Skip to content

HardenedBSD-12-STABLE-v1200058.4

Compare
Choose a tag to compare
@opntr opntr released this 21 Mar 18:17
· 1601 commits to hardened/12-stable/master since this release

Highlights:

  • MFC r345078: hwpmc/core: Adopt to upcoming Skylake TSX errata. (4252e66)
  • MFC: r344757: Fix double free in case of mount error. (6b0855e)
  • MFC: r344754: Do not panic if inode bitmap is corrupted. (d58ea76)
  • MFC: r344755: Fix integer overflow possibility. (66bedc8)
  • MFC r344670: Allow FIONBIO and FIOASYNC ioctls on POSIX shm descriptors. (aaa017b)
  • MFC r344562: FFS: allow sendfile(2) to work with block sizes greater than the page size (a32149b)
  • HBSD: Revert "MFC r343964, r344121, r344128, r344593, r344594:" Revert of FreeBSD's ASR implementation. (9729cbe)
  • MFC r344140,r344141,r344142,r344143,r344388,r344547: Add CBC-MAC authentication. Add AES-CCM encryption, and plumb into OCF. (9b2dd6c)
  • HBSD: same shit like with librt, move libexecinfo's so to /lib (4403bef)
  • MFC r344494,r344495: evdev: export event device properties through sysctl interface (dd53f13)
  • Disable WITH_RETPOLINE on stable/12. (4e79588)
  • MFC r344449: scp: validate filenames provided by server against wildcard (531e908)
  • MFC r344883: nptd 4.2.8p12 --> 4.2.8p13 [FreeBSD-SA-Candidate CVE-2019-8936]
  • MFC r344063,r344088: Sync libarchive with vendor. [FreeBSD-SA-Candidate CVE-2019-1000019 CVE-2019-1000020]
  • MFC: r344602 Merge OpenSSL 1.1.1b. (bd8357d)
  • HBSD: Disable cfi-icall for usr.sbin/ppp (c9056e1)
  • Merge clang 7.0.1 and several follow-up changes (a39fc2a)
  • MFC r343850: contigmalloc: handle M_EXEC. (bcfd287)
  • ZFS updates
  • ipfw updates
  • pf updates
  • ipfilter cleanups
  • em, igbe updates
  • net80211 updates
  • iflib updates

Changelog

Oliver Pinter (5):
      HBSD MFC r343827: r341692 changed cap_syslog(3) to preserve the stdio descriptors
      HBSD: sync HARDENEDBSD kernel config with GENERIC
      HBSD: sync OP-HBSD kernel config with recent HARDENEDBSD and GENERIC
      HBSD: add HardenedBSD's CFI related clang lib to ObsoleteFiles
      HBSD: same shit like with librt, move libexecinfo's so to /lib

Oliver Pinter + (96):
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
      Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master

Shawn Webb (13):
      Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
      HBSD: Resolve merge conflict
      Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
      HBSD: Resolve merge conflicts
      HBSD: Do not set kernel config if we're not installing a new kernel
      HBSD: clang/llvm 7.0.1 fixups
      HBSD: Disable cfi-icall for usr.sbin/ppp
      HBSD: Do not require non-existent cfi_blacklist.txt
      HBSD: Bring HARDENEDBSD amd64 kernel up-to-date
      Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
      HBSD: resolve merge conflicts
      HBSD: Revert "MFC r343964, r344121, r344128, r344593, r344594:"
      Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master

ae (7):
      MFC r342908:   Reduce the size of struct ip_fw_args from 240 to 128 bytes on amd64.   And refactor the code to avoid unneeded initialization to reduce overhead   of per-packet processing.
      MFC r344018:   Remove `set' field from state structure and use set from parent rule.
      MFC r344103:   In r335015 PCB destroing was made deferred using epoch_call().
      MFC r344870:   Fix the problem with O_LIMIT states introduced in r344018.
      MFC r344873:   Fix typo.
      MFC r345003:   Add NULL pointer check to nat64_output().
      MFC r345004 (with modification):   Add IP_FW_NAT64 to codes that ipfw_chk() can return.

asomers (6):
      MFC r340988:
      MFC r341598:
      MFC r341390, r341392, r341667
      MFC r342153, r342172-r342173
      MFC r300938, r342154
      MFC r343530:

avos (35):
      MFC r343542: upgt(4): unbreak build with UPGT_DEBUG
      MFC r343684: Drop unused M_80211_COM malloc(9) type.
      MFC r343697: net80211(4): fix rate check when 'roaming' ifconfig(8) option is set to 'auto'
      MFC r343574: Fix compilation with 'option NDISAPI + device ndis' and without 'device pccard' in the kernel config file.
      MFC r343681: run(4): fix allocated memory type for ieee80211_node(4)
      MFC r343577: rsu(4): add support for ifconfig(8) 'maxretry' option
      MFC r343682: sys/dev/wtap: Check return value from malloc(..., M_NOWAIT) and drop unneeded cast.
      MFC r343417: net80211: reuse TICKS_2_MSEC / MSEC_2_TICKS macros from sys/time.h
      MFC r343690: ifconfig(8): interpret VHT rates correctly for 'list roam / txparam' options
      MFC r343683: Do not acquire IEEE80211_LOCK twice in cac_timeout(); reuse locked function instead.
      MFC r343603: ipw(4): reuse ieee80211_tx_complete function
      MFC r343604: bwn(4): reuse ieee80211_tx_complete function
      MFC r343837: net80211(4): validate supplied roam:rate values from ifconfig(8)
      MFC r343698, r343700: ifconfig(8): display management / multicast wlan(4) rates properly
      MFC r343474: Remove 2GHz channel list copies from wireless drivers.
      MFC r343815: iwn(4): plug initialization path vs interrupt handler races
      MFC r343870: ipcs(1): drop obsolete error checking
      MFC r343871: recoverdisk(1): fclose() file supplied via '-r readlist' parameter when it's no longer needed
      MFC r343868: Correct ypldap(8) install path in OptionalObsoleteFiles.inc
      MFC r343909: newkey(8): fix 'tmpname' memory leak (always) and input file descriptor leak when output file cannot be opened
      MFC r343980: ifconfig(8): display 802.11n rates correctly for 'roam:rate' parameter
      MFC r343094: iwn(4): (partially) rewrite A-MPDU Tx path
      MFC r343501: Add NO_6_BYTE / NO_SYNC_CACHE quirks for (C|D|E).* Olympus digital cameras
      MFC r343696: net80211: do not setup roaming parameters for unsupported modes.
      MFC r343699: net80211: do not setup Tx parameters for unsupported modes.
      MFC r344198: GC ATA_REQUEST_TIMEOUT option remnants
      MFC r344201: Remove vi(1)-related files via 'make delete-old' when WITHOUT_VI=1 is set.
      MFC r344214: Refresh OptionalObsoleteFiles.inc for MK_PMC:
      MFC r344244: Fix memory / resource leaks in usr.sbin/rpc.ypupdated/update.c
      MFC r344245: snmp_hostres(3): fix a typo in sanity checks in handle_chunk()
      MFC r344744: rtwn_usb(4): fix LED blinking for RTL8192CU during scanning
      MFC r343990: net80211: hide casts for 'i_seq' field offset calculation inside ieee80211_getqos() and reuse it in various places.
      MFC r345002: iwm(4): use correct channel list source for Intel 3168
      MFC r344748: Allow to build ifconfig(8) without wireless support
      MFC r344745: rtwn_usb(4): fix Tx instability with RTL8192CU chipsets

bcr (1):
      MFC r343921: Add an example to pw.8 about how to add an existing user to a group.

bdrewery (3):
      MFC r343633:
      MFC r343877,r343880:
      MFC r344666:

brooks (1):
      MFC r344023:

bwidawsk (4):
      MFC r340000:
      MFC r339577:
      MFC r344043:
      MFC r344474-r344476

cperciva (2):
      MFC r343918: Teach /etc/rc.d/growfs how to handle systems running ZFS.
      MFC r344315:   Fix sed script to insert Amazon NTP server into ntp.conf once rather   than twice.

cy (9):
      MFC r343591:
      MFC r343701 & r343732:
      MFC r343702:
      MFC r343703
      MFC r343704:
      MFC r343705:
      MFC r344883:
      MFC r344838:
      MFC r345079:

dab (4):
      MFC r344024:
      MFC r344473:
      MFC r344470:
      MFC r344553:

dim (11):
      MFC r343748:
      MFC r342592:
      Merge clang 7.0.1 and several follow-up changes
      MFC r344112:
      MFC r343165 (by jhibbits):
      MFC r344261:
      MFC r344264:
      MFC r344386:
      MFC r344503:
      MFC r344381:
      MFC r344444:

emaste (14):
      MFC r343589: freebsd-update: regenerate man page database after update
      MFC r343409: freebsd-update: Stop installing empty component sets
      MFC r343407: freebsd-update: open $PAGER only if necessary
      MFC r343412: Fix a typo/wordsmith a description modified in [MFC of r343407]
      MFC r343411: freebsd-update: Clarify unsupported upgrade message
      MFC r343270: freebsd-update: Update /etc/passwd after password db changes
      MFC r343152: freebsd-update: Use BASEDIR when checking for src component
      MFC freebsd-update: Clarify unsupported release upgrade error message
      MFC r343410:
      MFC r344628: poll.2: POLLNVAL is returned also for insufficient rights
      MFC r344449: scp: validate filenames provided by server against wildcard
      Add UPDATING entry for r344898 - RETPOLINE BROKEN_OPTIONS
      MFC r344818: freebsd-update.8: update example to contemporary versions
      MFC r345087: Use consistent struct stat arg name in stat man page

erj (1):
      MFC r344132:

eugen (2):
      MFC r343112: jail(8): stop crashing with SIGSEGV inside run_command() function while processing not entirely correct jail.conf(5) file having something like "ip4.addr = 127.0.0.1;" and no "ip4 = ...;" so extrap variable stays NULL.
      MFC r343118: new small tool trim(1) to delete contents for blocks on flash based storage devices that use wear-leveling algorithms.

fsu (7):
      MFC r344751: Make superblock reading logic more strict.
      MFC: r344753: Validate block bitmaps.
      MFC: r344755: Fix integer overflow possibility.
      MFC: r344756, r345179: Do not read the on-disk inode in case of vnode allocation.
      MFC: r344754: Do not panic if inode bitmap is corrupted.
      MFC: r344752: Add additional on-disk inode checks.
      MFC: r344757: Fix double free in case of mount error.

gahr (1):
      MFC r34505: freebsd-update: restore old exit code when no updates are available locally

glebius (1):
      Merge r343895:   Allow some nesting of ng_iface(4) interfaces and add a configuration knob.

gonzo (3):
      MFC r343204:
      MFC r343209:
      MFC r343560:

hselasky (4):
      MFC r343584: Export vendor specific USB MIDI device list to PnP info.
      MFC r343572: Add support for Audio Sink and Audio Source profiles to sdpd(8).
      MFC r343905: Improve Bluetooth device discovery support for Android and Microsoft devices.
      MFC r344477: Add new USB quirk.

imp (1):
      Revert the r343077 MFC after it was reverted in -current.

jah (3):
      MFC r343827:
      MFC r344561:
      MFC r344562:

jhb (8):
      MFC 341098: Add read-only sysctls for all tunables in the cxgbe(4) driver.
      MFC 340020: Don't enter DDB for fatal traps before panic by default.
      MFC 342658: Correct variable name in two panic messages: num_msi_irq -> num_msi_irqs.
      MFC 343048: Update the note about the need for COMPAT_FREEBSD<n> kernel options.
      MFC 343056: Reject new sessions if the necessary queues aren't initialized.
      MFC 343456: Fix a few more places to handle ofld tx queues for RATELIMIT.
      MFC 343620: Don't set IFCAP_TXRTLMT during lagg_clone_create().
      MFC 344671: Don't assume all children of a nexus are ports.

jhibbits (4):
      MFC r343078:
      MFC r342811, r343168-r343169
      MFC r343763, r343944, r343946
      MFC r343924:

jilles (2):
      MFC r343896,r343922: dhclient: Pass through exit status from script
      MFC r342880,r343981,r344902: sh: Fix $((-9223372036854775808))

jkim (1):
      MFC:	r344602

kevans (4):
      MFC r343601: install(1): Fix relative path calculation with partial common dest/src
      MFC r339831 (imp): Move LUA_ROOT to /boot/lua
      MFC r343543: bectl(8) test: Force destroy the zpool in cleanup
      MFC r344218: mdmfs(8): use -o reserve with malloc-backed md(4)

kib (41):
      MFC r343628: nvdimm: enumerate NVDIMM SPA ranges from the root device
      MFC r343629: nvdimm: only enumerate present nvdimm devices
      MFC r343757: Update CPUID bits definitions and CPU identification based on changes in SDM rev. 069.
      MFC r343808: Remove pointless initial value for i386 vm.pmap.pat_works sysctl definition.
      MFC r343724: Do not call PHOLD() while owning the allproc_lock sx.
      MFC r343890: do_execve(): lock vnode when needed.
      MFC r339877-r339879,r343564-r343566,r343580,r343754: Untangle jemalloc and mutexes initialization.
      MFC r343850: contigmalloc: handle M_EXEC.
      MFC r343617, r343618: Make iflib a loadable module.
      MFC r343891: Fix renameat(2) for CAPABILITIES kernelsi.
      MFC r343897, r343898: Some style for nullfs_mount(). Before using VTONULL(), check that the covered vnode belongs to nullfs.
      MFC r343899: In null_vptocnp(), cache vp->v_mount and use it for null_nodeget() call.
      MFC r343855, r343859: Use ifunc to select the barrier instruction for RDTSC.
      MFC r343966: struct xswdev on amd64 requires compat32 shims after ino64.
      MFC r343723: i386: Do not ever store to other-CPU counter64 slot.
      MFC r344118: Provide userspace versions of do_cpuid() and cpuid_count() on i386.
      MFC r344119: x86 __vdso_gettc(): use machine/cpufunc.h function for CPUID.
      MFC r344120: Unify i386 and amd64 getcontextx.c, and use ifuncs while there.
      Revert r344436, which was the merge of r344120.
      MFC r344293: Add definition for %cr4 PKRU enable bit.
      MFC r344296: Provide convenience C wrappers for RDPKRU and WRPKRU instructions.
      MFC r344303: Minor cleanup for mkuzip(8) man page.
      MFC r344256: amd64: cleanup pmap_init_pat().
      MFC r344592: procctl(2): fix -width parameter to .Bl.
      MFC r344351: Implement rangesets.
      MFC r344352: amd64: add defines and decode protection keys and SGX page faults reasons.
      MFC r344353: Add kernel support for Intel userspace protection keys feature on Skylake Xeons.
      MFC r344354: Add usermode helpers for the Intel userspace protection keys feature.
      MFC r344355: pkru(3) man page.
      MFC r339941 (by mckusick): In preparation for adding inode check-hashes, change the fsck_ffs inodirty() function to have a pointer to the inode being dirtied. No functional change (as for now the parameter is ununsed).
      Disable WITH_RETPOLINE on stable/12.
      MFC r343964, r344121, r344128, r344593, r344594: ASLR.
      MFC r341689, r341711, r341712, r341809: Add getfhat(2), fhlink(2), fhlinkat(2), fhreadlink(2) file handle system calls.
      MFC r345074: Remove useless version check.
      MFC r345075: Add register number, CPUID bits, and print identification for TSX force abort errata.
      MFC r345089: Some fixes for proccontrol(1) man page.
      MFC r345141: mips: remove dead comment and definitions.
      MFC r345189: Add symbolic name for TSC_AUX MSR address.
      MFC r345078: hwpmc/core: Adopt to upcoming Skylake TSX errata.
      MFC r344479 (by sobomax), r344605: Modularize xz.
      MFC r345246: i386: improve detection of the fast page fault assist.

kp (15):
      MFC r343520:
      MFC r344061:
      MFC r344691:
      MFC r343978:
      MFC r344692:
      MFC r341360:
      MFC r340073, r341359:
      MFC r339836, r340286, r341358:
      MFC r344764
      MFC r344720:
      pf: Small performance tweak
      pf tests: Disable noalias test
      MFC r344921:
      MFC r344794:
      MFC r344797:

lme (1):
      MFC r342945, r342947, r343020

marck (2):
      MFC 343548:
      MFC: r343164

marius (11):
      MFC: r343578 (partial)
      MFC: r343288
      MFC: r343753
      MFC: r342749
      MFC: r343203
      MFC: r343369
      MFC: r343934
      MFC: r343621
      MFC: r343622
      MFC: r339459
      MFC: r343372

markj (15):
      MFC r343719: Fix a race in vm_page_dequeue_deferred().
      MFC r343626: Prevent some kobj memory allocation failures from panicking the system.
      MFC r344231, r344440: Remove a redundant flag variable.
      MFC r344232: Fix refcount leaks in the SGX Linux compat ioctl handler.
      MFC r344369: Remove an obsolete comment.
      MFC r344307: Limit the number of entries allocated for a REPORT_ZONES command.
      MFC r344305, r344365: Impose a limit on the number of GEOM_CTL arguments.
      MFC r344278: Move a racy assertion in filt_pipewrite().
      MFC r344600: Add a missing return statement to g_concat_kernel_dump().
      MFC r343354: Remove extraneous setutxent() calls in write(1).
      MFC r344550: Improve vmem tuning for platforms without a direct map.
      MFC r344450, r344452, r344453: Fix a tracepoint lookup race in fasttrap_pid_probe().
      MFC r344670: Allow FIONBIO and FIOASYNC ioctls on POSIX shm descriptors.
      MFC r344588: Remove illumos-specific code from the x86 fasttrap_isa.c.
      MFC r344599: Fix fasttrap_sig{trap,segv}().

mav (23):
      MFC r343673: Fix integer math overflow in UMA hash_alloc().
      MFC r343745, r343752: Add missed tunables/sysctls for some new vdev variables.
      MFC r343728: Check element type before setting LEDs.
      MFC r343727: Use switch instead of chained if/else to improve readability.
      MFC r343562, r343563: Reimplement BIO_ORDERED handling in nvd(4).
      MFC r343585: Only sort requests of types that have concept of offset.
      MFC r343582,r343588:Relax BIO_FLUSH ordering in da(4), respecting BIO_ORDERED.
      MFC r343586: Remove BIO_ORDERED flag from BIO_FLUSH sent by ZFS.
      MFC r343125 (by cem): ioat(4): Set __result_use_check on ioat_acquire_reserve
      MFC r344441: Fix few issues in ioat(4) driver.
      MFC r344437: Allow I/OAT of present Xeon E5/E7 to work thorugh PLX NTB.
      MFC r344480: Remove disabled CTL_LEGACY_STATS support.
      MFC r344702: There is no `device atacard` but there is `device atapccard`.
      MFC r344660: Add to isp(4) tunables to limit MSI/MSI-X usage.
      MFC r344661, r344669: Limit 24xx adapters to only MSI interrupts by default.
      MFC r344489: Free some space in struct ctl_io_hdr for better use.
      MFC r344782: bridge: Fix spurious warnings about capabilities
      MFC r344743: Reduce CTL threads priority to about PUSER.
      MFC r344586: Scrap some debug printf's, unused for years.
      MFC r344636: Refactor command ordering/blocking mechanism in CTL.
      MFC r344844: Flush stdout after each iteration.
      MFC r344866: Add respective tunables to few ZFS sysctls.
      MFC r344903: Improve entropy for ZFS taskqueue selection.

mckusick (2):
      MFC of 344552 and 344732
      MFC of 344731

mm (1):
      MFC r344063,r344088:

mmacy (3):
      bump version to reflect MFC of CCM for the benefit of the ZoF port
      MFC r342793 - selectively disable ZFS without disabling loader
      MFC r342747 - zfsboot: support newer ZFS versions

mw (1):
      Merge ENA OOO RX fixes

ngie (5):
      MFC r343444:
      MFC r342904:
      MFC r343845:
      MFC r343362,r343365,r343367,r343368,r343461,r343751,r344310:
      MFC r342952:

nyan (1):
      MFC: r343011

oshogbo (2):
      MFC r343470:   zfs: allow to change cache flush sysctl
      MFC r343471:   libcasper: do not run registered exit functions

pfg (2):
      MFC r342910: grep(1) outputs NOT-matched lines with multi-byte characters
      MFC r344042: UMA: unsign some variables related to allocation in hash_alloc().

pkelsey (6):
      MFC r343287: Reduce pf.conf parsing cost for configs that define N queues from O(N^2) to O(N)
      MFC r343291: Convert vmx(4) to being an iflib driver.
      MFC r343995: Reduce the time it takes the kernel to install a new PF config containing a large number of queues
      MFC r343534: Don't re-evaluate ALTQ kernel configuration due to events on non-ALTQ interfaces
      MFC r343535: Speed up non-status operations applied to a single interface
      MFC r343919: Fix em(4) interrupt routing

pluknet (2):
      MFC r343945: Document the ENOBUFS errno in setsockopt(2).
      MFC r343967: Sync "struct addrinfo" declaration with netdb.h.

ram (1):
      MFC r342946: Remove accessing remote node and domain objects while processing cam actions.   Issue:     ocs_fc(4) driver panics. It's induced by setting the port_state   sysctl to offline, then online, then offline, then online, and so   forth and so on in rapid succession.

rgrimes (1):
      MFC r339707: Allow fdisk(8) to deal with sectors larger than 2048 especially for 4Kn drives with PMBR's

se (6):
      MFC r343303: Silence a CI warning regarding the use of strcpy().
      MFC r343339: Silence Clang Scan warning about use of unitialized variable.
      MFC r343408: Silence Clang Scan warnings regarding unsafe use of strcp().
      MFC r343479: Fix potential buffer overflow and undefined behavior.
      Add notes regarding the deprecation and removal of timed and timedc in -CURRENT to binaries and man-pages.
      MFC r343480,343482: Silence Clang Scan warning about unsafe use of strcpy.

sef (4):
      MFC r344402
      MFC r343881
      MFC r343882
      MFC r344140,r344141,r344142,r344143,r344388,r344547

shurd (1):
      MFC r344162:

smh (2):
      MFC r344701: Fix incorrect / unused sector_count for identify requests
      Revert zfsimpl.c accidentally committed in r345128

trasz (1):
      MFC r342114:

tuexen (3):
      MFC r343920:
      MFC r343439:
      MFC r344428:

ume (1):
      MFC r344491: An IPv6 address matching should be fixed. Specifying an IPv6 address by the -a option was broken since r309933.

vmaffione (9):
      MFC r343344
      MFC r343346
      MFC r343549
      MFC r343689
      MFC r343772, r343867
      MFC r343579
      MFC r344253
      MFC r344510
      MFC r344696:

wulf (3):
      MFC r343163:
      MFC r343327:
      MFC r344494,r344495:

ygy (2):
      MFC r343930:
      MFC r344709:

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-12-STABLE-v1200058.4/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-bootonly.iso) = 0afcc9d2351f50c9dccb6c79ba2da2ea6d81d7729f0f8109061b053a51c5c0b929801c4c5affd603c802ea777d7293477232ca1db5c741556554ab3dbe6049ac
SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-disc1.iso) = 79a4255012da260ecd239d941825e5ace4373b25ad112dc0eb36377554ab64a874bf08092e3e258e2cd394a227eab7355909e4b166f61974419145351a44293e
SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-memstick.img) = 4f1aa178fc6ff3b38cfc55aaa5a668ef0b92a05afcfcf237a96483e70a8f67869f606e60de5f03a07ef15df004be23ec92225ba69fbc3070231943bddcba9738
SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-mini-memstick.img) = efea297d2ae2580b3a95021be6e5c8e24bfb8e700fc5e3924bdb863f80537da604b0162e4b4fc2d8054de3d8f17f32f0cb0f91f4c273e66ce3e26ccfff54b783

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=WtXM
-----END PGP SIGNATURE-----

shortlog-HardenedBSD-12-STABLE-v1200058.4.txt
CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt