Pull up the following revisions(s) (requested by riastradh in ticket #2041):
sys/netinet/tcp_input.c: patch
tcp: Plug a 4-byte leak of kernel stack data through timestamps.
Addresses PR kern/60486
Pull up the following revisions(s) (requested by joe in ticket #1315):
sys/dev/raidframe/rf_disks.c: revision 1.96-1.97
Use the right assertions to ensure that all IOs are suspended.
zero indicates that IOs resume.
PR kern/60477
Pull up the following revisions(s) (requested by riastradh in ticket #1319):
sys/netinet/tcp_syncache.c: revision 1.8
tcp: Plug a 4-byte leak of kernel stack data through timestamps.
Addresses PR kern/60486
Pull up the following revisions(s) (requested by riastradh in ticket #1318):
sys/dist/pf/net/pf.c: revision 1.88
pf: Fix use-after-free in fragment reassembly.
PR kern/60485: pf(4): uaf in fragment reassembly
Pull up the following revisions(s) (requested by riastradh in ticket #1317):
sys/external/bsd/ipf/netinet/fil.c: revision 1.38
tests/ipf/t_filter_exec.sh: revision 1.9
tests/ipf/expected/ipv6.3: revision 1.2
tests/ipf/input/ipv6.3: revision 1.3
tests/ipf/t_filter_exec.sh: revision 1.10
ipfilter: Fix remotely triggerable null pointer dereference and
add an automatic test for it.
PR kern/60484: ipfilter: null pointer deref in icmp6 parsing
Pull up the following revisions(s) (requested by riastradh in ticket #2040):
sys/dist/pf/net/pf.c: revision 1.88
pf: Fix use-after-free in fragment reassembly.
PR kern/60485: pf(4): uaf in fragment reassembly
Pull up the following revisions(s) (requested by riastradh in ticket #2039):
sys/external/bsd/ipf/netinet/fil.c: revision 1.38
tests/ipf/t_filter_exec.sh: revision 1.9
tests/ipf/expected/ipv6.3: revision 1.2
tests/ipf/input/ipv6.3: revision 1.3
tests/ipf/t_filter_exec.sh: revision 1.10
ipfilter: Fix remotely triggerable null pointer dereference and
add an automatic test for it.
PR kern/60484: ipfilter: null pointer deref in icmp6 parsing
Pull up the following revisions(s) (requested by riastradh in ticket #2038):
sys/dev/hdaudio/hdaudio.c: revision 1.19
hdaudio(4): Apply access checks to ioctl commands so that
unprivileged users without write permission on /dev/hdaudioN can't
change the configuration.
PR kern/60492: hdaudio(4): setconfig is allowed unprivileged
Pull up the following revisions(s) (requested by riastradh in ticket #1316):
sys/dev/hdaudio/hdaudio.c: revision 1.19
hdaudio(4): Apply access checks to ioctl commands so that
unprivileged users without write permission on /dev/hdaudioN can't
change the configuration.
PR kern/60492: hdaudio(4): setconfig is allowed unprivileged
sppp: Add BPF-based packet filtering for dial-on-demand and idle-timeout
Introduce active/dialing filtering using BPF to if_spppsubr.c. This allows
sync PPP interfaces (e.g. pppoe(4)) to control which traffic triggers
dial-on-demand or keeps idle connections alive.
This option is similar to PPP_FILTER.
sppp: use RUN_ONCE(9) to initialize keepalive related resources
to prevent panics during concurrent attach/detach
- Initialize keepalive resources (e.g. spppq_lock and keepalive_ch)
once using RUN_ONCE(9) instead of the first attach.
- Do not free these resources on sppp_detach
NOTE:
We should release these resources in sppp_subr_modcmd(), but module
unloading/cleanup is not implemented yet.