Skip to content

HardenedBSD-11-STABLE-v1100056.7

Compare
Choose a tag to compare
@opntr opntr released this 18 Oct 18:19
· 802 commits to hardened/11-stable/master since this release

Highlights:

  • MFC r333569: cpucontrol: improve Intel microcode revision check (cf3b425)
  • MFC r339019: clang: allow ifunc resolvers to accept arguments (d10325d)
  • MFC 338976: Don't clear DR6 for debug exceptions from userland. (4de0836)
  • MFC r339025: Update x86/ifunc.h. (59e3462)
  • MFC r338947: Add "src-ip" or "dst-ip" keyword to the output, when we are printing the rest of rule options. (cfea277)
  • MFC r338216: tftpd: Fix data corruption bug with netascii (6068c27)
  • MFC r336310: Let geli deal with lost devices without crashing. (35d45fa)
  • ZFS updates
  • cxgbe updates

Changelog

Oliver Pinter + (35):
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

Shawn Webb (2):
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict

ae (4):
      MFC r338857:   Fix possible NULL pointer dereference in ffec_alloc_mbufcl().
      MFC r338890:   Update ifr_name before invoking IPSECSREQID ioctl, this fixes the case,   when `ifconfig ipsec create reqid N` command invoked without interface   unit number. The "name" global variable is updated after interface   cloning in the ifclonecreate() and contains actual interface name.
      MFC r313168 (by pkelsey):   Fix VIMAGE-related bugs in TFO.  The autokey callout vnet context was   not being initialized, and the per-vnet fastopen context was only   being initialized for the default vnet.
      MFC r338947:   Add "src-ip" or "dst-ip" keyword to the output, when we are printing the   rest of rule options.

asomers (19):
      MFC r336582:
      MFC r336587:
      MFC r336594:
      MFC r336605:
      MFC r336871, r336874
      MFC r337482:
      MFC r337779:
      MFC r337911:
      MFC r337973:
      MFC r338216:
      MFC r337222:
      MFC r334360, r334362, r334388, r334395
      MFC many audit(4) tests.
      MFC r335261, r335275, r335284-r335285, r335294, r335318, r335320, r335703
      MFC r335319, r335354, r335374
      MFC r335792, r336564, r336579
      MFC r336613:
      MFC r336728:
      MFC r336875:

avatar (1):
      MFC r338200: Adding device ID for Terratec SiXPack 5.1+.

brooks (1):
      MFC r338925:

des (2):
      MFH (r314778): use reallocarray(3) for extra bounds checks MFH (r333306): fix typo in man page MFH (r333571, r333572): preserve if-modified-since across redirects MFH (r334317): simplify the DEBUG macro MFH (r334319): style bug roundup MFH (r334326): fix netrc file location logic, improve netrcfd handling MFH (r338572): fix end-of-transfer statistics, improve no-tty display
      MFH (r333574): fully support acting as a recursing resolver.

emaste (10):
      MFC r338682: lld: add -z interpose support
      MFC r306729: makeman: avoid bogus output with duplicated options
      MFC r334072, r334247 (eadler): Add the text '@generated' to src.conf.5
      regerate src.conf.5 to remove duplicate entries
      MFC r339019: clang: allow ifunc resolvers to accept arguments
      MFC r338810: openssh: rename local macro to avoid OpenSSL 1.1.1 conflict
      MFC r333233: gpart: add fat32lba MBR partition type
      MFC r333569: cpucontrol: improve Intel microcode revision check
      MFC r339181: crt: switch to standard note type definitions from elf_common.h
      MFC r336027 (andrew): Teach binutils that arm64 is a 64bit architecture.

gjb (1):
      Document EN-18:09 through EN-18:12.

gonzo (4):
      MFC r336050-r336051, r336142, r336326, r337719
      MFC r338111, r338215
      MFC r338654, r338701
      MFC r338655:

hselasky (2):
      MFC r338993: When multiple threads are involved receiving completion events in LibUSB make sure there is always a master polling thread, by setting the "ctx_handler" field in the context. Else the reception of completion events can stop. This happens if event threads are created and destroyed during runtime.
      MFC r339235: Add missing steering rules for virtual function, VF, in mlx4en(4) driver.

imp (2):
      Direct commit to stable, file not present in current
      Direct commit since these files have gone away in head

jamie (1):
      MFC r339211:

jhb (8):
      MFC 337673: Add an overview section to bus_dma.9.
      MFC 338022: Fix casts between 64-bit physical addresses and pointers in EFI.
      MFC 337400: Remove spurious ABI tags from kdump output.
      MFC 338021: Use 'bool' instead of 'int' for various boolean flags.
      MFC 338976: Don't clear DR6 for debug exceptions from userland.
      Disable the KASSERT for curcpu == 0 in netisr for EARLY_AP_STARTUP.
      MFC 338055: Remove some vestiges of IPI_LAZYPMAP on i386.
      MFC 326138,326436,326852: Style fixes to kdump.

jilles (1):
      MFC r338473: sh: Fix formal overflow in pointer arithmetic

ken (1):
      MFC r339076

kevans (6):
      MFC r337964, r338232: dtc(1) updates
      MFC r338039: diff(1): Implement -B/--ignore-blank-lines
      MFC r338219, r338250: FDT in Loader fixes
      MFC r338223, r338263: Missing bits from OptionalObsoleteFiles
      MFC r338646: dd(1): Correct padding in status=progress
      MFC r338040: diff(1): Refactor -B a little bit

kib (14):
      MFC r338892: Correct panic messages.
      MFC r338932: Fix some uses of dmaplimit.
      MFC r338955: When doing lm_add(), check for duplicates.
      MFC r324950 (by trasz): Reword the conditional.
      MFC r324951 (by trasz): Make find_library() conform to style(9).
      MFC r324952 (by trasz): Replace lseek(2)/read(2) pair with pread(2).
      MFC r324953 (by traz): Remove unneeded calls to access(2) from rtld(1); just call open(2) instead.
      MFC r338956: Provide refobj context when doing libmap substitution inside search_library_path().
      MFC r338964: Remove -m (update) from ldconfig -32 & -soft invocation on startup.
      MFC r338997: In vm_fault_copy_entry(), collect the code to initialize a newly allocated dst_object in a single place.
      MFC r338998: In vm_fault_copy_entry(), we should not assert that entry is charged if the dst_object is not of swap type.
      MFC r338999: Correct vm_fault_copy_entry() handling of backing file truncation after the file mapping was wired.
      MFC r339025: Update x86/ifunc.h.
      MFC r339241: Disallow zero day of month from strptime("%d").

markj (2):
      MFC r328810 (by emaste): ld.lld.1: miscellaneous style improvements
      MFC r338251: Add an lld option to emit PC-relative relocations for ifunc calls.

mav (53):
      MFC r338913: Fix use-after-free in RAID0 error reporting of GEOM_RAID.
      MFC r336943: MFV r336942: 9189 Add debug to vdev_label_read_config when txg check fails
      MFC r336945: MFV r336944: 9286 want refreservation=auto
      MFC r336947: MFV r336946: 9238 ZFS Spacemap Encoding V2
      MFC r336949: MFV r336948: 9112 Improve allocation performance on high-end systems
      MFC r336951: MFV r336950: 9290 device removal reduces redundancy of mirrors
      MFC r336954: MFV r336952: 9192 explicitly pass good_writes to vdev_uberblock/label_sync
      MFC r336956: MFV r336955: 9236 nuke spa_dbgmsg
      MFC r336959: MFV r336958: 9337 zfs get all is slow due to uncached metadata
      MFC r336961: MFV r336960: 9256 zfs send space estimation off by > 10% on some datasets
      MFC r337007: MFV r336991, r337001: 9102 zfs should be able to initialize storage devices
      MFC r337017: MFV r337014: 9421 zdb should detect and print out the number of "leaked" objects 9422 zfs diff and zdb should explicitly mark objects that are on the deleted queue
      MFC r337021: MFV r337020:9443 panic when scrub a v10 pool
      MFC r337025: MFV r337022: 9403 assertion failed in arc_buf_destroy() when concurrently reading block with checksum error
      MFC r337028: MFV r337027: 9328 zap code can take advantage of c99 9329 panic in zap_leaf_lookup() due to concurrent zapification
      MFC r337030: MFV r337029: 9426 metaslab size can exceed offset addressable by spacemap
      MFC r337063: MFV r316926: 7955 libshare needs to initialize only those datasets being modified by the consumer
      MFC r337160: Do not blindly include illumos kernel headers instead of user-space. It is not needed now, and I doubt it much helped at all, creating more confusions then good.
      MFC r337163: MFV r337161: 9512 zfs remap poolname@snapname coredumps
      MFC r337169: MFV r337167: 9442 decrease indirect block size of spacemaps
      MFC r337172, MFV r337171: 9464 txg_kick() fails to see that we are quiescing, forcing transactions to their next stages without leaving them accumulate changes
      MFC r337177: MFV r337175: 9487 Free objects when receiving full stream as clone
      MFC r337179: 9523 Large alloc in zdb can cause trouble
      MFC r337181: 9539 Make zvol operations use _by_dnode routines
      MFC r337183: MFV r337182: 9330 stack overflow when creating a deeply nested dataset
      MFC r337185: MFV r337184: 9457 libzfs_import.c:add_config() has a memory leak
      MFC r337191: MFV r337190: 9486 reduce memory used by device removal on fragmented pools
      MFC r337194: MFV r337193: 9424 ztest failure: "unprotected error in call to Lua API (Invalid value type 'f unction' for key 'error')"
      MFC r337196: MFV r337195: 9454 ::zfs_blkstats should count embedded blocks
      MFC r337198: MFV r337197: 9456 ztest failure in zil_commit_waiter_timeout
      MFC r337201: Fix build after r337196 mismerge.
      MFC r337202: MFV r337200: 9438 Holes can lose birth time info if a block has a mix of birth times
      MFC r337205: MFV r337204: 9439 ZFS double-free due to failure to dirty indirect block
      MFC r337207: MFV r337206: 9338 moved dnode has incorrect dn_next_type
      MFC r337209: MFV r337208: 9591 ms_shift can be incorrectly changed in MOS config for indirect vdevs that have been historically expanded
      MFC r337211: MFV r337210: 9577 remove zfs_dbuf_evict_key tsd
      MFC r337213: MFV r337212: 9465 ARC check for 'anon_size > arc_c/2' can stall the system
      MFC r337215: MFV 337214: 9621 Make createtxg and guid properties public
      MFC r337217: MFV r337216: 7263 deeply nested nvlist can overflow stack
      MFC r337219: MFV r337218: 7261 nvlist code should enforce name length limit
      MFC r337221: MFV r337220: 8375 Kernel memory leak in nvpair code
      MFC r337227: MFV r337223: 9580 Add a hash-table on top of nvlist to speed-up operations
      MFC r337229: Reduce taskq and context-switch cost of zio pipe
      MFC r337870: Fix mismerge in r337196.
      MFC r337883: Add couple tunables/sysctl, missed in r336949.
      MFC r337923: Make vfs.zfs.zio.dva_throttle_enabled sysctl writable.
      MFC r337970: 9738 Fix third block copy allocations, broken at 9112.
      MFC r337972: 9751 Allocation throttling misplacing ditto blocks
      MFC r338869: MFV r338866: 9700 ZFS resilvered mirror does not balance reads
      MFC r337567 (by mmacy): Performance optimization of AVL tree comparator functions
      MFC r339237: Fix r336951 mismerge -- use of uninitialized variable.
      MFC r339197: Add sysctls for dbuf metadata cache variables added in r336959.
      MFC r339288: Remove extra thread_exit() call left after r329802.

mm (1):
      MFC r338827: Sync libarchive with vendor.

np (13):
      MFC r327254, r327904, and r328994.
      MFC r330887: cxgbetool(8): Add the ability to decode hardware TCBs.
      MFC r332515: Fix typo in cxgbetool.8.
      MFC r320419, r337679, r338366, and r338652.
      MFC r325840, r327811, and r329701.
      MFC r333139:
      MFC r336042:
      MFC r338924:
      MFC r338254:
      MFC r320426:
      MFC r334987:
      MFC r335352:
      MFC r336159:

oshogbo (2):
      MFC r336310:   Let geli deal with lost devices without crashing.
      MFC r315411 (mmel):   Unbreak traceroute on system built without CAPSICUM

sef (2):
      MFC r336017,r338799
      MFC r334844, r336180, r336458

slavash (1):
      MFC r338942: Add PCIV_INVALID definition

smh (1):
      MFC r336165:

sobomax (1):
      MFC r309554 and r309631 which breaks down overly long monolithic souce file and reduces duplication by auto-generating functions that only differ in the value of the SCM_XXX constant used.

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-11-STABLE-v1100056.7/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v1100056.7-amd64-bootonly.iso) = 76e6957dd5124525e62f59baac626eeb4c60b622d64b458aa838e4a374f6bc521647376bf41882a19b0ed5767c445dd4420883ab7b1e095a02e15b5874f18347
SHA512 (HardenedBSD-11-STABLE-v1100056.7-amd64-disc1.iso) = 1e2668998564e26911499875d2d163d9bb120746969dc96d6771f5c7c5213ba9dab434a16ba7c49d891fe8f496df6f08026701231abafa7cb1238a5b4f5fcbff
SHA512 (HardenedBSD-11-STABLE-v1100056.7-amd64-memstick.img) = 6e635997ab76acf56b8b0fc44591049b061a4a7e47ef19e1b6603be245430a0d45566d35e19ae04cb693714c9e871bf8d5dcdc71af0a4625fa537486dc439c91
SHA512 (HardenedBSD-11-STABLE-v1100056.7-amd64-mini-memstick.img) = ef95a77087998ea680d3c463c619ee749aa2b5794abed284cd5976b137c651aa3648c512c1af281f073f763df4d2e9a91f3cb79a5205234d321f950e0537b9f9

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=S0Uc
-----END PGP SIGNATURE-----

shortlog-HardenedBSD-11-STABLE-v1100056.7.txt
CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt