update to unifi-10.6.106 (current 10.x versions are allowing config
backup from the non-"Unifi OS" versions; this is not full backup with
statistics, but at least it's something, and gets us past some
security fixes). this now uses JDK 25.
avoid setting BUS_DMA_64BIT on 32-bit limited hardware and sparc64
On sparc64 the IOMMU is bypassed when the BUS_DMA_64BIT flag is set.
With addresses having the high bit set, which requires support for full
64-bit addresses even if the memory is physically located below 4G.
Initial patch from Ted Bullock. Feedback and ok on an earlier diff
from kettenis@
Ted reports this avoids:
[drm] *ERROR* radeon: ring test failed (scratch(0x15E4)=0xCAFEDEAD)
on a sparc64 machine with an XVR-100.
Fix broken() privsep_npppd_check_ifname(), which was not checked at
all, overread. Also, the function and privsep_npppd_check_ifname()
lacked path canonicalization, allowing a non-privileged process to
open any file. Add unveil() to protect them. Also, delete
load_resolv_conf(), which is not used.
Problem found and initial diff provided by Franz Bettag and
acts1631. Work with deraadt.