Reject d_secsize exceeding MAXPHYS in (init|set)disklabel
readdisklabel() reads one sector into one buffer with
geteblk(d_secsize), and vnd(4) takes d_secsize from userland. The
buffer cache allocates kva one MAXPHYS slot per buffer but maps and
unmaps b_bufsize worth of it, so an oversize sector lays one buffer
across the slots that follow and unmaps them when it is freed, leaving
other buffer users with a b_data that is no longer mapped.
ok krw@
Reported-by: syzbot+aed2c23886430a6eaedb at syzkaller.appspotmail.com
Tor Browser: fix rendering of File Chooser dialogs
This issue has been reported by quite a few people over the last two
years but I have not been able to pinpoint the cause.
Many thanks to c2qd for figuring it out and proposing a fix.
Some corrections and updates in the introductory paragraph:
* From 1979 to 1989, not only AT&T UNIX used man(7), but so did all other
Unix-like systems including BSD, SunOS, and all the others.
* While the statement that man(7) was "purely presentational" was
mostly (though not entirely) true when written, it is no longer
accurate. A number of semantic macros have since been added, even
though far less systematically than in mdoc(7).
* Mention the situation in Linux and GNU roff. Knowing about that is
relevant for all, including our users, because it means people will
continue to find many man(7) pages in the wild, including some that
will fail badly with old versions of groff(1).
* Point to GNU roff documentation for the unlikely case that someone
sees themselves forced to write new man(7) code.
About half of the the ideas and a few wordings were suggested to me
by G. Branden Robinson.
update audio/amused to 0.20
- amused-web: fix escaping of `&' (was rendered as `>' instead)
- add support for WAV files
- improve mp3 file detection (from continue at honk.any-key.press, thanks!)
- print bits, rate and channels for tracks
- fix spelling of TMPDIR in man pages
- improve SHA1*() compat
- fix double fclose(3) in flac the decoder
- fix `amused jump'
ttys(5): a few editorial cleanups
- name init(8) as the primary consumer of /etc/ttys and use login(1) and
ttyflags(8) as example users of the getttyent(3) interface.
- rewrite the on/off/secure more simply
- modernize EXAMPLES
- add .Xr terminfo(5) to SEE ALSO
- minor grammatical tweaks
ok sthen@
Clarify that the -T ps and -T pdf output formats are experimental,
produce low-quality output, and that mandoc(1) is not a
typesetting system. This should really have been clarified
in this manual page many years ago because producing a typesetting
system has never been a development goal, not even a long-term goal.
Also delete the EXAMPLES entry involving -T ps because that entry puts
undue emphasis on it and can be misconstrued as a recommendation
to use that mode for any particular purpose.
The general idea for this clarification came up talking
to G. Branden Robinson on <groff at gnu.org>.