{"push_id":2441270590,"size":12,"distinct_size":1,"ref":"refs/heads/hardened/11-stable/unstable","head":"c6d6eed7edc804118801b20650fbfdc02b5026a0","before":"3943b8b2a9e02946a0063d06648202d0116a2774","commits":[{"sha":"e074689606c753e3328382618715757c0c2c0122","author":{"name":"emaste","email":"d2b7c921af14e445b1748f9c47642fe92e2e657e@FreeBSD.org"},"message":"MFC r325422: posix_fallocate.2: add an EINVAL errno case\n\nAs of r325320 in HEAD posix_fallocate returns EINVAL on ZFS to indicate\nthat the underlying filesystem does not support this operation, per\nPOSIX.1-2008. Document this case in the man page.\n\nNote that r325320 has not yet been merged to stable/11, and may or may\nnot be.  However, we should document that EINVAL may be returned if the\nfilesystem does not support posix_fallocate (even if we don't actually\ndo so in stable/11), as software should be prepared to handle that case.\n\nDiscussed with:\tavg\nSponsored by:\tThe FreeBSD Foundation","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/e074689606c753e3328382618715757c0c2c0122"},{"sha":"897710e98a0b0e19215469cbc1bad8edced933e8","author":{"name":"emaste","email":"d2b7c921af14e445b1748f9c47642fe92e2e657e@FreeBSD.org"},"message":"MFC r323623: rename(2): document capability mode errors\n\nSponsored by:\tThe FreeBSD Foundation","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/897710e98a0b0e19215469cbc1bad8edced933e8"},{"sha":"71918e8f61597def8a0205b9b259f791777bbdc9","author":{"name":"emaste","email":"d2b7c921af14e445b1748f9c47642fe92e2e657e@FreeBSD.org"},"message":"MFC r315522: use INT3 instead of NOP for x86 binary padding\n\nWe should never end up executing the inter-function padding, so we\nare better off faulting than silently carrying on to whatever function\nhappens to be next.\n\nNote that LLD does this by default.\n\nSponsored by:\tThe FreeBSD Foundation","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/71918e8f61597def8a0205b9b259f791777bbdc9"},{"sha":"904688e856c5af4e54a5382bb687cf62958f5e29","author":{"name":"emaste","email":"d2b7c921af14e445b1748f9c47642fe92e2e657e@FreeBSD.org"},"message":"MFC r324707: embed_mfs: add error handling, usage\n\nEnsure that we are called with two arguments, and that the output file\nis writable. Also, if we cannot find the mfs section report the output\nfile name rather than \"kernel\", as this script may be used with other\nthan kernels.\n\nSponsored by:\tThe FreeBSD Foundation","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/904688e856c5af4e54a5382bb687cf62958f5e29"},{"sha":"be4e6436a35050ab09cb19b5d3d28c899f986813","author":{"name":"emaste","email":"d2b7c921af14e445b1748f9c47642fe92e2e657e@FreeBSD.org"},"message":"MFC r326992: embed_mfs: support embedding mfs into loader\n\nThe script originally supported embedding an mfs into ELF files or any\nother type of file, because it searched for magic strings to mark the\nbeginning and end of the embeddable section. It was later modified to\nread the section offset and length via readelf, which made it work for\nELF only. Restore the ability to update arbitrary file types by using\nthe readelf technique for ELF, and the magic string technique for all\nothers (including PE/COFF files like loader.efi).\n\nSubmitted by:\tZakary Nafziger <worldofzak@gmail.com>\n\nMFC r327526: embed_mfs: correctly test grep return value\n\nReported by:\tbr\n\nMFC r327527: ath: revert accidental change committed with r327526\n\nSponsored by:\tThe FreeBSD Foundation","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/be4e6436a35050ab09cb19b5d3d28c899f986813"},{"sha":"2b037a44ad3c720e880a257c7d6bd8e0e9dbb423","author":{"name":"jhb","email":"c563ff913af6c995f30a82a6a1957ec496a32a59@FreeBSD.org"},"message":"MFC 331248: Set the proper vnet in IPsec callback functions.\n\nWhen using hardware crypto engines, the callback functions used to handle\nan IPsec packet after it has been encrypted or decrypted can be invoked\nasynchronously from a worker thread that is not associated with a vnet.\nExtend 'struct xform_data' to include a vnet pointer and save the current\nvnet in this new member when queueing crypto requests in IPsec.  In the\nIPsec callback routines, use the new member to set the current vnet while\nprocessing the modified packet.\n\nThis fixes a panic when using hardware offload such as ccr(4) with IPsec\nafter VIMAGE was enabled in GENERIC.\n\nSponsored by:\tChelsio Communications","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/2b037a44ad3c720e880a257c7d6bd8e0e9dbb423"},{"sha":"5a4de6ef78e289193b2b14c0e68ad00443323813","author":{"name":"Oliver Pinter","email":"85e9ea2ce1a8a10d915181b445abd08ffe6e240c@hardenedbsd.org"},"message":"HBSD MFC r331640: Fix several leaks of kernel stack data through paddings.\n\nIt is random collection of fixes for issues not yet corrected,\nreported at https://tsyrklevi.ch/clang_analyzer/freebsd_013017/. Many\nissues from that list were already corrected. Most of them are for\ncompat32, old compat32 or affect both primary host ABI and compat32.\n\nThe freebsd32_kldstat(), for instance, was already fixed by using\nmalloc(M_ZERO).  Patch includes correction to report the supplied\nversion back, which is just pedantic.\n\nReviewed by:\tbrooks, emaste (previous version)\nSponsored by:\tThe FreeBSD Foundation\nMFC after:\t1 week\nDifferential revision:\thttps://reviews.freebsd.org/D14868\n\n(cherry picked from commit 06ec69031ce04d7b104d7dc5804bafdc05bb485f)\n\nAuthor: kib <kib@FreeBSD.org>\nOriginal-commit-date: Tue Mar 27 18:05:51 2018 +0000\nsvn-commit-id: /head/ r331640\nSigned-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/5a4de6ef78e289193b2b14c0e68ad00443323813"},{"sha":"3fe8def44fb449446720764114fde2f9eb9c579c","author":{"name":"Oliver Pinter","email":"85e9ea2ce1a8a10d915181b445abd08ffe6e240c@hardenedbsd.org"},"message":"HBSD MFC r330821: Use the stack for temporary storage in OTIOCCONS.\n\nThe old code used the thread's pcb via the uap->data pointer.\n\nReviewed by:\ted\nApproved by:\tCheriBSD\nSponsored by:\tDARPA, AFRL\nDifferential Revision:\thttps://reviews.freebsd.org/D14674\n\n(cherry picked from commit dbd4ce23b169445f7746de689d1766d483d8728d)\n\nAuthor: brooks <brooks@FreeBSD.org>\nOriginal-commit-date: Mon Mar 12 23:04:42 2018 +0000\nsvn-commit-id: /head/ r330821\nSigned-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/3fe8def44fb449446720764114fde2f9eb9c579c"},{"sha":"880d7e96cdd88fdeae5e631ae86db42d2665fa81","author":{"name":"Oliver Pinter","email":"85e9ea2ce1a8a10d915181b445abd08ffe6e240c@hardenedbsd.org"},"message":"HBSD MFC r330880: Don't overflow the kernel struct mdio in the MDIOCLIST ioctl.\n\nAlways terminate the list with -1 and document the ioctl behavior.\nThis preserves existing behavior as seen from userspace with the\naddition of the unconditional termination which will not be seen by\nworking consumers of MDIOCLIST.\n\nBecause this ioctl can only be performed by root (in default\nconfigurations) and is not used in the base system this bug is not\ndeemed to warrant either a security advisory or an eratta notice.\n\nReviewed by:\tkib\nObtained from:\tCheriBSD\nDiscussed with:\tsecurity-officer (gordon)\nMFC after:\t3 days\nSecurity:\tkernel heap buffer overflow\nSponsored by:\tDARPA, AFRL\nDifferential Revision:\thttps://reviews.freebsd.org/D14685\n\n(cherry picked from commit 83fa13c3ab4f7417bced1683c874c5e87af425ab)\n\nAuthor: brooks <brooks@FreeBSD.org>\nOriginal-commit-date: Tue Mar 13 20:39:06 2018 +0000\nsvn-commit-id: /head/ r330880\nSigned-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/880d7e96cdd88fdeae5e631ae86db42d2665fa81"},{"sha":"e029be2e56c8c850744ba942984e998450170b51","author":{"name":"Oliver Pinter","email":"85e9ea2ce1a8a10d915181b445abd08ffe6e240c@hardenedbsd.org"},"message":"HBSD MFC r331008: Restore the behavior of returning the total number of units by unconditionally incrementing i in the loop;\n\nReported by:\tcem\nMFC with:\tr330880\nSponsored by:\tDARPA, AFRL\nDifferential Revision:\thttps://reviews.freebsd.org/D14685\n\n(cherry picked from commit 94a6309b435eb0470d2801ad90b85bab7e556f17)\n\nAuthor: brooks <brooks@FreeBSD.org>\nOriginal-commit-date: Thu Mar 15 16:37:43 2018 +0000\nsvn-commit-id: /head/ r331008\nSigned-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/e029be2e56c8c850744ba942984e998450170b51"},{"sha":"941bb120623346e63efe350a8e503dc5ba4662e8","author":{"name":"Oliver Pinter +","email":"924fd90530ea0369cfaf1274bf61a797817afd0e@hardenedbsd.org"},"message":"Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master\n\n* freebsd/11-stable/master:\n  MFC 331248: Set the proper vnet in IPsec callback functions.\n  MFC r326992: embed_mfs: support embedding mfs into loader\n  MFC r324707: embed_mfs: add error handling, usage\n  MFC r315522: use INT3 instead of NOP for x86 binary padding\n  MFC r323623: rename(2): document capability mode errors\n  MFC r325422: posix_fallocate.2: add an EINVAL errno case","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/941bb120623346e63efe350a8e503dc5ba4662e8"},{"sha":"c6d6eed7edc804118801b20650fbfdc02b5026a0","author":{"name":"Oliver Pinter +","email":"924fd90530ea0369cfaf1274bf61a797817afd0e@hardenedbsd.org"},"message":"Merge remote-tracking branch 'origin/hardened/11-stable/master' into hardened/11-stable/unstable\n\n* origin/hardened/11-stable/master:\n  HBSD MFC r331008: Restore the behavior of returning the total number of units by unconditionally incrementing i in the loop;\n  HBSD MFC r330880: Don't overflow the kernel struct mdio in the MDIOCLIST ioctl.\n  HBSD MFC r330821: Use the stack for temporary storage in OTIOCCONS.\n  HBSD MFC r331640: Fix several leaks of kernel stack data through paddings.\n  MFC 331248: Set the proper vnet in IPsec callback functions.\n  MFC r326992: embed_mfs: support embedding mfs into loader\n  MFC r324707: embed_mfs: add error handling, usage\n  MFC r315522: use INT3 instead of NOP for x86 binary padding\n  MFC r323623: rename(2): document capability mode errors\n  MFC r325422: posix_fallocate.2: add an EINVAL errno case","distinct":true,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/c6d6eed7edc804118801b20650fbfdc02b5026a0"}]}
{"actor":{"display_login":"opntr-auto"}}