() while handling the interface
attachment event.
Remove the outer lock and the corresponding failure-path unlock and
relock transitions. Continue to drop the context lock around
ether_ifattach() and taskqueue drains, and preserve context-lock coverage
for driver attach and detach.
Validated under WITNESS on 82576 and I226 controllers. Multiple VF
attach and detach cycles, netmap control operations, and every iflib
[12 lines not shown]
[libFuzzer] Make -stop_file work with empty files (#220641)
Fixes: https://github.com/llvm/llvm-project/issues/72334. The -stop_file
flag is documented as "Stop fuzzing ASAP if this file exists", but the
fuzzing loop checked it by reading the file and testing that the result
is non-empty. Instead, check for the file's existence with IsFile.
NAS-142996 / 27.0.0-BETA.1 / Handle JSON serialization errors (#19581)
`AlertClass()` in `oneshot_create` crashes `core.get_jobs`
serialization.
As we're not interested in inspecting such objects, and these rare
conditions mostly happen in integration tests, let's just list their
classes in `REPR_ALLOWLIST`. api_client PR
https://github.com/truenas/api_client/pull/99
Additionally, I moved `dataclasses` serialization to `ejson`, so
`serialize_nonmodel_result` is not necessary anymore.
syslogd: Pipes need the CAP_PDGETPID right as well
While here, use caph_rights_limit(), as syslogd already uses
caph_enter().
PR: 298104
Reported by: mi
Fixes: 24816abb8740 ("syslogd: Limit rights on procdescs")
MFC after: 3 days
syslogd/tests: Amend a test to catch leaked process descriptors
This serves to catch the regression fixed by commit
1a669b66ddb4 ("syslogd: reap pipe children on config reload").
MFC after: 1 week
net/bsdrcmds: Use blocklist
Starting from FreeBSD version 1500000, prefer the new blocklist
nomenclature.
Once older versions are no longer supported, we should use blocklist
exclusively.
PR: 295081
[Clang][Cygwin] Make -fno-use-init-array default in the driver (#220530)
Cygwin uses the .ctors section for constructors.
We already do the same for the MinGW target (#68571), so align with
that.
Require NRIP Save support for vmm(4) on AMD hosts.
This feature gives a fast, reliable path to accurately advancing
RIP when emulating certain instructions. Most AMD hardware from the
past 15 years should have NRIP Save and nested paging support so
this drops support for AMD hardware from roughly family 11h and
older with some rare exceptions.
Discussed multiple times in the past.
ok mlarkin@
curl: update to 8.22.0.
This release includes the following changes:
o gssapi: add support for Apple GSS Framework [72]
o hardening: add API guards [64]
o RFC 9421 HTTP Message Signatures support [108]
o spnego: block NTLM fallback in SPNEGO negotiation [151]
o TLS: drop support for TLS-SRP [71]
o vquic: add option to use Apple fast UDP [137]
This release includes the following bugfixes:
o altsvc: continue after unknown parameters [198]
o asyn-thrdd: retry link-local ipv6 if missing scope id [118]
o autotools: minor fixes and improvements [33]
o build: always use local `inet_pton()`/`inet_ntop()` implementations [56]
o build: assume POSIX `select()` is available [166]
o build: clear `Require.private` for static-only builds in `libcurl.pc` [188]
[296 lines not shown]
[flang][OpenACC] Release declare-create allocatable on deallocate (#220541)
Example:
```fortran
module m
real(8), allocatable, save :: a(:)
!$acc declare create(a)
end module
program p
use m
do i = 1, 3
allocate(a(n))
!$acc update device(a)
deallocate(a) ! device buffer is never released: 8*n
end do ! bytes leak on every iteration
end program
```
[72 lines not shown]
