{"push_id":606610066,"size":8,"distinct_size":1,"ref":"refs/heads/hardened/current/master","head":"e3903585bb7b301c8af6daa701de3d2097e62e3c","before":"f035dd7739ae382e3796361e3dd878d6669e5ff7","commits":[{"sha":"3617a765edf9abddb6e9b21fc729cc108c3046a2","author":{"email":"56aede976c75df5e9650271458e4efe6de2b84ef@FreeBSD.org","name":"hiren"},"message":"Add connection flowid to siftr(4).\n\nReviewed by:\tlstewart\nMFC after:\t1 week\nSponsored by:\tLimelight Networks\nDifferential Revision:\thttps://reviews.freebsd.org/D2089","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/3617a765edf9abddb6e9b21fc729cc108c3046a2"},{"sha":"19ab8c6fb0f888da93bb137ba8663603511ed332","author":{"email":"31cd14c5df041d447848d2ecba7a8ddcaf0cafe9@FreeBSD.org","name":"allanjude"},"message":"Fix the handbook install option in bsdinstall\n\nbsdconfig's f_package_add doesn't seem to support using the pkg repo from /etc/pkg/FreeBSD.conf, it also tries to run the commands on the installer image, not in the destination chroot\n\nInstead, manually bootstrap pkg in the chroot, and then install the requested packages (in the chroot)\n\nDoesn't use pkg -c, because pkg is not installed on the installer image\n\nPR:\t\t196250\nDifferential Revision:\thttps://reviews.freebsd.org/D2026\nApproved by:\tbapt\nSponsored by:\tScaleEngine Inc.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/19ab8c6fb0f888da93bb137ba8663603511ed332"},{"sha":"746d3f6f851fca7f8bf22d17e60a0d58e315a0c4","author":{"email":"31cd14c5df041d447848d2ecba7a8ddcaf0cafe9@FreeBSD.org","name":"allanjude"},"message":"Remove a non-required unsafe condition added in the previous commit\n\nReviewed by:\tbapt\nApproved by:\tdteske\nSponsored by:\tScaleEngine Inc.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/746d3f6f851fca7f8bf22d17e60a0d58e315a0c4"},{"sha":"a41131da37204ef5fc4f7c9b61f46f34f703453f","author":{"email":"1eabdaf488b3a3682bbca94c5f468f065cdfaf13@FreeBSD.org","name":"ae"},"message":"To avoid a possible race, release the reference to ifa after return\nfrom nd6_dad_na_input().\n\nSubmitted by:\tAlexandre Martins\nMFC after:\t1 week","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/a41131da37204ef5fc4f7c9b61f46f34f703453f"},{"sha":"78a38e3fbfbe5c23a76c532a1b513ea7b01fba73","author":{"email":"56aede976c75df5e9650271458e4efe6de2b84ef@FreeBSD.org","name":"hiren"},"message":"Add connection flow type to siftr(4).\n\nSuggested by:\tadrian\nSponsored by:\tLimelight Networks","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/78a38e3fbfbe5c23a76c532a1b513ea7b01fba73"},{"sha":"2c4b57d4863fac4b691f8d6593a5a30bf6df25f0","author":{"email":"403c7ec3b0314e7b36282e6cab7b45ab65013fab@FreeBSD.org","name":"alc"},"message":"Fix the root cause of the \"vm_reserv_populate: reserv <address> is already\npromoted\" panics.  The sequence of events that leads to a panic is rather\nlong and circuitous.  First, suppose that process P has a promoted\nsuperpage S within vm object O that it can write to.  Then, suppose that P\nforks, which leads to S being write protected.  Now, before P's child\nexits, suppose that P writes to another virtual page within O.  Since the\npages within O are copy on write, a shadow object for O is created to\nhouse the new physical copy of the faulted on virtual page.  Then, before\nP can fault on S, P's child exists.  Now, when P faults on S, it will\nfollow the \"optimized\" path for copy-on-write faults in vm_fault(),\nwherein the underlying physical page is moved from O to its shadow object\nrather than allocating a new page and copying the new page's contents from\nthe old page.  Moreover, suppose that every 4 KB physical page making up S\nis moved to the shadow object in this way.  However, the optimized path\ndoes not move the underlying superpage reservation, which is the root\ncause of the panics!  Ultimately, P performs vm_object_collapse() on O's\nshadow object, which destroys O and in doing so breaks any reservations\nstill belonging to O.  This leaves the reservation underlying S in an\ninconsistent state: It's simultaneously not in use and promoted.  Breaking\na reservation does not demote it because I never intended for a promoted\nreservation to be broken.  It makes little sense.  Finally, this\ninconsistency leads to an assertion failure the next time that the\nreservation is used.\n\nThe failing assertion does not (currently) exist in FreeBSD 10.x or\nearlier.  There, we will quietly break the promoted reservation.  While\nillogical and unintended, breaking the reservation is essentially\nharmless.\n\nPR:\t\t198163\nReviewed by:\tkib\nTested by:\tpho\nX-MFC after:\tr267213\nSponsored by:\tEMC / Isilon Storage Division","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/2c4b57d4863fac4b691f8d6593a5a30bf6df25f0"},{"sha":"a68ab2f73562e623402966189cd9dcf7a08d0051","author":{"email":"a1b909ec1cc11cce40c28d3640eab600e582f833@FreeBSD.org","name":"adrian"},"message":"Fix the label search routine in geom_map to not trip up on '\\0' bytes.\n\n* Just do the buf check early and fail out\n* If the offset being searched is:\n\n00110000  00 b5 7e 45 61 e2 76 d3  c1 78 dd 15 95 cd 1f f1  |..~Ea.v..x......|\n\n.. and the match string is '.!/bin/sh'\n\n.. then it'll set the match string[0] to '\\0', do a strncmp() against\nthe read buffer, find it's matching two zero-length strings, and think\nthat's where to start.\n\nMFC after:\t2 weeks","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/a68ab2f73562e623402966189cd9dcf7a08d0051"},{"sha":"e3903585bb7b301c8af6daa701de3d2097e62e3c","author":{"email":"b0125fa187132d47dbe983b53b8ad9c1146edd9c@hardenedbsd.org","name":"Oliver Pinter +"},"message":"Merge remote-tracking branch 'freebsd/master' into hardened/current/master","distinct":true,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/e3903585bb7b301c8af6daa701de3d2097e62e3c"}]}