Don't forget to advance within the segment in _bus_dmamap_load_raw.
This went unnoticed, because the function is rarely used. While it is
wired in PowerPC DMA routines, no PowerPC specific drivers actually
use it. It only appears in a few MI drivers.
With small _dm_segcnt, load just failed with EFBIG, with large value
all segments pointed to the same page, which resulted in corrupting
the transfer.
Pull up following revision(s) (requested by rin in ticket #408):
crypto/external/bsd/openssh/dist/sshd-session.c: revision 1.14
sshd-session: For libwrap, only check "sshd"
Previously, both "sshd" and "sshd-session" were checked, which
does not work for some hosts.allow configurations, as described
in PR bin/60512.
Instead, only check "sshd" again as done before sshd-session was
introduced; "sshd-session" is an internal implementation detail,
and we should just use "sshd" consistently.
OK christos
Pull up following revision(s) (requested by riastradh in ticket #407):
distrib/sets/lists/comp/mi: revision 1.2528
distrib/sets/lists/comp/mi: revision 1.2529
crypto/external/apache2/openssl/lib/libcrypto/Makefile: revision 1.4
openssl: Install byteorder.h, hpke.h, and ml_kem.h.
Sort INCS and format it to make detecting changes a little easier by
diff from:
ls ../../dist/include/openssl | sed -E -e 's,(\.in)?$, \\,'
Nix separate sections for IDEA/MDC2/RC5; the patents on these have
long since expired so it's not worth mentioning them separately.
(The algorithms are also all obsolete, but if OpenSSL ships the
header files, we should do so too.)
PR lib/60511: openssl set lists differences to pkgsrc
add openssl hpke.h header to set list
[2 lines not shown]
Pull up following revision(s) (requested by riastradh in ticket #399):
sys/netinet/tcp_syncache.c: revision 1.8
tcp syncache: Don't leak kernel stack data through timestamps.
kern/60486: tcp syncache leaks 4-byte kernel stack content
sshd-session: For libwrap, only check "sshd"
Previously, both "sshd" and "sshd-session" were checked, which
does not work for some hosts.allow configurations, as described
in PR bin/60512.
Instead, only check "sshd" again as done before sshd-session was
introduced; "sshd-session" is an internal implementation detail,
and we should just use "sshd" consistently.
OK christos
openssl: Install byteorder.h, hpke.h, and ml_kem.h.
Sort INCS and format it to make detecting changes a little easier by
diff from:
ls ../../dist/include/openssl | sed -E -e 's,(\.in)?$, \\,'
Nix separate sections for IDEA/MDC2/RC5; the patents on these have
long since expired so it's not worth mentioning them separately.
(The algorithms are also all obsolete, but if OpenSSL ships the
header files, we should do so too.)
PR lib/60511: openssl set lists differences to pkgsrc
Bracket I/O from or to the backing store with fstrans_start_lazy()
so the fss device doesn't block before the file system is suspended.
Should fix some deadlocks with revokation of ttys.
PR kern/59663 (ffs_snapshot_read -> uvm_fault (or pool page empty)
Don't use pmap_update in pmap_{page_protect,clear_attribute} as the
PMAP_DEFERRED_ACTIVATE logic doesn't apply. Instead create a new
pmap_shootdown which performs the necessary shootdowns for
PMAP_TLB_NEED_SHOOTDOWN architectures.
Pull up the following revisions(s) (requested by riastradh in ticket #2041):
sys/netinet/tcp_input.c: patch
tcp: Plug a 4-byte leak of kernel stack data through timestamps.
Addresses PR kern/60486
Pull up the following revisions(s) (requested by joe in ticket #1315):
sys/dev/raidframe/rf_disks.c: revision 1.96-1.97
Use the right assertions to ensure that all IOs are suspended.
zero indicates that IOs resume.
PR kern/60477
Pull up the following revisions(s) (requested by riastradh in ticket #1319):
sys/netinet/tcp_syncache.c: revision 1.8
tcp: Plug a 4-byte leak of kernel stack data through timestamps.
Addresses PR kern/60486
Pull up the following revisions(s) (requested by riastradh in ticket #1318):
sys/dist/pf/net/pf.c: revision 1.88
pf: Fix use-after-free in fragment reassembly.
PR kern/60485: pf(4): uaf in fragment reassembly
Pull up the following revisions(s) (requested by riastradh in ticket #1317):
sys/external/bsd/ipf/netinet/fil.c: revision 1.38
tests/ipf/t_filter_exec.sh: revision 1.9
tests/ipf/expected/ipv6.3: revision 1.2
tests/ipf/input/ipv6.3: revision 1.3
tests/ipf/t_filter_exec.sh: revision 1.10
ipfilter: Fix remotely triggerable null pointer dereference and
add an automatic test for it.
PR kern/60484: ipfilter: null pointer deref in icmp6 parsing
