HardenedBSD-11-STABLE-v46.17

@opntr opntr released this May 27, 2017 · 14291 commits to hardened/10-stable/master since this release

Highlights:
*Increased maximum text segment size from 64MB to 256MB
*Added efivar and related EFI libs
*Libarchive update
*Add sets support for ipfw table info/list/flush commands.
*NFS v4.1 updates
*pf: Fix possible incorrect IPv6 fragmentation
*pf: Fix leak of pf_state_keys
*Fix a use after free panic in ipfilter's fragment processing.
*HyperV updates
*Update tcsh to 6.20.00
*HBSD: Enable SafeStack by default
*Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6
*HBSD: Add installation hook scripting to hbsd-update
*Update clang, llvm, lld, lldb, compiler-rt and libc++ to 4.0.0 release
*Merge ACPICA 20170303

Changelog

Oliver Pinter (2):
      HBSD: disable too strict checks[1] in kern_thread.c
      HBSD: revert accidentally committed change in dtc/fdt.cc

Oliver Pinter + (132):
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

Shawn Webb (21):
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict
      HBSD: Provide an option to not require binutils from pkg in hbsd-update-build
      HBSD: Report hash on version check
      HBSD: Bump copyright
      HBSD: Enforce the existence of the DNS record
      HBSD: Don't set TARGET/TARGET_ARCH when building obsolete files
      HBSD: Add option to keep temporary files
      HBSD: Bump dates
      HBSD: Add installation hook scripting
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict
      HBSD: Only set SHLIBDIR with librt
      HBSD: Enable SafeStack by default
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict

ae (24):
      MFC r303018:   Add named dynamic states support to ipfw(4).
      MFC r316133:   Fix bug in r308972 that leads to panic when non-compressed IPComp   packet is received.
      MFC r303012:   Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6   as defined in RFC 6296. The module works together with ipfw(4) and   implemented as its external action module. When it is loaded, it registers   as eaction and can be used in rules. The usage pattern is similar to   ipfw_nat(4). All matched by rule traffic goes to the NPT module.
      MFC r307570:   Add support for non-contiguous IPv6 masks in ipfw(8) rules.
      MFC r304041:   Move logging via BPF support into separate file.
      MFC r316012:   Declare module version.
      MFC r316013:   Make pfil's locking macros private.
      MFC r316329:   Reset the cached state of last lookup in the dynamic states when an   external action is completed, but the rule search is continued.
      MFC r316490:   When we are doing SA lookup for TCP-MD5, check both source and   destination addresses. Previous code has used only destination address   for lookup. But for inbound packets the source address was used as SA   destination address. Thus only outbound SA were used for both directions.   Now we use addresses from a packet as is, thus SAs for both directions are   needed.
      MFC r316461:   Remove "IPFW static rules" rmlock.
      MFC r316434:   Add O_EXTERNAL_DATA opcode support.
      MFC r316433:   Add the log formatting for an external action opcode.
      MFC r316435:   Add ipfw_pmod kernel module.
      MFC r316716:   Inherit IPv6 checksum offloading flags to vlan interfaces.
      MFC r316715:   Make sysctl identifiers for direct netisr queue unique.   Introduce IPCTL_INTRDQMAXLEN and IPCTL_INTRDQDROPS macros for this purpose.
      MFC r316770:   Clear h/w csum flags on mbuf handled by UDP.
      MFC r316824:   The rule field in the ipfw_dyn_rule structure is used as storage   to pass rule number and rule set to userland. In r272840 the kernel   internal rule representation was changed and the rulenum field of   struct ip_fw_rule got the type uint32_t, but userlevel representation   still have the type uint16_t. To not overflow the size of pointer   on the systems with 32-bit pointer size use separate variable to   copy rulenum and set.
      MFC r316699:   Do not adjust interface MTU automatically. Leave this task to the system   administrator.
      MFC r316759:   Add large replay widow support to setkey(8) and libipsec.
      MFC r317431:   Fix SP refcount leak.
      MFC r317682:   Add `ipfw table all destroy` support.
      MFC r317663:   Properly initialize ipfw_range_tlv variable to fix possible EINVAL   in case when ipfw delete/zero/resetlog command issued for several rules   in the loop. Also reorder some variables by size.
      MFC r317667:   In parse_range() validate both range values instead of checking   the top value twice.
      MFC r317666:   Add sets support for ipfw table info/list/flush commands.

allanjude (1):
      MFC r315435: 	Add ZFS compressed ARC stats to top(1)

andrew (5):
      Fix the arm64 userland building with lld:
      MFC 305355:
      MFC 313772:
      MFC r312764: Pull the R_AARCH64_TLSDESC code out into a common function and use them in both the plt and non-plt case.
      MFC r302788, r303026, r305471

araujo (4):
      MFC r314987-r314989, r314993-r314994, r315046-r315049, r315102
      MFC r315112, r315196
      MFC r317742:
      MFC r317743:

asomers (29):
      MFC r313069:
      MFC r314148, r314150
      MFC r314341:
      MFC r314947:
      MFC r314963:
      MFC r315032
      MFC r315033
      MFC r315034
      MFC r315035
      MFC r315036
      MFC r315038
      MFC r315039
      MFC r315040
      MFC r315041
      MFC r314056:
      MFC r313483:
      MFC r313025, r313395, r314113, r314442, r315458, r315656
      MFC r316342, r316358
      MFC r312558:
      MFC r316500:
      MFC r316501, r316523
      MFC r316530, r316535
      MFC r316548:
      MFC r316610:
      MFC r316611:
      MFC r316760:
      MFC r316856:
      MFC r316945-r316946
      MFC r318189:

avatar (2):
      MFC 316644:
      MFC 316658:

avg (11):
      MFC r314398: Local APIC: add support for extended LVT entries found in AMD processors
      MFC r314636,r314700: MCA: add AMD Error Thresholding support
      MFC r314638: add a module that provides support for DRAM ECC error injection on AMD CPUs
      MFC r315077: uma: eliminate uk_slabsize field
      MFC r315078: uma: fix pages <-> items conversions at several places
      MFC r315851: move thread switch tracing from mi_switch to sched_switch
      MFC r315960: dtrace sched:::preempt should fire only when there is preemption
      MFC r316017,r316020: add SMT detection for newer AMD processors
      MFC r315858: aacraid: rework r315083 for a clean build with and without AACRAID_DEBUG
      MFC r315853: zfs_putpages: use TXG_WAIT
      MFC r315852: zfs: add zio_buf_alloc_nowait and use it in vdev_queue_aggregate

badger (1):
      Move td_sigqueue to the end of struct thread

bapt (9):
      MFC: r315912 (by eugen@) and r315935
      MFC r316060:
      MFC r316061:
      MFC: r315086 (by jhb)
      RFC: 312593, 313958
      MFC r316637-r316638
      MFC r316956:
      MFC r302920
      MFC r317034:

bcr (1):
      MFC r316657:

bdrewery (22):
      MFC r315460:
      MFC r315211:
      MFC r315691:
      MFC r315461:
      MFC r315459:
      MFC r316066:
      MFC r316534:
      MFC r316533:
      MFC r316586:
      MFC r316690:
      MFC r316780:
      MFC r316794:
      MFC r303928:
      MFC r306771:
      MFC r306773:
      MFC r303450:
      MFC r317415:
      DIRDEPS_BUILD: Update dependencies.
      DIRDEPS_BUILD: Connect new directories.
      MFC r317658:
      MFC r318092:
      MFC r317863:

brooks (12):
      MFC r316497:
      MFC r316593:
      MFC r316766:
      MFC r316768:
      MFC r317385:
      MFC r317388:
      Partial, manual MFC of r317411:
      MFC r317566:
      MFC r317706:
      MFC r317707:
      MFC r317845-r317846
      MFC r317660, r317710

bz (1):
      MFC r318015:

cem (13):
      t_msgsnd: Use msgsnd()'s msgsz argument correctly to avoid overflow
      Follow-up to r316179: More of the same
      t_msgctl: Fix the same msgsnd() misuse as t_msgsnd
      bwn(4): Fix trivial null dereference
      loader: Avoid possible overflow via environment variable
      linux_ioctl: Refactor some v4l2 struct converters
      dummynet: Use strlcpy to appease static checkers
      ctm: Fix some trivial argv buffer overruns
      banner(6): Squash a harmless coverity warning
      restore(8): Prevent some heap overflows
      fsck(8): Don't overrun mount device buffer
      bsdinstall(8): Sprinkle a snprintf to fixed size buffer
      tcp_wrappers: Sprinkle some bounds-checked string copying

cy (10):
      MFC r314946:
      MFC r316809:
      MFC r316811, r317139:
      MFC r316993, r316994, r316997 as follows:
      MFC r316810, r316814, r316816, r316991:
      Ifdef out a redundant if statement when INET6 is disabled.
      Revert r318203: Neglected to put "MFC 318203:" in the log.
      MFC 317830:
      MFC r318281:
      MFC r318283:

davidcs (9):
      MFC r316309 Add support for optional Soft LRO
      MFC r316310 Update man page for commit r316309 "Add support for optional Soft LRO". The driver provides the ability to select either HW or Software LRO, when LRO is enabled (default HW LRO).
      MFC r316485   Add 25/40/100Gigabit Ethernet Driver version v1.3.0 for Cavium Inc's.   Qlogic 45000 Series Adapters
      MFC r316720 Fix defects reported by Coverity   1. Deadcode in ecore_init_cache_line_size(), qlnx_ioctl() and   	qlnx_clean_filters()   2. ARRAY_VS_SINGLETON issue in qlnx_remove_all_mcast_mac() and   	qlnx_update_rx_prod()
      MFC r316747 Fix rss_ind_table entry for num_funcs > 1
      MFC r316183 Upgrade firmware and other related files to version 5.4.64
      MFC r317180 Cleanup QLA_LOCK/QLA_UNLOCK macros remove unused QLA_TX_LOCK/QLA_TX_UNLOCK macros format qla_error_recovery()
      MFC r318126   llh_func_filter needs to be configured for 100G
      MFC r317996   Fix bug where MTX_DEF lock was held while taskqueue_drain() was invoked.   Check IFF_DRV_RUNNING flag is set prior to calling ql_hw_set_multi()

dchagin (35):
      MFC r314291:
      MFC r314292:
      MFC r314293:
      MFC r314294:
      MFC r314295:
      MFC r314309:
      MFC r314311:
      MFC r314312:
      MFC r314343:
      MFC r314344:
      MFC r314402:
      MFC r314403:
      MFC r314404:
      MFC r315948:
      MFC r314647:
      MFC r314648:
      MFC r314866:
      MFC r314867:
      MFC r314868:
      MFC r316599:
      MFC r315498:
      MFC r316393:
      MFC r316394:
      MFC r316395:
      MFC r315501:
      MFC r315505:
      MFC r315506:
      MFC r315957:
      MFC r316288:
      MFC r316289:
      MFC r316776 (by cem@):
      MFC r317323:
      MFC r317324:
      MFC r316426:
      MFC r317645:

delphij (2):
      MFC r315619: pet manlint
      MFC r312404, r312519, r313277:

dexuan (1):
      MFC: 314547, 314770, 314828, 314891, 314956, 314962, 315235

dim (12):
      MFC r315947:
      Update clang, llvm, lld, lldb, compiler-rt and libc++ to 4.0.0 release:
      Regenerate src.conf.5 after the addition of WITH/WITHOUT_LLD_IS_LD.
      MFC r314671 (by cem):
      MFC r316989:
      MFC r317214:
      MFC r310889 (by jkim):
      MFC r317458:
      MFC r317751:
      MFC r317810:
      MFC r317888:
      MFC r318259:

ed (5):
      MFC r315732:
      MFC r315892:
      MFC r315860:
      MFC r315861:
      Bring kernel space CloudABI code in sync with HEAD.

emaste (27):
      MFC r316029: lld: hack version and help output for compatibility with libtool
      MFC r303156: Remove duplicate symbols from libroken version-script.map
      MFC r304624: Remove duplicate symbol from libhx509 version-script.map
      MFC r306041: Always pass -m to ld for converting binary files to ELF
      MFC r316284: elfcopy: remove temporary ELF file when converting from binary
      MFC r303442, r305343: remove CONSTRUCTORS from linker scripts
      MFC r317193: elfcopy: document --strip-symbols=filename in the man page
      MFC r317075: Update ELF Tool Chain to upstream r3520
      MFC r317141: readelf: dump MIPS abiflags section
      MFC libelf: Fix extended numbering
      MFC r312779: strings: avoid unnecessary trip through handle_file for stdin
      MFC r309547 (cem): readelf: Add support for extended program header numbers
      MFC r309679 (cem): readelf -S: Include zero index and match binutils' no-name
      MFC r307808: elfcopy: select mode by the end of the program name
      MFC r313411 (jhibbits): Add elf*-powerpc-freebsd targets
      MFC r316685: libelf: add an assert that msz is non-zero
      MFC r317371: elfcopy: allow empty symbol list files
      MFC r316706: makeman: don't copy $FreeBSD$ tags from source files into output
      MFC r317156: makeman: add a comment describing purpose and invocation
      MFC r310271 (gjb): Comment the RCSID (in WITH_REPRODUCIBLE_BUILD)
      Regenerate src.conf.5 after r318286
      MFC r317376: Add sysutils/tmux to the DVD package set
      MFC r314054: Exclude -flto when building *genassym.o
      MFC r315685: tighten buffer bounds in imgact_binmisc_populate_interp
      MFC LLD changes and enable LLD as /usr/bin/ld on arm64 by default
      regen src.conf(5) after r318472
      MFC r317159: libstdc++: fix symbol version script for LLD

erj (2):
      MFC r313497: ixl(4): Update to 1.7.12-k.
      MFC r318147: Add several new media types to if_media.h

eugen (1):
      MFC r318150:

garga (1):
      MFC r316592:

gjb (117):
      MFC r314561:  Increase the EC2 image size.  The recent snapshot builds of EC2  images for 12-CURRENT (and now 11-STABLE) failed due to a full  filesystem on the md(4) device during creation.
      MFC r316617:  - Increase the image size for RPI2 and IMX6-based boards from 1G    to 1.5G.  - Use the 'conv=sync' dd(1) option to fix writing the u-boot.imx    file to the md(4) device for IMX6-based boards.
      MFC r310181 (matthew) (originally r309314):  Allow a user-overridable setting 'PKG_CMD' to control the command used  to create a repo during 'make packages'.
      MFC r317100:  Use relative symlink for 'latest' to allow repo to work after being  moved.
      Document EN-17:01 through EN-17:05, SA-16:39 through SA-17:03
      MFC r317169:  Trim trailing '/release/..' when setting _OBJDIR so arm64/aarch64  boot1.efifat is properly located when creating virtual machine images.
      Prune stale entries from 11.0-RELEASE. Bump copyright year while here.
      Document r317857, 410.status-mfi periodic(8) script addition.
      Document r317855, daemon(8) logging stdout/stderr to file or syslog(3).
      Document r317618, clock_nanosleep() addition. Update the 'Dell EMC' entity.
      Document r317434, ipf(4) 'keep state' no longer assumes 'keep frags'
      Document r317386, Use estimated RTT for receive buffer auto resizing instead of timestamps
      Document r317045, ipfw_pmod kernel module addition.
      Document r316944, allow explicitly assigned IPv4 and IPv6 addresses to be used in jails.
      Document r316660, cfumass(4) addition.
      Document r316446, ipfw_nat64 kernel module addition.
      Re-order by svn revision.
      Document r316444, ipfw_nptv6 kernel module addition.
      Document r316423, clang, llvm, lld, lldb, compiler-rt and libc++ updated to 4.0.0, WITH_LDD_AS_LD knob addition.
      Document r316303, ACPICA update to version 20170303.
      Document r316274, ipfw(4) named dynamic state support added.
      Document r316120, reevaluate absolute sleep times based on the RTC when the RTC is adjusted.
      Document r316098, getaddrinfo(1) utility added.
      Document r316045, libthr(3) evaluation/removal in OLD_FILES.
      Document r316039, kvm_close(3) return accumulated close(2) error.
      Document r315539, vfs.root_mount_always_wait tunable addition.
      Document r315514: - IPSEC_FILTERTUNNEL deprecation - ipsec.ko and tcpmd5.ko additions - IPSEC_NAT_T removal - setkey(8) updates
      Document r315282, clang nullability attribute added.
      Document r315274, sem_clockwait_np() addition.
      Document r313523, fix garbage IP addresses in UDP log_in_vain messages
      Document r313203, inetd(8) can be built without libwrap support.
      Document r312336, locales v30.0.3, unicode 9.0.0.
      Document r311681, ip6_tryforward() addition.
      Document r310490, amd(8) updated to version 6.2.
      Document r309377, bnxt(4) addition. Add Broadcom to the sponsors.ent file.
      Document r309337, GARP retransmit capability.
      Document r308721, syslogd(8) 'include' keyword.
      Document r308720, cron(8) {,/usr/local}/etc/cron.d support
      Add a sponsor entry for r308721
      Document r307632, EFI loader tftpfs support.
      Document r305436, Allwinner A13 support.
      Document r316957, tcsh(1) version 6.20.00.
      Document r316420, mandoc(1) version 1.14.
      Document r316349, tzdata version 2017b.
      Document r316337, libarchive version 3.3.1.
      Document r316068, ntpd version 4.2.8p10.
      Document r315995, DMA 2017-02-10 snapshot.
      Fix revision number for libarchive v3.3.1.
      Document r314278, libucl version 20170219.
      Document r313980, openresolv version 3.9.0.
      Document r313795, zlib 1.2.11.
      Document r313680, NetBSD test suite 01.11.2017_23.20 snapshot.
      Document r313537, tcpdump version 4.9.0.
      Document r312517, xz version 5.2.3.
      Document r309847, file version 5.29.
      Add missing revision.
      Document r309511, Subversion 1.9.5.
      Document r307729, unbound 1.5.10.
      Document r317182, qlxgbe(4) firmware version 5.4.64.
      Document r317116, qlnxe(4) addition.
      Document r308104, chromebook_platform(4) addition.
      Document r307768, jedec_ts(4) addition.
      Document r308942, bytgpio(4) addition.
      Document r310009, jail_confwarn rc.conf(5) addition.
      Fix svn revision ordering.
      Document SA-17:04.
      Document r308914, zfsbootcfg(8) addition.
      Clarify the syslogd(8) 'include' directive is specified in syslog.conf(5).
      MFC r318109:  Correct "first appeared in" entries for various drivers that  exist in stable/11.
      Document r318239, blacklistd updated to 20170503 snapshot.
      MFC r308945:  Set the 'vital' flag on the runtime and jail packages.
      MFC r318190:  Update release/scripts/atlas-upload.sh to account for API changes  made recently by Atlas Hashicorp.  The data returned from GET and  POST requests has changed, which caused a number of regex patterns  to fail to be properly identified as 'success' or 'failure', which  ended up in upload/publish failures.
      Document r318402, blacklistd refinement for OpenSSH.
      MFC r318294:  Correct the URL to instructions for updating system sources.
      Document r307144, cloudabi 32-bit support on 64-bit envionments.
      Document r318357, ixl(4) updated to version 1.7.12-k.
      Add qlnxe(4)
      Document r311506, cxgbe(4) firmware version 1.16.26.0.
      Document r312358, alc(4) Killer E2400 support.
      Document r314005, alc(4) Killer E2500 support.
      Add missing revision for cloudabi 32-bit support.
      Document r307576, Elantech support added to atkbdc(4).
      Clarify the cxgbe(4) firmware update is for T4, T5, and T6 cards.
      Document r315330, etherswitch(4) support for RTL8366RB and RTL8366SR. Correct the Netgate sponsor entity while here.
      Document r310852, miibus(4) Microchip/Micrel KSZ9031 support.
      Move the ixl(4) entry to the network driver section.
      Document r311686, bsdinstall(8) hidden wifi network support.
      Fix FDP style nits found by igor(1).
      Fix FDP style nits reported by igor(1). Bump copyright year in readme/article.xml.
      Fix grammar nits.
      Prefer https://download.FreeBSD.org as the official release site.
      Further refine grammar.
      Add the installation/article.xml for installation.html. This is not yet connected to the build.
      Update stable/11 from 11.0-STABLE to 11.1-PRERELEASE, marking the official start of the code slush.
      Correct a typo.
      Document r317373, periodic(8) sleep consolidation.
      Remove an HREF from a section title.
      Fix a few grammar and ambiguity nits.
      Use literal tags around 'keep state'/'keep frags' to avoid (mis)placing a comma.
      Further clarify zfsbootcfg(8). Move kvm_close(3) entry to 'Runtime Libraries and API'. Move cloudabi(4) to the 'Kernel Modules' section.
      Document r309258, max_align_t' is now defined for C11 compliance.
      Document r312394, /dev/kmem no longer supports access via mmap(). Document r306533, devctl(8) now supports a "clear driver" command.
      Document r306660, Virtual Function devices on T4 and T5 adapters. Document r306661, TCP Offload Engine on Chelsio T4+ adapters. Document r306664, cxgbev(4) addition. Document r309560, several cxgbe(4) and cxgbev(4) updates.
      Document r306520, PCI pass through with bhyve resets functions via FLR. Document r306471, PCI pass through with bhyve supports more dynamic configurations.
      Add a 'Userland Debugging' section. Document r306786, core dumps now include the process ID (PID) and command line arguments. Document r304499, ptrace(2) now supports events for vfork(2).
      Document r305476, OpenSSH blacklistd(8) support. Wording fixes. Expand what GARP means.
      Add a missing ')'.
      Add missing 'driver' after manual page references where missing.
      s/nullability attribute/nullability qualifier/
      Document r316613, C standard library has been updated to make use of reallocarray(3). Document r318121, system libraries have been updated to make use of reallocarray(3).
      Document r316613, C standard library has been updated to make use of reallocarray(3). Document r318121, system libraries have been updated to make use of reallocarray(3). Document r315282, GNU __nonnull__ attribute have been replaced with the more benign Clang nullability attributes.
      Fix typo and grammar.
      Document r318472, LDD enabled by default on arm64.
      Document r309312, PCI passthrough enabled on Hyper-V VMs. Document r314091, hv_netvsc(4) SR-IOV/VF support. Document r316272, Hyper-V Gen 2 support. Document r317119, Hyper-V synthetic keyboard support.
      Fix typo: s/LDD/LLD/
      Document r315514, if_ipsec(4) addition.
      Document r318576, efivar(8) addition.

glebius (2):
      Merge r315910:   Make sendfile(2) more robust against file change.  This fixes a possible   crash when the file shrinks.  This also fixes sendfile(2) not sending more   data in a case when the file grows, and the request is open-ended or   specifies a size that is greater than old file size.
      Merge r317444, r317445:

gonzo (10):
      MFC r310560:
      MFC r308424, r310636
      MFC r310791:
      MFC r315176-r315178
      MFC r315010:
      MFC r315019:
      MFC r306806, r313709, r317058, r317060
      MFC r315009:
      MFC r310343-r310344
      MFC r315031:

hselasky (6):
      MFC r317568:
      MFC r317584: Correct manual page link to usbdi(9).
      MFC r313556: Change mlx4 QP allocation scheme.
      MFC r313555: Flexible and asymmetric allocation of EQs and MSI-X vectors for PF/VFs.
      MFC r317505: Don't free uninitialized sysctl contexts in the mlx4en driver. This can cause NULL pointer panics during failed device attach.
      MFC r318531:

jasone (1):
      MFC r318254:

jhb (11):
      MFC 313409: Defer startup of gjournal switcher kproc.
      MFC 313564: Drop the "created from" line from files generated by makesyscalls.sh.
      MFC 314894: Fix a couple of typos and reword some sentences in bsd.README.
      MFC 315323: Use UMA_ALIGN_PTR instead of sizeof(void *) for zone alignment.
      MFC 316493: Assert that the align parameter to uma_zcreate() is valid.
      MFC 316512,316537: Use correct linker emulations for armeb and riscv.
      MFC 313999: Consolidate statements to initialize files.
      MFC 313407,313449: Copy ELF machine/flags from binaries to core dumps.
      MFC 316510: Don't leak a session and lock if a GMAC key has an invalid length.
      MFC 317412,317413: Fixes for info file removal.
      MFC 318360: Fix p_endcopy.

jhibbits (3):
      MFC r314885:
      MFC r310146,r311912,r312369,r312617,r312614,r312659,r312974,r312977,r313005,r314826:
      MFC r314370,r318130,r318167:

jilles (3):
      MFC r307769: daemon: Allow logging daemon stdout/stderr to file or syslog.
      MFC r317709: csplit: Fix check of fputs() return value, making csplit work again.
      MFC r317912: sh: Fix INTOFF leak after a builtin with different locale settings.

jkim (2):
      MFC:	r306686, r308953, r311462, r311529, r312438, r314611
      MFC:	r317171, r317173, r317560, r317561, r318326

karels (2):
      Fix reference count leak with L2 caching.
      MFC r316065: Enable route and LLE (ndp) caching in TCP/IPv6

ken (10):
      MFC r317657:
      MFC r317680:
      MFC r317745:
      MFC r317774, r317776
      MFC r317799:
      MFC r317848:
      MFC r317854:
      MFC r317775:
      MFC r317740:
      MFC r318185:

kib (32):
      MFC r309551: Release DMAR table after using it.
      MFC r315932: Slight cleanup of the comment.
      MFC r315933: Do not create RMRR entries for identity-mapped domains.
      MFC r315934: Avoid leaking allocated but unused context after creation race.
      MFC r315968: Provide less laborius way to enable busdma DMAR to only short list of devices.
      MFC r316009: Fix TUNABLE_UINT64() on 32bit architectures.
      MFC r316011: Timeout DMAR commands.
      Improvements for the brand detection and prioritization.
      MFC r316524: Use int instead of boolean_t for flags argument type in vnode_pager_generic_putpages() prototype; change the argument name to reflect that it is flags.
      MFC r316525: Some style fixes for vnode_pager_generic_putpages(), in the local declaration block.
      MFC r316526: Extract calculation of ioflags from the vm_pager_putpages flags into a helper.
      MFC r316528: Add V_VMIO flag for vinvalbuf(9).
      MFC r316566: Remove spl*() calls from the nfsclient code.
      MFC r316739: Fix reporting of _SC_SEM_NSEMS_MAX and _SC_SEM_VALUE_MAX.
      MFC r316529: Handle possible vnode reclamation after ncl_vinvalbuf() call.
      MFC r316531: Handle nfs IO_ASYNC write requests asynchronously.
      MFC r316532: Make nfs pageout coherent with the dirty state of the buffers.
      MFC r316851: Correct calculation of the entry->free_down in the invariants-checking code.
      MFC r316852: In fsck_ffs pass1, prevent the inosused variable from wrapping.
      MFC r316213: Implement the memset_s(3) function as specified by the C11 ISO/IEC 9899:2011 Appendix K 3.7.4.1.
      MFC r316679: Do not lose dirty bits for removing PROT_WRITE on arm64.
      MFC r316698: Remove debugging printf.
      MFC r317196: Write-combine framebuffer writes through user-space mappings, if possible.
      MFC r317436: getpagesize(3) cannot fail.
      MFC r317606: Style.
      MFC r317610: Restructure normal (non-error) control flow in sem_close().
      MFC r317611: Make semaphore names list mutex non-recursive.
      MFC r317523: Add asserts to verify stability of struct proc and struct thread layouts.
      MFC r317908: Remove spl() calls from UFS code.
      MFC r318243: Do not wake up sleeping thread in reschedule_signals() if the signal is blocked.  The spurious wakeup might result in spurious EINTR.
      MFC r318256: Style.
      MFC efivar(8) (by imp):

kp (2):
      MFC r316355
      MFC r317186

lidl (3):
      MFC r317802: Merge latest version of blacklist sources from NetBSD (@ 20170503)
      MFC r317862: Improve blacklist support before upgrading libblacklist
      MFC r318242: Refine and update blacklist support in sshd

marius (12):
      MFC: r310712
      MFC: r311817
      MFC: r305507
      MFC: r314097
      MFC: r312939, r313250, r314811 (partial), r314887 (partial), r315760,      r315845, 315430, r317981, r315466
      MFC: r315431
      MFC: r317343
      MFC: r317578
      MFC: r317982
      MFC: r315598
      MFC: r318282
      MFC: r314345, r318276

markj (14):
      MFC r315289: When draining a callout, don't clear CALLOUT_ACTIVE while it is running.
      MFC r316175: Avoid sleeping when the mirror I/O queue is non-empty.
      MFC r316036: Typo.
      MFC r316032: Refine r301173 a bit.
      MFC r315208: Fix a backwards comparison in the code to dump a DTrace debug buffer.
      MFC r309591: Fix style bugs and remove trailing whitespace in libproc and librtld_db.
      MFC r306829, r310286, r311695: Lock the ND prefix list and add refcounting for prefixes.
      MFC r316686, r316687, r316689 Fix a race between vm_map_wire() and vm_map_protect().
      MFC r313006 (by cem), r315983 (by bde): Add an SSE4.2 implementation of crc32 for x86.
      MFC r317273 (by cem): fuse: Implement FOPEN_KEEP_CACHE flag
      MFC r316749 (by cem): drm2: Add some missing PCIIDs for some Haswell systems
      MFC r317148: Drop Giant before sleeping in linux_wait_for_{timeout_,}common().
      MFC r318193: Set the right variable when overriding the default console speed.
      Direct commit to fix the PC98 build.

mav (40):
      MFC r315579, r315670: Add initial support for multiple MSI-X vectors.
      MFC r315587, r315652: Remove some dead/useless code.
      MFC r315677: Clean/unify some macro usage.
      MFC r315678: Remove questionable reqp->req_time access.
      MFC r315681: Improve command timeout handling.
      MFC r315682, r315683: Remove some dead code left after r246713.
      MFC r315709: Switch from using periph_links to sim_links.
      MFC r315673, r315674: Make CAM SIM lock optional.
      MFC r315857: Remove "UNMAPPED" messages printed on da periph attach.
      MFC r316412: Add IDs for Intel Cougar Point USB 2.0 controller.
      MFC r316427, r316428: Add Log directory and SATA NCQ Send and Receive Log.
      MFC r316653: Fix few minor issues found by Clang Analyzer.
      MFC r316652: Fix few minor issues found by Clang Analyzer.
      MFC r314254: Update kern_data_resid according to r312291.
      MFC r314256: Use ctl_queue_sense() to implement sense data reporting.
      MFC r314290: Implement use of multiple transfers per I/O.
      MFC r316677: Do not register in CTL portal groups without portals.
      MFC r315708: Cleanup response queue processing.
      MFC r315869: Remove write-only crn field from struct isp_pcmd.
      MFC r315870: isp field in struct isp_pcmd is also unused.
      MFC r315908: Unify initiator and target DMA setup and command sending.
      MFC r315913: Add brackets to fix incorrect macro expansion.
      MFC r315961: Add ids for ALC233 found on Intel Skull Mountain NUC.
      MFC r316758: Update list of Conexant and Realtek codecs.
      MFC r317185: Some cosmetic polishing for pre-timeouts.
      MFC r317064: Optimize pathologic case of telldir() for Samba.
      MFC r317356: Switch isp_reset to scratchpad not requiring ISP_MBOXDMASETUP.
      MFC r317080: Block FPDMA TRIM for ASMedia HBAs.
      MFC r312979 (by loos): Do not update the lagg link layer address when destroying a lagg clone.
      MFC r317253: Add interface reference counting to if_lagg.
      MFC r317279: Remove unneeded conditions.
      MFC r317246: Always allow setting number of iterations for the first time.
      MFC r317247: Dump md_iterations as signed, which it really is.
      MFC r317340: Report NTB link speed to console and interface.
      MFC r317369: Slightly compact the code.
      MFC r317370: Change ctl_free_lun() locking.
      MFC r317659, r317752: Make some UART consoles to not spin wait for data to be sent.
      MFC r317696, r317723, r317836:  Introduce sleepable locks into if_lagg.
      MFC r317547: Allow some control over enabled capabilities for if_vlan.
      MFC r317585: Propagate IFCAP_LRO from trunk to vlan interface.

mjg (1):
      MFC r317784:

mm (2):
      MFC r315636,315876,316095: Sync libarchive with vendor
      MFC r317782,318181:

mmel (16):
      MFC r313823,r313866:
      MFC r313873:
      MFC r306631,r306640,r306641,r306650,r306656:
      MFC r306704,r308406:
      MFC r303261,r315059:
      MFC r315900,r315973,r315974:
      MFC r306442,r306444,r306445,r306550:
      MFC r306703:
      MFC r308612,r308614:
      MFC r309537:
      MFC r309532,r310674:
      MFC r310593,r310599:
      MFC r308286,r308287:
      MFC r309538:
      MFC r307686:
      MFC r318530:

mmokhi (2):
      MFC r314782:
      MFC 314783:

n_hibma (3):
      MFC 316275:
      MFC 316283:
      MFC:

ngie (41):
      MFC r315734:
      MFC r314372:
      MFC r315796:
      MFC r315774:
      MFC r316053:
      MFC r315759,r315761:
      MFC r315759,r315761:
      MFC r315797:
      Revert r316226 (I used the wrong commit message)
      Backport mlx4{en,ib}(4) from ^/head
      MFC r316049:
      MFC r315789:
      MFC r315772:
      MFC r315804:
      MFC r315802:
      MFC r315788:
      MFC r315790:
      MFC r315803:
      MFC r315795:
      MFC r315762:
      MFC r315764,r315765:
      Regenerate src.conf(5)
      MFC r316050,r316051:
      MFC r315798:
      MFC r315776:
      MFC r316080,r316081,r316115:
      MFC r316108:
      MFC r316107:
      MFC r316106:
      MFC r316368: r316368 (by jkim):
      MFC r317154:
      MFC r317160:
      MFC r315793:
      MFC r315766,r315768:
      MFC r311135:
      MFC r311135:
      Revert commit again to correct it
      Regenerate src.conf(5)
      MFC r315775:
      MFC r317594:
      MFC r316103:

nyan (1):
      MFC: r317591

pfg (13):
      MFC r315162: libc: provide some bounds-checking through reallocarray(3).
      MFC r316695, MFV r316693: 8046 Let calloc() do the multiplication in libzfs_fru_refresh
      Temporarily revert r315602. Bring back the definition for the GCC __nonnull() attribute.
      MFC r302664: mkimg(1): minor cleanups with argument order in calloc(3).
      MFC r317372: scandir(3): promote arraysz to size_t to match numitems.
      MFC r317583: Fix some cases where an index was used before its limits check.
      MFC r317596: mixer(8): Prevent possible sscanf() overflow.
      MFC r317200, r317201, r317216: libthread_db: unsign map_len and use reallocarray(3).
      MFC r317283: fsck_ffs: Unsign some variables and make use of reallocarray(3).
      MFC r317284: pmcstat(8); unsign some allocation variables and use reallocarray(3).
      MFC r317036: libjail: make allocation in jailparam_all() somewhat more robust.
      MFC r317346: regex: unsign and constify some variables.
      MFC r317265: lib: initial use of reallocarray(3).

rgrimes (3):
      MFC r314691:
      MFC: r314694
      MFC r314693   Change /etc/rmt symlink from absolute to relative path,   correcting the mistake made in r6499

rmacklem (27):
      MFC: r310491 Fix NFSv4.1 client recovery from NFS4ERR_BAD_SESSION errors.
      MFC: r316655 Fix parsing failure for NFSv4 Setattr operation for failed case.
      MFC: r316666 Fix the NFSv4.1 client for NFSERR_BADSESSION recovery via ReclaimComplete.
      MFC: r316667 Fix the NFSv4 client hndling of a stale write verifier in the Commit operation.
      MFC: r316669 Avoid starvation of the server crash recovery thread for the NFSv4 client.
      MFC: r316692 Set initial values for nfsstatfs in the NFSv4 client.
      MFC: r316694 Fix a crash during unmount of an NFSv4.1 mount.
      MFC: r316717 During a server crash recovery, fix the NFSv4.1 client for a NFSERR_BADSESSION during recovery.
      MFC: r316719 Don't throw away Open state when a NFSv4.1 client recovery fails.
      MFC: r316745 Fix the NFS client for "text file modified, process killed" mmap'd case.
      MFC: r316782 Add call to svcpool_close() for the NFSv4 callback pool (svcpool_nfscbd).
      MFC: r316792 Add an NFSv4.1 mount option for "use one openowner".
      MFC: r316793 Document the "oneopenown" option added by r316792.
      MFC: r316829 Remove unused "cred" argument to ncl_flush().
      MFC: r317236 Fix the setting of atime for Linux client NFSv4 mounts.
      MFC: r317269 Set default uid/gid to nobody/nogroup for NFSv4 mapping.
      MFC: r317350 Fix the default uid/gid values in nfsuserd.c
      MFC: r317270 Get rid of bogus statement in the nfsuserd.8 man page.
      MFC: r317272 Add checks for failed operations to the NFSv4 client function nfscl_mtofh().
      MFC: r317275, r317344 Don't create a backchannel for a DS connection.
      MFC: r317276 Don't set ND_NOMOREDATA for a failed Setattr operation (NFSv4).
      MFC: r317296 Fix some krpc leaks for the NFSv4.1/pNFS client.
      MFC: r317305 Fix the NFSv4.1/pNFS client return layout on close.
      MFC: r317345 Make the NFSv4 client to use a write open for reading if allowed by the server.
      MFC: r317382 Allow use of a write open stateid for reading in the NFSv4 server.
      MFC: r317465 Fix handling of a NFSv4.1 callback reply from the session cache.
      MFC: r317576 Modify the NFSv4.1/pNFS client to ask for a maximum length of layout.

royger (3):
      MFC r315402:
      MFC r316754: loader/multiboot: fix multiboot loading
      MCF r310418: xen: fix IPI setup with EARLY_AP_STARTUP

rpokala (2):
      MFC r318160, 318176: Persistently store NIC's hardware MAC address, and add a way to retrive it
      Persistently store NIC's hardware MAC address, and add a way to retrive it

sbruno (2):
      MFC r308343
      Direct commit of fixes to stable/11, resolving PCI passthrough and initialization issues when trying to passthrough a i340 (igb) to VMware.

sephe (12):
      MFC 316519
      MFC 316520
      MFC 317107     hyperv: Use kmem_malloc for hypercall memory due to NX bit change.
      MFC 316515,316812
      MFC 316813,316815
      MFC 317353
      hyperv/hn: Enable sorted LRO (direct commit).
      MFC 317821     hyperv/kbd: Channel read expects non-NULL channel argument.
      MFC 317786
      MFC 318136
      MFC 317783     hyperv/kvp: Fix pool direcrory and file permission
      MFC 318512

skra (1):
      MFC r308569,r308570:

smh (5):
      MFC r303863:
      MFC r316313, r316328:
      MFC r316676:
      MFC r316460:
      MFC r315449:

sobomax (2):
      MFC r316718, r316738: make mksnap_ffs functional in the chroot'ed environment.
      MFC r316874: restore ability to shutdown(2) datagram sockets.

trasz (27):
      MFC r313769:
      MFC r313770:
      MFC r313769:
      MFC r314046:
      MFC r313994:
      MFC r313994:
      MFC r312003 by cem:
      MFC r312078 by cem:
      MFC r315564:
      MFC r313959:
      MFC r315560:
      MFC r316056:
      MFC r316057:
      MFC r316468:
      MFC r316466:
      MFC r316467:
      MFC r316587:
      MFC r316589:
      MFC r316941:
      MFC r317212:
      MFC r317280:
      MFC r317348:
      MFC r317459:
      MFC r317803:
      MFC r317517:
      MFC r317460:
      MFC r317463:

truckman (2):
      MFC r315516
      MFC r316777 (by cem)

tsoome (1):
      boot1.efi: can't boot from ZFS on 4kn HDD

vangyzen (3):
      MFC r315526
      MFC r316430
      MFC r318354 (by cem)

wulf (1):
      MFC r317811:

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-11-STABLE-v46.17/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v46.17-amd64-bootonly.iso) = c33cefeab424e346087fabd6d4c29dc53b41f9e93e5be285ee16430a502a57d18bcd555d119f111fbb1f68b442c3755acf2822881551113f2d0a4c9dbd1163f2
SHA512 (HardenedBSD-11-STABLE-v46.17-amd64-disc1.iso) = 929298f27adffaa672e985f695f219b4f87f4851f10fdf44e327565f3830737fdd27bb63f6441bf5cd40d7896a76e259341a3f954fadf1363eadf86d68077bb9
SHA512 (HardenedBSD-11-STABLE-v46.17-amd64-memstick.img) = f094f7c131a54b25e680e502298532ca6127c0a4da8788c088ce451494856f2cc76900aa9d0d9196d284c6e3a31de52541d8fe2e844b569a95e5517d7d521d56
SHA512 (HardenedBSD-11-STABLE-v46.17-amd64-mini-memstick.img) = e34fe6bc79bf2a019a624dbffbf52c20ee600a96baf4d85476888f8afeacc47deec1f02339430d004817ec79c049eba59b8b167ed4b81be7f2f80e6ca57bc217

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=YwAD
-----END PGP SIGNATURE-----

shortlog-HardenedBSD-11-STABLE-v46.17.txt
CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt