openssl: Install byteorder.h, hpke.h, and ml_kem.h.
Sort INCS and format it to make detecting changes a little easier by
diff from:
ls ../../dist/include/openssl | sed -E -e 's,(\.in)?$, \\,'
Nix separate sections for IDEA/MDC2/RC5; the patents on these have
long since expired so it's not worth mentioning them separately.
(The algorithms are also all obsolete, but if OpenSSL ships the
header files, we should do so too.)
PR lib/60511: openssl set lists differences to pkgsrc
Bracket I/O from or to the backing store with fstrans_start_lazy()
so the fss device doesn't block before the file system is suspended.
Should fix some deadlocks with revokation of ttys.
PR kern/59663 (ffs_snapshot_read -> uvm_fault (or pool page empty)
Don't use pmap_update in pmap_{page_protect,clear_attribute} as the
PMAP_DEFERRED_ACTIVATE logic doesn't apply. Instead create a new
pmap_shootdown which performs the necessary shootdowns for
PMAP_TLB_NEED_SHOOTDOWN architectures.
Pull up the following revisions(s) (requested by riastradh in ticket #2041):
sys/netinet/tcp_input.c: patch
tcp: Plug a 4-byte leak of kernel stack data through timestamps.
Addresses PR kern/60486
Pull up the following revisions(s) (requested by joe in ticket #1315):
sys/dev/raidframe/rf_disks.c: revision 1.96-1.97
Use the right assertions to ensure that all IOs are suspended.
zero indicates that IOs resume.
PR kern/60477
Pull up the following revisions(s) (requested by riastradh in ticket #1319):
sys/netinet/tcp_syncache.c: revision 1.8
tcp: Plug a 4-byte leak of kernel stack data through timestamps.
Addresses PR kern/60486
Pull up the following revisions(s) (requested by riastradh in ticket #1318):
sys/dist/pf/net/pf.c: revision 1.88
pf: Fix use-after-free in fragment reassembly.
PR kern/60485: pf(4): uaf in fragment reassembly
Pull up the following revisions(s) (requested by riastradh in ticket #1317):
sys/external/bsd/ipf/netinet/fil.c: revision 1.38
tests/ipf/t_filter_exec.sh: revision 1.9
tests/ipf/expected/ipv6.3: revision 1.2
tests/ipf/input/ipv6.3: revision 1.3
tests/ipf/t_filter_exec.sh: revision 1.10
ipfilter: Fix remotely triggerable null pointer dereference and
add an automatic test for it.
PR kern/60484: ipfilter: null pointer deref in icmp6 parsing
Pull up the following revisions(s) (requested by riastradh in ticket #2040):
sys/dist/pf/net/pf.c: revision 1.88
pf: Fix use-after-free in fragment reassembly.
PR kern/60485: pf(4): uaf in fragment reassembly
Pull up the following revisions(s) (requested by riastradh in ticket #2039):
sys/external/bsd/ipf/netinet/fil.c: revision 1.38
tests/ipf/t_filter_exec.sh: revision 1.9
tests/ipf/expected/ipv6.3: revision 1.2
tests/ipf/input/ipv6.3: revision 1.3
tests/ipf/t_filter_exec.sh: revision 1.10
ipfilter: Fix remotely triggerable null pointer dereference and
add an automatic test for it.
PR kern/60484: ipfilter: null pointer deref in icmp6 parsing
Pull up the following revisions(s) (requested by riastradh in ticket #2038):
sys/dev/hdaudio/hdaudio.c: revision 1.19
hdaudio(4): Apply access checks to ioctl commands so that
unprivileged users without write permission on /dev/hdaudioN can't
change the configuration.
PR kern/60492: hdaudio(4): setconfig is allowed unprivileged
Pull up the following revisions(s) (requested by riastradh in ticket #1316):
sys/dev/hdaudio/hdaudio.c: revision 1.19
hdaudio(4): Apply access checks to ioctl commands so that
unprivileged users without write permission on /dev/hdaudioN can't
change the configuration.
PR kern/60492: hdaudio(4): setconfig is allowed unprivileged