{"push_id":1195316454,"size":18,"distinct_size":1,"ref":"refs/heads/hardened/10-stable/pie","head":"5faa63b65b0e04a44a2189e5bb5bfc53500e7838","before":"c3da090297fe5a28ff4883e92acc7f0798a9abd7","commits":[{"sha":"15fb55aa670314e87deb319e02abdf4bcbac078b","author":{"name":"truckman","email":"7db9b6fb22bf58dcc1fd7606fbae5570b479b7be@FreeBSD.org"},"message":"MFC r299371 (by trasz)\n\nAdd \"camcontrol reprobe\" subcommand, and implement it for da(4).\nThis makes it possible to manually force updating capacity data\nafter the disk got resized. Without it it might be neccessary to\nreboot before FreeBSD notices updated disk size under eg VMWare.\n\nDifferential Revision:\thttps://reviews.freebsd.org/D6108","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/15fb55aa670314e87deb319e02abdf4bcbac078b"},{"sha":"4199bec9b4f66720daa3225f22555919a48e7182","author":{"name":"truckman","email":"7db9b6fb22bf58dcc1fd7606fbae5570b479b7be@FreeBSD.org"},"message":"MFC r300547\n\nFix multiple Coverity Out-of-bounds access false postive issues in CAM\n\nThe currently used idiom for clearing the part of a ccb after its\nheader generates one or two Coverity errors for each time it is\nused.  All instances generate an Out-of-bounds access (ARRAY_VS_SINGLETON)\nerror because of the treatment of the header as a two element array,\nwith a pointer to the non-existent second element being passed as\nthe starting address to bzero().  Some instances also alsp generate\nOut-of-bounds access (OVERRUN) errors, probably because the space\nbeing cleared is larger than the sizeofstruct ccb_hdr).\n\nIn addition, this idiom is difficult for humans to understand and\nit is error prone.  The user has to chose the proper struct ccb_*\ntype (which does not appear in the surrounding code) for the sizeof()\nin the length calculation.  I found several instances where the\nlength was incorrect, which could cause either an actual out of\nbounds write, or incompletely clear the ccb.\n\nA better way is to write the code to clear the ccb itself starting\nat sizeof(ccb_hdr) bytes from the start of the ccb, and calculate\nthe length based on the specific type of struct ccb_* being cleared\nas specified by the union ccb member being used.  The latter can\nnormally be seen in the nearby code.  This is friendlier for Coverity\nand other static analysis tools because they will see that the\nintent is to clear the trailing part of the ccb.\n\nWrap all of the boilerplate code in a convenient macro that only\nrequires a pointer to the desired union ccb member (or a pointer\nto the union ccb itself) as an argument.\n\nReported by:\tCoverity\nCID:\t\t1007578, 1008684, 1009724, 1009773, 1011304, 1011306\nCID:\t\t1011307, 1011308, 1011309, 1011310, 1011311, 1011312\nCID:\t\t1011313, 1011314, 1011315, 1011316, 1011317, 1011318\nCID:\t\t1011319, 1011320, 1011321, 1011322, 1011324, 1011325\nCID:\t\t1011326, 1011327, 1011328, 1011329, 1011330, 1011374\nCID:\t\t1011390, 1011391, 1011392, 1011393, 1011394, 1011395\nCID:\t\t1011396, 1011397, 1011398, 1011399, 1011400, 1011401\nCID:\t\t1011402, 1011403, 1011404, 1011405, 1011406, 1011408\nCID:\t\t1011409, 1011410, 1011411, 1011412, 1011413, 1011414\nCID:\t\t1017461, 1018387, 1086860, 1086874, 1194257, 1229897\nCID:\t\t1229968, 1306229, 1306234, 1331282, 1331283, 1331294\nCID:\t\t1331295, 1331535, 1331536, 1331539, 1331540, 1341623\nCID:\t\t1341624, 1341637, 1341638, 1355264, 1355324\nReviewed by:\tscottl, ken, delphij, imp\nMFH:\t\t1 month\nDifferential Revision:\thttps://reviews.freebsd.org/D6496","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/4199bec9b4f66720daa3225f22555919a48e7182"},{"sha":"cdd9658c0e7df96accf9bceec1063d23771a3540","author":{"name":"cy","email":"8e7af2df40968db17bcf20142c9fe3377726ad01@FreeBSD.org"},"message":"MFC r302296:\n\nRemove dead code.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/cdd9658c0e7df96accf9bceec1063d23771a3540"},{"sha":"c76a2efc4b0cf61a1053998dcfabdd094ae59166","author":{"name":"delphij","email":"42e0a3b0cf665f904614845e159d13b2ed3608f0@FreeBSD.org"},"message":"MFC r302305: MFV r302260: expat 2.2.0.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/c76a2efc4b0cf61a1053998dcfabdd094ae59166"},{"sha":"3b057cea2ce7e86bfadc05ea2723636fe66134c2","author":{"name":"Oliver Pinter","email":"85e9ea2ce1a8a10d915181b445abd08ffe6e240c@balabit.com"},"message":"Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/3b057cea2ce7e86bfadc05ea2723636fe66134c2"},{"sha":"12113dd85c69f26a4cf06c4c0720ff66324d6ddf","author":{"name":"Oliver Pinter","email":"85e9ea2ce1a8a10d915181b445abd08ffe6e240c@balabit.com"},"message":"HBSD: use randomly generated ipv6 addresses instead of MAC based\n\nhttp://dl.acm.org/citation.cfm?id=1852723&dl=GUIDE&coll=GUIDE\n\nSigned-off-by: Oliver Pinter <oliver.pinter@balabit.com>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/12113dd85c69f26a4cf06c4c0720ff66324d6ddf"},{"sha":"4cd5553df9068f8cda61b9786a2a1950e2bf550d","author":{"name":"kib","email":"ce9d581103e40ce1b4a3636d5281c849530292f7@FreeBSD.org"},"message":"MFC r302196\nSince VOP_INACTIVE() is not guaranteed to be called, all cleanups\nexecuted by inactive methods, must be repeated on reclaim.\n\nMFC r302210:\nClean other flags in ncl_inactive, only.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/4cd5553df9068f8cda61b9786a2a1950e2bf550d"},{"sha":"d2c3585acea931bc4345759421537448a8a0ccd0","author":{"name":"truckman","email":"7db9b6fb22bf58dcc1fd7606fbae5570b479b7be@FreeBSD.org"},"message":"MFC r302338\n\nFix a race condition between the main thread in aqm_pie_cleanup() and the\ncallout thread that can cause a kernel panic.  Always do the final cleanup\nin the callout thread by passing a separate callout function for that task\nto callout_reset_sbt().\n\nProtect the ref_count decrement in the callout with DN_BH_WLOCK().  All\nother ref_count manipulation is protected with this lock.\n\nThere is still a tiny window between ref_count reaching zero and the end\nof the callout function where it is unsafe to unload the module.  Fixing\nthis would require the use of callout_drain(), but this can't be done\nbecause dummynet holds a mutex and callout_drain() might sleep.\n\nRemove the callout_pending(), callout_active(), and callout_deactivate()\ncalls from calculate_drop_prob().  They are not needed because this callout\nuses callout_init_mtx().\n\nSubmitted by:\tRasool Al-Saadi <ralsaadi@swin.edu.au>\nDifferential Revision:\thttps://reviews.freebsd.org/D6928","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/d2c3585acea931bc4345759421537448a8a0ccd0"},{"sha":"16c0960d90bdc939870e66079969fddf861e7d6e","author":{"name":"mm","email":"55df50be3209ec0ad5a58d975208fa7e9f58e2b3@FreeBSD.org"},"message":"MFC r302294:\n\nSync libarchive with vendor, bugfixes for tests:\n- fix tests on filesystems without birthtime support, e.g. UFS1 (1)\n- vendor issue #729: avoid use of C99 for-scope declarations in\n  test_write_format_gnutar_filenames.c\n\nPR:\t204157 (1)","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/16c0960d90bdc939870e66079969fddf861e7d6e"},{"sha":"ef39ea1f72f537c609d95069316e24c3ae207b04","author":{"name":"Oliver Pinter","email":"85e9ea2ce1a8a10d915181b445abd08ffe6e240c@hardenedbsd.org"},"message":"Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master\n\nSigned-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/ef39ea1f72f537c609d95069316e24c3ae207b04"},{"sha":"ffd95dd99b17d9d58cb49cfff95cb1f56c7e6277","author":{"name":"ngie","email":"305547d4cc311567c72a2740c290593f0de39607@FreeBSD.org"},"message":"MFC r301707:\n\nUse NULL instead of `0` in _ht_getnetbyname(..)\n\n- getnetent returns NULL on completion/error.\n- .h_aliases is NULL terminated.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/ffd95dd99b17d9d58cb49cfff95cb1f56c7e6277"},{"sha":"c4a765ce71d4c5b6b00ca3eb1258daa4dbed65cb","author":{"name":"ngie","email":"305547d4cc311567c72a2740c290593f0de39607@FreeBSD.org"},"message":"MFC r301708:\n\nRevert r301707\n\ngetnetent_p doesn't return NULL like getnetent does. coccinelle got confused and\nI didn't verify that it worked before committing the change\n\nPointyhat to: ngie","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/c4a765ce71d4c5b6b00ca3eb1258daa4dbed65cb"},{"sha":"69867bad8a0afbaff921922b0983698c89dd77fc","author":{"name":"ngie","email":"305547d4cc311567c72a2740c290593f0de39607@FreeBSD.org"},"message":"MFC r301749:\n\nAdd debug output to aid in determining why `goodResult` != `result`\n\nPR: 210619 (for diagnosis)","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/69867bad8a0afbaff921922b0983698c89dd77fc"},{"sha":"450eb8400182e87c121f9f0746d9d8fa7f2cb04d","author":{"name":"ngie","email":"305547d4cc311567c72a2740c290593f0de39607@FreeBSD.org"},"message":"MFC r301800:\n\nDeobfuscate cleanup path in clnt_bck_create(..)\n\nSimilar to r300836, cl and ct will always be non-NULL as they're allocated\nusing the mem_alloc routines, which always use `malloc(..., M_WAITOK)`.\n\nDeobfuscating the cleanup path fixes a leak where if cl was NULL and\nct was not, ct would not be free'd, and also removes a duplicate test for\ncl not being NULL.\n\nCID: 1229999","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/450eb8400182e87c121f9f0746d9d8fa7f2cb04d"},{"sha":"7a6ae0468c49830719b2f15365e4d729b4f7361b","author":{"name":"ngie","email":"305547d4cc311567c72a2740c290593f0de39607@FreeBSD.org"},"message":"MFC r301605:\n\nBounds check rpcbs_rmtcall(..) to ensure rtype is less than RPCBVERS_STAT\n\nNot returning if rtype == RPCBVERS_STAT will cause us to overrun the inf array, as\nit's defined to be exactly RPCBVERS_STAT elements in rpcb_prot.x:\n\n> include/rpc/rpcb_prot.x:typedef rpcb_stat rpcb_stat_byvers[RPCBVERS_STAT];\n\nThe proposed change also matches the rest of the rtype upper bound checks in the\nfile, so the original change was likely a typo.\n\nCID: 1007567","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/7a6ae0468c49830719b2f15365e4d729b4f7361b"},{"sha":"ee3e200276b0f5bb9f2ac8fe92f747892fc807e1","author":{"name":"ngie","email":"305547d4cc311567c72a2740c290593f0de39607@FreeBSD.org"},"message":"MFC r301871:\n\nAdd missing break in lock_partialfilelock(..) with NFS_RESERR\n\nThis will help ensure that the right error is trickled up when the\nfunction is called if the lock status is NFS_RESERR\n\nTested with: fsx; svn info/svnversion (uses bdb locking); locktests from Bull http://nfsv4.bullopensource.org/tools/tests/locktest.php\nCID: 1008161, 1304956","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/ee3e200276b0f5bb9f2ac8fe92f747892fc807e1"},{"sha":"2b6522ed1341f5876e020122c94de30792742e0f","author":{"name":"Oliver Pinter +","email":"924fd90530ea0369cfaf1274bf61a797817afd0e@hardenedbsd.org"},"message":"Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/2b6522ed1341f5876e020122c94de30792742e0f"},{"sha":"5faa63b65b0e04a44a2189e5bb5bfc53500e7838","author":{"name":"Oliver Pinter +","email":"924fd90530ea0369cfaf1274bf61a797817afd0e@hardenedbsd.org"},"message":"Merge remote-tracking branch 'origin/hardened/10-stable/master' into hardened/10-stable/pie","distinct":true,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/5faa63b65b0e04a44a2189e5bb5bfc53500e7838"}]}
{"actor":{"display_login":"opntr-auto"}}