[Bug 204358] zfs loader zfs_probe_args secsz is too small, causing memory corruption

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204358

Bug ID: 204358
   Summary: zfs loader zfs_probe_args secsz is too small, causing
memory corruption
   Product: Base System
   Version: 11.0-CURRENT
  Hardware: Any
OS: Any
Status: New
  Severity: Affects Many People
  Priority: ---
 Component: kern
  Assignee: freebsd-bugs@FreeBSD.org
  Reporter: tso...@me.com

sys/boot/zfs/zfs.c has probe args structure including uint16_t secsz variable
for media sector size; its used as an argument for ioctl() at line 484:

ioctl(pa.fd, DIOCGSECTORSIZE, );

however, this ioctl is expecting 32bit data (u_int *) and therefore this ioctl
will overwrite and corrupt 16bits of memory.

other use cases seem to use correct u_int type for secsz.

for fix the following fix should be sufficient.
tsoome@beastie:/code/freebsd/head/sys/boot/zfs$ diff -u zfs.c.orig zfs.c
--- zfs.c.orig  N apr 16 14:49:00 2015
+++ zfs.c   L nov  7 15:13:55 2015
@@ -399,7 +399,7 @@
int fd;
const char  *devname;
uint64_t*pool_guid;
-   uint16_tsecsz;
+   u_int   secsz;
 };

 static int

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 204331] Syntax error in variable assignment in security_daily_compat_var

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204331

Jilles Tjoelker  changed:

   What|Removed |Added

 CC||jil...@freebsd.org
 Attachment #162850|0   |1
   is patch||

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 204331] Syntax error in variable assignment in security_daily_compat_var

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204331

Jilles Tjoelker  changed:

   What|Removed |Added

   Assignee|freebsd-bugs@FreeBSD.org|jil...@freebsd.org
 Status|New |In Progress

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 204340] [panic] nfsd, em, msix, fatal trap 9

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204340

g_amana...@yahoo.com changed:

   What|Removed |Added

 CC||freebsd-bugs@FreeBSD.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 188298] whois(1) says "% Error: 55000000013 Invalid charset for response"

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=188298

--- Comment #4 from Christian Kujau  ---
FWIW, MacOS seems to have fixed this as well, and they switched to using UTF-8
recently:

--
$ strings /usr/bin/whois | grep -A1 de.w
de.whois-servers.net
-T dn -C UTF-8 %s

$ whois denic.de | grep ß
Address: Kaiserstraße 75-77
Address: Kaiserstraße 75-77
--

Until this is fixed, the following workaround could be used for .de domains:

$ whois -h whois.denic.de -- "-T dn,ace denic.de"

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 202309] [uefi] smashed screen on HP Probook 430 G1 with UEFI

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202309

Oliver Pinter  changed:

   What|Removed |Added

 CC||Ray"@FreeBSD.org,
   ||dumbb...@freebsd.org,
   ||mar...@freebsd.org
   See Also||https://bugs.freebsd.org/bu
   ||gzilla/show_bug.cgi?id=1940
   ||63
 CC|Ray"@FreeBSD.org|r...@freebsd.org

Marcel Moolenaar  changed:

   What|Removed |Added

 Status|New |Open
 CC|r...@freebsd.org |
   Assignee|freebsd-bugs@FreeBSD.org|mar...@freebsd.org
 Status|Open|In Progress

Douglas King  changed:

   What|Removed |Added

 CC||douglasking...@gmail.com

Ed Maste  changed:

   What|Removed |Added

 CC||ema...@freebsd.org

--- Comment #1 from Marcel Moolenaar  ---
If I can read the screen correctly, it looks like the resolution is 1366x768,
with a stride of 1366 and a color depth of 32 bits per pixel (or 4 bytes per
pixel).

The console output seems to be using a stride that's just wrong. Since the
stride is coming from UEFI, it's hard to think of a reason why the kernel would
do this.

Have you tried updating the firmware?

--- Comment #2 from Oliver Pinter  ---
Yes, today I updated to latest bios from HP, but the issue still exists.

How could I extract these information without serial port or change the
settings in loader or kernel?

--- Comment #3 from Marcel Moolenaar  ---
Created attachment 160509
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=160509=edit
loader with 'gop' command

--- Comment #4 from Marcel Moolenaar  ---
(In reply to Oliver Pinter from comment #2)

I committed revision 287299 (-current), that adds a 'gop' command to the
loader. I attached a pre-compiled EFI loader with this command to this PR.

Can you run 'gop get' and 'gop list' and add the output to this PR?

Also: can you try different modes (if possible) and see if that makes a
difference?

--- Comment #5 from Douglas King  ---
Created attachment 162834
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=162834=edit
BIOS information

dmidecode output

--- Comment #6 from Douglas King  ---
Created attachment 162835
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=162835=edit
Dmidecode output

--- Comment #7 from Douglas King  ---
I am having the same issue trying to install on an HP Elitebook 2540p.
The error happens at the same point shown in the video except the whole output
is "squished" in the top 5-10% of the disply.
The display changes with user interaction but none of it is viewable.
The text from the boot process remains unaffected. 
Booting without EFI freezes slightly earlier in the boot.

'gop' only has one mode listed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 204371] lib/libmd/sha1c.c - silence a compiler warning

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204371

Bug ID: 204371
   Summary: lib/libmd/sha1c.c - silence a compiler warning
   Product: Base System
   Version: 11.0-CURRENT
  Hardware: Any
OS: Any
Status: New
  Severity: Affects Only Me
  Priority: ---
 Component: bin
  Assignee: freebsd-bugs@FreeBSD.org
  Reporter: j...@iki.fi

Created attachment 162892
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=162892=edit
A patch to cast the pointer properly and to silence the compiler

A compiler warning gets triggered in vain on big-endian 64 bit systems.
Functionally the existing code should actually work correctly.
The extra noise during builds still deserves to be silenced I guess.

The same patch applies to 11-current and 10.2-stable, probably also
to older branches.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"