NetBSD/src n1xqzJBdoc CHANGES-10.2

   Ticket 1319
VersionDeltaFile
1.1.2.120+7-1doc/CHANGES-10.2
+7-11 files

NetBSD/src ejh6nhTsys/netinet tcp_syncache.c

   Pull up the following revisions(s) (requested by riastradh in ticket #1319):
        sys/netinet/tcp_syncache.c:     revision 1.8

   tcp: Plug a 4-byte leak of kernel stack data through timestamps.
   Addresses PR kern/60486
VersionDeltaFile
1.6.2.1+9-2sys/netinet/tcp_syncache.c
+9-21 files

NetBSD/src nNzYeyEdoc CHANGES-10.2

   Ticket 1318
VersionDeltaFile
1.1.2.119+7-1doc/CHANGES-10.2
+7-11 files

NetBSD/src 48Mio02sys/dist/pf/net pf.c

   Pull up the following revisions(s) (requested by riastradh in ticket #1318):
        sys/dist/pf/net/pf.c:   revision 1.88

   pf: Fix use-after-free in fragment reassembly.
   PR kern/60485: pf(4): uaf in fragment reassembly
VersionDeltaFile
1.87.2.1+20-2sys/dist/pf/net/pf.c
+20-21 files

NetBSD/src NeykhFrdoc CHANGES-10.2

   Ticket 1317
VersionDeltaFile
1.1.2.118+12-1doc/CHANGES-10.2
+12-11 files

NetBSD/src 8KgeS0esys/external/bsd/ipf/netinet fil.c, tests/ipf/expected ipv6.3

   Pull up the following revisions(s) (requested by riastradh in ticket #1317):
        sys/external/bsd/ipf/netinet/fil.c:     revision 1.38
        tests/ipf/t_filter_exec.sh:     revision 1.9
        tests/ipf/expected/ipv6.3:      revision 1.2
        tests/ipf/input/ipv6.3: revision 1.3
        tests/ipf/t_filter_exec.sh:     revision 1.10

   ipfilter: Fix remotely triggerable null pointer dereference and
   add an automatic test for it.
   PR kern/60484: ipfilter: null pointer deref in icmp6 parsing
VersionDeltaFile
1.2.42.1+15-0tests/ipf/input/ipv6.3
1.35.4.1+4-3sys/external/bsd/ipf/netinet/fil.c
1.1.58.1+1-0tests/ipf/expected/ipv6.3
+20-33 files

NetBSD/src DMe0Nscdoc CHANGES-9.5

   Ticket 2040
VersionDeltaFile
1.1.2.120+8-2doc/CHANGES-9.5
+8-21 files

NetBSD/src kvtZHu8sys/dist/pf/net pf.c

   Pull up the following revisions(s) (requested by riastradh in ticket #2040):
        sys/dist/pf/net/pf.c:   revision 1.88

   pf: Fix use-after-free in fragment reassembly.
   PR kern/60485: pf(4): uaf in fragment reassembly
VersionDeltaFile
1.83.4.1+20-2sys/dist/pf/net/pf.c
+20-21 files

NetBSD/src Nl0KDWIdoc CHANGES-9.5

   Ticket 2039
VersionDeltaFile
1.1.2.119+12-1doc/CHANGES-9.5
+12-11 files

NetBSD/src fQeXjC0sys/external/bsd/ipf/netinet fil.c, tests/ipf/expected ipv6.3

   Pull up the following revisions(s) (requested by riastradh in ticket #2039):
        sys/external/bsd/ipf/netinet/fil.c:     revision 1.38
        tests/ipf/t_filter_exec.sh:     revision 1.9
        tests/ipf/expected/ipv6.3:      revision 1.2
        tests/ipf/input/ipv6.3: revision 1.3
        tests/ipf/t_filter_exec.sh:     revision 1.10

   ipfilter: Fix remotely triggerable null pointer dereference and
   add an automatic test for it.
   PR kern/60484: ipfilter: null pointer deref in icmp6 parsing
VersionDeltaFile
1.2.34.1+15-0tests/ipf/input/ipv6.3
1.29.2.4+4-3sys/external/bsd/ipf/netinet/fil.c
1.1.50.1+1-0tests/ipf/expected/ipv6.3
+20-33 files

NetBSD/src D21rqU5doc CHANGES-9.5

   Ticket 2038
VersionDeltaFile
1.1.2.118+10-1doc/CHANGES-9.5
+10-11 files

NetBSD/src TWZQN9Dsys/dev/hdaudio hdaudio.c

   Pull up the following revisions(s) (requested by riastradh in ticket #2038):
        sys/dev/hdaudio/hdaudio.c:      revision 1.19

   hdaudio(4): Apply access checks to ioctl commands so that
   unprivileged users without write permission on /dev/hdaudioN can't
   change the configuration.
   PR kern/60492: hdaudio(4): setconfig is allowed unprivileged
VersionDeltaFile
1.9.2.3+24-6sys/dev/hdaudio/hdaudio.c
+24-61 files

NetBSD/src 7FcaZNBdoc CHANGES-10.2

   Ticket 1316
VersionDeltaFile
1.1.2.117+9-1doc/CHANGES-10.2
+9-11 files

NetBSD/src aOhbiQzsys/dev/hdaudio hdaudio.c

   Pull up the following revisions(s) (requested by riastradh in ticket #1316):
        sys/dev/hdaudio/hdaudio.c:      revision 1.19

   hdaudio(4): Apply access checks to ioctl commands so that
   unprivileged users without write permission on /dev/hdaudioN can't
   change the configuration.
   PR kern/60492: hdaudio(4): setconfig is allowed unprivileged
VersionDeltaFile
1.18.4.1+24-6sys/dev/hdaudio/hdaudio.c
+24-61 files

NetBSD/src oWuVQ9ntests/net/if_pppoe common.sh t_pppoe_ondemand.sh

   tests/if_pppoe: set 0 to dad_count instead of `ifconfig -w 10`
VersionDeltaFile
1.6+5-10tests/net/if_pppoe/t_pppoe_ondemand.sh
1.4+3-3tests/net/if_pppoe/common.sh
+8-132 files

NetBSD/src 6kngN6Stests/net/if_pppoe t_pppoe_ondemand.sh

   tests/if_pppoe: Use a function to send trigger packet
VersionDeltaFile
1.5+10-14tests/net/if_pppoe/t_pppoe_ondemand.sh
+10-141 files

NetBSD/src 9lU1yQdtests/net/if_pppoe common.sh t_pppoe_ondemand.sh

   Added test for SPPP_FILTER
VersionDeltaFile
1.4+247-1tests/net/if_pppoe/t_pppoe_ondemand.sh
1.3+49-3tests/net/if_pppoe/common.sh
+296-42 files

NetBSD/src DqTMVQcsys/arch/amd64/conf ALL, sys/arch/i386/conf ALL

   sppp: Enable SPPP_FILTER in i386/ALL, amd64/ALL, and rump_server
VersionDeltaFile
1.526+3-2sys/arch/i386/conf/ALL
1.198+3-2sys/arch/amd64/conf/ALL
1.9+3-1sys/rump/include/opt/opt_rumpkernel.h
+9-53 files

NetBSD/src ywvG2cpsbin/pppoectl Makefile pppoectl.c

   pppoectl: Added sub-commands to set dialing and active filters
VersionDeltaFile
1.32+90-2sbin/pppoectl/pppoectl.c
1.7+7-1sbin/pppoectl/Makefile
+97-32 files

NetBSD/src KUqADjRsys/conf files, sys/net if_pppoe.c if_sppp.h

   sppp: Add BPF-based packet filtering for dial-on-demand and idle-timeout

   Introduce active/dialing filtering using BPF to if_spppsubr.c. This allows
   sync PPP interfaces (e.g. pppoe(4)) to control which traffic triggers
   dial-on-demand or keeps idle connections alive.

   This option is similar to PPP_FILTER.
VersionDeltaFile
1.308+197-4sys/net/if_spppsubr.c
1.56+21-1sys/net/if_spppvar.h
1.37+12-1sys/net/if_sppp.h
1.50+6-2sys/rump/librump/rumpnet/net_stub.c
1.189+3-2sys/net/if_pppoe.c
1.1322+2-1sys/conf/files
+241-116 files

NetBSD/src v0AirtHsys/net if_spppsubr.c

   sppp: use RUN_ONCE(9) to initialize keepalive related resources
   to prevent panics during concurrent attach/detach

   - Initialize keepalive resources (e.g. spppq_lock and keepalive_ch)
     once using RUN_ONCE(9) instead of the first attach.
   - Do not free these resources on sppp_detach

   NOTE:
   We should release these resources in sppp_subr_modcmd(), but module
   unloading/cleanup is not implemented yet.
VersionDeltaFile
1.307+20-17sys/net/if_spppsubr.c
+20-171 files

NetBSD/src 7ndT16Rusr.sbin/npf/npfctl npf.conf.5

   Move routing on top of normalize in npf.conf man.

   also use right keyword: routing -> route
VersionDeltaFile
1.109+4-4usr.sbin/npf/npfctl/npf.conf.5
+4-41 files

NetBSD/src 54flQ09share/man/man4 mpt.4

   Note SAS1064 support.  Add a paragraph about Integrated RAID.
   Mention bioctl 8.
VersionDeltaFile
1.8+23-3share/man/man4/mpt.4
+23-31 files

NetBSD/src SxJryG3sys/dev/ic isp_netbsd.h, sys/dev/pci isp_pci.c

   It has been observed in the wild that some individual instances of
   ISP10[24]0 controllers don't seem to like getting a 64-bit DMA address
   from our driver (at least, there seems to be some sort of incorrect
   handling vis a vis the RQSTYPE_A64 message in isp_intr()).

   Upon inspection, it was noted that in isp_pci_dmasetup(), the decision
   to use RQSTYPE_T3RQS vs RQSTYPE_T2RQS was conditional on sizeof(bus_addr_t)
   being larger than sizeof(uint32_t).

   However, this isn't the correct predicate; instead, the choice should
   be dependent on what the largest value that bus_addr_t will have.  As
   it happans, the PCI layer makes a distinction between 32-bit and 64-bit
   DMA windows, and isp_pci's use of the regular "pa->pa_dmat" would ensure
   that the DMA address always fits within 32-bits.  Therefore, there was
   never a reason to use RQSTYPE_T3RQS, regardless of the size of bus_addr_t.

   As such, we tweak the code to depend explicitly on a new isp_use_dma64
   flag, which is initialized by the bus front-end according to the DMA
   window selection that's been made.

    [4 lines not shown]
VersionDeltaFile
1.123+15-4sys/dev/pci/isp_pci.c
1.77+4-2sys/dev/ic/isp_netbsd.h
+19-62 files

NetBSD/src e9s2ixVsys/dev/ic tulip.c

   Support for the 21142/21143 internal NWay block is structured like a
   PHY driver, but it was overlooked when the ifmedia/mii layer gained a
   locking protocol.  Update it to avoid a recursive mutex acquisition
   that can occur if the autonegotiation completes (very) quickly.

   PR kern/60494
VersionDeltaFile
1.215+42-10sys/dev/ic/tulip.c
+42-101 files

NetBSD/src fGqPArQsys/net if_media.h if_media.c

   Expose ifmedia_match_locked().  This is a pre-requisite for fixing
   the media locking error in the "tlp" driver described in...

   PR kern/60494
VersionDeltaFile
1.55+3-5sys/net/if_media.c
1.73+2-1sys/net/if_media.h
+5-62 files

NetBSD/src wbWzhgVsys/arch/mips/ingenic ingenic_var.h apbus.c

   Add JZ4780 SD/MMC driver.

   Tested and expected to work only on CI20 in its current state. Needs
   geralization when the next JZ4780 board appears.
VersionDeltaFile
1.1+885-0sys/arch/mips/ingenic/jzmmc.c
1.29+24-10sys/arch/mips/ingenic/ingenic_regs.h
1.24+20-3sys/arch/mips/ingenic/apbus.c
1.7+8-1sys/arch/mips/ingenic/ingenic_var.h
+937-144 files

NetBSD/src VUJPQv2sys/dev/ic mpt.c

   Replace "soft reset failed" messages with "unable to soft reset" for
   cases where we don't attempt a soft reset.
VersionDeltaFile
1.22+4-4sys/dev/ic/mpt.c
+4-41 files

NetBSD/src ExUlOCksys/dev/ic mpt_netbsd.c

   Always use snprintf for MPI_EVENT_INTEGRATED_RAID output.  Keep better
   track of the amount that we've already printed and increase the max
   length to handle all string combinations (even if they shouldn't happen).
   From a suggestion by kre.
VersionDeltaFile
1.44+27-32sys/dev/ic/mpt_netbsd.c
+27-321 files

NetBSD/src MSb2sQgshare/man/man8/man8.sparc64 boot.8

   sparc64 boot(8): fix grammar
VersionDeltaFile
1.21+2-2share/man/man8/man8.sparc64/boot.8
+2-21 files