svn commit: r215288 - head/crypto/openssl/ssl

Author: simon Date: Sun Nov 14 09:33:47 2010 New Revision: 215288 URL: http://svn.freebsd.org/changeset/base/215288 Log: Fix double-free in OpenSSL's SSL ECDH code. It has yet to be determined if this warrants a FreeBSD Security Advisory, but we might as well get it fixed in the normal

svn commit: r216166 - in head/crypto/openssl: . crypto crypto/evp crypto/jpake crypto/stack doc/ssl ssl

Author: simon Date: Fri Dec 3 22:59:54 2010 New Revision: 216166 URL: http://svn.freebsd.org/changeset/base/216166 Log: Merge OpenSSL 0.9.8q into head. Security: CVE-2010-4180 Security: http://www.openssl.org/news/secadv_20101202.txt MFC after:3 days Added:

svn commit: r216575 - head/usr.sbin/portsnap/portsnap

Author: simon Date: Sun Dec 19 23:09:42 2010 New Revision: 216575 URL: http://svn.freebsd.org/changeset/base/216575 Log: Add --numeric-owner to tar extract operations in portsnap. This is done to speed up extraction significantly (both for portsnap extract and update) in the case of slow

svn commit: r216725 - head/sbin/mount_nfs

Author: simon Date: Sun Dec 26 22:29:44 2010 New Revision: 216725 URL: http://svn.freebsd.org/changeset/base/216725 Log: Fix deprecated warning about -L which said -i was deprecated. MFC after:3 days Modified: head/sbin/mount_nfs/mount_nfs.c Modified:

Re: svn commit: r208459 - head/release/doc/en_US.ISO8859-1/hardware

On 2010.05.24 14:23:45 +0200, Marius Strobl wrote: On Mon, May 24, 2010 at 01:39:42PM +0200, Simon L. Nielsen wrote: On 2010.05.23 19:46:19 +, Marius Strobl wrote: New Revision: 208459 Log: Update the sparc64 hardware list regarding machines that will be supported

svn commit: r210002 - head/share/man/man5

Author: simon Date: Tue Jul 13 16:24:04 2010 New Revision: 210002 URL: http://svn.freebsd.org/changeset/base/210002 Log: In the example for how to create a VLAN, also include an example of setting the IP address. While it is documented earlier in rc.conf(5) that the '.' in the VLAN name

svn commit: r210004 - head/share/man/man5

Author: simon Date: Tue Jul 13 16:47:29 2010 New Revision: 210004 URL: http://svn.freebsd.org/changeset/base/210004 Log: Bump document for content change in r210002. Modified: head/share/man/man5/rc.conf.5 Modified: head/share/man/man5/rc.conf.5

svn commit: r210215 - head/share/man/man3

Author: simon Date: Sun Jul 18 08:34:44 2010 New Revision: 210215 URL: http://svn.freebsd.org/changeset/base/210215 Log: Cross reference tree(3) and queue(3). MFC after:1 week Modified: head/share/man/man3/queue.3 head/share/man/man3/tree.3 Modified: head/share/man/man3/queue.3

svn commit: r210372 - head/usr.sbin/newsyslog

Author: simon Date: Thu Jul 22 11:23:18 2010 New Revision: 210372 URL: http://svn.freebsd.org/changeset/base/210372 Log: Add support for creating the archived log filenames using a time-stamp instead of the traditional simple counter. Using the time-stamp based file-names, once a log

svn commit: r210373 - head/tools/regression/usr.sbin/newsyslog

Author: simon Date: Thu Jul 22 11:37:54 2010 New Revision: 210373 URL: http://svn.freebsd.org/changeset/base/210373 Log: Add regression tests for newsyslog. These are far from a complete test of newsyslog, as they were mainly made to test 'newsyslog -t', but they do test the basic

svn commit: r210374 - head/tools/regression/usr.sbin

Author: simon Date: Thu Jul 22 11:38:48 2010 New Revision: 210374 URL: http://svn.freebsd.org/changeset/base/210374 Log: Hook newsyslog regression tests to the Makefile 'build'. MFC after:3 weeks Modified: head/tools/regression/usr.sbin/Makefile Modified:

svn commit: r210442 - head/usr.sbin/bsnmpd/modules/snmp_hostres

Author: simon Date: Sat Jul 24 10:04:35 2010 New Revision: 210442 URL: http://svn.freebsd.org/changeset/base/210442 Log: Make failed open of /dev/mdctl in the bsnmpd hostres module non-fatal. This makes it possible to use the hostres module when bsnmpd is not running as root. MFC

Re: svn commit: r211157 - in head/sys: modules modules/if_carp net netinet netinet6

of function pointers and pf_proto_register() to hook carp into the network stack. Yay! Thanks! I'm really looking forward to not having to handle compile kernels when upgrading to 8.2 on all my CARP based systems :-). -- Simon L. Nielsen ___ svn-src-head

svn commit: r223293 - head/cddl/contrib/opensolaris/lib/libdtrace/common

Author: simon Date: Sun Jun 19 12:52:50 2011 New Revision: 223293 URL: http://svn.freebsd.org/changeset/base/223293 Log: Do not use #warning to warn about missing implementation of dt_popc(), but just have a comment that this is broken. This is just a bandaid until somebody can fix this

svn commit: r218625 - head/crypto/openssl/ssl

Author: simon Date: Sat Feb 12 21:30:46 2011 New Revision: 218625 URL: http://svn.freebsd.org/changeset/base/218625 Log: Fix Incorrectly formatted ClientHello SSL/TLS handshake messages could cause OpenSSL to parse past the end of the message. Note: Applications are only affected if they

svn commit: r219093 - head

Author: simon Date: Mon Feb 28 06:54:14 2011 New Revision: 219093 URL: http://svn.freebsd.org/changeset/base/219093 Log: Drop my OpenSSL maintainer hat. I don't have the motivation to keep chasing updates etc. Leave a reminder not to commit non-upstream changes (ref: Debian random...).

Re: svn commit: r204773 - in head: sys/conf sys/contrib/dev/acpica sys/contrib/dev/acpica/common sys/contrib/dev/acpica/compiler sys/contrib/dev/acpica/dispatcher sys/contrib/dev/acpica/events sys/con

] COMB _STA [ACPI Debug] String [0x6] LDN: [ACPI Debug] Integer 0x 5 [ACPI Debug] Integer 0x F I'm not sure if it's related to this import as the system in question was just upgraded from 8. You can see more details by logging into ref9-i386.freebsd.org. -- Simon L. Nielsen

svn commit: r205137 - head/crypto/openssl/apps

Author: simon Date: Sat Mar 13 22:37:07 2010 New Revision: 205137 URL: http://svn.freebsd.org/changeset/base/205137 Log: Readd $FreeBSD$ to the OpenSSL config file as that's useful for mergemaster. Suggested by: dougb Modified: head/crypto/openssl/apps/openssl.cnf Modified:

Re: svn commit: r205128 - in head: crypto/openssl crypto/openssl/apps crypto/openssl/crypto crypto/openssl/crypto/aes crypto/openssl/crypto/aes/asm crypto/openssl/crypto/asn1 crypto/openssl/crypto/bio

B0;251;0cOn 2010.03.13 14:27:22 -0800, Doug Barton wrote: On 03/13/10 11:22, Simon L. Nielsen wrote: Author: simon Date: Sat Mar 13 19:22:41 2010 New Revision: 205128 URL: http://svn.freebsd.org/changeset/base/205128 Log: Merge OpenSSL 0.9.8m into head. This also reverts

svn commit: r206046 - in head/crypto/openssl: . apps crypto crypto/asn1 crypto/bio crypto/bn crypto/bn/asm crypto/engine crypto/evp crypto/ocsp crypto/rand engines fips ssl

Author: simon Date: Thu Apr 1 15:19:51 2010 New Revision: 206046 URL: http://svn.freebsd.org/changeset/base/206046 Log: Merge OpenSSL 0.9.8n into head. This fixes CVE-2010-0740 which only affected -CURRENT (OpenSSL 0.9.8m) but not -STABLE branches. I have not yet been able to find

Re: svn commit: r206046 - in head/crypto/openssl: . apps crypto crypto/asn1 crypto/bio crypto/bn crypto/bn/asm crypto/engine crypto/evp crypto/ocsp crypto/rand engines fips ssl

B0;253;0cOn 2010.04.01 11:20:15 -0700, Doug Barton wrote: On 04/01/10 08:19, Simon L. Nielsen wrote: Author: simon Date: Thu Apr 1 15:19:51 2010 New Revision: 206046 URL: http://svn.freebsd.org/changeset/base/206046 Log: Merge OpenSSL 0.9.8n into head. Just curious, why

svn commit: r220926 - head/usr.sbin/newsyslog

Author: simon Date: Thu Apr 21 16:31:05 2011 New Revision: 220926 URL: http://svn.freebsd.org/changeset/base/220926 Log: Fix an old bug in newsyslog where we kept one log file more than was requested in newsyslog.conf. This was only the case using the non-time based filenames (.0, .1, .2

svn commit: r220927 - head/tools/regression/usr.sbin/newsyslog

Author: simon Date: Thu Apr 21 16:40:34 2011 New Revision: 220927 URL: http://svn.freebsd.org/changeset/base/220927 Log: Expand / correct newsyslog regression tests: - Test newslog with clasic naming of rotates files to actually test the correct number of log files as newsyslog now does

svn commit: r220968 - head/contrib/traceroute

Author: simon Date: Sat Apr 23 13:07:35 2011 New Revision: 220968 URL: http://svn.freebsd.org/changeset/base/220968 Log: Check return code of setuid() in traceroute. While it will not fail in normal circumstances, better safe than sorry. Reported by: LLVM's clang static analyzer

svn commit: r220969 - head/usr.sbin/rwhod

Author: simon Date: Sat Apr 23 13:42:03 2011 New Revision: 220969 URL: http://svn.freebsd.org/changeset/base/220969 Log: Check return code of setuid(), setgid(), and setgroups() in rwhod. While they will not fail in normal circumstances, better safe than sorry. MFC after:1 week

svn commit: r220970 - head/usr.sbin/timed/timedc

Author: simon Date: Sat Apr 23 13:57:12 2011 New Revision: 220970 URL: http://svn.freebsd.org/changeset/base/220970 Log: Check return code of setuid() in timedc. While it will not fail in normal circumstances, better safe than sorry. MFC after:3 days Modified:

svn commit: r220971 - head/usr.bin/finger

Author: simon Date: Sat Apr 23 14:19:26 2011 New Revision: 220971 URL: http://svn.freebsd.org/changeset/base/220971 Log: Check return code of setuid() and setgid() in finger. While they will not fail in normal circumstances, better safe than sorry. MFC after:1 week Modified: