HardenedBSD-11-STABLE-v46.16

@opntr opntr released this Mar 30, 2017 · 14291 commits to hardened/10-stable/master since this release

Warning: this is a security update!

Highlights:

  • update to ntp 4.2.8p10 (9e55018) [FreeBSD-SA-Candidate]
  • possible kernel memory discolsure in sys_nanosleep (5e39645) [FreeBSD-SA-Candidate]
  • updated IPSEC subsystem (e6fbe68)
  • fix NULL pointer dereference and panic with shm file pread/pwrite (7169011) [FreeBSD-SA-Candidate]
  • update to libarchive 3.3.1 [FreeBSD-SA-Candidate]

Changelog

Oliver Pinter (9):
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: fix merge conflict in imgact_elf.c
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: fix merge conflict in rtld.c
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: fix merge conflicts in image_elf.c and follow changes after recent MFCs from kib@
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: fix merge conflict in imgact_elf.c after recent upstream style fix
      HBSD: fix merge conflicts in sys/conf/files.{i386,pc98}

Oliver Pinter + (79):
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

Shawn Webb (5):
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Fix typo

ae (9):
      MFC r314430:   When IPv6 fragments reassembly is complete, update mbuf's csum_data   and csum_flags using information from all fragments. This fixes   dropping of reassembled packets due to wrong checksum when the IPv6   checksum offloading is enabled on a network card.
      MFC r314497:   Do not invoke the resize event when previous provider's size was zero.   This is similar to r303637 fix for geom_disk.
      MFC r314614:   Fix matching table entry value. Use real table value instead of its index   in valuestate array.
      MFC r314715:   Reject invalid object types that can not be used with specific opcodes.
      MFC r315050:   Fix the L2 address printed in the "arp: %s moved from %*D" message.
      MFC r304572 (by bz):   Remove the kernel optoion for IPSEC_FILTERTUNNEL, which was deprecated   more than 7 years ago in favour of a sysctl in r192648.
      Add a note about IPsec update to the UPDATING. This is direct commit.
      MFC r314716:   Add IPv6 support to O_IP_DST_LOOKUP opcode.
      MFC r315192:   Ignore ifnet renaming in the bpf ifnet departure handler.

alc (5):
      MFC r309416   Eliminate a stale comment; vm_radix_prealloc() was replaced in r254141.
      MFC r310083   Tidy up.  Mostly, remove or replace stale comments.  Most of the comments   in this file actually described the operation of the swap pager, not the   default pager.  Given that this is the wrong place to discuss the   implementation of the swap pager, it shouldn't come as a surprise that as   the swap pager evolved these comments became increasingly stale.  In   addition, apply some style fixes, like modernizing a few remaining old-   style function definitions.
      MFC r313186   Over the years, the code and comments in vm_page_startup() have diverged   in one respect.  When determining how many page structures to allocate,   contrary to what the comments say, the code does not account for the   overhead of a page structure per page of physical memory.  This revision   changes the code to match the comments.
      MFC r315318   Relax the locking requirements for vm_object_page_noreuse().  While   reviewing all uses of OFF_TO_IDX(), I observed that   vm_object_page_noreuse() is requiring an exclusive lock on the object   when, in fact, a shared lock suffices.
      MFC r314717,315085   Style and punctuation fixes.

amdmi3 (1):
      MFC r315242: Fix late and noauto with geli swap

asomers (5):
      MFC r311572, r311895, r311928, r311985, r312395, r312417
      MFC r312396:
      MFC r312553:
      MFC r312559:
      MFC r312995:

avg (25):
      MFC r313730: try to fix RACCT_RSS accounting
      MFC r313752,r314035: mca: use time_uptime instead of ticks for CMCI throttling
      MFC r314037: jedec_ts: fix slave address check
      MFC r314183: add jedec_ts.4 to the list of manual pages
      MFC r314059: zfs: move zio_taskq_basedc under SYSDC
      MFC r313751: mca: fix writes to MSR_MC_CTL2 in cmci_update
      MFC r314100: fix a typo in __STDC_VERSION__ in __min_size requirements
      MFC r314101: don't use C99 static array indices with older GCC versions
      MFC r314271: chromebook_platform: catch up with ig4iic -> ig4iic_pci in r310621
      MFC r314268: add chromebook_platform.4 to the list of manual pages
      MFC r314357: edge-triggered interrupt mode is set by clearing APIC_LVT_TM
      MFC r314272: call vm_lowmem hook in uma_reclaim_worker
      MFC r314273: zfs: call spa_deadman on a taskqueue thread
      MFC r314058: zfs: lower priority of zio_write_issue threads by four
      MFC r314666: ioat: don't specify inline for function with variable argument list
      MFC r314274: l2arc: fix write size calculation broken by Compressed ARC commit
      MFC r314864: firewire/sbp: try to improve locking, plus a few style nits
      MFC r314912: MFV r314910: 7843 get_clones_stat() is suboptimal for lots of clones
      MFC r314913: MFV r314911: 7867 ARC space accounting leak
      MFC r315074: actually implement proc:::lwp-exit probe
      MFC r315075: trace thread running state when a thread is run for the first time
      MFC r315083: aacraid: fix build with AACRAID_DEBUG=2
      MFC r314048,r314194: reimplement zfsctl (.zfs) support
      add UPDATING entry for r315842, MFC of re-worked .zfs code
      MFC r315076: zfs: provide a special vptocnp method for the .zfs vnode

avos (1):
      MFC r314287: iwn: stop all watchdogs on device shutdown.

badger (3):
      MFC r313733:
      MFC r313992, r314075, r314118, r315484:
      MFC r315412, r314852:

bapt (6):
      MFC r315571:
      MFC r315053-r315054, r315056
      MFC r314902:
      MFC r314520:
      MFC r314903:
      MFC r314942:

bdrewery (11):
      MFC r313184:
      MFC r313163:
      MFC r313904:
      MFC r314001:
      MFC r313905:
      MFC r309626,r309627,r309659:
      MFC r313907:
      MFC r313909:
      MFC r314714:
      MFC r314886,r314943,r314944:
      MFC r314709,r314790,r314794:

brooks (1):
      MFC r314556-r314558

cy (4):
      MFC r314627:
      MFC r312886:
      MFC r314768:
      MFC r314896:

davidcs (2):
      MFC r314062 add bus_dmamap_unload in ql_free_dmabuf()
      MFC r314365 1. state checks in bxe_tx_mq_start_locked() and bxe_tx_mq_start() to    sync threads during interface down or detach. 2. add sysctl to set pause frame parameters 3. increase max segs for TSO packets to BXE_TSO_MAX_SEGMENTS (32) 4. add debug messages for PHY 5. HW LRO support restricted to FreeBSD versions 8.x and above.

dchagin (10):
      MFC r303464 (by brooks@):
      MFC r305093 (by mjg@):
      MFC r313913:
      MFC r313940:
      MFC r314132:
      MFC r314643:
      MFC r313740:
      MFC r315278:
      MFC r315503:
      MFC r315499:

delphij (2):
      MFC r315225:
      MFC r315871: MFV r315791: ntp 4.2.8p10.

des (5):
      MFH (r314528): update to reflect the state of SHA-1
      MFH (r314554): fix date in previous commit
      MFH (r314598): load default options before requesting ticket
      MFH (r313974,r314596): open .netrc early in case we want to drop privs MFH (r314396,r315143): fix a crash caused by an incorrect format string MFH (r314701): fix handling of 416 errors when requesting a range MFH (r315455): fix parsing of IP literals (square brackets)
      Subset of upstream r902 which fixes custom prompts.

dim (6):
      Pull in r291403 from upstream clang trunk (by Richard Smith):
      MFC r314061:
      MFC r310232:
      Pull in r283944 from upstream libc++ trunk (by Eric Fiselier):
      MFC r315689:
      MFC r315745:

emaste (3):
      MFC r313774:    localtime: return NULL if time_t out of range of struct tm
      MFC r314139: make vi message catalogues build independent of locale
      MFC r312899: add octeon+ as an alias for octeon in GCC & binutils

garga (1):
      MFC r314039:

gjb (2):
      MFC r314916:  Fix permissions on /tmp when installing the runtime package.
      MFC r313021, r313027, r313044:

gnn (2):
      MFC: 311225, 311243, 313045
      MFC: 313176, 313177, 313359

gonzo (4):
      MFC r313757:
      MFC r310645:
      MFC r313712:
      MFC r314535:

grehan (3):
      MFC  r315361 and  r315364: Hide MONITORX/MWAITX from guests.
      MFC r315715  Fix a type in bhyve's USB mouse emulation.
      MFC r315716   Bring the handling of the y axis in the ums driver in-line with the other   axes.

hselasky (8):
      MFC r310806:
      MFC r312338:
      MFC r312424:
      MFC r312551:
      MFC r313778:
      MFC r313941:
      MFC r314328:
      MFC r314553:

ian (26):
      MFC r310430:
      MFC r311658:
      MFC r303346:
      MFC r303347, r303350, r303351, r303353:
      MFC r308640:
      MFC r306262, r306267, r310021: (needed to avoid conflicts on later merges)
      MFC r311734, r311735, r311951, r314071:
      MFC r308186, r308188, r308231, r308232:
      MFC r311736:
      MFC r312859:
      MFC r313674:
      MFC r314064, r314060:
      MFC r313917:
      MFC r313918:  Add definitions for the IEEE-1588 registers.
      MFC r313919:  Add dtb files for Boundary Devices Nitrogen 6 family boards.
      MFC r302506:
      MFC r309195:
      MFC r306901:
      MFC r312251:
      MFC r312292, r313573:
      MFC r311103, r311907:
      MFC r311954, r311996, r312077, r312080:
      MFC r313287:
      MFC r312679:
      MFC r310189:
      MFC r314918, r314919:

jamie (1):
      MFC r316022,r316023:

jilles (3):
      MFC r314637: sh: Add some already working tests that exercise new code paths
      MFC r314686: sh: Fix crash if a -T trap is taken during command substitution
      MFC r315005: sh: Fix executing wrong command with ${x#$(y)}$(z).

jlh (1):
      MFC r314995: Add a very natural, binary version of the ASCII table.

jpaetzel (1):
      MFC 313879

kevlo (2):
      MFC r315294: Fix unreachable code in wi_pci_resume().
      MFC r315878: Don't initialize if_output to ether_output(), ether_ifattach() does it for us already.  While here, remove NOTYET code since if_watchdog is no longer used.

kib (32):
      MFC kern_mmap(9) and related helpers.
      MFC r313734: Add RLIM_SAVED_MAX and RLIM_SAVED_CUR symbols.
      MFC r314195: Properly handle possible underflow in vm_fault_prefault().
      MFC r313898, r313902, r313903, r313934, r314087, r314252: Merge i386 and amd64 mtrr drivers.
      MFC r314490: Add some explanation for SV_TIMEKEEP flag.
      MFC r314562: Style.
      MFC r314429: Initialize pcb_save for thread0.
      MFC r314211: Remove cpu_deepest_sleep variable.
      MFC r314253: Do not leak mount references for dying threads.
      MFC r314960: Fix typo in comment.
      MFC r314486: When deallocating the vm object in elf_map_insert() due to vm_map_insert() failure, drop the vnode lock around the call to vm_object_deallocate().
      Switch from the usage of vm_map_find()/vm_map_insert() to vm_map_fixed().
      MFC r314849: Consistently use vm_ooffset_t type for the vm object offset in elf_load_section.
      MFC r314850: Require whole brand string matching for old Elf branding.
      MFC r314851: When selecting brand based on old Elf branding, prefer the brand which interpreter exactly matches the one requested by the activated image.
      Direct commit to stable/11, a followup to fix r314591 on pc98.
      MFC r307688: With the removal of IA64, the only arch which uses ia32 compat is amd64.
      MFC r314489: With the removal of IA64, the only arch which uses ia32 compat is amd64.
      MFC r314973: Avoid bind lock recursion.
      MFC r315155: Ktracing kevent(2) calls with unusual arguments might leads to an overly large allocation requests.
      MFC r315238: Use designated initializers for kevent_copyops.
      MFC r315156: Style.
      MFC r315157: Accept linkers representation for ELF segments with zero on-disk length.
      MFC r315159: Avoid reusing p_ksi while it is on queue.
      MFC r313690: Consistently handle negative or wrapping offsets in the mmap(2) syscalls.
      MFC r315453: When clearing altsigstack settings on exec, do it to the right thread.
      MFC r315586: Style.
      MFC r315588: Update the list of cpudev ioctls which require write access.
      MFC r315552: Fix off-by-one in the vm_fault_populate() code.
      MFC r315281: Use atop() instead of OFF_TO_IDX() for convertion of addresses or addresses offsets, as intended.
      MFC r309068 (by jhb): Fix _mips_rtld_bind() to handle ELF filters.
      MFC r315331: Implement LD_BIND_NOT knob for rtld.

kp (2):
      pf: Fix a crash in low-memory situations
      MFC 315529

lidl (2):
      MFC r314111: Improve ipfw rule creation for blacklist-helper script
      MFC r314120: Reset failed login count to zero when removing a blocked address

lwhsu (1):
      MFC 308106: - Use virtualbox-ose-additions-nox11 for vagrant image to reduce size

markj (5):
      MFC r313841, r313850: Prevent CPU migration when checking the DTrace nofault flag on x86.
      MFC r314625: Fix a ticks comparison in sched_pctcpu_update().
      MFC r314153, r314154: Fix some memory leaks in CDDL code.
      MFC r313748, r313749: Register nss_atexit() before parsing nsswitch.conf for the first time.
      MFC r315018: Typo.

mav (92):
      MFC r313738: Temporary attach AHS to BHS to calculate header digest.
      MFC r313731: Do not rely on data alignment after m_pullup().
      MFC r313739: Directly call m_gethdr() instead of m_getm2() for BHS.
      MFC r313744: No need to erase sense_data when sense_len is set to zero.
      MFC r313949: Remove dead mentions of CAM target mode APIs from drivers.
      MFC r313779: Fix handling of negative sbspace() return values.
      MFC r313851: Fix tight loop spinning on postponed requests.
      MFC r313852: Freeze CAM SIM when request is postponed due to MaxCmdSN.
      MFC r313854, r313963: Change the way MaxCmdSN is used.
      MFC r313945: Remove broken remnants of obsolete INOT API.
      MFC r313936, r313937: Move CTIO waitq from per-LUN to per-channel.
      MFC r314358: Announce that sbp_targ(4) does not support initiator mode.
      MFC r314027: Do not blindly free completed ATIOs/INOTs on invalidation.
      MFC r314038: Remove ancient __FreeBSD_version checks.
      MFC r314045: Remove duplicate INOT allocation.
      MFC r314086: Fix multiple problems around LUN disable under load.
      MFC r314088: Slightly polish isp_dump_atpd().
      MFC r314193: Some code cleanup.
      MFC r314196: Unify ATIO/INOT CCBs requeuing.
      MFC r314200: We can't access periph after ctlfe_free_ccb().
      MFC r314203: Fix missing xpt_done() for ATIO/INOT on missing LUN.
      MFC r314204: Explicitly abort ATIO if CTIO sending status has failed.
      MFC r314208: Respecting r314204 tighten ATIO cleanup requirements.
      MFC r314246: Improve CAM target frontend reference counting.
      MFC r314247: Axe out some forever disabled questionable functionality.
      MFC r314255: Reenable CTL_WITH_CA, optimizing it for lower memory usage.
      MFC r314257: Add reporting SAS protocol, in case we ever have one.
      MFC r314299, r314300: Fix residual length reporting in target mode.
      MFC r314302: Return better error code in case of too long CDB.
      MFC r314387: Make ctl_queue_sense() not sleep.
      MFC r314496: Add check missed in r314257.
      MFC r314326: Send TERMINATE to firmware when aborting active ATIO.
      MFC r314338: Polish handling of different reset flavours.
      MFC r314374: Add safety check against too long CDB.
      MFC r314592: Fix JSON output.
      MFC r314307: Add support for SIMs without autosense.
      MFC r314308: Fix LUN enabling on wildcard target, as done by CTL.
      MFC r314786: Import mpr(4) driver P12 to P14 diff from vendor site.
      MFC r314375: Remove some locking not needed for modern CAM.
      MFC r314555: Inline some trivial wrapper functions.
      MFC r314548: Completely skip cache flushing for not supporting log devices.
      MFC r314549: Execute last ZIO of log commit synchronously.
      MFC r307397: Add vfs.zfs.zil_log_limit sysctl.
      MFC r308782: After some ZIL changes 6 years ago zil_slog_limit got partially broken due to zl_itx_list_sz not updated when async itx'es upgraded to sync. Actually because of other changes about that time zl_itx_list_sz is not really required to implement the functionality, so this patch removes some unneeded broken code and variables.
      MFC r308099: Add sysctls for zfs_immediate_write_sz and zvol_immediate_write_sz.
      MFC r309833: Add missed vfs.zfs.zfetch.max_idistance sysctl.
      MFC r309856: Postpone ZVOL media/block size caching till first open.
      MFC r314906: Add initial support for UNMAP granularity.
      MFC r314908: When chunking large DIOCGDELETE, do it on stripe edge.
      MFC r314952: Fix unused variable when built without INVARIANT_SUPPORT.
      MFC r314964: Decode modern PIM flags.
      MFC r303874 (by trasz): Remove NULL check after M_WAITOK allocation from mpt(4).
      MFC r308423 (by scottl): Fix the fallout from r308268 (mpt driver causes endless witness warnings in VMWare and elsewhere) with the precision of a dull, rusty butter knife.
      MFC r311305 (by asomers): Always null-terminate ccb_pathinq.(sim_vid|hba_vid|dev_name)
      MFC r314966: Report FC link speed.
      MFC r314968: Report some more data in XPT_PATH_INQ.
      MFC r314967: Add support for XPT_GET_SIM_KNOB in FC mode.
      MFC r314998: Fix FC target mode in mpt(4), broken in multiple ways.
      MFC r315001: Fix panic on wildcard target LUN disable.
      MFC r315002: Improve residuals reporting in target mode.
      MFC r315004: Add PIM_EXTLUNS support to mpt(4).
      MFC r315067: Partially fix target task management requests handling.
      MFC r315025: Switch work_queue from TAILQ to STAILQ.
      MFC r315030: Abort all ATIOs and INOTs queued to SIM on LUN disable.
      MFC r315022: Request change of SIM target role only when it is different.
      MFC r315082: Allow XPT_GDEV_STATS for UNCONFIGURED devices.
      MFC r315084: Increase device openings to tagged maximum.
      MFC r315087, r315146: Improve ctl(4) description, including frontends and backends.
      MFC r315163: Remove strange config_intrhook_establish() magic.
      MFC r315160: Remove code for unsupported FreeBSD versions.
      MFC r315161: Try to slight untangle I/O and loop status handling.
      MFC 315229: Remove remnant of r315163.
      MFC r315234: Improvements around attach, reset and detach.
      MFC r315236: Remove dangerous and questionable isp_mboxcmd_qnw() call.
      MFC r315273: Remove tangled isp_mbox_continue() mechanism.
      MFC r315279: Remove some dead/broken code paths around async handling
      MFC r315711: Fix printing bits above first eight.
      MFC r314870: Add mechanism to unload CAM periph drivers.
      MFC r315298: Fix ancient bug from r84597, which broke 23xx after r315234.
      MFC r315303: Fix panic when SIM dereferenced before allocation.
      MFC r315307: Refactor interrupt handling.
      MFC r315327: Remove not very useful ATIO/INOT stats.
      MFC r315478: Do some notify acks cleanup.
      MFC r315482: Use isp_target_put_entry() in places where it can be.
      MFC r315485: Remove dead remnants of SPI target.
      MFC r315488: Extend nt_lun to full 8 byte.
      MFC r315489: Move RQSTYPE_ABTS_RCVD parsing into generic code.
      MFC r315507: Reorganize RQSTYPE_NOTIFY handling for chips <= 23xx.
      MFC r315533: Move 24xx RQSTYPE_NOTIFY handling to generic code.
      MFC r315534: Remove some dead stuff.
      MFC r315536: Move <= 23xx PDB workaround to generic code.
      MFC r315545: Remove hackish code delaying ATIOs to unknown virtual port.

mizhka (2):
      MFC r310017-r310018
      MFC r308700:

mjg (31):
      MFC r312888:
      MFC r312724,r312901,r312902:
      MFC r312890,r313386,r313390:
      MFC r305671:
      MFC r311172,r311194,r311226,r312389,r312390:
      MFC r311169,r311898,r312925,r312973,r312975,r313007,r313040,r313080,     r313254,r313341
      MFC r313260:
      MFC r313268:
      MFC r313391:
      MFC r313683:
      MFC r313269,r313270,r313271,r313272,r313274,r313278,r313279,r313996,r314474
      MFC r313275,r313280,r313282,r313335:
      MFC r313392,r313784:
      MFC r313454,r313472:
      MFC r313455:
      MFC r313467:
      MFC r313853,r313859:
      MFC r313453:
      MFC r313874:
      MFC r311168,r311171:
      MFC r313472:
      MFC,r313855,r313865,r313875,r313877,r313878,r313901,r313908,r313928,r313944,r314185,r314476,r314187
      MFC r309784,r309783: Use a consistent snapshot of the lock state in owner_mtx().
      MFC r312980:
      MFC r312981:
      MFC r312889:
      MFC r312723:
      MFC r309425,r312645,r312598,r312621:
      MFC r312600,r312601,r312602,r312606,r312646:
      MFC r312932,r312933,r312949,r313141
      MFC r305383:

mm (2):
      MFC r314572:
      MFC r314571: Update libarchive to version 3.3.1 (and sync with latest vendor dist)

mmokhi (2):
      MFC r314219 Add linux_preadv() and linux_pwritev() syscalls to Linuxulator.
      MFC r314996 Fix NULL pointer dereference and panic with shm file pread/pwrite.

ngie (51):
      MFC r314244:
      MFC r313439,r314450:
      MFC r313438:
      MFC r313009:
      MFC r314226:
      MFC r314242:
      MFC r314240:
      MFC r314239:
      MFC r314645:
      MFC r305283,r314649:
      MFC r314644:
      MFC r314650:
      MFC r314189,r314190,r314191:
      MFC r314233:
      MFC r314610:
      MFC r314545:
      MFC r314542:
      MFC r314793,r314796,r314797,r314798,r314799,r314800,r314801,r314802,r314803,r314804,r314805:
      MFC r314807:
      MFC r314869,r314871,r314872:
      MFC r314830:
      MFC r314895:
      MFC r314831:
      MFC r315114:
      MFC r315111:
      MFC r314924:
      MFC r315113:
      MFC r314951:
      MFC r310345: r310345 (by sephe):
      MFC r311601:
      MFC r315098,r315106,r315108:
      MFC r315132,r315133,r315186:
      MFC r315202:
      MFC r315199,r315200,r315203:
      MFC r315206:
      MFC r314241,r315228:
      MFC r315320:
      MFC r315654:
      MFC r315362,r315363,r315365:
      MFC r315360:
      MFC r314892: r314892 (by cy):
      MFC r315595,r315601,r315603,r315647:
      MFC r315690:
      MFC r315641,r315642:
      MFC r314245:
      MFC r315639:
      MFC r315686,r315688:
      MFC r313436,r313437,r313438,r314587,r315687:
      MFC r315697:
      MFC r315699:
      MFC r315738:

np (4):
      MFC r314400:
      MFC r314509 and r314578.
      MFC r314814 and r315325.
      MFC r315201, r315920, r315921, r315922, r316008, and r316062.

pfg (13):
      MFC r314316: dc(1): Catch up with OpenBSD tag.
      MFC r314505: Split the ficl CFLAGS when they refer to an arch-specific include path.
      MFC r314145, r314158 vxge(4): double assignments.
      MFC r314321: dc(1): Merge minor changes from OpenBSD.
      MFC r313982, r314068: sys: Replace zero with NULL for pointers.
      MFC r314974, r315006: localedef(1): Fix small coverity issues.
      MFC r312934: Make use of clang nullability attributes in C headers.
      MFC r315095, r315096, r315097, r315187: libc: small cleanups.
      MFC r315426, MFV r315425: one-true-awk: have calloc(3) do the multiplication.
      MFC r315212, r315213, r315214, r315215: mkimg(1): let calloc(3) do the multiplication. nscd(8): let calloc(3) do the multiplying. mpsutil(8): let calloc(3) do the multiplying. ypbind(8): let calloc(3) do the multiplying.
      MFC r312942: Remove GCC's __nonnull() attribute definition.
      MFC r314877: lpr(1): small bounds check with reallocarray(3).
      MFC r315720 (from cem@) scandir: Fix NULL dereference, uninitialized value use in error case

royger (5):
      MFC r308126:
      MFC r314842:
      MFC r314094:
      MFC r314841:
      MFC r314840:

sephe (1):
      MFC: 314382-314485

sevan (5):
      MFC 315964 ftp.microsoft.com is dead and the document was not archived, point to the full protocol spec document instead. Fix spelling mistake flagged by igor. Rephrase bad sentence flagged by igor.
      MFC 312684
      MFC 309552
      MFC r312692
      MFC r309192

smh (1):
      MFC r315423:

trasz (28):
      MFC r306094:
      MFC r306096:
      MFC r306129:
      MFC r306160:
      MFC r306161:
      MFC r308339:
      MFC r311284:
      MFC r311283:
      MFC r312622:
      MFC r312539 (by mav@):
      MFC r313017:
      MFC r313283:
      MFC r313350:
      MFC r313351:
      MFC r313804:
      MFC r313995:
      MFC r314282:
      MFC r313993:
      MFC r313915:
      MFC r313946:
      MFC r312986:
      MFC r312988:
      MFC r312987:
      MFC r313016:
      MFC r313018:
      MFC r313015:
      MFC r313281:
      MFC r313947:

vangyzen (10):
      MFC r313817
      MFC r314055
      MFC r313820
      MFC r314626
      MFC r314179 r314206 r314424
      MFC r313821Highlights:
 * ...

Changelog

Oliver Pinter (9):
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
HBSD: fix merge conflict in imgact_elf.c
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
HBSD: fix merge conflict in rtld.c
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
HBSD: fix merge conflicts in image_elf.c and follow changes after recent MFCs from kib@
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
HBSD: fix merge conflict in imgact_elf.c after recent upstream style fix
HBSD: fix merge conflicts in sys/conf/files.{i386,pc98}

Oliver Pinter + (79):
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

Shawn Webb (5):
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
HBSD: Resolve merge conflict
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
HBSD: Fix typo

ae (9):
MFC r314430: When IPv6 fragments reassembly is complete, update mbuf's csum_data and csum_flags using information from all fragments. This fixes dropping of reassembled packets due to wrong checksum when the IPv6 checksum offloading is enabled on a network card.
MFC r314497: Do not invoke the resize event when previous provider's size was zero. This is similar to r303637 fix for geom_disk.
MFC r314614: Fix matching table entry value. Use real table value instead of its index in valuestate array.
MFC r314715: Reject invalid object types that can not be used with specific opcodes.
MFC r315050: Fix the L2 address printed in the "arp: %s moved from %*D" message.
MFC r304572 (by bz): Remove the kernel optoion for IPSEC_FILTERTUNNEL, which was deprecated more than 7 years ago in favour of a sysctl in r192648.
Add a note about IPsec update to the UPDATING. This is direct commit.
MFC r314716: Add IPv6 support to O_IP_DST_LOOKUP opcode.
MFC r315192: Ignore ifnet renaming in the bpf ifnet departure handler.

alc (5):
MFC r309416 Eliminate a stale comment; vm_radix_prealloc() was replaced in r254141.
MFC r310083 Tidy up. Mostly, remove or replace stale comments. Most of the comments in this file actually described the operation of the swap pager, not the default pager. Given that this is the wrong place to discuss the implementation of the swap pager, it shouldn't come as a surprise that as the swap pager evolved these comments became increasingly stale. In addition, apply some style fixes, like modernizing a few remaining old- style function definitions.
MFC r313186 Over the years, the code and comments in vm_page_startup() have diverged in one respect. When determining how many page structures to allocate, contrary to what the comments say, the code does not account for the overhead of a page structure per page of physical memory. This revision changes the code to match the comments.
MFC r315318 Relax the locking requirements for vm_object_page_noreuse(). While reviewing all uses of OFF_TO_IDX(), I observed that vm_object_page_noreuse() is requiring an exclusive lock on the object when, in fact, a shared lock suffices.
MFC r314717,315085 Style and punctuation fixes.

amdmi3 (1):
MFC r315242: Fix late and noauto with geli swap

asomers (5):
MFC r311572, r311895, r311928, r311985, r312395, r312417
MFC r312396:
MFC r312553:
MFC r312559:
MFC r312995:

avg (25):
MFC r313730: try to fix RACCT_RSS accounting
MFC r313752,r314035: mca: use time_uptime instead of ticks for CMCI throttling
MFC r314037: jedec_ts: fix slave address check
MFC r314183: add jedec_ts.4 to the list of manual pages
MFC r314059: zfs: move zio_taskq_basedc under SYSDC
MFC r313751: mca: fix writes to MSR_MC_CTL2 in cmci_update
MFC r314100: fix a typo in STDC_VERSION in __min_size requirements
MFC r314101: don't use C99 static array indices with older GCC versions
MFC r314271: chromebook_platform: catch up with ig4iic -> ig4iic_pci in r310621
MFC r314268: add chromebook_platform.4 to the list of manual pages
MFC r314357: edge-triggered interrupt mode is set by clearing APIC_LVT_TM
MFC r314272: call vm_lowmem hook in uma_reclaim_worker
MFC r314273: zfs: call spa_deadman on a taskqueue thread
MFC r314058: zfs: lower priority of zio_write_issue threads by four
MFC r314666: ioat: don't specify inline for function with variable argument list
MFC r314274: l2arc: fix write size calculation broken by Compressed ARC commit
MFC r314864: firewire/sbp: try to improve locking, plus a few style nits
MFC r314912: MFV r314910: 7843 get_clones_stat() is suboptimal for lots of clones
MFC r314913: MFV r314911: 7867 ARC space accounting leak
MFC r315074: actually implement proc:::lwp-exit probe
MFC r315075: trace thread running state when a thread is run for the first time
MFC r315083: aacraid: fix build with AACRAID_DEBUG=2
MFC r314048,r314194: reimplement zfsctl (.zfs) support
add UPDATING entry for r315842, MFC of re-worked .zfs code
MFC r315076: zfs: provide a special vptocnp method for the .zfs vnode

avos (1):
MFC r314287: iwn: stop all watchdogs on device shutdown.

badger (3):
MFC r313733:
MFC r313992, r314075, r314118, r315484:
MFC r315412, r314852:

bapt (6):
MFC r315571:
MFC r315053-r315054, r315056
MFC r314902:
MFC r314520:
MFC r314903:
MFC r314942:

bdrewery (11):
MFC r313184:
MFC r313163:
MFC r313904:
MFC r314001:
MFC r313905:
MFC r309626,r309627,r309659:
MFC r313907:
MFC r313909:
MFC r314714:
MFC r314886,r314943,r314944:
MFC r314709,r314790,r314794:

brooks (1):
MFC r314556-r314558

cy (4):
MFC r314627:
MFC r312886:
MFC r314768:
MFC r314896:

davidcs (2):
MFC r314062 add bus_dmamap_unload in ql_free_dmabuf()
MFC r314365 1. state checks in bxe_tx_mq_start_locked() and bxe_tx_mq_start() to sync threads during interface down or detach. 2. add sysctl to set pause frame parameters 3. increase max segs for TSO packets to BXE_TSO_MAX_SEGMENTS (32) 4. add debug messages for PHY 5. HW LRO support restricted to FreeBSD versions 8.x and above.

dchagin (10):
MFC r303464 (by brooks@):
MFC r305093 (by mjg@):
MFC r313913:
MFC r313940:
MFC r314132:
MFC r314643:
MFC r313740:
MFC r315278:
MFC r315503:
MFC r315499:

delphij (2):
MFC r315225:
MFC r315871: MFV r315791: ntp 4.2.8p10.

des (5):
MFH (r314528): update to reflect the state of SHA-1
MFH (r314554): fix date in previous commit
MFH (r314598): load default options before requesting ticket
MFH (r313974,r314596): open .netrc early in case we want to drop privs MFH (r314396,r315143): fix a crash caused by an incorrect format string MFH (r314701): fix handling of 416 errors when requesting a range MFH (r315455): fix parsing of IP literals (square brackets)
Subset of upstream r902 which fixes custom prompts.

dim (6):
Pull in r291403 from upstream clang trunk (by Richard Smith):
MFC r314061:
MFC r310232:
Pull in r283944 from upstream libc++ trunk (by Eric Fiselier):
MFC r315689:
MFC r315745:

emaste (3):
MFC r313774: localtime: return NULL if time_t out of range of struct tm
MFC r314139: make vi message catalogues build independent of locale
MFC r312899: add octeon+ as an alias for octeon in GCC & binutils

garga (1):
MFC r314039:

gjb (2):
MFC r314916: Fix permissions on /tmp when installing the runtime package.
MFC r313021, r313027, r313044:

gnn (2):
MFC: 311225, 311243, 313045
MFC: 313176, 313177, 313359

gonzo (4):
MFC r313757:
MFC r310645:
MFC r313712:
MFC r314535:

grehan (3):
MFC r315361 and r315364: Hide MONITORX/MWAITX from guests.
MFC r315715 Fix a type in bhyve's USB mouse emulation.
MFC r315716 Bring the handling of the y axis in the ums driver in-line with the other axes.

hselasky (8):
MFC r310806:
MFC r312338:
MFC r312424:
MFC r312551:
MFC r313778:
MFC r313941:
MFC r314328:
MFC r314553:

ian (26):
MFC r310430:
MFC r311658:
MFC r303346:
MFC r303347, r303350, r303351, r303353:
MFC r308640:
MFC r306262, r306267, r310021: (needed to avoid conflicts on later merges)
MFC r311734, r311735, r311951, r314071:
MFC r308186, r308188, r308231, r308232:
MFC r311736:
MFC r312859:
MFC r313674:
MFC r314064, r314060:
MFC r313917:
MFC r313918: Add definitions for the IEEE-1588 registers.
MFC r313919: Add dtb files for Boundary Devices Nitrogen 6 family boards.
MFC r302506:
MFC r309195:
MFC r306901:
MFC r312251:
MFC r312292, r313573:
MFC r311103, r311907:
MFC r311954, r311996, r312077, r312080:
MFC r313287:
MFC r312679:
MFC r310189:
MFC r314918, r314919:

jamie (1):
MFC r316022,r316023:

jilles (3):
MFC r314637: sh: Add some already working tests that exercise new code paths
MFC r314686: sh: Fix crash if a -T trap is taken during command substitution
MFC r315005: sh: Fix executing wrong command with ${x#$(y)}$(z).

jlh (1):
MFC r314995: Add a very natural, binary version of the ASCII table.

jpaetzel (1):
MFC 313879

kevlo (2):
MFC r315294: Fix unreachable code in wi_pci_resume().
MFC r315878: Don't initialize if_output to ether_output(), ether_ifattach() does it for us already. While here, remove NOTYET code since if_watchdog is no longer used.

kib (32):
MFC kern_mmap(9) and related helpers.
MFC r313734: Add RLIM_SAVED_MAX and RLIM_SAVED_CUR symbols.
MFC r314195: Properly handle possible underflow in vm_fault_prefault().
MFC r313898, r313902, r313903, r313934, r314087, r314252: Merge i386 and amd64 mtrr drivers.
MFC r314490: Add some explanation for SV_TIMEKEEP flag.
MFC r314562: Style.
MFC r314429: Initialize pcb_save for thread0.
MFC r314211: Remove cpu_deepest_sleep variable.
MFC r314253: Do not leak mount references for dying threads.
MFC r314960: Fix typo in comment.
MFC r314486: When deallocating the vm object in elf_map_insert() due to vm_map_insert() failure, drop the vnode lock around the call to vm_object_deallocate().
Switch from the usage of vm_map_find()/vm_map_insert() to vm_map_fixed().
MFC r314849: Consistently use vm_ooffset_t type for the vm object offset in elf_load_section.
MFC r314850: Require whole brand string matching for old Elf branding.
MFC r314851: When selecting brand based on old Elf branding, prefer the brand which interpreter exactly matches the one requested by the activated image.
Direct commit to stable/11, a followup to fix r314591 on pc98.
MFC r307688: With the removal of IA64, the only arch which uses ia32 compat is amd64.
MFC r314489: With the removal of IA64, the only arch which uses ia32 compat is amd64.
MFC r314973: Avoid bind lock recursion.
MFC r315155: Ktracing kevent(2) calls with unusual arguments might leads to an overly large allocation requests.
MFC r315238: Use designated initializers for kevent_copyops.
MFC r315156: Style.
MFC r315157: Accept linkers representation for ELF segments with zero on-disk length.
MFC r315159: Avoid reusing p_ksi while it is on queue.
MFC r313690: Consistently handle negative or wrapping offsets in the mmap(2) syscalls.
MFC r315453: When clearing altsigstack settings on exec, do it to the right thread.
MFC r315586: Style.
MFC r315588: Update the list of cpudev ioctls which require write access.
MFC r315552: Fix off-by-one in the vm_fault_populate() code.
MFC r315281: Use atop() instead of OFF_TO_IDX() for convertion of addresses or addresses offsets, as intended.
MFC r309068 (by jhb): Fix _mips_rtld_bind() to handle ELF filters.
MFC r315331: Implement LD_BIND_NOT knob for rtld.

kp (2):
pf: Fix a crash in low-memory situations
MFC 315529

lidl (2):
MFC r314111: Improve ipfw rule creation for blacklist-helper script
MFC r314120: Reset failed login count to zero when removing a blocked address

lwhsu (1):
MFC 308106: - Use virtualbox-ose-additions-nox11 for vagrant image to reduce size

markj (5):
MFC r313841, r313850: Prevent CPU migration when checking the DTrace nofault flag on x86.
MFC r314625: Fix a ticks comparison in sched_pctcpu_update().
MFC r314153, r314154: Fix some memory leaks in CDDL code.
MFC r313748, r313749: Register nss_atexit() before parsing nsswitch.conf for the first time.
MFC r315018: Typo.

mav (92):
MFC r313738: Temporary attach AHS to BHS to calculate header digest.
MFC r313731: Do not rely on data alignment after m_pullup().
MFC r313739: Directly call m_gethdr() instead of m_getm2() for BHS.
MFC r313744: No need to erase sense_data when sense_len is set to zero.
MFC r313949: Remove dead mentions of CAM target mode APIs from drivers.
MFC r313779: Fix handling of negative sbspace() return values.
MFC r313851: Fix tight loop spinning on postponed requests.
MFC r313852: Freeze CAM SIM when request is postponed due to MaxCmdSN.
MFC r313854, r313963: Change the way MaxCmdSN is used.
MFC r313945: Remove broken remnants of obsolete INOT API.
MFC r313936, r313937: Move CTIO waitq from per-LUN to per-channel.
MFC r314358: Announce that sbp_targ(4) does not support initiator mode.
MFC r314027: Do not blindly free completed ATIOs/INOTs on invalidation.
MFC r314038: Remove ancient __FreeBSD_version checks.
MFC r314045: Remove duplicate INOT allocation.
MFC r314086: Fix multiple problems around LUN disable under load.
MFC r314088: Slightly polish isp_dump_atpd().
MFC r314193: Some code cleanup.
MFC r314196: Unify ATIO/INOT CCBs requeuing.
MFC r314200: We can't access periph after ctlfe_free_ccb().
MFC r314203: Fix missing xpt_done() for ATIO/INOT on missing LUN.
MFC r314204: Explicitly abort ATIO if CTIO sending status has failed.
MFC r314208: Respecting r314204 tighten ATIO cleanup requirements.
MFC r314246: Improve CAM target frontend reference counting.
MFC r314247: Axe out some forever disabled questionable functionality.
MFC r314255: Reenable CTL_WITH_CA, optimizing it for lower memory usage.
MFC r314257: Add reporting SAS protocol, in case we ever have one.
MFC r314299, r314300: Fix residual length reporting in target mode.
MFC r314302: Return better error code in case of too long CDB.
MFC r314387: Make ctl_queue_sense() not sleep.
MFC r314496: Add check missed in r314257.
MFC r314326: Send TERMINATE to firmware when aborting active ATIO.
MFC r314338: Polish handling of different reset flavours.
MFC r314374: Add safety check against too long CDB.
MFC r314592: Fix JSON output.
MFC r314307: Add support for SIMs without autosense.
MFC r314308: Fix LUN enabling on wildcard target, as done by CTL.
MFC r314786: Import mpr(4) driver P12 to P14 diff from vendor site.
MFC r314375: Remove some locking not needed for modern CAM.
MFC r314555: Inline some trivial wrapper functions.
MFC r314548: Completely skip cache flushing for not supporting log devices.
MFC r314549: Execute last ZIO of log commit synchronously.
MFC r307397: Add vfs.zfs.zil_log_limit sysctl.
MFC r308782: After some ZIL changes 6 years ago zil_slog_limit got partially broken due to zl_itx_list_sz not updated when async itx'es upgraded to sync. Actually because of other changes about that time zl_itx_list_sz is not really required to implement the functionality, so this patch removes some unneeded broken code and variables.
MFC r308099: Add sysctls for zfs_immediate_write_sz and zvol_immediate_write_sz.
MFC r309833: Add missed vfs.zfs.zfetch.max_idistance sysctl.
MFC r309856: Postpone ZVOL media/block size caching till first open.
MFC r314906: Add initial support for UNMAP granularity.
MFC r314908: When chunking large DIOCGDELETE, do it on stripe edge.
MFC r314952: Fix unused variable when built without INVARIANT_SUPPORT.
MFC r314964: Decode modern PIM flags.
MFC r303874 (by trasz): Remove NULL check after M_WAITOK allocation from mpt(4).
MFC r308423 (by scottl): Fix the fallout from r308268 (mpt driver causes endless witness warnings in VMWare and elsewhere) with the precision of a dull, rusty butter knife.
MFC r311305 (by asomers): Always null-terminate ccb_pathinq.(sim_vid|hba_vid|dev_name)
MFC r314966: Report FC link speed.
MFC r314968: Report some more data in XPT_PATH_INQ.
MFC r314967: Add support for XPT_GET_SIM_KNOB in FC mode.
MFC r314998: Fix FC target mode in mpt(4), broken in multiple ways.
MFC r315001: Fix panic on wildcard target LUN disable.
MFC r315002: Improve residuals reporting in target mode.
MFC r315004: Add PIM_EXTLUNS support to mpt(4).
MFC r315067: Partially fix target task management requests handling.
MFC r315025: Switch work_queue from TAILQ to STAILQ.
MFC r315030: Abort all ATIOs and INOTs queued to SIM on LUN disable.
MFC r315022: Request change of SIM target role only when it is different.
MFC r315082: Allow XPT_GDEV_STATS for UNCONFIGURED devices.
MFC r315084: Increase device openings to tagged maximum.
MFC r315087, r315146: Improve ctl(4) description, including frontends and backends.
MFC r315163: Remove strange config_intrhook_establish() magic.
MFC r315160: Remove code for unsupported FreeBSD versions.
MFC r315161: Try to slight untangle I/O and loop status handling.
MFC 315229: Remove remnant of r315163.
MFC r315234: Improvements around attach, reset and detach.
MFC r315236: Remove dangerous and questionable isp_mboxcmd_qnw() call.
MFC r315273: Remove tangled isp_mbox_continue() mechanism.
MFC r315279: Remove some dead/broken code paths around async handling
MFC r315711: Fix printing bits above first eight.
MFC r314870: Add mechanism to unload CAM periph drivers.
MFC r315298: Fix ancient bug from r84597, which broke 23xx after r315234.
MFC r315303: Fix panic when SIM dereferenced before allocation.
MFC r315307: Refactor interrupt handling.
MFC r315327: Remove not very useful ATIO/INOT stats.
MFC r315478: Do some notify acks cleanup.
MFC r315482: Use isp_target_put_entry() in places where it can be.
MFC r315485: Remove dead remnants of SPI target.
MFC r315488: Extend nt_lun to full 8 byte.
MFC r315489: Move RQSTYPE_ABTS_RCVD parsing into generic code.
MFC r315507: Reorganize RQSTYPE_NOTIFY handling for chips <= 23xx.
MFC r315533: Move 24xx RQSTYPE_NOTIFY handling to generic code.
MFC r315534: Remove some dead stuff.
MFC r315536: Move <= 23xx PDB workaround to generic code.
MFC r315545: Remove hackish code delaying ATIOs to unknown virtual port.

mizhka (2):
MFC r310017-r310018
MFC r308700:

mjg (31):
MFC r312888:
MFC r312724,r312901,r312902:
MFC r312890,r313386,r313390:
MFC r305671:
MFC r311172,r311194,r311226,r312389,r312390:
MFC r311169,r311898,r312925,r312973,r312975,r313007,r313040,r313080, r313254,r313341
MFC r313260:
MFC r313268:
MFC r313391:
MFC r313683:
MFC r313269,r313270,r313271,r313272,r313274,r313278,r313279,r313996,r314474
MFC r313275,r313280,r313282,r313335:
MFC r313392,r313784:
MFC r313454,r313472:
MFC r313455:
MFC r313467:
MFC r313853,r313859:
MFC r313453:
MFC r313874:
MFC r311168,r311171:
MFC r313472:
MFC,r313855,r313865,r313875,r313877,r313878,r313901,r313908,r313928,r313944,r314185,r314476,r314187
MFC r309784,r309783: Use a consistent snapshot of the lock state in owner_mtx().
MFC r312980:
MFC r312981:
MFC r312889:
MFC r312723:
MFC r309425,r312645,r312598,r312621:
MFC r312600,r312601,r312602,r312606,r312646:
MFC r312932,r312933,r312949,r313141
MFC r305383:

mm (2):
MFC r314572:
MFC r314571: Update libarchive to version 3.3.1 (and sync with latest vendor dist)

mmokhi (2):
MFC r314219 Add linux_preadv() and linux_pwritev() syscalls to Linuxulator.
MFC r314996 Fix NULL pointer dereference and panic with shm file pread/pwrite.

ngie (51):
MFC r314244:
MFC r313439,r314450:
MFC r313438:
MFC r313009:
MFC r314226:
MFC r314242:
MFC r314240:
MFC r314239:
MFC r314645:
MFC r305283,r314649:
MFC r314644:
MFC r314650:
MFC r314189,r314190,r314191:
MFC r314233:
MFC r314610:
MFC r314545:
MFC r314542:
MFC r314793,r314796,r314797,r314798,r314799,r314800,r314801,r314802,r314803,r314804,r314805:
MFC r314807:
MFC r314869,r314871,r314872:
MFC r314830:
MFC r314895:
MFC r314831:
MFC r315114:
MFC r315111:
MFC r314924:
MFC r315113:
MFC r314951:
MFC r310345: r310345 (by sephe):
MFC r311601:
MFC r315098,r315106,r315108:
MFC r315132,r315133,r315186:
MFC r315202:
MFC r315199,r315200,r315203:
MFC r315206:
MFC r314241,r315228:
MFC r315320:
MFC r315654:
MFC r315362,r315363,r315365:
MFC r315360:
MFC r314892: r314892 (by cy):
MFC r315595,r315601,r315603,r315647:
MFC r315690:
MFC r315641,r315642:
MFC r314245:
MFC r315639:
MFC r315686,r315688:
MFC r313436,r313437,r313438,r314587,r315687:
MFC r315697:
MFC r315699:
MFC r315738:

np (4):
MFC r314400:
MFC r314509 and r314578.
MFC r314814 and r315325.
MFC r315201, r315920, r315921, r315922, r316008, and r316062.

pfg (13):
MFC r314316: dc(1): Catch up with OpenBSD tag.
MFC r314505: Split the ficl CFLAGS when they refer to an arch-specific include path.
MFC r314145, r314158 vxge(4): double assignments.
MFC r314321: dc(1): Merge minor changes from OpenBSD.
MFC r313982, r314068: sys: Replace zero with NULL for pointers.
MFC r314974, r315006: localedef(1): Fix small coverity issues.
MFC r312934: Make use of clang nullability attributes in C headers.
MFC r315095, r315096, r315097, r315187: libc: small cleanups.
MFC r315426, MFV r315425: one-true-awk: have calloc(3) do the multiplication.
MFC r315212, r315213, r315214, r315215: mkimg(1): let calloc(3) do the multiplication. nscd(8): let calloc(3) do the multiplying. mpsutil(8): let calloc(3) do the multiplying. ypbind(8): let calloc(3) do the multiplying.
MFC r312942: Remove GCC's __nonnull() attribute definition.
MFC r314877: lpr(1): small bounds check with reallocarray(3).
MFC r315720 (from cem@) scandir: Fix NULL dereference, uninitialized value use in error case

royger (5):
MFC r308126:
MFC r314842:
MFC r314094:
MFC r314841:
MFC r314840:

sephe (1):
MFC: 314382-314485

sevan (5):
MFC 315964 ftp.microsoft.com is dead and the document was not archived, point to the full protocol spec document instead. Fix spelling mistake flagged by igor. Rephrase bad sentence flagged by igor.
MFC 312684
MFC 309552
MFC r312692
MFC r309192

smh (1):
MFC r315423:

trasz (28):
MFC r306094:
MFC r306096:
MFC r306129:
MFC r306160:
MFC r306161:
MFC r308339:
MFC r311284:
MFC r311283:
MFC r312622:
MFC r312539 (by mav@):
MFC r313017:
MFC r313283:
MFC r313350:
MFC r313351:
MFC r313804:
MFC r313995:
MFC r314282:
MFC r313993:
MFC r313915:
MFC r313946:
MFC r312986:
MFC r312988:
MFC r312987:
MFC r313016:
MFC r313018:
MFC r313015:
MFC r313281:
MFC r313947:

vangyzen (10):
MFC r313817
MFC r314055
MFC r313820
MFC r314626
MFC r314179 r314206 r314424
MFC r313821 r315277 r315286
MFC r315510
MFC r315694
MFC r315640
MFC r315280 r315287


Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-11-STABLE-v46.16/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v46.16-amd64-bootonly.iso) = c07a2ce93b810f69e6ca9d2c6ad3f6ce1618317c5e4719ac8b3b0fc99f3eba988537b92dee9ea42224c7c011d9ee6897ada8d3c86ff752db2dec5285e7034f35
SHA512 (HardenedBSD-11-STABLE-v46.16-amd64-disc1.iso) = f300998e24f7d1404a74f1d8583c7b2442f484ef87747024cdb41bb6f35443f7e7d4b219372e4b3cdc473e8b579aa4c6d7fe94978e71c56783b3266147de0695
SHA512 (HardenedBSD-11-STABLE-v46.16-amd64-memstick.img) = e80ab66255bb2afd921587b025dc82cfd8970db05fe29ad56e634ce5bacf1106f6f94c1efd8c3251ba3f1fe7442e01f9b45da541d9b2f08b2c8807c9d1a60098
SHA512 (HardenedBSD-11-STABLE-v46.16-amd64-mini-memstick.img) = a15e4056a1c7abaf8533760eb81c19b8c557d1e2b07fdcfcf71ad108f574e1001595aac30693be774af1696d17dd1737e1be739eb05bdb084472d4db9cf87628


CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEu1M4jTvZiSgVy54wgZsRom/9GI0FAljdDzoACgkQgZsRom/9
GI1DMQ//TmuA+ThkCqRzOY71AqcKlxYtppaF/SBfadM5M2gTYjhvtBQDQFUDA195
IF+iJy1qqKXHWLShDvZk+szcmrluqwjssCL/CYiCTj0Eym/N3yFttZ9OLTT3sf9s
WlaX+JqJhGG18jwhXS3CEovUTOzd6Q1nFCEaQiEJiuToj3CKFowIb0pr8fDideD/
MwX37eG2gRnGcYJCSWdf+rUpKUTzJk00aY8qr4QhW4Muy5zh8xMQghb50LtmDK6p
V7w2GqFDIeoIOQjp20AHSo5GHPUO2kaHF7DZP4a/GAxl2iPgAnkm+vn16mVtaCQQ
EcL2L3BayDlsOL5YC15wxIMiXm3uDyvAXYG/eV+qENPBC1bSBWgE3VIJz074cSSE
hYnglK7kwGxjZieOW6j8nJIO1IZ7lxTP1guoeB+vKm+jdb+ROPYjkYZVcOj/A4zW
pP2XoYmysrbKBIHcfJ0wZieTToQQEOXkFV9ZHfCwLaElYhEkXzgDC4v7XrdV5eAK
drp8ax0FwHUrXuEYx4wU4OnEFG/RbgAR3Y4ax+2s9wxph+sIRf+eyZ4Sgb5GbYNt
CqMoCneYtAUP9+zO3H4vVouOxSWZpbMqDrVGgpO5h2HM0SB520EXBwjDF7xRr/Pr
rSTyLqnLx4E2U8eUgBYsZmVqp5ehY+CBSbRwWZRubRrF3k6cYIw=
=T6HA
-----END PGP SIGNATURE-----


[shortlog-HardenedBSD-11-STABLE-v46.16.txt](https://github.com/HardenedBSD/hardenedBSD-stable/files/881682/shortlog-HardenedBSD-11-STABLE-v46.16.txt)
[CHECKSUM.SHA512.txt](https://github.com/HardenedBSD/hardenedBSD-stable/files/883726/CHECKSUM.SHA512.txt)
[CHECKSUM.SHA512.asc.txt](https://github.com/HardenedBSD/hardenedBSD-stable/files/883727/CHECKSUM.SHA512.asc.txt)