{"push_id":1101197654,"size":102,"distinct_size":1,"ref":"refs/heads/hardened/10-stable/pie","head":"4bd16eb7ce6e468be66aa08b73b59e02a5287477","before":"3d40d11a3da91823e711be548708070c1935f85c","commits":[{"sha":"be8c79a3eb5bf7511bc4c7dc1c5e6fb59db77e29","author":{"email":"baa3cdac49150ef6689c8016eab0ce257d183a8f@FreeBSD.org","name":"cem"},"message":"HBSD MFC: subr_mbpool: Don't free bogus pointer in error paths\n\nAn mbpool is allocated with a contiguous array of mbpages.  Freeing an\nindividual mbpage has never been valid.  Don't do it.\n\nThis bug has been present since this code was introduced in r117624 (2003).\n\nReported by:\tCoverity\nCID:\t\t1009687\nSponsored by:\tEMC / Isilon Storage Division\n\n(cherry picked from commit 1e1ff456ba8494363cb350d3b56683c0a3ca313e)\nSigned-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/be8c79a3eb5bf7511bc4c7dc1c5e6fb59db77e29"},{"sha":"28d7df17c95d4905e2f77742fea678f4069291ee","author":{"email":"baa3cdac49150ef6689c8016eab0ce257d183a8f@FreeBSD.org","name":"cem"},"message":"HBSD MFC: posix4_mib: Don't overrun facility_initialized array\n\nThe facility_initialized and facility arrays are the same size and were\nintended to be indexed the same.  I believe this mismatch was just a\ntypo/braino in r208731.\n\nReported by:\tCoverity\nCID:\t\t1017430\nSponsored by:\tEMC / Isilon Storage Division\n\n(cherry picked from commit 555ff4cf7f5679f262adf70afc8eebde96659329)\nSigned-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/28d7df17c95d4905e2f77742fea678f4069291ee"},{"sha":"9bfc50da6e3207cd7618dc30f5d0256a8177d934","author":{"email":"238379ae80a11fb9b4664e9c5a9703f8bb8eb25b@FreeBSD.org","name":"pfg"},"message":"MFC r298530:\npatch(1): avoid signed integer overflow when debugging.\n\nInteger i is used to index p_end of type LINENUM (actually long).\nMatch the types.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/9bfc50da6e3207cd7618dc30f5d0256a8177d934"},{"sha":"a9fdf41ec64def827399987a18b5ae4bb505b248","author":{"email":"238379ae80a11fb9b4664e9c5a9703f8bb8eb25b@FreeBSD.org","name":"pfg"},"message":"MFC r298551, r298679, r298680:\nfsck_ffs: use uint32_t for closedisk().\n\nfs_ncg is of type uint32_t, and we were indexing it with an int.\nFixed this using an unsigned type.\n\nReviewed by:\tmckusick","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/a9fdf41ec64def827399987a18b5ae4bb505b248"},{"sha":"bcd97d678bf1a7cdf9db78e9852164359269b327","author":{"email":"b0125fa187132d47dbe983b53b8ad9c1146edd9c@hardenedbsd.org","name":"Oliver Pinter +"},"message":"Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/bcd97d678bf1a7cdf9db78e9852164359269b327"},{"sha":"d58ddf1ae8d432c467a7432104842a4e0d70d32a","author":{"email":"238379ae80a11fb9b4664e9c5a9703f8bb8eb25b@FreeBSD.org","name":"pfg"},"message":"MFC r298640:\ned(1): switch two statements so we check the index before dereferencing.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/d58ddf1ae8d432c467a7432104842a4e0d70d32a"},{"sha":"b87910e57320541678ef5a70a019a9082719c9d6","author":{"email":"b0125fa187132d47dbe983b53b8ad9c1146edd9c@hardenedbsd.org","name":"Oliver Pinter +"},"message":"Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/b87910e57320541678ef5a70a019a9082719c9d6"},{"sha":"02ad600f2e9a3d9f9e61bd333e8550cef024880b","author":{"email":"7b242d943fcf32e060e9005c389f6e64f0d376fc@FreeBSD.org","name":"hselasky"},"message":"MFC r297966:\nAdd missing port_up checks.\n\nWhen downing a mlxen network adapter we need to check the port_up variable\nto ensure we don't continue to transmit data or restart timers which can\nreside in freed memory.\n\nSponsored by:\tMellanox Technologies","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/02ad600f2e9a3d9f9e61bd333e8550cef024880b"},{"sha":"18741cdbc923af87c1c09f85055c46fec6e9b56f","author":{"email":"7b242d943fcf32e060e9005c389f6e64f0d376fc@FreeBSD.org","name":"hselasky"},"message":"MFC r297967:\nEnsure the received IP header gets 32-bits aligned.\n\nThe FreeBSD's TCP/IP stack assumes that the IP-header is 32-bits aligned\nwhen decoding it. Else unaligned 32-bit memory access can happen, which\nnot all processor architectures support.\n\nSponsored by:\tMellanox Technologies","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/18741cdbc923af87c1c09f85055c46fec6e9b56f"},{"sha":"d89f9c09384fc85f82ed521bd498fc8b6c8e548c","author":{"email":"7b242d943fcf32e060e9005c389f6e64f0d376fc@FreeBSD.org","name":"hselasky"},"message":"MFC r297968:\nRemove some unused fields.\n\nSponsored by:\tMellanox Technologies","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/d89f9c09384fc85f82ed521bd498fc8b6c8e548c"},{"sha":"31f48361b3e0dee3b05e957491bbe82af6ec425b","author":{"email":"7b242d943fcf32e060e9005c389f6e64f0d376fc@FreeBSD.org","name":"hselasky"},"message":"MFC r298458:\nAdd missing set of the current VNET when inputting IP packets in IPoIB.\n\nThis fixes a kernel panic when using IPoIB with VIMAGE and infiniband.\n\nPR:\t\t208957\nSponsored by:\tMellanox Technologies\nTested by:\tJustin Clift <justin@postgresql.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/31f48361b3e0dee3b05e957491bbe82af6ec425b"},{"sha":"f33895ae7171cb60f5bc04b2941cb78d5621fd55","author":{"email":"7b242d943fcf32e060e9005c389f6e64f0d376fc@FreeBSD.org","name":"hselasky"},"message":"MFC r297696 and r298424:\nAdd new USB quirks.\n\nSubmitted by:\tAJ <aleksanderlothe@live.com>\nPR:\t\t208623\nSubmitted by:\tNaram Qashat <cyberbotx@cyberbotx.com>\nPR:\t\t208642","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/f33895ae7171cb60f5bc04b2941cb78d5621fd55"},{"sha":"7792bf96c40c016a71419746cf68bff241d674df","author":{"email":"b0125fa187132d47dbe983b53b8ad9c1146edd9c@hardenedbsd.org","name":"Oliver Pinter +"},"message":"Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/7792bf96c40c016a71419746cf68bff241d674df"},{"sha":"3f7a5f21485e7540713ce7dce4f64e59f39b7bfb","author":{"email":"513c04e7aebf88939f3d070f28b1c5fbbba443de@FreeBSD.org","name":"kp"},"message":"MFC r298664\n\nmsdosfs: Prevent buffer overflow when expanding win95 names\n\nIn win2unixfn() we expand Windows 95 style long names. In some cases that\nrequires moving the data in the nbp->nb_buf buffer backwards to make room. That\ncode failed to check for overflows, leading to a stack overflow in win2unixfn().\n\nWe now check for this event, and mark the entire conversion as failed in that\ncase. This means we present the 8 character, dos style, name instead.\n\nPR: 204643\nDifferential Revision:      https://reviews.freebsd.org/D6015","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/3f7a5f21485e7540713ce7dce4f64e59f39b7bfb"},{"sha":"0fce07b19081629cbbbe95a6d9b163efe6a8b02f","author":{"email":"b0125fa187132d47dbe983b53b8ad9c1146edd9c@hardenedbsd.org","name":"Oliver Pinter +"},"message":"Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/0fce07b19081629cbbbe95a6d9b163efe6a8b02f"},{"sha":"5a2943388bb3676f2c36fcbe57a4c43a8d2ff753","author":{"email":"b4dde37aa2aac745c0e6c43447507eaeace3e59f@FreeBSD.org","name":"jamie"},"message":"MFC r298564:\n\n  Remove the PR_REMOVE flag, which was meant as a temporary marker for\n  a jail that might be seen mid-removal.  It hasn't been doing the right\n  thing since at least the ability to resurrect dying jails, and such\n  resurrection also makes it unnecessary.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/5a2943388bb3676f2c36fcbe57a4c43a8d2ff753"},{"sha":"0621c28d20a2e195bbf63594bb3b732d498fe738","author":{"email":"b4dde37aa2aac745c0e6c43447507eaeace3e59f@FreeBSD.org","name":"jamie"},"message":"MFC r298565:\n\n  Add a new jail OSD method, PR_METHOD_REMOVE.  It's called when a jail is\n  removed from the user perspective, i.e. when the last pr_uref goes away,\n  even though the jail mail still exist in the dying state.  It will also\n  be called if either PR_METHOD_CREATE or PR_METHOD_SET fail.\n\nMFC r298683:\n\n  Delay removing the last jail reference in prison_proc_free, and instead\n  put it off into the pr_task.  This is similar to prison_free, and in fact\n  uses the same task even though they do something slightly different.\n\nMFC r298566:\n\n  Pass the current/new jail to PR_METHOD_CHECK, which pushes the call\n  until after the jail is found or created.  This requires unlocking the\n  jail for the call and re-locking it afterward, but that works because\n  nothing in the jail has been changed yet, and other processes won't\n  change the important fields as long as allprison_lock remains held.\n\n  Keep better track of name vs namelc in kern_jail_set.  Name should\n  always be the hierarchical name (relative to the caller), and namelc\n  the last component.\n\nMFC r298668:\n\n  Use crcopysafe in jail_attach.\n\nPR:\t\t48471","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/0621c28d20a2e195bbf63594bb3b732d498fe738"},{"sha":"8f241805478ee6cea6271b7f9181a35941763fbe","author":{"email":"b4dde37aa2aac745c0e6c43447507eaeace3e59f@FreeBSD.org","name":"jamie"},"message":"MFC r297367:\n\n  Move the various per-type arrays of OSD data into a single structure array.\n\nMFC r297422:\n\n  Add osd_reserve() and osd_set_reserved(), which allow M_WAITOK allocation\n  of an OSD array.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/8f241805478ee6cea6271b7f9181a35941763fbe"},{"sha":"75525160315904c83a57f7fde43bdf7d0aa40a42","author":{"email":"b4dde37aa2aac745c0e6c43447507eaeace3e59f@FreeBSD.org","name":"jamie"},"message":"MFC r298584:\n\n  Note the existence of module-specific jail paramters, starting with the\n  linux.* parameters when linux emulation is loaded.\n\nMFC r298585:\n\n  Encapsulate SYSV IPC objects in jails.  Define per-module parameters\n  sysvmsg, sysvsem, and sysvshm, with the following bahavior:\n\n  inherit: allow full access to the IPC primitives.  This is the same as\n  the current setup with allow.sysvipc is on.  Jails and the base system\n  can see (and moduly) each other's objects, which is generally considered\n  a bad thing (though may be useful in some circumstances).\n\n  disable: all no access, same as the current setup with allow.sysvipc off.\n\n  new: A jail may see use the IPC objects that it has created.  It also\n  gets its own IPC key namespace, so different jails may have their own\n  objects using the same key value.  The parent jail (or base system) can\n  see the jail's IPC objects, but not its keys.\n\nPR:\t\t48471","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/75525160315904c83a57f7fde43bdf7d0aa40a42"},{"sha":"0d1a0cd2ea56aad04c2fa5aadff3f9bbb38d085b","author":{"email":"3ea476e27d9b3bd1487c0c8e1d4d9e739ae85eda@FreeBSD.org","name":"arybchik"},"message":"MFC r298735\n\nsfxge(4): do not use RxQ index as label\n\nLabels are limitted by 32 on EF10. It is not sufficient on powerful hosts.\nSince only one RxQ is running over each EvQ, zero label may be used.\n\nReviewed by:    gnn\nSponsored by:   Solarflare Communications, Inc.\nPR:             208267\nDifferential Revision:  https://reviews.freebsd.org/D6121","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/0d1a0cd2ea56aad04c2fa5aadff3f9bbb38d085b"}]}