audio/ezstream: Update to 1.0.2
Add devel/check to build dependencies.
Use localbase in uses.
Add license information.
Pet port linters.
PR: 297893
Approved by: maintainer timeout (3+ weeks)
filesystems: use g_vfs_close_unlocked(9)
As result, we lock the devvp vnode around calls to VOP_FSYNC() on
unmount. For instance, the vn_fsync_buf() implementation of fsync()
needs exclusive lock on the vnode to guarantee that all dirty buffers
are indeed synced.
Reviewed by: markj
Tested by: pho
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D59932
VFS: style
Wrap long lines, related to the nullfs mounts over regular files and
sockets type checks. Also fix indent.
Sponsored by: The FreeBSD Foundation
MFC after: 1 week
x11/cde-devel: Add newly required pkgconf build dependency
Add a pkgconf build requirement. While at it also document an autoconf
and autoconf-archive requirement.
Fixes: e4db654d831a
security/crowdsec-firewall-bouncer: Fix PF(4) regression
It seems that a regression has been addded in 0.0.36 specifically in
PF(4) backend. So backport the commit addressing it from upstream.
PR: 298580
Approved by: blanket (fix runtime)
Approved by: osa, vvd (Mentors, implicit)
Tested by: Vick Khera <vivek at khera.org>
lockf: Do not block in vfs_busy()
A race is possible otherwise: vfs_busy() may return after an unmounted
filesystem has been removed from the global mount list. That is,
vfs_busy() will block until vfs_mount_destroy() sets MNTK_REFEXPIRE, and
at that point the mountpoint has been removed from the mountlist, so
TAILQ_FOREACH can return an invalid value.
Simply do not block if the mountpoint is being unmounted.
Reviewed by: kib
Fixes: eca39864f702 ("Add sysctl KERN_LOCKF")
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D59982
tests/sys/kern: skip unix_connectat fdescfs cases when fdescfs is missing
unix_connectat's fdescfs cases call mount_fdescfs(), which skipped on ENODEV.
nmount(2) never returns ENODEV: vfs_donmount() remaps the ENODEV from a failed
fdescfs module load to EINVAL with errmsg "Invalid fstype", so the skip never
fired and the cases failed on kernels without fdescfs.
Approved by: ngie, asomers
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D59227
vm_page: Fix the error path in vm_page_alloc_contig_domain()
If we are inserting a run of pages into a VM object and fail at some
point due to a memory allocation failure, we have to free all of the
pages in the run. We do that by resetting some fields and calling
vm_page_free_toq() on each page; this removes the page from the object
and frees it back to the buddy allocator.
If the page is supposed to be wired, we reset the reference count, but
this was done incorrectly: the VPRC_OBJREF flag must be retained as the
page still belongs to an object. Resetting it to zero will cause a
panic in vm_page_free_prep(): vm_page_free_object_prep() will subtract
VPRC_OBJREF from the refcount, causing underflow, and
vm_page_free_prep() subsequently calls panic() if the refcount is
non-zero.
Reviewed by: alc, kib
Fixes: fee2a2fa3983 ("Change synchonization rules for vm_page reference counting.")
MFC after: 1 week
[2 lines not shown]
cd9660: merge level 1 and 2 filename conversion
Merge the nearly identical level 1 and level 2 filename conversion
functions and add output buffer bounds checking.
Always NUL-terminate the converted filename, allowing the redundant
memset() in cd9660_translate_node_common() to be removed.
Signed-off-by: Manuel Einfalt <einfalt1 at proton.me>
Reviewed by: emaste
Pull request: https://github.com/freebsd/freebsd-src/pull/2443
emulators/es-de: Unbreak after x11-fonts/ubuntu-font update
The recently updated x11-fonts/ubuntu-font has different names for its
*.ttf files. This broke es-de at runtime, because it explicitly wants to
load "Ubuntu-C.ttf", which isn't provided by ubuntu-font anymore.
The port links to "Ubuntu[wdth,wght].ttf" instead to unbreak es-de.
While here, apply the new framework-provided BUILD_RUN_DEPENDS in place
of the custom _BR_DEPENDS variable.
PR: 298815
Approved by: osa, vvd (Mentors, implicit)
www/bunkerweb: Enable ModSecurity when the module is available
Render the ModSecurity directives only if
ngx_http_modsecurity_module.so is installed, like upstream does for
the stream module. Build www/openresty with the MODSECURITY option to
get it.
Point the remaining paths at their FreeBSD locations, error pages,
assets and rule files were read from /usr/share/bunkerweb.
Sponsored by: Netzkommune GmbH
www/openresty: Add MODSECURITY option
Builds ModSecurity v3 as a dynamic module from the same sources and
with the same configure arguments as the server itself, so it loads
without --with-compat. Off by default.
Setting USE_GITHUB drops the openresty tarball from DISTFILES, so set
it explicitly.
Sponsored by: Netzkommune GmbH
