svn commit: r289628 - stable/10/sys/contrib/ipfilter/netinet

2015-10-20 Thread Cy Schubert
Author: cy Date: Tue Oct 20 13:20:29 2015 New Revision: 289628 URL: https://svnweb.freebsd.org/changeset/base/289628 Log: MFC r289480. Really fix ipfilter bug 3600459. Obtained from:ipfilter cvs repo r1.48.2.25, r1.72 and NetBSD repo r1.4 Modified:

svn commit: r289210 - stable/10/sys/contrib/ipfilter/netinet

2015-10-12 Thread Cy Schubert
Author: cy Date: Tue Oct 13 04:19:49 2015 New Revision: 289210 URL: https://svnweb.freebsd.org/changeset/base/289210 Log: MFC r288910: On some interfaces, ipfilter drops UDP packets with zero checkum. This commit fixes that. PR: 166372 Submitted by: m...@neon1.net Reviewed

svn commit: r287700 - stable/10/usr.sbin/ntp

2015-09-11 Thread Cy Schubert
Author: cy Date: Sat Sep 12 02:36:17 2015 New Revision: 287700 URL: https://svnweb.freebsd.org/changeset/base/287700 Log: MFC r287468, turn on RAWDCF by default. Modified: stable/10/usr.sbin/ntp/config.h Directory Properties: stable/10/ (props changed) Modified:

Re: svn commit: r287984 - stable/10/sys/contrib/ipfilter/netinet

2015-09-22 Thread Cy Schubert
In message <20150919065128.ga74...@freebsd.org>, Alexey Dokuchaev writes: > On Sat, Sep 19, 2015 at 03:58:32AM +, Cy Schubert wrote: > > New Revision: 287984 > > URL: https://svnweb.freebsd.org/changeset/base/287984 > > > > Log: > > MFC r287651, r

svn commit: r287984 - stable/10/sys/contrib/ipfilter/netinet

2015-09-18 Thread Cy Schubert
Author: cy Date: Sat Sep 19 03:58:31 2015 New Revision: 287984 URL: https://svnweb.freebsd.org/changeset/base/287984 Log: MFC r287651, r287652, r287653. Fix mutex errors, fixup typos in comments. Obtained from:NetBSD r1.4. -This lie, anr those below, will be ignored-- >

svn commit: r292811 - stable/10/sys/contrib/ipfilter/netinet

2015-12-27 Thread Cy Schubert
Author: cy Date: Sun Dec 27 23:25:21 2015 New Revision: 292811 URL: https://svnweb.freebsd.org/changeset/base/292811 Log: MFC r292518. Don't assume checksums will be calculated later when fastfoward is enabled (by default in r290383). PR: 72210 Modified:

Re: svn commit: r301577 - stable/10/etc/periodic/daily

2016-06-08 Thread Cy Schubert
In message <d95ff390-3520-70cd-9ee1-0712a5850...@freebsd.org>, Andrey Chernov w rites: > The code still is called only if $daily_ntpd_leapfile_enable is YES and > it is NO by default. Yes, that will be MFCd on Friday, June 10. -- Cheers, Cy Schubert <cy.schub...@komquats.co

svn commit: r301577 - stable/10/etc/periodic/daily

2016-06-07 Thread Cy Schubert
Author: cy Date: Wed Jun 8 03:08:37 2016 New Revision: 301577 URL: https://svnweb.freebsd.org/changeset/base/301577 Log: MFC r301102: Don't rely on $ntpd_enable to periodically fetch the latest leapfile. Suggested by: cperciva Modified:

svn commit: r300897 - stable/10/etc/rc.d

2016-05-27 Thread Cy Schubert
Author: cy Date: Sat May 28 03:33:06 2016 New Revision: 300897 URL: https://svnweb.freebsd.org/changeset/base/300897 Log: MFC r300638: Use the expiry date to determine whether to replace the DB copy of leapfile instead of using the leapfile serial number (create timestamp). PR:

svn commit: r301795 - stable/10/etc/defaults

2016-06-10 Thread Cy Schubert
Author: cy Date: Fri Jun 10 15:03:18 2016 New Revision: 301795 URL: https://svnweb.freebsd.org/changeset/base/301795 Log: MFC r301295: Enable daily_ntpd_leapfile_enable by default. Otherwise an expired leapfile will be ignored and ntpd will behave as if it has no leapfile. While

svn commit: r301107 - stable/10/etc/ntp

2016-06-01 Thread Cy Schubert
Author: cy Date: Wed Jun 1 07:03:07 2016 New Revision: 301107 URL: https://svnweb.freebsd.org/changeset/base/301107 Log: MFC r300180: Update leap-seconds to leap-seconds.3661459200. NO leap second will be introduced at the end of June 2016. Obtained from:

svn commit: r302015 - stable/10/sys/contrib/ipfilter/netinet

2016-06-18 Thread Cy Schubert
Author: cy Date: Sun Jun 19 00:39:23 2016 New Revision: 302015 URL: https://svnweb.freebsd.org/changeset/base/302015 Log: MFC r300259: Enable the two ip_frag tuneables. The code is there but the two ip_frag tuneables aren't registered in the ipf_tuners linked list. This commmit

svn commit: r301978 - stable/10/contrib/ipfilter/man

2016-06-16 Thread Cy Schubert
Author: cy Date: Fri Jun 17 02:48:57 2016 New Revision: 301978 URL: https://svnweb.freebsd.org/changeset/base/301978 Log: MFC r301773 & r301775: Clarify the wording to be more accurate. Modified: stable/10/contrib/ipfilter/man/ipf.8 Directory Properties: stable/10/ (props changed)

svn commit: r295461 - in stable/10/etc: . defaults mtree ntp periodic/daily rc.d

2016-02-09 Thread Cy Schubert
Author: cy Date: Wed Feb 10 07:16:17 2016 New Revision: 295461 URL: https://svnweb.freebsd.org/changeset/base/295461 Log: MFC r289421, r293037, r294773, and r294884. ntp leap-leapseconds support. r289421: Add default leap-seconds file. This should help ntp networks get the leap

svn commit: r295619 - stable/10/etc/rc.d

2016-02-14 Thread Cy Schubert
Author: cy Date: Sun Feb 14 23:04:52 2016 New Revision: 295619 URL: https://svnweb.freebsd.org/changeset/base/295619 Log: MFC r295495 - Update leapsecond file in non-chroot environments. PR: 207095 Submitted by: madpilot Approved by: re (marius) Modified:

svn commit: r296923 - stable/10/sys/contrib/ipfilter/netinet

2016-03-15 Thread Cy Schubert
Author: cy Date: Wed Mar 16 01:48:32 2016 New Revision: 296923 URL: https://svnweb.freebsd.org/changeset/base/296923 Log: MFC r296299 - Remove redundant NULL pointer comparison. Reported by: PVS-Studio (V595) in Differential Revision D5245 Modified:

Re: svn commit: r296781 - in stable/10: crypto/openssh crypto/openssh/contrib crypto/openssh/contrib/redhat crypto/openssh/contrib/suse crypto/openssh/openbsd-compat crypto/openssh/regress crypto/o

2016-03-13 Thread Cy Schubert
7.2p2 (fixes xauth command injection bug) > MFH (r296634): re-add aes-cbc to server-side default cipher list > MFH (r296651, r296657): fix gcc build of pam_ssh > > PR: 207679 > Security: CVE-2016-3115 [...] Thanks. -- Cheers, Cy Schubert <cy.schub..

svn commit: r299750 - stable/10/contrib/ipfilter

2016-05-14 Thread Cy Schubert
Author: cy Date: Sat May 14 19:11:35 2016 New Revision: 299750 URL: https://svnweb.freebsd.org/changeset/base/299750 Log: MFC r298031: Static pointers need not be initialized. Modified: stable/10/contrib/ipfilter/mli_ipl.c Directory Properties: stable/10/ (props changed) Modified:

svn commit: r299749 - in stable/10: contrib/ipfilter sys/contrib/ipfilter/netinet

2016-05-14 Thread Cy Schubert
Author: cy Date: Sat May 14 19:09:32 2016 New Revision: 299749 URL: https://svnweb.freebsd.org/changeset/base/299749 Log: MFC r298030: Use NULL instead of 0 for pointer comparison. Modified: stable/10/contrib/ipfilter/bpf_filter.c stable/10/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c

svn commit: r304030 - stable/10/sys/dev/usb

2016-08-12 Thread Cy Schubert
Author: cy Date: Sat Aug 13 01:33:53 2016 New Revision: 304030 URL: https://svnweb.freebsd.org/changeset/base/304030 Log: MFC r303806: Add Logitech Unifying receiver. Modified: stable/10/sys/dev/usb/usbdevs Directory Properties: stable/10/ (props changed) Modified:

svn commit: r302383 - stable/10/contrib/ipfilter/tools

2016-07-06 Thread Cy Schubert
Author: cy Date: Thu Jul 7 02:23:52 2016 New Revision: 302383 URL: https://svnweb.freebsd.org/changeset/base/302383 Log: MFC r302296: Remove dead code. Modified: stable/10/contrib/ipfilter/tools/ipf.c Directory Properties: stable/10/ (props changed) Modified:

svn commit: r313340 - in stable: 10/sys/netinet 11/sys/netinet

2017-02-06 Thread Cy Schubert
Author: cy Date: Mon Feb 6 13:32:22 2017 New Revision: 313340 URL: https://svnweb.freebsd.org/changeset/base/313340 Log: MFC r312982: Correct comment grammar and make it easier to understand. Modified: stable/10/sys/netinet/tcp_output.c Directory Properties: stable/10/ (props

svn commit: r313461 - in stable: 10/contrib/ipfilter/tools 11/contrib/ipfilter/tools

2017-02-08 Thread Cy Schubert
Author: cy Date: Thu Feb 9 02:08:42 2017 New Revision: 313461 URL: https://svnweb.freebsd.org/changeset/base/313461 Log: MFC r312791: Use normal KNF cuddling of elses. Reported by: bde Modified: stable/10/contrib/ipfilter/tools/ipf.c Directory Properties: stable/10/ (props

svn commit: r313441 - in stable: 10/contrib/ipfilter/tools 11/contrib/ipfilter/tools

2017-02-08 Thread Cy Schubert
Author: cy Date: Wed Feb 8 13:37:57 2017 New Revision: 313441 URL: https://svnweb.freebsd.org/changeset/base/313441 Log: MFC r312777, r312780: Issue an error message when an incorrect flush argument is encountered (and style fixup). Modified: stable/10/contrib/ipfilter/tools/ipf.c

svn commit: r314251 - in stable: 10/contrib/ipfilter/lib 10/sys/contrib/ipfilter/netinet 11/contrib/ipfilter/lib 11/sys/contrib/ipfilter/netinet

2017-02-25 Thread Cy Schubert
Author: cy Date: Sat Feb 25 08:07:28 2017 New Revision: 314251 URL: https://svnweb.freebsd.org/changeset/base/314251 Log: MFC r312787: Currently the fragment info is placed at the top of the linked list under a shared read lock. This patch attempts to upgrade the lock to an exclusive

svn commit: r313648 - stable/10/sys/contrib/ipfilter/netinet

2017-02-11 Thread Cy Schubert
Author: cy Date: Sat Feb 11 18:10:55 2017 New Revision: 313648 URL: https://svnweb.freebsd.org/changeset/base/313648 Log: MFC r311950 (by bz): Get rid of a compiler warning which I saw too often. Include netinet/in.h before ip_compat.t which will then check if IPPROTO_IPIP is defined

svn commit: r304879 - in stable: 10/etc/ntp 10/etc/rc.d 11/etc/ntp 11/etc/rc.d 9/etc/ntp 9/etc/rc.d

2016-08-26 Thread Cy Schubert
Author: cy Date: Sat Aug 27 02:53:21 2016 New Revision: 304879 URL: https://svnweb.freebsd.org/changeset/base/304879 Log: MFC r304779, r304780, r304781, r304782, r304802 r304779: Revert r298887 (spelling fix) and remove $FreeBSD$ because text changes to leap-seconds invaldidates

svn commit: r304878 - in stable: 10/usr.sbin/ntp/doc 11/usr.sbin/ntp/doc 9/usr.sbin/ntp/doc

2016-08-26 Thread Cy Schubert
Author: cy Date: Sat Aug 27 02:27:29 2016 New Revision: 304878 URL: https://svnweb.freebsd.org/changeset/base/304878 Log: MFC r304721: Fixup man page formatting. Submitted by: Steve Kargl Discussed with: bjk@ Modified:

svn commit: r305003 - in stable/10/contrib/sqlite3: . tea

2016-08-29 Thread Cy Schubert
Author: cy Date: Mon Aug 29 12:57:28 2016 New Revision: 305003 URL: https://svnweb.freebsd.org/changeset/base/305003 Log: MFC r304747: Update from sqlite3-3.12.1 (3120100) to sqlite3-3.14.1 (3140100). This commit addresses the tmpdir selection vulnerability fixed in sqlite3-1.13.0.

svn commit: r308346 - in stable: 10/usr.sbin/amd 10/usr.sbin/amd/amd 10/usr.sbin/amd/libamu 11/usr.sbin/amd 11/usr.sbin/amd/amd 11/usr.sbin/amd/libamu 9/usr.sbin/amd 9/usr.sbin/amd/amd 9/usr.sbin/a...

2016-11-05 Thread Cy Schubert
Author: cy Date: Sat Nov 5 17:02:38 2016 New Revision: 308346 URL: https://svnweb.freebsd.org/changeset/base/308346 Log: MFC r307800, r307801 r307800: Sources from the "current" build tree and generated sources in the object tree should be used instead of sources and headers

Re: svn commit: r308200 - in stable: 10/crypto/openssl/ssl 9/crypto/openssl/ssl

2016-11-02 Thread Cy Schubert
SSLerr(SSL_F_DTLS1_READ_BYTES, SSL_R_TOO_MANY_WARN_ALERTS); ^ /usr/obj/opt/src/svn-stable10/tmp/usr/include/openssl/err.h:217:54: note: expanded from macro 'SSLerr' # define SSLerr(f,r) ERR_PUT_error(ERR_LIB_SSL,(f),(r),__FILE__,__LINE__

svn commit: r311259 - in stable: 10/usr.sbin/ntp/doc 11/usr.sbin/ntp/doc

2017-01-03 Thread Cy Schubert
Author: cy Date: Wed Jan 4 06:53:00 2017 New Revision: 311259 URL: https://svnweb.freebsd.org/changeset/base/311259 Log: MFC r311005 Fix up grammar. Modified: stable/10/usr.sbin/ntp/doc/ntp.conf.5 Directory Properties: stable/10/ (props changed) Changes in other areas also in this

svn commit: r310490 - in stable: 10/contrib/amd 10/contrib/amd/amd 10/contrib/amd/amq 10/contrib/amd/conf/checkmount 10/contrib/amd/conf/mtab 10/contrib/amd/conf/nfs_prot 10/contrib/amd/conf/transp...

2016-12-23 Thread Cy Schubert
Author: cy Date: Fri Dec 23 22:42:14 2016 New Revision: 310490 URL: https://svnweb.freebsd.org/changeset/base/310490 Log: MFC r308493, r308619: Update amd from am-utils 6.1.5 to 6.2. Used extensively on my network over the past ten weeks. Reviewed by:pfg, brooks Suggested by:

svn commit: r316121 - stable/10/etc

2017-03-28 Thread Cy Schubert
Author: cy Date: Wed Mar 29 01:32:34 2017 New Revision: 316121 URL: https://svnweb.freebsd.org/changeset/base/316121 Log: MFC r311103 (ian): Update ntp.conf to use the ntpd pool feature. Our previous ntp.conf file configured 3 servers from freebsd.pool.ntp.org using 3 separate

Re: svn commit: r315333 - in stable/10/sys: conf dev/ixgbe modules/ix modules/ixv

2017-03-16 Thread Cy Schubert
on > > Hi Eric, > This commit broke amd64/LINT, further (there are other issues = > preventing it from passing): = > https://ci.freebsd.org/job/FreeBSD-stable-10-amd64-LINT/543/console . It also broke buildkernel while building the ixgbe module in my stable10/amd64 VM. -- Cheers, C

Re: svn commit: r315333 - in stable/10/sys: conf dev/ixgbe modules/ix modules/ixv

2017-03-16 Thread Cy Schubert
g easily > > backportable. > > If you can, look for commits from me in the r29 series citing > > ix_crcstrip (it was a backport from bz@ to unbreak LINT on head that also > > fixed stable/10). > > Thanks! > > -Ngie > > > > On Thu, Mar 16, 2017 a

svn commit: r316559 - in stable: 10/usr.sbin/ntp 11/usr.sbin/ntp

2017-04-06 Thread Cy Schubert
Author: cy Date: Thu Apr 6 06:11:04 2017 New Revision: 316559 URL: https://svnweb.freebsd.org/changeset/base/316559 Log: MFC r314946: Configure leap-second smearing (always). Leap-second smearing is an experimental option that may be specified in ntp.conf(5) and the -x option on

svn commit: r317242 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-04-20 Thread Cy Schubert
Author: cy Date: Fri Apr 21 02:02:52 2017 New Revision: 317242 URL: https://svnweb.freebsd.org/changeset/base/317242 Log: MFC r316811, r317139: Add missing free()'s after calls to randomize(). PR: NetBSD PR/50559 Obtained from:Netbsd radix_ipf.c r1.6 Modified:

svn commit: r317241 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-04-20 Thread Cy Schubert
Author: cy Date: Fri Apr 21 01:51:49 2017 New Revision: 317241 URL: https://svnweb.freebsd.org/changeset/base/317241 Log: MFC r316809: Fix a use after free panic in ipfilter's fragment processing. Memory is malloc'd, then a search for a match in the fragment table is made and if the

svn commit: r315079 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-03-11 Thread Cy Schubert
Author: cy Date: Sat Mar 11 17:46:59 2017 New Revision: 315079 URL: https://svnweb.freebsd.org/changeset/base/315079 Log: MFC r312886: Fix lookup of original destination address when using a redirect rule. Transparent proxying, e.g. to squid, is an example of this. Obtained from:

svn commit: r315081 - in stable: 10/usr.sbin/ntp/doc 11/usr.sbin/ntp/doc

2017-03-11 Thread Cy Schubert
Author: cy Date: Sat Mar 11 18:06:20 2017 New Revision: 315081 URL: https://svnweb.freebsd.org/changeset/base/315081 Log: MFC r314896: Remove extraneous arguments and options, which don't make sense for a file documented in volume 5. Modified: stable/10/usr.sbin/ntp/doc/ntp.conf.5

svn commit: r315080 - in stable: 10/usr.sbin/ntp/doc 11/usr.sbin/ntp/doc

2017-03-11 Thread Cy Schubert
Author: cy Date: Sat Mar 11 17:57:22 2017 New Revision: 315080 URL: https://svnweb.freebsd.org/changeset/base/315080 Log: MFC r314768: Fix mismerge of r280849. Reported by: des Modified: stable/10/usr.sbin/ntp/doc/ntp.keys.5 Directory Properties: stable/10/ (props changed)

svn commit: r314834 - in stable: 10/contrib/ipfilter/lib 11/contrib/ipfilter/lib

2017-03-06 Thread Cy Schubert
Author: cy Date: Tue Mar 7 05:35:14 2017 New Revision: 314834 URL: https://svnweb.freebsd.org/changeset/base/314834 Log: MFC r314627: Fix leak (free str before returning when ctx's calloc fails). Submitted by: trix_juniper.net (Tom Rix) Reviewed by: cy, ngie Discovered by:

svn commit: r322012 - in stable: 10/contrib/ipfilter 11/contrib/ipfilter

2017-08-03 Thread Cy Schubert
Author: cy Date: Thu Aug 3 14:22:48 2017 New Revision: 322012 URL: https://svnweb.freebsd.org/changeset/base/322012 Log: MFC r321605: As in r315225, discard 3072 bytes of RC4 bytestream instead of 1024. (This implementation of arc4rand(9) is used by the userland ipftest utility as it

svn commit: r322535 - stable/10/kerberos5/libexec/ipropd-master

2017-08-15 Thread Cy Schubert
Author: cy Date: Tue Aug 15 12:26:43 2017 New Revision: 322535 URL: https://svnweb.freebsd.org/changeset/base/322535 Log: MFC r322113: Remove dead target introduced in r178828. Approved by: re (marius) Modified: stable/10/kerberos5/libexec/ipropd-master/Makefile Directory

svn commit: r317434 - in stable: 10 10/sys/contrib/ipfilter/netinet 11 11/sys/contrib/ipfilter/netinet

2017-04-25 Thread Cy Schubert
Author: cy Date: Wed Apr 26 02:37:25 2017 New Revision: 317434 URL: https://svnweb.freebsd.org/changeset/base/317434 Log: MFC r316810, r316814, r316816, r316991: Keep state incorrectly assumes keep frags. This is counter to the ipfilter man pages. This also currently restricts keep frags

svn commit: r318206 - in stable: 10/contrib/ipfilter/tools 11/contrib/ipfilter/tools

2017-05-11 Thread Cy Schubert
Author: cy Date: Fri May 12 02:32:01 2017 New Revision: 318206 URL: https://svnweb.freebsd.org/changeset/base/318206 Log: MFC 317830: Ifdef out a redundant if statement when INET6 is disabled. Modified: stable/10/contrib/ipfilter/tools/ippool.c Directory Properties: stable/10/

svn commit: r318205 - in stable: 10/contrib/ipfilter/tools 11/contrib/ipfilter/tools

2017-05-11 Thread Cy Schubert
Author: cy Date: Fri May 12 02:26:39 2017 New Revision: 318205 URL: https://svnweb.freebsd.org/changeset/base/318205 Log: Revert r318203: Neglected to put "MFC 318203:" in the log. Pointy hat to:cy Modified: stable/10/contrib/ipfilter/tools/ippool.c Directory Properties:

svn commit: r320350 - stable/10/etc/ntp

2017-06-25 Thread Cy Schubert
Author: cy Date: Mon Jun 26 05:43:44 2017 New Revision: 320350 URL: https://svnweb.freebsd.org/changeset/base/320350 Log: MFC r320242, r320256: Update leap-seconds to leap-seconds.3676924800. As per https://datacenter.iers.org/eop/-/somos/5Rgv/latest/16: INTERNATIONAL EARTH

svn commit: r318390 - in stable: 10/contrib/ipfilter/lib 11/contrib/ipfilter/lib

2017-05-16 Thread Cy Schubert
Author: cy Date: Wed May 17 01:38:32 2017 New Revision: 318390 URL: https://svnweb.freebsd.org/changeset/base/318390 Log: MFC r318281: Separate the ipfilter function/static string from the error with a colon (:) in error messages to assist the user in parsing out the error from where

svn commit: r318391 - in stable: 10/contrib/ipfilter/lib 11/contrib/ipfilter/lib

2017-05-16 Thread Cy Schubert
Author: cy Date: Wed May 17 01:45:26 2017 New Revision: 318391 URL: https://svnweb.freebsd.org/changeset/base/318391 Log: MFC r318283: As of r318281 in HEAD (r318390 [in stable/10 & stable/11]), there is no need to put a colon (:) in the message string. Modified:

svn commit: r319179 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-05-29 Thread Cy Schubert
Author: cy Date: Tue May 30 03:33:48 2017 New Revision: 319179 URL: https://svnweb.freebsd.org/changeset/base/319179 Log: MFC r318606: Refactor & compact struct i6addr_t #ifdef: remove redundant structure definintion when USE_INET6 is false. Modified:

svn commit: r319176 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-05-29 Thread Cy Schubert
Author: cy Date: Tue May 30 03:25:05 2017 New Revision: 319176 URL: https://svnweb.freebsd.org/changeset/base/319176 Log: MFC r318745: Remove redundant variable declaration. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_nat.c Directory Properties: stable/10/ (props changed)

svn commit: r319178 - in stable: 10/usr.sbin/nscd 11/usr.sbin/nscd

2017-05-29 Thread Cy Schubert
Author: cy Date: Tue May 30 03:30:53 2017 New Revision: 319178 URL: https://svnweb.freebsd.org/changeset/base/319178 Log: MFC r318588: Fix up two assertions following malloc(). vangyzen@ notified me of the second one. The first one is fixed as well. Reported by: vangyzen@

svn commit: r319177 - in stable: 10/usr.sbin/nscd 11/usr.sbin/nscd

2017-05-29 Thread Cy Schubert
Author: cy Date: Tue May 30 03:27:59 2017 New Revision: 319177 URL: https://svnweb.freebsd.org/changeset/base/319177 Log: MFC r318578: Fix non-recoverable name resolution failures due to negative cache entries never expiring. This patch honours the negative cache timeout. To

svn commit: r320090 - stable/10/contrib/ipfilter/man

2017-06-18 Thread Cy Schubert
Author: cy Date: Mon Jun 19 05:02:27 2017 New Revision: 320090 URL: https://svnweb.freebsd.org/changeset/base/320090 Log: MFC r319962: Correct example directory location. Submitted by: olivier@ Modified: stable/10/contrib/ipfilter/man/ipf.5 Directory Properties: stable/10/

svn commit: r319633 - stable/10/sys/contrib/ipfilter/netinet

2017-06-06 Thread Cy Schubert
Author: cy Date: Tue Jun 6 19:21:35 2017 New Revision: 319633 URL: https://svnweb.freebsd.org/changeset/base/319633 Log: MFC r318998: Fix return value of ip_sync_nat. Previously, regardless of error it always returned a return code of 0. Obtained from:NetBSD ip_sync.c r1.5

svn commit: r323842 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-09-20 Thread Cy Schubert
Author: cy Date: Thu Sep 21 03:18:11 2017 New Revision: 323842 URL: https://svnweb.freebsd.org/changeset/base/323842 Log: MFC r323715: Don't use an apostrophe in a possesive pronoun. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_state.c Directory Properties: stable/10/ (props

svn commit: r323693 - in stable: 10/kerberos5/lib/libkafs5 11/kerberos5/lib/libkafs5

2017-09-17 Thread Cy Schubert
Author: cy Date: Mon Sep 18 00:13:48 2017 New Revision: 323693 URL: https://svnweb.freebsd.org/changeset/base/323693 Log: MFC r322112: krb5_err.h is generated from a .et file in kerberos5/lib/libkrb5. As kerberos5/lib/krb5 include files are already referenced it makes no sense to

svn commit: r323694 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-09-17 Thread Cy Schubert
Author: cy Date: Mon Sep 18 00:17:53 2017 New Revision: 323694 URL: https://svnweb.freebsd.org/changeset/base/323694 Log: MFC r323478: Improve the wording of a comment describing why EAGAIN is the error code. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_state.c Directory

svn commit: r323043 - stable/10/lib/libtelnet

2017-08-30 Thread Cy Schubert
Author: cy Date: Thu Aug 31 00:56:10 2017 New Revision: 323043 URL: https://svnweb.freebsd.org/changeset/base/323043 Log: MFC r321806: Remove redundant include directories which expand to a noop, "-I/lib/krb5 -I -I". Reviewed by:ngie@, markm@ Approved by: re@ (marius@)

svn commit: r323231 - stable/10/sys/contrib/ipfilter/netinet

2017-09-06 Thread Cy Schubert
Author: cy Date: Wed Sep 6 20:01:19 2017 New Revision: 323231 URL: https://svnweb.freebsd.org/changeset/base/323231 Log: MFC r322073: Fix matchcing of NATed ICMP queries (resolving NATed MTU discovery). Approved by: re (kib) Modified:

svn commit: r324515 - in stable: 10/lib/libc/net 11/lib/libc/net

2017-10-10 Thread Cy Schubert
Author: cy Date: Wed Oct 11 05:07:37 2017 New Revision: 324515 URL: https://svnweb.freebsd.org/changeset/base/324515 Log: MFC r324249, 324260, and 324277 Clarify the wording describing the stayopen flag and style fixes. Modified: stable/10/lib/libc/net/gethostbyname.3 Directory

svn commit: r324513 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2017-10-10 Thread Cy Schubert
Author: cy Date: Wed Oct 11 05:02:36 2017 New Revision: 324513 URL: https://svnweb.freebsd.org/changeset/base/324513 Log: MFC r323945 and 323962 Fix misspellings, typos and /* border misalignments. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_nat.c Directory Properties:

svn commit: r326918 - in stable: 10 10/usr.sbin/fdformat 11 11/usr.sbin/fdformat

2017-12-16 Thread Cy Schubert
Author: cy Date: Sun Dec 17 06:00:49 2017 New Revision: 326918 URL: https://svnweb.freebsd.org/changeset/base/326918 Log: MFC r326558, r326566: fdformat is a sysadmin command and thus its man page should be in volume 8 instead of volume 1. Reviewed by: imp Added:

svn commit: r326833 - in stable: 10 11

2017-12-13 Thread Cy Schubert
Author: cy Date: Wed Dec 13 20:15:23 2017 New Revision: 326833 URL: https://svnweb.freebsd.org/changeset/base/326833 Log: MFC r324248: hen building multiple kernels using KERNCONF, non-existent KERNCONF files will produce an error and buildkernel will fail. Previously missing KERNCONF

svn commit: r325381 - in stable: 10/lib/libc/stdio 11/lib/libc/stdio

2017-11-03 Thread Cy Schubert
Author: cy Date: Sat Nov 4 05:17:03 2017 New Revision: 325381 URL: https://svnweb.freebsd.org/changeset/base/325381 Log: MFC r325030: Remove redundant sys/cdefs.h include. Modified: stable/10/lib/libc/stdio/gets.c Directory Properties: stable/10/ (props changed) Changes in other

svn commit: r326604 - in stable: 10/etc/rc.d 11/etc/rc.d

2017-12-05 Thread Cy Schubert
Author: cy Date: Wed Dec 6 00:00:37 2017 New Revision: 326604 URL: https://svnweb.freebsd.org/changeset/base/326604 Log: MFC r326343: Fix fetching ntp leapfile after 325256 Submitted by: Ronald Klop Original commit by:asomers MFC PR:

svn commit: r334202 - stable/10/sys/contrib/ipfilter/netinet

2018-05-25 Thread Cy Schubert
Author: cy Date: Fri May 25 06:26:07 2018 New Revision: 334202 URL: https://svnweb.freebsd.org/changeset/base/334202 Log: MFC r92-r93, r333427 r92: Fix memory leak. (CID 1199373). r93: Document intentional fallthrough. (CID 976535) r333427: Fix style error

svn commit: r335734 - in stable: 10/contrib/amd/amq 11/contrib/amd/amq

2018-06-27 Thread Cy Schubert
Author: cy Date: Wed Jun 27 19:42:55 2018 New Revision: 335734 URL: https://svnweb.freebsd.org/changeset/base/335734 Log: MFC r335355: Fix amq -i timestamp segmentation violation. Modified: stable/10/contrib/amd/amq/amq.c Directory Properties: stable/10/ (props changed) Changes in

svn commit: r327717 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-01-08 Thread Cy Schubert
Author: cy Date: Tue Jan 9 06:10:57 2018 New Revision: 327717 URL: https://svnweb.freebsd.org/changeset/base/327717 Log: MFC r327540: Correct function name in description block. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_state.c Directory Properties: stable/10/ (props

svn commit: r327716 - in stable: 10/sys/netinet 11/sys/netinet

2018-01-08 Thread Cy Schubert
Author: cy Date: Tue Jan 9 06:07:51 2018 New Revision: 327716 URL: https://svnweb.freebsd.org/changeset/base/327716 Log: MFC r327336: Correct the comment describing badrs which is bad router solicitiation, not bad router advertisement. Modified: stable/10/sys/netinet/icmp6.h

svn commit: r328204 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-01-20 Thread Cy Schubert
Author: cy Date: Sat Jan 20 18:04:08 2018 New Revision: 328204 URL: https://svnweb.freebsd.org/changeset/base/328204 Log: MFC r327913: Remove redundant variable. Modified: stable/10/sys/contrib/ipfilter/netinet/radix_ipf.c Directory Properties: stable/10/ (props changed) Changes in

svn commit: r328203 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-01-20 Thread Cy Schubert
Author: cy Date: Sat Jan 20 18:00:42 2018 New Revision: 328203 URL: https://svnweb.freebsd.org/changeset/base/328203 Log: MFC r327912: Though this block of code is not used by FreeBSD, correct a call to sprintf() with a macro call to SNPRINTF similar to other calls to SNPRINTF within

svn commit: r328274 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-01-23 Thread Cy Schubert
Author: cy Date: Tue Jan 23 04:01:48 2018 New Revision: 328274 URL: https://svnweb.freebsd.org/changeset/base/328274 Log: MFC r327718: When growing the state, also grow the seed array. Otherwise memory that was not allocated will be accessed. This necessitated refactoring state seed

svn commit: r327859 - in stable: 10/etc/rc.d 11/etc/rc.d

2018-01-11 Thread Cy Schubert
Author: cy Date: Fri Jan 12 02:49:18 2018 New Revision: 327859 URL: https://svnweb.freebsd.org/changeset/base/327859 Log: MFC 327737: USNO and possibly others have misinterpreted the maining of the leapseconds last-update field and incorrectly increment it when changing the file even

svn commit: r337948 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-08-16 Thread Cy Schubert
Author: cy Date: Fri Aug 17 02:46:36 2018 New Revision: 337948 URL: https://svnweb.freebsd.org/changeset/base/337948 Log: MFC r337558, r337560 r337558: Identify the return value (rval) that led to the IPv4 NAT failure in ipf_nat_checkout() and report it in the frb_natv4out and

svn commit: r338123 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-08-20 Thread Cy Schubert
Author: cy Date: Tue Aug 21 00:37:48 2018 New Revision: 338123 URL: https://svnweb.freebsd.org/changeset/base/338123 Log: MFC r337410: Remove redundant and incorrect default definition of AF_INET6. AF_INET6 is defined in sys/socket.h where it's defined as 28. A bit of trivia: On

svn commit: r338171 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-08-21 Thread Cy Schubert
Author: cy Date: Wed Aug 22 01:43:11 2018 New Revision: 338171 URL: https://svnweb.freebsd.org/changeset/base/338171 Log: MFC r338047: The bucket index is subtracted by one at lines 2304 and 2314. When 0 it becomes -1, except these are unsigned integers, so they become very large

svn commit: r338169 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet

2018-08-21 Thread Cy Schubert
Author: cy Date: Wed Aug 22 01:04:52 2018 New Revision: 338169 URL: https://svnweb.freebsd.org/changeset/base/338169 Log: MFC r338045: Expose np (nat_t - an entry in the nat table structure) in the DTrace probe when nat fails (label badnat). This is useful in diagnosing failed NAT

svn commit: r338464 - in stable: 10/crypto/heimdal/doc/doxyout/krb5/man/man3 11/crypto/heimdal/doc/doxyout/krb5/man/man3

2018-09-04 Thread Cy Schubert
Author: cy Date: Wed Sep 5 01:33:30 2018 New Revision: 338464 URL: https://svnweb.freebsd.org/changeset/base/338464 Log: Avoid printing extraneous function names when searching man page database (apropos, man -k). This commit Replaces .SS with .SH, similar to the man page provided by

svn commit: r342608 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2018-12-30 Thread Cy Schubert
Author: cy Date: Sun Dec 30 04:42:01 2018 New Revision: 342608 URL: https://svnweb.freebsd.org/changeset/base/342608 Log: MFC r342547: Remove another empty #ifdef block. This empty block also exists in the upstream HEAD. Modified: stable/10/sys/contrib/ipfilter/netinet/fil.c Directory

svn commit: r342794 - in stable: 10/contrib/ipfilter 11/contrib/ipfilter 12/contrib/ipfilter

2019-01-05 Thread Cy Schubert
Author: cy Date: Sun Jan 6 00:32:14 2019 New Revision: 342794 URL: https://svnweb.freebsd.org/changeset/base/342794 Log: MFC r342605: TCP_PAWS_IDLE is does not exist in NetBSD and illumos. In FreeBSD TCP_PAWS_IDLE is defined in netinet/tcp_seq.h, however this header isn't included

svn commit: r343336 - in stable: 10/contrib/ipfilter 11/contrib/ipfilter 12/contrib/ipfilter

2019-01-22 Thread Cy Schubert
Author: cy Date: Wed Jan 23 02:40:29 2019 New Revision: 343336 URL: https://svnweb.freebsd.org/changeset/base/343336 Log: MFC r343073: Remove an IRIX-only source file. Deleted: stable/10/contrib/ipfilter/mli_ipl.c Modified: Directory Properties: stable/10/ (props changed) Changes

svn commit: r343337 - in stable: 10/contrib/ipfilter 11/contrib/ipfilter 12/contrib/ipfilter

2019-01-22 Thread Cy Schubert
Author: cy Date: Wed Jan 23 02:43:49 2019 New Revision: 343337 URL: https://svnweb.freebsd.org/changeset/base/343337 Log: MFC r343103: Remove redundant ipfilter version of pcap-bpf.h. As of r214535 it was no longer needed. Deleted: stable/10/contrib/ipfilter/pcap-bpf.h Modified:

svn commit: r341739 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2018-12-08 Thread Cy Schubert
Author: cy Date: Sat Dec 8 17:28:52 2018 New Revision: 341739 URL: https://svnweb.freebsd.org/changeset/base/341739 Log: MFC r341384: Remove IFF_DRVRLOCK as it is used in IRIX only (and we all know IRIX is dead). This includes collaterally removing code shared by HP/UX, SGI, and

svn commit: r341379 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2018-12-01 Thread Cy Schubert
Author: cy Date: Sat Dec 1 18:17:51 2018 New Revision: 341379 URL: https://svnweb.freebsd.org/changeset/base/341379 Log: MFC r340868: An OSF/1 ifdef makes absolutley no sense in a FreeBSD specific source file. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c

svn commit: r342606 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2018-12-30 Thread Cy Schubert
Author: cy Date: Sun Dec 30 04:31:51 2018 New Revision: 342606 URL: https://svnweb.freebsd.org/changeset/base/342606 Log: MFC r341279: Clean up a redundant non-redefinition of IFNAMSIZ. IFNAMSIZ is defined in net/if.h, therefore the condition is never met and confusing to those who

svn commit: r342607 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2018-12-30 Thread Cy Schubert
Author: cy Date: Sun Dec 30 04:37:49 2018 New Revision: 342607 URL: https://svnweb.freebsd.org/changeset/base/342607 Log: MFC r342377: Remove NETBSD_PF. NETBSD_PF is a flag that defines whether the pfil(9) framework is available. pfil(9) has been in FreeBSD since FreeBSD 5 and

svn commit: r342641 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2018-12-30 Thread Cy Schubert
Author: cy Date: Mon Dec 31 03:53:33 2018 New Revision: 342641 URL: https://svnweb.freebsd.org/changeset/base/342641 Log: MFC r342385: Remove an empty #if block. The interesting thing is that looking through Darren's commit logs, the line containing an extern ppsratecheck()

svn commit: r342685 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2019-01-02 Thread Cy Schubert
Author: cy Date: Wed Jan 2 15:13:08 2019 New Revision: 342685 URL: https://svnweb.freebsd.org/changeset/base/342685 Log: MFC r342596: Remove duplicate include of sys/mbuf.h. Reported by: Trond Endrest Modified: stable/10/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c Directory

svn commit: r342588 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2018-12-28 Thread Cy Schubert
Author: cy Date: Sat Dec 29 03:18:16 2018 New Revision: 342588 URL: https://svnweb.freebsd.org/changeset/base/342588 Log: MFC r342374: Remove the last vestiges of HP/UX from a FreeBSD-only ipfilter source file. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c

svn commit: r344113 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2019-02-13 Thread Cy Schubert
Author: cy Date: Thu Feb 14 00:52:03 2019 New Revision: 344113 URL: https://svnweb.freebsd.org/changeset/base/344113 Log: MFC r343591: Do not obtain an already held read lock. This causes a witness panic when ipfs is invoked. This is the second of two panics resolving PR 235110. PR:

svn commit: r343568 - in stable: 10/contrib/ipfilter/man 11/contrib/ipfilter/man 12/contrib/ipfilter/man

2019-01-29 Thread Cy Schubert
Author: cy Date: Wed Jan 30 02:39:08 2019 New Revision: 343568 URL: https://svnweb.freebsd.org/changeset/base/343568 Log: MFC r343486: Fix a typo. Modified: stable/10/contrib/ipfilter/man/ipnat.5 Directory Properties: stable/10/ (props changed) Changes in other areas also in this

svn commit: r343691 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2019-02-02 Thread Cy Schubert
Author: cy Date: Sun Feb 3 00:36:12 2019 New Revision: 343691 URL: https://svnweb.freebsd.org/changeset/base/343691 Log: MFC r343600: Document the instance context pointer. Modified: stable/10/sys/contrib/ipfilter/netinet/fil.c Directory Properties: stable/10/ (props changed)

svn commit: r347420 - in stable: 10/lib/libpam/modules/pam_login_access 11/lib/libpam/modules/pam_login_access 12/lib/libpam/modules/pam_login_access

2019-05-09 Thread Cy Schubert
Author: cy Date: Fri May 10 01:02:07 2019 New Revision: 347420 URL: https://svnweb.freebsd.org/changeset/base/347420 Log: MFC r347234: Improve the legibility of the login.access.5 man page by separating each argument into its own paragraph. Modified:

svn commit: r346982 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2019-04-30 Thread Cy Schubert
Author: cy Date: Wed May 1 01:49:33 2019 New Revision: 346982 URL: https://svnweb.freebsd.org/changeset/base/346982 Log: MFC r346804: Left justify a function header brace as it should be. No functional change. Modified: stable/10/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c

svn commit: r349759 - in stable: 10/contrib/ipfilter/man 11/contrib/ipfilter/man 12/contrib/ipfilter/man

2019-07-04 Thread Cy Schubert
Author: cy Date: Fri Jul 5 04:24:09 2019 New Revision: 349759 URL: https://svnweb.freebsd.org/changeset/base/349759 Log: MFC r349503-349504: Document the -B, binary logfile, and the -C config file options. Reference the ipmon.5 man page and ipmon.conf. PR: 238816

svn commit: r349903 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2019-07-10 Thread Cy Schubert
Author: cy Date: Thu Jul 11 00:44:09 2019 New Revision: 349903 URL: https://svnweb.freebsd.org/changeset/base/349903 Log: MFC 349843: Update frtuc struct comments. It not only defines TCP things we are interested in but also UDP. While at it document the source and destination port

svn commit: r349902 - in stable: 10/sys/contrib/ipfilter/netinet 11/sys/contrib/ipfilter/netinet 12/sys/contrib/ipfilter/netinet

2019-07-10 Thread Cy Schubert
Author: cy Date: Thu Jul 11 00:38:10 2019 New Revision: 349902 URL: https://svnweb.freebsd.org/changeset/base/349902 Log: MFC r349842: Correct the description for the low port in the port compare struct. Adjust the high port description to match that of the low port description.

  1   2   >