@opntr opntr released this Jul 1, 2018 · 1010 commits to hardened/11-stable/master since this release

Assets 2

Highlights:

  • MFC r333321,r333707: x86 cpususpend_handler: call wbinvd after setting suspend state bits (84c8399)
  • Set stable/11 from -PRERELEASE back to -STABLE. (745cc87)
  • MFC r335171: Handle the race between fork/vm_object_split() and faults. (0556a47)
  • MFC r332994 (by tychon): Handle potential alignment adjustment of the exception frame by hardware. (6c5aa90)
  • MFC r334876: pf: Fix deadlock with route-to (a0ce578)
  • MFC r335131 Remove printf() in #NM handler. (2df766d) [CVE-2018-3665]
  • LinuxKPI updates
  • sysrc updates
  • nvme updates

Changelog

Oliver Pinter + (17):
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

ae (1):
      MFC r335133:   In m_megapullup() use m_getjcl() to allocate 9k or 16k mbuf when requested.

avg (10):
      MFC r333209: hpet: use macros instead of magic values for the timer mode
      MFC r332816: call racct_proc_ucred_changed() under the proc lock
      MFC r333212: amdsbwd: add suspend and resume methods
      MFC r333243: opensolaris system_taskq does not need to run at maximum priority
      MFC r333269: amdsbwd: fix reboot status reporting
      MFC r334785: expand descriptions of x86 panic_on_nmi and kdb_on_nmi sysctls
      MFC r333630: Fix 'zpool create -t <tempname>'
      MFC r332918, r333222: go deeper for ACPI suspend bounce test
      MFC r333321,r333707: x86 cpususpend_handler: call wbinvd after setting suspend state bits
      MFC r333667: followup to r332730/r332752: set kdb_why to "trap" for fatal traps

bdrewery (3):
      MFC r330702:
      MFC r334791,r334811:
      MFC r325560:

cy (1):
      MFC r333895, r334022

dim (7):
      MFC r334946:
      MFC r334948:
      MFC r334945:
      MFC r334947:
      MFC r335034:
      MFC r335296:
      MFC r335297:

dteske (8):
      MFC r335277:
      dpv(3): MFC r330943, r335264
      MFC r330878-r330879, r330939, r330948: Man-page updates
      MFC r334303: sysrc(8): Test variable names for invalid characters
      MFC r330886: Install files added in SVN's r295373, r295457, r295542
      MFC r335280-r335281, r335302: sysrc.subr updates
      MFC r335308: bsdconfig: Fix a bug when editing users
      MFC r335306: bsdconfig: Make examples optional

eadler (1):
      MFC r334472:

ed (1):
      MFC r335314:

emaste (5):
      MFC r334363: elfdump: chase ABI tag note name change from r232832
      MFC r335221: Add deprecation notice in asf.8
      MFC r335214: Correct kern.pre.mk comment: objcopy copies objects.
      MFC r335209: elf.5: add readelf cross-reference
      MFC r335213: ldd: reference readelf instead of objdump in warning message

gjb (6):
      Document EN-18:07, SA-18:07.
      Add xml:id attributes for future diff reduction.
      Update version entities in release.ent.
      Synchronize the stable/11 errata page with releng/11.2 in preparation for creating the 11.2-RELEASE errata.html page.
      Prune SAs and ENs from 11.1-RELEASE in preparation for creating the 11.2-RELEASE errata page.
      Set stable/11 from -PRERELEASE back to -STABLE.

hselasky (27):
      MFC r334993: Implement the ip_eth_mc_map() function in the LinuxKPI.
      MFC r334481: Add more GFP macro definitions in the LinuxKPI.
      MFC r334482: Improve high resolution timer support in the LinuxKPI.
      MFC r334483: Implement radix_tree_iter_delete() in the LinuxKPI.
      MFC r334484: Implement the __sg_alloc_table_from_pages() function based on the existing sg_alloc_table_from_pages() function in the LinuxKPI.
      MFC r334658: Implement timer_setup() and from_timer() function macros in the LinuxKPI.
      MFC r334659: Implement mul_u32_u32() function in the LinuxKPI.
      MFC r334660: Add "access" function pointer to the "vm_operations_struct" structure in the LinuxKPI. While at it document when to use the "virtual_address" or the "address" field in the "vm_fault" structure.
      MFC r334661: Implement the task_pid_vnr() function macro in the LinuxKPI.
      MFC r334663: Implement the INIT_DELAYED_WORK_ONSTACK() function macro in the LinuxKPI.
      MFC r334664: Declare and set the global "system_highpri_wq" workqueue structure pointer in the LinuxKPI.
      MFC r334710: Implement the rdmsrl_safe() function macro in the LinuxKPI.
      MFC r334711: Implement the ktime_compare() and ktime_after() functions in the LinuxKPI.
      MFC r334712 and r334718: Implement the atomic_dec_if_positive() function in the LinuxKPI.
      MFC r334713: Implement the init_wait_entry() function macro in the LinuxKPI.
      MFC r334714: Rename two structure field members while keeping backwards compatibility in the LinuxKPI. Add a comment saying in which Linux version this change was made.
      MFC r334715: Implement the might_sleep_if() function macro in the LinuxKPI.
      MFC r334717: Implement the __add_wait_queue_entry_tail() function in the LinuxKPI.
      MFC r334720: Make some list functions RCU safe in the LinuxKPI. While at it rename hlist_add_after() into hlist_add_behind().
      MFC r334774: Implement the dev_pm_set_driver_flags() function macro in the LinuxKPI.
      MFC r334777: Wrap timespec64 into timespec in the LinuxKPI.
      MFC r334778: Define ARCH_KMALLOC_MINALIGN in the LinuxKPI.
      MFC r334953: Implement the user_access_begin(), user_access_end(), usafe_get_user() and unsafe_put_user() function macros in the LinuxKPI.
      MFC r334958: Implement the kstrtobool() and kstrtobool_from_user() functions in the LinuxKPI.
      MFC r334662: Define the __kernel_size_t type in the LinuxKPI.
      MFC r334775: Move the EXPORT_SYMBOL_XXX() function macros into own header file.
      Bump the __FreeBSD_version after recent LinuxKPI updates to force recompilation of external kernel modules.

kib (5):
      MFC r335089: Enable eager FPU context switch on i386. CVE:	CVE-2018-3665
      MFC r332994 (by tychon): Handle potential alignment adjustment of the exception frame by hardware.
      MFC r335135: linuxolator/amd64: Don't mangle %r10 on return from syscall for EJUSTRETURN.
      MFC r335171: Handle the race between fork/vm_object_split() and faults.
      MFC r335199: linprocfs: add TracerPid to /proc/pid/status.

kp (1):
      MFC r334876:

markj (1):
      MFC r334506: Avoid completing I/O when dumping core after a panic.

mav (12):
      MFC r311350 (by rpokala): Fix whitespace in handling of XPT_PATH_INQ in adw(4).
      MFC r311351 (by rpokala): In the same vein as r311350, fix whitespace in handling of XPT_PATH_INQ in several more drivers.
      MFC r313954 (by imp): Remove obsolete comment after prior rev.
      MFC r328089 (by imp): Move setting of CAM_SIM_QUEUED to before we actually submit it to the hardware. Setting it after is racy, and we can lose the race on a heavily loaded system.
      MFC r330953 (by imp): Don't make the namespace devices eternal.
      MFC r330954, r330955 (by imp): When tearing down a queue pair, also delete the queue entries.
      MFC r331046 (by imp): Try polling the qpairs on timeout.
      MFC r332897 (by imp), r333123: Migrate to make_dev_s interface to populate /dev/nvmeX entries
      MFC r333127: Fix use-after-free in nvme_qpair_destroy().
      MFC r333130: Improve nvme(4) attach/detach sequences.
      MFC r333180: Fix LOR between controller and queue locks.
      MFC r325794, r325838 (by imp): Provide link speed data in XPT_GET_TRAN_SETTINGS. Provide full version information for that and XPT_PATH_INQ. Provide macros to encode/decode major/minor versions.  Read the link speed and lane count to compute the base_transfer_speed for XPT_PATH_INQ.

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-11-STABLE-v1100055.5/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v1100055.5-amd64-bootonly.iso) = a4c4d44d2e6f8c9c17682035a0889b3185f8655cc37c23cdbe9b3fc74660585cd528c87ff71abf45d1f622b4eeceeeb99b5b8bbb95a72dd56062d21edf0ecebc
SHA512 (HardenedBSD-11-STABLE-v1100055.5-amd64-disc1.iso) = e802080c1931d009cffe11e5ed7a162a7ad1dc1e8f644d7fe395b8a90d95f18d157b7d3cc5e5e0a0d3a54460202974233bce4c1d93376330822a81b5446b212e
SHA512 (HardenedBSD-11-STABLE-v1100055.5-amd64-memstick.img) = b87544414fc178df8dff82a110fda18dfe810be0d0c395ffd19b669c0210a7c6f952d0da2b843c915dc43d6fb3e8859c79d658fd1b12ad45c288d87f4064a202
SHA512 (HardenedBSD-11-STABLE-v1100055.5-amd64-mini-memstick.img) = 772dc30b5c8156012f0309fc092b6557a27eca3ff1356f7aa9c9f3b1b6a141d72579a409bb17e5d93f69ad85cd2b73ff186f8b16392534bce5901f3a23f6346d

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=3a89
-----END PGP SIGNATURE-----

CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt
shortlog-HardenedBSD-11-STABLE-v1100055.5.txt