svn commit: r299706 - stable/10/sys/boot/forth

2016-05-13 Thread Pedro F. Giffuni
Author: pfg Date: Sat May 14 00:44:23 2016 New Revision: 299706 URL: https://svnweb.freebsd.org/changeset/base/299706 Log: MFC r298831: boot/forth: minor spelling fixes. Modified: stable/10/sys/boot/forth/delay.4th stable/10/sys/boot/forth/loader.4th

svn commit: r299705 - stable/10/sys/compat/linux

2016-05-13 Thread Pedro F. Giffuni
Author: pfg Date: Sat May 14 00:35:49 2016 New Revision: 299705 URL: https://svnweb.freebsd.org/changeset/base/299705 Log: MFC r298829 sys/compat/linux*: minor spelling fixes. Modified: stable/10/sys/compat/linux/check_internal_locks.d stable/10/sys/compat/linux/linux_fork.c

svn commit: r299695 - stable/10/sys/dev/sym

2016-05-13 Thread Mark Johnston
Author: markj Date: Fri May 13 20:58:25 2016 New Revision: 299695 URL: https://svnweb.freebsd.org/changeset/base/299695 Log: MFC r299694: Fix a bug in r298340: "sim" was referenced after being unset. Modified: stable/10/sys/dev/sym/sym_hipd.c Directory Properties: stable/10/ (props

svn commit: r299677 - in stable/10/sys: cam kern

2016-05-13 Thread Pedro F. Giffuni
Author: pfg Date: Fri May 13 15:09:38 2016 New Revision: 299677 URL: https://svnweb.freebsd.org/changeset/base/299677 Log: MFC r298809, r298817 Minor spelling fixes. Modified: stable/10/sys/cam/cam_queue.c stable/10/sys/kern/vfs_bio.c stable/10/sys/kern/vfs_vnops.c Directory

svn commit: r299651 - stable/10/lib/libkvm

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 09:52:39 2016 New Revision: 299651 URL: https://svnweb.freebsd.org/changeset/base/299651 Log: MFC r298839: Fix memory allocation edgecases in kvm_argv(..) - Don't leak nbufp on realloc failure in kvm_argv - Catch malloc errors with bufp - Set buflen

svn commit: r299649 - stable/10/lib/libkvm

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 09:49:52 2016 New Revision: 299649 URL: https://svnweb.freebsd.org/changeset/base/299649 Log: MFC r298842: Don't leak PML4 in _amd64_initvtop(..) if kvm_read2(..) fails CID: 1341474 Modified: stable/10/lib/libkvm/kvm_amd64.c Directory Properties:

svn commit: r299648 - stable/10/etc/rc.d

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 09:46:23 2016 New Revision: 299648 URL: https://svnweb.freebsd.org/changeset/base/299648 Log: MFC r298844: Make SERVERS REQUIRE clean when MK_KERBEROS==no Make kdc run BEFORE SERVERS instead of being REQUIREd by SERVERS, so systems that pedantically

svn commit: r299640 - stable/10/sys/ufs/ufs

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 09:18:46 2016 New Revision: 299640 URL: https://svnweb.freebsd.org/changeset/base/299640 Log: MFC r298463: Add FEATURE knob for testing for UFS extended attribute kernel support Support can be verified via `feature_present("ufs_extattr")`, etc.

svn commit: r299638 - stable/10/contrib/bsnmp/snmp_mibII

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 09:14:43 2016 New Revision: 299638 URL: https://svnweb.freebsd.org/changeset/base/299638 Log: MFC r298462: Return `ret` in op_ifentry(..) to mute a -Wunused-but-set-variable warning This will also now detect error conditions with value->var.subs[sub -

svn commit: r299635 - stable/10/sys/dev/aacraid

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 09:06:52 2016 New Revision: 299635 URL: https://svnweb.freebsd.org/changeset/base/299635 Log: MFC r298665: r298665 (by cem): aacraid(4): Fix some mostly trivial buffer overruns strcpy(3) emits a trailing nul byte, trampling fields after the intended

svn commit: r299634 - stable/10/sys/dev/ciss

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 09:05:29 2016 New Revision: 299634 URL: https://svnweb.freebsd.org/changeset/base/299634 Log: MFC r298670: r298670 (by cem): ciss(4): Fix overrun of array The softc member 'ciss_logical' is an array of 'ciss_max_logical_bus' members. Most of the time

svn commit: r299630 - stable/10/sys/dev/sym

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:58:49 2016 New Revision: 299630 URL: https://svnweb.freebsd.org/changeset/base/299630 Log: MFC r298340: r298340 (by cem): sym(4): Don't double-free 'sim' in failure case CID: 1006106 Modified: stable/10/sys/dev/sym/sym_hipd.c Directory

svn commit: r299629 - stable/10/sys/geom/part

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:54:08 2016 New Revision: 299629 URL: https://svnweb.freebsd.org/changeset/base/299629 Log: MFC r298671,r298672: r298671 (by cem): g_part_bsd64: Check for valid on-disk npartitions value This value is u32 on disk, but assigned to an int in memory.

svn commit: r299627 - stable/10/sys/netipsec

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:49:29 2016 New Revision: 299627 URL: https://svnweb.freebsd.org/changeset/base/299627 Log: MFC r298676: r298676 (by cem): netipsec: Don't leak memory when deep copy fails CID: 1331693 Modified: stable/10/sys/netipsec/ipsec.c Directory

svn commit: r299625 - stable/10/sys/kern

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:44:59 2016 New Revision: 299625 URL: https://svnweb.freebsd.org/changeset/base/299625 Log: MFC r298677: r298677 (by cem): subr_mbpool: Don't free bogus pointer in error paths An mbpool is allocated with a contiguous array of mbpages. Freeing an

svn commit: r299623 - stable/10/sys/dev/pty

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:41:09 2016 New Revision: 299623 URL: https://svnweb.freebsd.org/changeset/base/299623 Log: MFC r298337: r298337 (by cem): pty(4): Use strlcpy to guarantee destination buffer isn't overrun The devtoname() name is strcpyed into a small stack buffer.

svn commit: r299622 - stable/10/sys/dev/drm2

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:39:33 2016 New Revision: 299622 URL: https://svnweb.freebsd.org/changeset/base/299622 Log: MFC r298334: r298334 (by cem): drm2(4): Fix double-free in low-memory error path Reallocf frees 'block'; don't attempt to free it again. CID:

svn commit: r299621 - stable/10/sys/dev/iscsi_initiator

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:36:33 2016 New Revision: 299621 URL: https://svnweb.freebsd.org/changeset/base/299621 Log: MFC r298669: r298669 (by cem): iscsi_initiator(4): Fix use-after-free, double-free ism_stop() already destroys and frees 'sp', including a call to

svn commit: r299619 - stable/10/sys/rpc/rpcsec_gss

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:30:26 2016 New Revision: 299619 URL: https://svnweb.freebsd.org/changeset/base/299619 Log: MFC r298336: r298336 (by cem): kgssapi(4): Fix string overrun in Kerberos principal construction 'buf.value' was previously treated as a nul-terminated string,

svn commit: r299617 - in stable/10/sys/kgssapi: . krb5

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:25:06 2016 New Revision: 299617 URL: https://svnweb.freebsd.org/changeset/base/299617 Log: MFC r295134,r298338,r298655: r295134 (by cem): kcrypto_aes: Use separate sessions for AES and SHA1 Some hardware supports AES acceleration but not SHA1,

svn commit: r299616 - stable/10/sys/sys

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:17:42 2016 New Revision: 299616 URL: https://svnweb.freebsd.org/changeset/base/299616 Log: MFC r298333: r298333 (by cem): Make Racct macro slightly more gracious given RACCT_UNDEFINED rctl_string_to_rule could previously index below the zeroth

svn commit: r299615 - stable/10/sys/net

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 08:04:57 2016 New Revision: 299615 URL: https://svnweb.freebsd.org/changeset/base/299615 Log: MFC r298328: r298328 (by cem): bpf_getdltlist: Don't overrun 'lst' 'lst' is allocated with 'n1' members. 'n' indexes 'lst'. So 'n == n1' is an invalid

svn commit: r299613 - stable/10/sys/kern

2016-05-13 Thread Garrett Cooper
Author: ngie Date: Fri May 13 07:56:14 2016 New Revision: 299613 URL: https://svnweb.freebsd.org/changeset/base/299613 Log: MFC r298678: r298678 (by cem): posix4_mib: Don't overrun facility_initialized array The facility_initialized and facility arrays are the same size and were