From noreply at github.com  Tue Dec  5 17:26:57 2023
From: noreply at github.com (Lucas Holt)
Date: Tue, 05 Dec 2023 14:26:57 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] fdad4d: As part of its stateful
 TCP connection tracking im...
Message-ID: <MidnightBSD/src/push/refs/heads/master/5e0df2-fdad4d@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: fdad4db40e18678181120a1b3361f0665213683f
      https://github.com/MidnightBSD/src/commit/fdad4db40e18678181120a1b3361f0665213683f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M sys/netpfil/pf/pf.c

  Log Message:
  -----------
  As part of its stateful TCP connection tracking implementation, pf
performs sequence number validation on inbound packets.  This makes it
difficult for a would-be attacker to spoof the sender and inject packets
into a TCP stream, since crafted packets must contain sequence numbers
which match the current connection state to avoid being rejected by the
firewall.

A bug in the implementation of sequence number validation means that the
sequence number is not in fact validated, allowing an attacker who is
able to impersonate the remote host and guess the connection's port
numbers to inject packets into the TCP stream.

Obtained from: FreeBSD



From noreply at github.com  Tue Dec  5 17:31:18 2023
From: noreply at github.com (Lucas Holt)
Date: Tue, 05 Dec 2023 14:31:18 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 5dd9cd: As part of its stateful
 TCP connection trackin...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.1/7389a9-5dd9cd@github.com>

  Branch: refs/heads/stable/3.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 5dd9cd0c84fd963e3069e67b4780f86c5f5bdcef
      https://github.com/MidnightBSD/src/commit/5dd9cd0c84fd963e3069e67b4780f86c5f5bdcef
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M UPDATING
    M sys/netpfil/pf/pf.c

  Log Message:
  -----------
      As part of its stateful TCP connection tracking implementation, pf
    performs sequence number validation on inbound packets.  This makes it
    difficult for a would-be attacker to spoof the sender and inject packets
    into a TCP stream, since crafted packets must contain sequence numbers
    which match the current connection state to avoid being rejected by the
    firewall.

    A bug in the implementation of sequence number validation means that the
    sequence number is not in fact validated, allowing an attacker who is
    able to impersonate the remote host and guess the connection's port
    numbers to inject packets into the TCP stream.

    Obtained from: FreeBSD



From noreply at github.com  Tue Dec  5 17:31:26 2023
From: noreply at github.com (Lucas Holt)
Date: Tue, 05 Dec 2023 14:31:26 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] af86d3: document pf issue.
Message-ID: <MidnightBSD/src/push/refs/heads/master/fdad4d-af86d3@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: af86d3b49e29031edb4e166ffeff43bc696d100d
      https://github.com/MidnightBSD/src/commit/af86d3b49e29031edb4e166ffeff43bc696d100d
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  document pf issue.



From noreply at github.com  Tue Dec  5 17:33:32 2023
From: noreply at github.com (Lucas Holt)
Date: Tue, 05 Dec 2023 14:33:32 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 563761: Bump version number
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.1/5dd9cd-563761@github.com>

  Branch: refs/heads/stable/3.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 56376121a981fd1262b1465200f908b7e5b0c7c3
      https://github.com/MidnightBSD/src/commit/56376121a981fd1262b1465200f908b7e5b0c7c3
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M sys/conf/newvers.sh

  Log Message:
  -----------
  Bump version number



From noreply at github.com  Tue Dec  5 17:44:41 2023
From: noreply at github.com (Lucas Holt)
Date: Tue, 05 Dec 2023 14:44:41 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 87447c: Import mport 2.4.8
Message-ID: <MidnightBSD/src/push/refs/heads/vendor/mport/aac8f7-87447c@github.com>

  Branch: refs/heads/vendor/mport
  Home:   https://github.com/MidnightBSD/src
  Commit: 87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5
      https://github.com/MidnightBSD/src/commit/87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M libexec/mport.check-fake/Makefile
    M libexec/mport.check-fake/mport.check-fake.c
    M libexec/mport.check-for-older/Makefile
    M libexec/mport.create/Makefile
    M libexec/mport.delete/Makefile
    M libexec/mport.delete/mport.delete.c
    M libexec/mport.fetch/Makefile
    M libexec/mport.info/Makefile
    M libexec/mport.init/Makefile
    M libexec/mport.install/Makefile
    M libexec/mport.list/Makefile
    M libexec/mport.list/mport.list.c
    M libexec/mport.merge/Makefile
    M libexec/mport.query/Makefile
    M libexec/mport.update/Makefile
    M libexec/mport.updepends/Makefile
    M libexec/mport.version_cmp/Makefile
    M libmport/Makefile
    M libmport/autoremove.c
    M libmport/bundle_read_install_pkg.c
    M libmport/delete_primative.c
    M libmport/info.c
    M libmport/install_primative.c
    M libmport/instance.c
    A libmport/message.c
    M libmport/mport.h
    M libmport/mport_private.h
    M libmport/pkgmeta.c
    M libmport/upgrade.c
    M libmport/util.c
    M mport/Makefile
    M mport/mport.c

  Log Message:
  -----------
  Import mport 2.4.8



From noreply at github.com  Tue Dec  5 17:44:48 2023
From: noreply at github.com (Lucas Holt)
Date: Tue, 05 Dec 2023 14:44:48 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src]
Message-ID: <MidnightBSD/src/push/refs/tags/vendor/mport/2.4.8/000000-b85a72@github.com>

  Branch: refs/tags/vendor/mport/2.4.8
  Home:   https://github.com/MidnightBSD/src

From noreply at github.com  Tue Dec  5 17:48:09 2023
From: noreply at github.com (Lucas Holt)
Date: Tue, 05 Dec 2023 14:48:09 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] aac8f7: Import of mport 2.4.7
Message-ID: <MidnightBSD/src/push/refs/heads/master/af86d3-803a91@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: aac8f794be565581f6fe7bbf52a3cca45b9ebaf4
      https://github.com/MidnightBSD/src/commit/aac8f794be565581f6fe7bbf52a3cca45b9ebaf4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-09-19 (Tue, 19 Sep 2023)

  Changed paths:
    M libexec/mport.create/mport.create.c
    M libmport/mport_private.h
    M libmport/util.c

  Log Message:
  -----------
  Import of mport 2.4.7


  Commit: 87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5
      https://github.com/MidnightBSD/src/commit/87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M libexec/mport.check-fake/Makefile
    M libexec/mport.check-fake/mport.check-fake.c
    M libexec/mport.check-for-older/Makefile
    M libexec/mport.create/Makefile
    M libexec/mport.delete/Makefile
    M libexec/mport.delete/mport.delete.c
    M libexec/mport.fetch/Makefile
    M libexec/mport.info/Makefile
    M libexec/mport.init/Makefile
    M libexec/mport.install/Makefile
    M libexec/mport.list/Makefile
    M libexec/mport.list/mport.list.c
    M libexec/mport.merge/Makefile
    M libexec/mport.query/Makefile
    M libexec/mport.update/Makefile
    M libexec/mport.updepends/Makefile
    M libexec/mport.version_cmp/Makefile
    M libmport/Makefile
    M libmport/autoremove.c
    M libmport/bundle_read_install_pkg.c
    M libmport/delete_primative.c
    M libmport/info.c
    M libmport/install_primative.c
    M libmport/instance.c
    A libmport/message.c
    M libmport/mport.h
    M libmport/mport_private.h
    M libmport/pkgmeta.c
    M libmport/upgrade.c
    M libmport/util.c
    M mport/Makefile
    M mport/mport.c

  Log Message:
  -----------
  Import mport 2.4.8


  Commit: 803a916f45d0baac9cd0bb7660b9f978cfe8e4f1
      https://github.com/MidnightBSD/src/commit/803a916f45d0baac9cd0bb7660b9f978cfe8e4f1
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M contrib/mport/libexec/mport.check-fake/Makefile
    M contrib/mport/libexec/mport.check-fake/mport.check-fake.c
    M contrib/mport/libexec/mport.check-for-older/Makefile
    M contrib/mport/libexec/mport.create/Makefile
    M contrib/mport/libexec/mport.delete/Makefile
    M contrib/mport/libexec/mport.delete/mport.delete.c
    M contrib/mport/libexec/mport.fetch/Makefile
    M contrib/mport/libexec/mport.info/Makefile
    M contrib/mport/libexec/mport.init/Makefile
    M contrib/mport/libexec/mport.install/Makefile
    M contrib/mport/libexec/mport.list/Makefile
    M contrib/mport/libexec/mport.list/mport.list.c
    M contrib/mport/libexec/mport.merge/Makefile
    M contrib/mport/libexec/mport.query/Makefile
    M contrib/mport/libexec/mport.update/Makefile
    M contrib/mport/libexec/mport.updepends/Makefile
    M contrib/mport/libexec/mport.version_cmp/Makefile
    M contrib/mport/libmport/Makefile
    M contrib/mport/libmport/autoremove.c
    M contrib/mport/libmport/bundle_read_install_pkg.c
    M contrib/mport/libmport/delete_primative.c
    M contrib/mport/libmport/info.c
    M contrib/mport/libmport/install_primative.c
    M contrib/mport/libmport/instance.c
    A contrib/mport/libmport/message.c
    M contrib/mport/libmport/mport.h
    M contrib/mport/libmport/mport_private.h
    M contrib/mport/libmport/pkgmeta.c
    M contrib/mport/libmport/upgrade.c
    M contrib/mport/libmport/util.c
    M contrib/mport/mport/Makefile
    M contrib/mport/mport/mport.c

  Log Message:
  -----------
  Merge commit '87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5'


Compare: https://github.com/MidnightBSD/src/compare/af86d3b49e29...803a916f45d0

From noreply at github.com  Fri Dec  8 11:13:21 2023
From: noreply at github.com (Lucas Holt)
Date: Fri, 08 Dec 2023 08:13:21 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 87447c: Import mport 2.4.8
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.1/563761-977472@github.com>

  Branch: refs/heads/stable/3.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5
      https://github.com/MidnightBSD/src/commit/87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M libexec/mport.check-fake/Makefile
    M libexec/mport.check-fake/mport.check-fake.c
    M libexec/mport.check-for-older/Makefile
    M libexec/mport.create/Makefile
    M libexec/mport.delete/Makefile
    M libexec/mport.delete/mport.delete.c
    M libexec/mport.fetch/Makefile
    M libexec/mport.info/Makefile
    M libexec/mport.init/Makefile
    M libexec/mport.install/Makefile
    M libexec/mport.list/Makefile
    M libexec/mport.list/mport.list.c
    M libexec/mport.merge/Makefile
    M libexec/mport.query/Makefile
    M libexec/mport.update/Makefile
    M libexec/mport.updepends/Makefile
    M libexec/mport.version_cmp/Makefile
    M libmport/Makefile
    M libmport/autoremove.c
    M libmport/bundle_read_install_pkg.c
    M libmport/delete_primative.c
    M libmport/info.c
    M libmport/install_primative.c
    M libmport/instance.c
    A libmport/message.c
    M libmport/mport.h
    M libmport/mport_private.h
    M libmport/pkgmeta.c
    M libmport/upgrade.c
    M libmport/util.c
    M mport/Makefile
    M mport/mport.c

  Log Message:
  -----------
  Import mport 2.4.8


  Commit: 21d2c074835c6884bf13d72e72c9100661a86a15
      https://github.com/MidnightBSD/src/commit/21d2c074835c6884bf13d72e72c9100661a86a15
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M contrib/mport/libexec/mport.check-fake/Makefile
    M contrib/mport/libexec/mport.check-fake/mport.check-fake.c
    M contrib/mport/libexec/mport.check-for-older/Makefile
    M contrib/mport/libexec/mport.create/Makefile
    M contrib/mport/libexec/mport.delete/Makefile
    M contrib/mport/libexec/mport.delete/mport.delete.c
    M contrib/mport/libexec/mport.fetch/Makefile
    M contrib/mport/libexec/mport.info/Makefile
    M contrib/mport/libexec/mport.init/Makefile
    M contrib/mport/libexec/mport.install/Makefile
    M contrib/mport/libexec/mport.list/Makefile
    M contrib/mport/libexec/mport.list/mport.list.c
    M contrib/mport/libexec/mport.merge/Makefile
    M contrib/mport/libexec/mport.query/Makefile
    M contrib/mport/libexec/mport.update/Makefile
    M contrib/mport/libexec/mport.updepends/Makefile
    M contrib/mport/libexec/mport.version_cmp/Makefile
    M contrib/mport/libmport/Makefile
    M contrib/mport/libmport/autoremove.c
    M contrib/mport/libmport/bundle_read_install_pkg.c
    M contrib/mport/libmport/delete_primative.c
    M contrib/mport/libmport/info.c
    M contrib/mport/libmport/install_primative.c
    M contrib/mport/libmport/instance.c
    A contrib/mport/libmport/message.c
    M contrib/mport/libmport/mport.h
    M contrib/mport/libmport/mport_private.h
    M contrib/mport/libmport/pkgmeta.c
    M contrib/mport/libmport/upgrade.c
    M contrib/mport/libmport/util.c
    M contrib/mport/mport/Makefile
    M contrib/mport/mport/mport.c

  Log Message:
  -----------
  Merge commit '87447c7ded6ad4a99419e3bb8bd1d1a8334e13d5' into stable/3.1


  Commit: 3e59eb15f15c0d1eaede645fd7c0020921d0400b
      https://github.com/MidnightBSD/src/commit/3e59eb15f15c0d1eaede645fd7c0020921d0400b
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-05 (Tue, 05 Dec 2023)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  add mport 2.4.8


  Commit: 977472ee3546686be653cf174327ffc8fe9f0671
      https://github.com/MidnightBSD/src/commit/977472ee3546686be653cf174327ffc8fe9f0671
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-06 (Wed, 06 Dec 2023)

  Changed paths:
    M libexec/mport.check-for-older/Makefile
    M libexec/mport.fetch/Makefile

  Log Message:
  -----------
  add dependency


Compare: https://github.com/MidnightBSD/src/compare/56376121a981...977472ee3546

From noreply at github.com  Fri Dec  8 11:13:32 2023
From: noreply at github.com (Lucas Holt)
Date: Fri, 08 Dec 2023 08:13:32 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] af1387: fix build
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.1/977472-af1387@github.com>

  Branch: refs/heads/stable/3.1
  Home:   https://github.com/MidnightBSD/src
  Commit: af138721c296aaf03eaadf365e16301d14efcd33
      https://github.com/MidnightBSD/src/commit/af138721c296aaf03eaadf365e16301d14efcd33
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-08 (Fri, 08 Dec 2023)

  Changed paths:
    M contrib/mport/mport/mport.c
    M lib/libmport/Makefile
    M usr.sbin/mport/Makefile

  Log Message:
  -----------
  fix build



From noreply at github.com  Sat Dec  9 13:35:55 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 10:35:55 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src]
Message-ID: <MidnightBSD/src/push/refs/tags/3.1.2/000000-af1387@github.com>

  Branch: refs/tags/3.1.2
  Home:   https://github.com/MidnightBSD/src

From noreply at github.com  Sat Dec  9 13:50:30 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 10:50:30 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 40e947: Fix read/write past
 buffer end: perl-security#140
Message-ID: <MidnightBSD/src/push/refs/heads/master/803a91-40e947@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 40e94762d56b3396f5f649d7b60a4255ab7fd57d
      https://github.com/MidnightBSD/src/commit/40e94762d56b3396f5f649d7b60a4255ab7fd57d
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M UPDATING
    M contrib/perl/regcomp.c
    M contrib/perl/t/re/pat_advanced.t

  Log Message:
  -----------
  Fix read/write past buffer end: perl-security#140
A package name may be specified in a \p{...} regular expression
construct.  If unspecified, "utf8::" is assumed, which is the package
all official Unicode properties are in.  By specifying a different
package, one can create a user-defined property with the same
unqualified name as a Unicode one.  Such a property is defined by a sub
whose name begins with "Is" or "In", and if the sub wishes to refer to
an official Unicode property, it must explicitly specify the "utf8::".
S_parse_uniprop_string() is used to parse the interior of both \p{} and
the user-defined sub lines.

In S_parse_uniprop_string(), it parses the input "name" parameter,
creating a modified copy, "lookup_name", malloc'ed with the same size as
"name".  The modifications are essentially to create a canonicalized
version of the input, with such things as extraneous white-space
stripped off.  I found it convenient to strip off the package specifier
"utf8::".  To to so, the code simply pretends "lookup_name" begins just
after the "utf8::", and adjusts various other values to compensate.
However, it missed the adjustment of one required one.

This is only a problem when the property name begins with "perl" and
isn't "perlspace" nor "perlword".  All such ones are undocumented
internal properties.

What happens in this case is that the input is reparsed with slightly
different rules in effect as to what is legal versus illegal.  The
problem is that "lookup_name" no longer is pointing to its initial
value, but "name" is.  Thus the space allocated for filling "lookup_name"
is now shorter than "name", and as this shortened "lookup_name" is
filled by copying suitable portions of "name", the write can be to
unallocated space.

The solution is to skip the "utf8::" when reparsing "name".  Then both
"lookup_name" and "name" are effectively shortened by the same amount,
and there is no going off the end.

This commit also does white-space adjustment so that things align
vertically for readability.

This can be easily backported to earlier Perl releases.

Obtained from: Perl project
https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6



From noreply at github.com  Sat Dec  9 13:51:10 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 10:51:10 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 4bfb69: add cve
Message-ID: <MidnightBSD/src/push/refs/heads/master/40e947-4bfb69@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 4bfb695fd3dbeeac75393dc99c8aa8b7f5e80592
      https://github.com/MidnightBSD/src/commit/4bfb695fd3dbeeac75393dc99c8aa8b7f5e80592
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  add cve



From noreply at github.com  Sat Dec  9 14:00:46 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 11:00:46 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 2154a2: cam/scsi: Add sysctl
 flag CTLFLAG_TUN to loader tu...
Message-ID: <MidnightBSD/src/push/refs/heads/master/4bfb69-062be1@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 2154a2b97726135507661b38d1d5503f51aa1312
      https://github.com/MidnightBSD/src/commit/2154a2b97726135507661b38d1d5503f51aa1312
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/cam/scsi/scsi_all.c

  Log Message:
  -----------
  cam/scsi: Add sysctl flag CTLFLAG_TUN to loader tunable

The sysctl variable 'kern.cam.scsi_delay' is actually a loader tunable.
Add sysctl flag CTLFLAG_TUN to it so that `sysctl -T` will report it
correctly.

No functional change intended.

Reviewed by:	kib, imp (for #cam)
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit e2ad7ce37b1a354750d2dd3567e77f72edeb7e1d)
(cherry picked from commit 4bf38105464ba4dde42a9d3cf223f152aa980a1b)
(cherry picked from commit 7ac42534c2343f2fc80feb1702751094d41e6873)


  Commit: 9fefc06887e1edc48ebd505cb8ce7c22a2a0f8d4
      https://github.com/MidnightBSD/src/commit/9fefc06887e1edc48ebd505cb8ce7c22a2a0f8d4
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/ddb/db_capture.c

  Log Message:
  -----------
  ddb: Add sysctl flag CTLFLAG_TUN to loader tunable

The sysctl variable 'debug.ddb.capture.bufsize' is actually a loader
tunable. Add sysctl flag CTLFLAG_TUN to it so that `sysctl -T` will
report it correctly.

No functional change intended.

Reviewed by:	kib, imp
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit 0eb2e197896e2ec8a45730b61eeb77d5431af69f)
(cherry picked from commit 0de3d5316cbc8297c61952c392e4b9d58b538b99)
(cherry picked from commit 9edd545370254b30ae4fbaa618b33004e3005bb3)


  Commit: 23ed449d1bc8632676b3bb3a5180a3e194325aa2
      https://github.com/MidnightBSD/src/commit/23ed449d1bc8632676b3bb3a5180a3e194325aa2
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/fs/nfsclient/nfs_clnfsiod.c

  Log Message:
  -----------
  nfscl: Add sysctl flag CTLFLAG_TUN to loader tunable

The sysctl variable 'vfs.nfs.iodmin' is actually a loader tunable. Add
sysctl flag CTLFLAG_TUN to it so that `sysctl -T` will report it
correctly.

No functional change intended.

Reviewed by:	kib, imp
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit 95c01e9b329406699e89907167b5c3c9effbcbca)
(cherry picked from commit 3133f4d9dec495275120f920c0939b2752ac3d4d)
(cherry picked from commit 234919330105ef0b06548fb92d411ad1939ac0bb)


  Commit: de14126654dc7a96c828191b765d65b4b36bbbd7
      https://github.com/MidnightBSD/src/commit/de14126654dc7a96c828191b765d65b4b36bbbd7
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/x86/x86/cpu_machdep.c

  Log Message:
  -----------
  x86: Add sysctl flag CTLFLAG_TUN to loader tunables

The following sysctl variables are actually loader tunables. Add sysctl
flag CTLFLAG_TUN to them so that `sysctl -T` will report them correctly.

 1. machdep.idle
 2. machdep.idle_apl31

No functional change intended.

Reviewed by:	kib, imp
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit 149b9c234b00ff902718e1f76c809609a5465198)
(cherry picked from commit 9eac775b415bf54080a98a9cf62524b8a6817595)
(cherry picked from commit cabab5c36287e07cc2890ef76f7e849f16636164)


  Commit: bd4a346e05b04dcfe07d642bcbe51953b0536ee9
      https://github.com/MidnightBSD/src/commit/bd4a346e05b04dcfe07d642bcbe51953b0536ee9
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/kern/kern_descrip.c

  Log Message:
  -----------
  fd: Add sysctl flag CTLFLAG_TUN to loader tunables

The following sysctl variables are actually loader tunables. Add sysctl
flag CTLFLAG_TUN to them so that `sysctl -T` will report them correctly.

 1. kern.maxfiles
 2. kern.maxfilesperproc

No functional change intended.

Reviewed by:	kib, imp
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit 2af5ce5b5efb0cf6514acdc4a8b4058221641c39)
(cherry picked from commit d9aa723347825418c742164c3e9a77d1e4b6943d)
(cherry picked from commit 4f8eaa24a2ac40363ad13101a60ba3516a7ef401)


  Commit: 82ae3d408585d6092c00ed9430999dbed09bfe85
      https://github.com/MidnightBSD/src/commit/82ae3d408585d6092c00ed9430999dbed09bfe85
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/kern/uipc_socket.c

  Log Message:
  -----------
  sockets: Add sysctl flag CTLFLAG_TUN to loader tunable

The sysctl variable 'kern.ipc.maxsockets' is actually a loader tunable.
Add sysctl flag CTLFLAG_TUN to it so that `sysctl -T` will report it
correctly.

No functional change intended.

Reviewed by:	kib, imp
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit 978be1ee5d5fef983b4163955e15c4269c0ec76d)
(cherry picked from commit e4f97a1ec798d69b8ebf767d0dd2e43fbb1550f6)
(cherry picked from commit 6dbde842456151de0cec331b99e7330a80ae949c)


  Commit: 065aff605bb1c4262964919a86952451e907f487
      https://github.com/MidnightBSD/src/commit/065aff605bb1c4262964919a86952451e907f487
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/kern/vfs_bio.c

  Log Message:
  -----------
  buf: Add sysctl flag CTLFLAG_TUN to loader tunable

The sysctl variable 'vfs.unmapped_buf_allowed' is actually a loader
tunable. Add sysctl flag CTLFLAG_TUN to it so that `sysctl -T` will
report it correctly.

No functional change intended.

Reviewed by:	kib, imp
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit 31b94065300a76e52c26b8caec7256574d64a777)
(cherry picked from commit 8c4eaac1534e0486bd0fc6816ccb59fc348a5707)
(cherry picked from commit 5184476107f7dfcbc9931a94a91f16c71915bbd9)


  Commit: 04a669ab3f407de41245d8ba205db8b88142032c
      https://github.com/MidnightBSD/src/commit/04a669ab3f407de41245d8ba205db8b88142032c
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/kern/kern_mbuf.c

  Log Message:
  -----------
  mbuf: Add sysctl flag CTLFLAG_TUN to loader tunables

The following sysctl variables are actually loader tunables. Add sysctl
flag CTLFLAG_TUN to them so that `sysctl -T` will report them correctly.

 1. kern.ipc.nmbclusters
 2. kern.ipc.nmbjumbop
 3. kern.ipc.nmbjumbo9
 4. kern.ipc.nmbjumbo16
 5. kern.ipc.nmbufs

No functional change intended.

Reviewed by:	kib, imp
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D42113

(cherry picked from commit 6a88498e53b24d870e066c2a94910ad23dd355eb)
(cherry picked from commit b1456fd6209474410c031e5e82455588e2b656c0)
(cherry picked from commit 0007ba082c3353f0c545e5dcf328ce30d74c5ab7)


  Commit: 1ab0004ac8934a16614511cddbe7fe90d6252d8a
      https://github.com/MidnightBSD/src/commit/1ab0004ac8934a16614511cddbe7fe90d6252d8a
  Author: Gregory Neil Shapiro <gshapiro at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M etc/sendmail/midnightbsd.mc

  Log Message:
  -----------
  MFC: Remove confDH_PARAMETERS settings in favor of using sendmail's
built-in default which was added in sendmail 8.15.2 (the config
line predates that 8.15.2 feature).  This also alleviates the need
for admins to create the DH parameters file if they opt to use
Diffie-Hellman.

PR:		248387

(cherry picked from commit 98fd1add676321978db72d77d34ef51ca454c814)


  Commit: f7ed2660db3916c059fe9bea95e8a229f98bbe77
      https://github.com/MidnightBSD/src/commit/f7ed2660db3916c059fe9bea95e8a229f98bbe77
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/netinet/tcp_subr.c

  Log Message:
  -----------
  tcp: Simplify the initialization of loader tunable 'net.inet.tcp.tcbhashsize'

No functional change intended.

Reviewed by:	cc, rscheff, #transport
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D41998

(cherry picked from commit 38ecc80b2a4e5e11ece83ca4df63632f0b6fa394)
(cherry picked from commit 3a97686fc11ae51ceb4004c07702a8a20f71410d)
(cherry picked from commit 379f41a117eb8aaf1dd43414658606d2ef0534a7)


  Commit: 228a2b740142a04da7743f99a765962f82aaee88
      https://github.com/MidnightBSD/src/commit/228a2b740142a04da7743f99a765962f82aaee88
  Author: Zhenlei Huang <zlei at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/netinet/sctp_pcb.c
    M sys/netinet/sctp_sysctl.c

  Log Message:
  -----------
  sctp: Various fixes for loader tunables

The following sysctl variables are actually loader tunables. Add sysctl
flag CTLFLAG_TUN to them so that `sysctl -T` will report them correctly.

 1. net.inet.sctp.tcbhashsize
 2. net.inet.sctp.pcbhashsize
 3. net.inet.sctp.chunkscale

The loader tunable 'net.inet.sctp.tcbhashsize' and 'net.inet.sctp.chunkscale'
are only used during vnet initializing, thus it make no senses to make them
writable tunable.

Validate the values of loader tunables on vnet initialize, reset them to
theirs defaults if invalid to prevent potential kernel panics.

Reviewed by:	tuexen, #transport, #network
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D42007

(cherry picked from commit dac91eb7660324677d8a2f71bd6f192422355ba1)
(cherry picked from commit fd9de12a71109d1e3bb4b20e7d040fc9a1784dc2)
(cherry picked from commit 69e05e06c60d1f068fafcc4a26ef5efdb8771c71)


  Commit: 062be1ce26d82483930c52fcad2a2a4eec4a91f1
      https://github.com/MidnightBSD/src/commit/062be1ce26d82483930c52fcad2a2a4eec4a91f1
  Author: Eugene Grosbein <eugen at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/dev/usb/quirk/usb_quirk.c
    M sys/dev/usb/usbdevs

  Log Message:
  -----------
  usbdevs: add quirk for WD MyPassport Ultra External HDD

WD MyPassport Ultra External HDD needs quirk
UQ_MSC_NO_TEST_UNIT_READY to attach.

(cherry picked from commit 970d73856b626a68597de19d37b68c376e2c0491)


Compare: https://github.com/MidnightBSD/src/compare/4bfb695fd3db...062be1ce26d8

From noreply at github.com  Sat Dec  9 14:02:38 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 11:02:38 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] f18eb7: ng_ipfw: allow use of
 32 bits wide cookies
Message-ID: <MidnightBSD/src/push/refs/heads/master/062be1-f18eb7@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: f18eb731139d86000b15211bab98f9250681fd76
      https://github.com/MidnightBSD/src/commit/f18eb731139d86000b15211bab98f9250681fd76
  Author: Eugene Grosbein <eugen at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/netgraph/ng_ipfw.c

  Log Message:
  -----------
  ng_ipfw: allow use of 32 bits wide cookies

There is no reason in truncating 32 bits cookie value to 16 bits.

Reviewed by:	glebius

(cherry picked from commit 20e1f207cc789a28783344614d6d1d1c639c5797)



From noreply at github.com  Sat Dec  9 14:03:03 2023
From: noreply at github.com (Rob N)
Date: Sat, 09 Dec 2023 11:03:03 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] da29e7: dnode_is_dirty: check
 dnode and its data for dirti...
Message-ID: <MidnightBSD/src/push/refs/heads/master/f18eb7-da29e7@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: da29e72595bcc1371c1efdf6ec15524991ddf514
      https://github.com/MidnightBSD/src/commit/da29e72595bcc1371c1efdf6ec15524991ddf514
  Author: Rob Norris <rob.norris at klarasystems.com>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M sys/cddl/contrib/opensolaris/uts/common/fs/zfs/dmu.c

  Log Message:
  -----------
  dnode_is_dirty: check dnode and its data for dirtiness

Over its history this the dirty dnode test has been changed between
checking for a dnodes being on `os_dirty_dnodes` (`dn_dirty_link`) and
`dn_dirty_record`.

It turns out both are actually required.

In the case of appending data to a newly created file, the dnode proper
is dirtied (at least to change the blocksize) and dirty records are
added.  Thus, a single logical operation is represented by separate
dirty indicators, and must not be separated.

The incorrect dirty check becomes a problem when the first block of a
file is being appended to while another process is calling lseek to skip
holes. There is a small window where the dnode part is undirtied while
there are still dirty records. In this case, `lseek(fd, 0, SEEK_DATA)`
would not know that the file is dirty, and would go to
`dnode_next_offset()`. Since the object has no data blocks yet, it
returns `ESRCH`, indicating no data found, which results in `ENXIO`
being returned to `lseek()`'s caller.

This change simply updates the dirty check to check both types of dirty.
If there's anything dirty at all, we immediately go to the "wait for
sync" stage, It doesn't really matter after that; both changes are on
disk, so the dirty fields should be correct.

Sponsored by:	Klara, Inc.
Sponsored by:	Wasabi Technology, Inc.



From noreply at github.com  Sat Dec  9 14:03:27 2023
From: noreply at github.com (Alan Somers)
Date: Sat, 09 Dec 2023 11:03:27 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 4372c4: libc/libc/rpc: refactor
 some global variables
Message-ID: <MidnightBSD/src/push/refs/heads/master/da29e7-4372c4@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 4372c4c0f1381e2306c14c4dff39eb824e462559
      https://github.com/MidnightBSD/src/commit/4372c4c0f1381e2306c14c4dff39eb824e462559
  Author: Alan Somers <asomers at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M include/rpc/rpc_com.h
    M lib/libc/rpc/clnt_dg.c
    M lib/libc/rpc/clnt_vc.c
    M lib/libc/rpc/rpc_com.h
    M lib/libc/rpc/rpc_generic.c
    M sys/rpc/rpc_com.h

  Log Message:
  -----------
  libc/libc/rpc: refactor some global variables

* Combine dg_fd_locks and dg_cv into one array.
* Similarly for vc_fd_locks and vc_cv
* Turn some macros into inline functions

This is a mostly cosmetic change to make refactoring these strutures in
a future commit easier.

Sponsored by:	Axcient
Reviewed by:	kib
Differential Revision: https://reviews.freebsd.org/D42597

(cherry picked from commit a5c2f4e939430f0048136c39fb9fa6093d401905)

lib/libc/rpc: switch the per-fd structs in clnt_{dg,vc}.c to RB Trees

This saves oodles of memory, especially when "ulimit -n" is large.  It
also prevents a buffer overflow if getrlimit should fail.

Also replace per-fd condvars with mutexes to simplify the code.

PR:		274968
Sponsored by:	Axcient
Reviewed by:	kib
Differential Revision: https://reviews.freebsd.org/D42597

(cherry picked from commit 24938f9311c9c9acc1ce747f4e6a088c2dbc967d)



From noreply at github.com  Sat Dec  9 14:05:20 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 11:05:20 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] c09e53: rc: add ${name}_setup
 script support
Message-ID: <MidnightBSD/src/push/refs/heads/master/4372c4-24c238@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: c09e53c2f77d903b293b1e8a05c8ace3b2c71bcb
      https://github.com/MidnightBSD/src/commit/c09e53c2f77d903b293b1e8a05c8ace3b2c71bcb
  Author: Franco Fichtner <franco at opnsense.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M libexec/rc/rc.subr

  Log Message:
  -----------
  rc: add ${name}_setup script support

Run a service-based setup script before running the start command.
Useful for automatic configuration file generation.

Reviewed by:	https://reviews.freebsd.org/D36006

(cherry picked from commit c9be47b34dd847da1d4ab0feee4a6100b2c5ea0d)


  Commit: 24c2384cdc9443bc4494dfca8a4154c8e4ca1eb0
      https://github.com/MidnightBSD/src/commit/24c2384cdc9443bc4494dfca8a4154c8e4ca1eb0
  Author: Eugene Grosbein <eugen at FreeBSD.org>
  Date:   2023-12-09 (Sat, 09 Dec 2023)

  Changed paths:
    M libexec/rc/rc.subr
    M share/man/man5/rc.conf.5

  Log Message:
  -----------
  rc.conf(5): add <service>_umask to run the service using this value

None of tools working with login classes change umask(1)
and we had no ways to specify non-default umask for a service
not touching its startup script. This change makes in possible.

Some file-sharing services that create new files may benefit from it.

Differential:	https://reviews.freebsd.org/D36309

(cherry picked from commit 160a2f2cdda806e104c0d3194bfb84b208ad1ae8)


Compare: https://github.com/MidnightBSD/src/compare/4372c4c0f138...24c2384cdc94

From noreply at github.com  Sun Dec 10 00:09:04 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 21:09:04 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] b6834f: Add a fix for CPAN
 module for CVE-2023-31484:
Message-ID: <MidnightBSD/src/push/refs/heads/master/24c238-b6834f@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: b6834fa5f8caf6ac012b0572e37e8c0c09225b42
      https://github.com/MidnightBSD/src/commit/b6834fa5f8caf6ac012b0572e37e8c0c09225b42
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-10 (Sun, 10 Dec 2023)

  Changed paths:
    M contrib/perl/cpan/CPAN/lib/CPAN/HTTP/Client.pm

  Log Message:
  -----------
  Add a fix for CPAN module for CVE-2023-31484:

Add verify_SSL=>1 to HTTP::Tiny to verify https server identity

Obtained from: CPAN



From noreply at github.com  Sun Dec 10 00:18:26 2023
From: noreply at github.com (Lucas Holt)
Date: Sat, 09 Dec 2023 21:18:26 -0800
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 1f5ea1: fix some bugs with
 memory usage
Message-ID: <MidnightBSD/src/push/refs/heads/master/b6834f-1f5ea1@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 1f5ea10ea4ff4d6494b575d725c728bd292d5ec9
      https://github.com/MidnightBSD/src/commit/1f5ea10ea4ff4d6494b575d725c728bd292d5ec9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2023-12-10 (Sun, 10 Dec 2023)

  Changed paths:
    M crypto/heimdal/lib/asn1/gen_free.c
    M crypto/heimdal/lib/asn1/gen_template.c

  Log Message:
  -----------
  fix some bugs with memory usage