{"push_id":619556486,"size":19,"distinct_size":1,"ref":"refs/heads/hardened/current/log","head":"868e39ed7a84c41849790b643ccd6aed0ef2eeff","before":"4e866fa04d512bf23e3b3e0c68cd7d21b368d1c7","commits":[{"sha":"c76b82742707d8919e49453ca04549a6fc35a5fa","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Whitespace. No functional change(s).\n\nMFC after:\t3 days\nMFH:\t\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/c76b82742707d8919e49453ca04549a6fc35a5fa"},{"sha":"c297bb11717c1aead6c4aa9329aa6c8f7244d77e","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Comments. No functional change(s).\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/c297bb11717c1aead6c4aa9329aa6c8f7244d77e"},{"sha":"f593bd9721ba7352e7af46d7b8bd0924709a8e85","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Optimize bootmsg to use fg/bg/me from screen.4th\nNB: screen.4th is included by way of check-password.4th\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/f593bd9721ba7352e7af46d7b8bd0924709a8e85"},{"sha":"9f8c781a8dc44bc8b9ed84df4c86ea8b31e735a0","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Whitespace and cleanup. No functional change(s).\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/9f8c781a8dc44bc8b9ed84df4c86ea8b31e735a0"},{"sha":"cbabb678cae1bc20311261fcd38ceb4a0cc319a9","author":{"email":"a9cd60ed1b2f93c64c71ff58c35e59347a22e2f3@FreeBSD.org","name":"cperciva"},"message":"Add code for creating an EC2 AMI.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/cbabb678cae1bc20311261fcd38ceb4a0cc319a9"},{"sha":"b3c521e85228b0e74f7983ca41489dfafd7a424d","author":{"email":"bafbefd86aeb12ebd17cdd5b91526b59cfa67892@FreeBSD.org","name":"tychon"},"message":"Fix \"MOVS\" instruction memory to MMIO emulation.  Currently updates to\n%rdi, %rsi, etc are inadvertently bypassed along with the check to\nsee if the instruction needs to be repeated per the 'rep' prefix.\n\nAdd \"MOVS\" instruction support for the 'MMIO to MMIO' case.\n\nReviewed by:\tneel","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/b3c521e85228b0e74f7983ca41489dfafd7a424d"},{"sha":"299467e040e301d18e614fc1f65329181f32e687","author":{"email":"9d6abbf2df36ae7c16246009489d173dc9b2a807@FreeBSD.org","name":"wollman"},"message":"Fix overflow bugs in and remove obsolete limit from kernel RPC\nimplementation.\n\nThe kernel RPC code, which is responsible for the low-level scheduling\nof incoming NFS requests, contains a throttling mechanism that\nprevents too much kernel memory from being tied up by NFS requests\nthat are being serviced.  When the throttle is engaged, the RPC layer\nstops servicing incoming NFS sockets, resulting ultimately in\nbackpressure on the clients (if they're using TCP).  However, this is\na very heavy-handed mechanism as it prevents all clients from making\nany requests, regardless of how heavy or light they are.  (Thus, when\nengaged, the throttle often prevents clients from even mounting the\nfilesystem.)  The throttle mechanism applies specifically to requests\nthat have been received by the RPC layer (from a TCP or UDP socket)\nand are queued waiting to be serviced by one of the nfsd threads; it\ndoes not limit the amount of backlog in the socket buffers.\n\nThe original implementation limited the total bytes of queued requests\nto the minimum of a quarter of (nmbclusters * MCLBYTES) and 45 MiB.\nThe former limit seems reasonable, since requests queued in the socket\nbuffers and replies being constructed to the requests in progress will\nall require some amount of network memory, but the 45 MiB limit is\nplainly ridiculous for modern memory sizes: when running 256 service\nthreads on a busy server, 45 MiB would result in just a single\nmaximum-sized NFS3PROC_WRITE queued per thread before throttling.\n\nRemoving this limit exposed integer-overflow bugs in the original\ncomputation, and related bugs in the routines that actually account\nfor the amount of traffic enqueued for service threads.  The old\nimplementation also attempted to reduce accounting overhead by\nbatching updates until each queue is fully drained, but this is prone\nto livelock, resulting in repeated accumulate-throttle-drain cycles on\na busy server.  Various data types are changed to long or unsigned\nlong; explicit 64-bit types are not used due to the unavailability of\n64-bit atomics on many 32-bit platforms, but those platforms also\ncannot support nmbclusters large enough to cause overflow.\n\nThis code (in a 10.1 kernel) is presently running on production NFS\nservers at CSAIL.\n\nSummary of this revision:\n* Removes 45 MiB limit on requests queued for nfsd service threads\n* Fixes integer-overflow and signedness bugs\n* Avoids unnecessary throttling by not deferring accounting for\n  completed requests\n\nDifferential Revision:\thttps://reviews.freebsd.org/D2165\nReviewed by:\trmacklem, mav\nMFC after:\t30 days\nRelnotes:\tyes\nSponsored by:\tMIT Computer Science & Artificial Intelligence Laboratory","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/299467e040e301d18e614fc1f65329181f32e687"},{"sha":"cb7d12714503777dbaaa780fca372adfad849d0d","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Comments. No functional change.\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/cb7d12714503777dbaaa780fca372adfad849d0d"},{"sha":"55208361ba5f1ea64b978cfd570feefd302f879c","author":{"email":"aeb8da9b93f4f35c2ddc1280821f190e432a94e3@FreeBSD.org","name":"emaste"},"message":"Update elftoolchain to upstream revision 3179\n\nSome notable changes:\n- libdwarf: Fixed DWARF4 line section\n- elfcopy: Implement --localize-hidden\n- nm: handle object name referenced by DW_AT_specification\n- elfcopy: Add --strip-dwo and --extract-dwo options for split DWARF\n- readelf: add remaining arm64 dynamic relocation names\n- nm: Avoid integer overflow in value comparison\n\nRelnotes:\tYes\nSponsored by:\tThe FreeBSD Foundation","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/55208361ba5f1ea64b978cfd570feefd302f879c"},{"sha":"1f2f96df3a479f13539306720efdb331e840e168","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Move beastie to logo-*.4th; brands to brand-*.4th\n\nSuggested by:\tjkh, alfred\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/1f2f96df3a479f13539306720efdb331e840e168"},{"sha":"3b619a9c4f878410505bb79641ff00e070a060ec","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Add remainder of supported ANSI escape sequences.\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/3b619a9c4f878410505bb79641ff00e070a060ec"},{"sha":"c43b541ac33e0634e81257ed928f2246f66bc45a","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Securely overwrite (zero) user input when we finish password checks.\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/c43b541ac33e0634e81257ed928f2246f66bc45a"},{"sha":"fd12db7ef35872562e78dda951f3ab271a755a93","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"When forced to draw ASCII lines/boxen, use `=' for the horizontal line\nwhen double frames are requested versus single.\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/fd12db7ef35872562e78dda951f3ab271a755a93"},{"sha":"e520f6421505f39341b9f801c9f541c0f5f4d9cc","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Solve dreaded \"dictionary full\" issue by segregating words into new\nvocabularies delay-processing, password-processing, version-processing,\nframe-drawing, menu-infrastructure, menu-namespace, menu-command-helpers,\nand menusets-infrastructure. The net effect is to remove almost 200\ndefinitions from the main forth vocabulary reducing the dictionary size\nby over 50%. The chances of hitting \"dictionary full\" should be greatly\nreduced by this patch.\n\nMFC after:\t3 days\nX-MFC-to:\tstable/10","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/e520f6421505f39341b9f801c9f541c0f5f4d9cc"},{"sha":"454ddb0c34aac80358a3c8f201162d642dec27e9","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Add \"GELI Passphrase:\" prompt to boot loader.\n\nSummary:\nAdd \"GELI Passphrase:\" prompt to boot loader.\n\nA new loader.conf(5) option of geom_eli_passphrase_prompt=\"YES\" will now\nallow you to enter your geli(8) root-mount credentials prior to invoking\nthe kernel.\n\nSee check-password.4th(8) for details.\n\nDifferential Revision:\thttps://reviews.freebsd.org/D2105\nReviewed by:\t(your name[s] here)\nMFC after:\t3 days\nX-MFC-to:\tstable/10\nRelnotes:\tyes\n\nTest Plan:\nDrop a head copy of check-password.4th into /boot and then apply the patch\n(only the patch to /boot/check-password.4th is required; no other changes are\nrequired but you do have to have a HEAD copy of check-password.4th to\napply the patch).\n\nNB: The rest of your /boot files can be up to 2 years old but no older.\nNB: The test won't work unless your kernel has the following change\n\nhttps://svnweb.freebsd.org/base?view=revision&revision=273489\n\nNow, put into /boot/loader.conf:\n\ngeom_eli_passphrase_prompt=\"YES\"\n\nand reboot.\n\nYou should be prompted for a GELI passphrase before the menu (if enabled),\njust after loading loader.conf(5).\n\nNB: It doesn't matter if you're using GELI or not. However if you are using\nGELI and a sufficiently new enough release (has SVN r273489) and you entered\nthe proper passphrase to mount your GELI encrypted root device(s), you should\nnotice that the boot process did not stop (you went from loader all the way to login).\n\nReviewers: cperciva, allanjude, scottl, kmoore\n\nSubscribers: jkh, imp\n\nDifferential Revision: https://reviews.freebsd.org/D2105","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/454ddb0c34aac80358a3c8f201162d642dec27e9"},{"sha":"d004477d053a5558af3a2c15ab32e76cc341e302","author":{"email":"e296fe5e4d1ac64a5afa2c72280cae8efe3d5ec5@FreeBSD.org","name":"dteske"},"message":"Whoops! \"arc commit --revision\" != \"arc diff --update\"","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/d004477d053a5558af3a2c15ab32e76cc341e302"},{"sha":"2fdd06cb68b01a639d2846503e0e6cbe5357e66a","author":{"email":"a1b909ec1cc11cce40c28d3640eab600e582f833@FreeBSD.org","name":"adrian"},"message":"Start the process of migrating the ANI statistics out of the HALs and into\nthe top-level HAL.\n\nThe athstats program is blindly using a copy of the ar5212 ANI stats structure\nto pull out ANI statistics/state and this is problematic for the AR9300\nHAL.\n\nSo:\n\n* Define HAL_ANI_STATS and HAL_ANI_STATE\n* Use HAL_ANI_STATS inside the AR5212 HAL\n\nThis commit doesn't (yet) convert the ar5212AniState -> HAL_ANI_STATE when\nexporting it to userland; that'll come in the next commit.","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/2fdd06cb68b01a639d2846503e0e6cbe5357e66a"},{"sha":"e0627c01dbf2b994c1b669f0e0ed0b5cd7d71db4","author":{"email":"b0125fa187132d47dbe983b53b8ad9c1146edd9c@hardenedbsd.org","name":"Oliver Pinter +"},"message":"Merge remote-tracking branch 'freebsd/master' into hardened/current/master","distinct":false,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/e0627c01dbf2b994c1b669f0e0ed0b5cd7d71db4"},{"sha":"868e39ed7a84c41849790b643ccd6aed0ef2eeff","author":{"email":"b0125fa187132d47dbe983b53b8ad9c1146edd9c@hardenedbsd.org","name":"Oliver Pinter +"},"message":"Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/log","distinct":true,"url":"https://api.github.com/repos/HardenedBSD/hardenedBSD/commits/868e39ed7a84c41849790b643ccd6aed0ef2eeff"}]}