BSD Commit Log Search

   Correctly return EINVAL for invalid input in harmony_get_port().

   Update to cooklang-chef 0.11.0.

   No need to provide an empty gl_clear_latched_intr callback in the
   ncr53c9x_glue struct, for it is optional.

   Remove unusod ioasic_submatch().

   Make multiple statements work within an if() condition by adding the
   implied, but not written, {} braces.

   Remove a bunch of *intr_disestablish() functions which are never used.

   Remove unused regdump().

   Remove redundant bootdev_debug declarations.

   Move a bunch of global variables to the softc. NFCI

   Oops. Missed one MAXPARTITIONS -> maxparts in checklabel().

   Update to poppler-26.11.0.

   No breakage.

   vmd(8): Actually check alignment

   The alignment check tested offset and xfer_sz with &&, so it only
   rejected a request when both were misaligned.  offset is now always a
   multiple of VIRTIO_BLK_SECTOR_SIZE, so that half is dead code; check
   xfer_sz alone and fail when it is not a multiple of the sector size.
   Also report the correct direction in the warning.

   ok dv@

   vmd(8): Reject vioblk requests beyond the disk capacity

   vioblk_io() converted the guest-controlled sector to a byte offset and
   passed it to the backend without comparing it against the disk capacity.
   With a raw image on a regular file, pwritev() extends the file, so a
   privileged guest could write past the configured size and exhaust the
   host filesystem.

   Pass the sector number to vioblk_io() as an unsigned value and defer the
   conversion to a byte offset until after the bounds check.  Once the full
   transfer length is known, reject a start beyond capacity or a transfer
   that crosses the end, then convert to off_t.  The check is done in
   unsigned arithmetic; the subtraction order avoids underflow and it never
   multiplies the attacker-controlled sector.

   From Acts1631, thanks!

   ok dv@

   Build libtommath as a shared library and adapt consumers

   ok pascal@ (moarvm/nqp/rakudo maintainer)

   typo; from mlarkin

   update to routinator-0.16.1

   www/pipe-viewer: Update to 0.5.9

   This is strictly an improvement, and MAINTAINER has not been responsive to
   updates of this port recently.

   Convert checkdisklabel() into a wrapper around a call to the
   new checklabel() with a partition limit of MAXPARTITIONS16.

   No functional change.

   Prodded by deraadt@

   graphics/lcms2: Update to 2.20

   with tweaks sthen@, tweaks & ok tb@

   Add MI 52-Partition disklabel functions into tree.

   None are currently invoked, so no functional change.

   Prodded by deraadt@

   Set variable _permit_setugid to test setuid and setgid binaries.
   Cleanup regress Makefile a bit.

   update net/socat to 1.8.1.3 and add me as maintainer

   ok sthen, nigel

   Initialize client tty colors before control mode clients attach, GitHub
   issue 5843 from Joseph Kotzker.

   Add -i to choose-tree and fix choose-client description in tmux.1,
   GitHub issue 5834 from Wei-Lun Li.

   Fix build with SMALL_KERNEL

   Send focus out to the pane when its client's terminal goes away, GitHub
   issue 5832 from Phil Kulak.

   security update to roundcubemail-1.7.6
   https://github.com/roundcube/roundcubemail/releases/tag/1.7.6

   security update to roundcubemail-1.7.6
   https://github.com/roundcube/roundcubemail/releases/tag/1.7.6

   iked(8): Implement IKEv1 prototype

   This change brings the IKEv1 protocol stack to iked -- by running
   isakmpd(8) as unprivileged IKEv1 subprocess.

   This is experimental and still limited:

   - The main and quick mode suites are fixed to aes128cbc, hmac2-256,
     modp3072 and ESP aes128cbc, hmac2-256 and PFS modp3072
   - Only PSK authentication for now.

   Nonetheless, tunnels are established and work .  And iked(8) is
   able to interop with both isakmpd(8) and iked(8) IKEv1.

   If this works out good enough, isakmpd(8) will be retired.  One
   day.

   ok deraadt@

   Bump buffer length so User1000 fits, GitHub issue 5838.