lang/gcc16: Fix build on arm64
GCC upstream has removed conditional definitions for some constants,
defining them directly with the same values used on Linux. However,
FreeBSD values for the same constants are different. Then revert
upstream commit.
Co-authored-by: Mark Millard <marklmi26-fbsd at yahoo.com>
PR: 294062
Reported by: Luke Yasuda <jing at jing.rocks>
(cherry picked from commit 13e3a42d6eebb30b822e95a16ba09ce14bcb557d)
pool(9): Nix useless PR_GROWINGNOWAIT bit.
This was introduced back in 2017 as an attempt to avoid spurious
failure in concurrent PR_NOWAIT allocations, while still serializing
calls to the pool's back end allocator to avoid fragmentation:
https://mail-index.NetBSD.org/source-changes/2017/12/16/msg090490.html
However, this probably doesn't work very well when one pool_get call
in the middle of pool_grow is _interrupted by_ another one (in an
interrupt handler) -- the busy wait will turn into a deadlock:
https://mail-index.NetBSD.org/current-users/2017/12/29/msg033000.html
So the logic was changed to keep holding the lock across the backing
allocator in PR_NOWAIT allocations -- this way, calls to the pool's
back end allocator are still serialized, but we at least avoid
holding the lock _while sleeping_ in the back end allocator:
[9 lines not shown]
security/dogtag-pki: Fix incomplete javac classpath
base/tomcat-9.0 compiles against pki-common, whose classes carry
@JsonInclude, but does not list jackson-annotations, so javac cannot
resolve the annotation. Every other subproject already lists the jar.
Sponsored by: Netzkommune GmbH
security/dogtag-pki: Fix incomplete javac classpath
base/tomcat-9.0 compiles against pki-common, whose classes carry
@JsonInclude, but does not list jackson-annotations, so javac cannot
resolve the annotation. Every other subproject already lists the jar.
Sponsored by: Netzkommune GmbH
devel/jackson-databind: Update to 2.22.2
Closes twelve vulnerabilities: @JsonView and @JsonIgnore could be
by-passed in several ways, polymorphic type validation was incomplete,
and deserialization reached out to DNS and arbitrary URL schemes.
Security: 0cb401f9-9f19-11f1-a655-3497f65b111b
Changes: https://github.com/FasterXML/jackson-databind/blob/2.x/release-notes/VERSION-2.x
Sponsored by: Netzkommune GmbH
devel/jackson-databind: Update to 2.22.2
Closes twelve vulnerabilities: @JsonView and @JsonIgnore could be
by-passed in several ways, polymorphic type validation was incomplete,
and deserialization reached out to DNS and arbitrary URL schemes.
Security: 0cb401f9-9f19-11f1-a655-3497f65b111b
Changes: https://github.com/FasterXML/jackson-databind/blob/2.x/release-notes/VERSION-2.x
Sponsored by: Netzkommune GmbH
security/vuxml: Document jackson vulnerabilities
jackson-databind before 2.22.2 by-passes @JsonView and @JsonIgnore in
several ways and validates polymorphic types incompletely, jackson-core
before 2.22.2 can be driven past StreamReadConstraints.
Security: 0cb401f9-9f19-11f1-a655-3497f65b111b
Security: 0cb42b4a-9f19-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH
