[Midnightbsd-cvs] [MidnightBSD/src] 13e9ef: sound: fix mmap buffer lifetime

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 13e9efe3aadc5f70e7c06599b2eb60f6285f5778
      https://github.com/MidnightBSD/src/commit/13e9efe3aadc5f70e7c06599b2eb60f6285f5778
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M sys/dev/sound/pcm/buffer.c
    M sys/dev/sound/pcm/buffer.h
    M sys/dev/sound/pcm/dsp.c
    M tests/sys/Makefile
    A tests/sys/sound/Makefile
    A tests/sys/sound/mmap.c

  Log Message:
  -----------
  sound: fix mmap buffer lifetime

Port the FreeBSD sound(4) mmap security fix for CVE-2026-45258 and CVE-2026-49417. Reject overflowing mmap offsets and hold references on the DSP cdev and sound buffer for the lifetime of the mapping.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 6344ab6d5ad32498ef1d57a9f085f9a7088c0779
      https://github.com/MidnightBSD/src/commit/6344ab6d5ad32498ef1d57a9f085f9a7088c0779
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note sound mmap security fix

Record the sound(4) mmap fixes for CVE-2026-45258 and CVE-2026-49417.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: d2e3994d07b70f5b8e4be2512fc54b699d09d9be
      https://github.com/MidnightBSD/src/commit/d2e3994d07b70f5b8e4be2512fc54b699d09d9be
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M contrib/file/src/apprentice.c

  Log Message:
  -----------
  libmagic: fix mkmagic COMPILE_ONLY link

mkmagic is built with COMPILE_ONLY, which omits file_mdump() from print.c. Avoid calling the diagnostic dump routine from apprentice_sort() in that build so build-tools can link.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 4e1e4120c3a3e108159c97b1f7dc5fcb690422f4
      https://github.com/MidnightBSD/src/commit/4e1e4120c3a3e108159c97b1f7dc5fcb690422f4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M contrib/bmake/unit-tests/export.mk

  Log Message:
  -----------
  bmake: filter CodeQL tracer variables in export test

CodeQL injects CODEQL_*, SEMMLE_*, and LD_PRELOAD into traced child processes. The export unit test prints its environment, so ignore those tracer variables to keep the test focused on bmake's exported variables.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


Compare: https://github.com/MidnightBSD/src/compare/1b2aae4db9d8...4e1e4120c3a3

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications