New stable release: HardenedBSD-stable 10-STABLE v46.6

HardenedBSD-10-STABLE-v46.6 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Headlines:
* https://security.freebsd.org/advisories/FreeBSD-SA-16:25.bspatch.asc
* hbsd-update update

Oliver Pinter + (22):
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master

Shawn Webb (8):
Merge remote-tracking branch 'origin/freebsd/10-stable/master' into hardened/10-stable/master
HBSD: Resolve merge conflicts
HBSD: Fixup pointers in linuxulator
HBSD: Document -i flag in hbsd-update(8)
HBSD: Add -i flag to hbsd-update USAGE
HBSD: Provide option for keeping obsolete files/directories.
HBSD: Trap SIGINT in hbsd-update.
HBSD: Interactively delete obsolete files with -I.

ache (4):
MFC: r302824
Forget to merge this changes in prev. MFC
MFC: r302826
MFC: r302827

alc (1):
MFC r303101 Add a comment describing the 'fast path' that was introduced in r270011.

avg (1):
MFC r302772: re-apply r299908: zfsctl_snapdir_lookup: clear VV_ROOT of snapshot's root

bapt (1):
Do not try to delete the home of the user if is is not a directory for example "/dev/null"

bdrewery (1):
MFC r302908:

cperciva (1):
MFH r301732, r302288

dchagin (3):
MFC r302515:
Regen for r302962 (Linux personality), record mergeinfo for r320516.
MFC r302517:

delphij (2):
MFC r302542:
Fix bspatch heap overflow vulnerability.

emaste (5):
MFC r303031: clang++: Always use --eh-frame-hdr on FreeBSD, even for -static
MFC r302278: libcxxrt: correct mangled "typeinfo name" symbols in Version.map
MFC r302335: boot1.efi: fix assignment / comparison expression
MFC r301974: ar: enable reproducible output by default when invoked as 'ar -s'
MFC r297871: boot1.efifat: provide a fallback startup.nsh

gahr (1):
MFC r302558: Do not truncate lines longer than 512 chars.

gjb (1):
MFC r303003:

jamie (3):
MFC r302855:
MFC r302856:
MFC r302857:

jch (1):
MFC r261242:

jhb (4):
MFC 298370,298372,298377,298379,298380,298484: Abstract out _OSC handling and invoke it for PCI bridges.
MFC 299977: Use polling spin loops for timeouts during early boot.
MFC 300253: Remove dangling references to rman_await_resource().
MFC 302175: Add pci_get_max_payload() to fetch the PCI-express maximum payload size.

kib (6):
MFC r302573: Fill tf_trapno for trap frames created for syscall.
MFC r302770: Trace timeval parameters to the getitimer(2) and setitimer(2) syscalls.
MFC r302893: Do not allow creation of char or block special nodes with VNOVAL dev_t.
MFC r302919: In ptrace_vm_entry(), do not call vmspace_free() while owning a vm object lock.
MFC r302936: Explicitely check for the valid range of file descriptor values.
MFC r302567: In vgonel(), postpone setting BO_DEAD until VOP_RECLAIM() is called, if vnode is VMIO. For VMIO vnodes, set BO_DEAD in vm_object_terminate().

markj (9):
MFC r302507: Avoid truncating the return value of DTrace predicates.
MFC r301210: Don't preserve the page's object linkage in vm_page_insert_after().
MFC r301212: Reset the page busy lock state after failing to insert into the object.
MFC r301090: mkimg: Indicate that input file pages are unlikely to be reused.
MFC r302346: Ensure that spinlock sections are balanced even after a panic.
MFC r301877: Add a missing error check for a malloc() call in idr_get().
MFC r302797: Document DDB's "alltrace" and "show all trace" commands.
MFC r302091: Do not complete pending gmirror BIOs when tearing down the provider.
MFC r302179: gcore: Forward pending signals when detaching from the target.

mav (2):
MFC r303000: Update if_hwassist when interface options are changed.
MFC r302957: Fix NCQ TRIM emulation.

pfg (2):
MFC r302511, r302771, r302845: mail(1): check for out of memory conditions when calling calloc(3).
MFC r302973: sed(1): Fix off by one introduced in r299211.

sbruno (13):
MFC r297187
MFC - r302384 to 10-STABLE Do not initialize the adapter on MTU change when adapter status is down. This fixes long-standing problems when changing settings of the adapter.
Fix em(4) build after r303107
Fix lem(4) build after r303107
MFC r298231 hptmv(4) Fix potential buffer overflow in hpt_set_info.
MFC r298351
MFC r299182 If ALTQ is defined in the kern conf, switch to Legacy Mode.
MFC r299188 Since igb_detach() cleans up all the data structures that will be free'd by the functions following its call, we can simply return instead of crashing and burning in the event of igb_detach() failing.
MFC r300551 Update some of the TBD entries in ciss(4) to match what's in the pci IDS data.
MFC r300612 Reject ioctl commands for FLSHGCHR and FLSHPCHR if the size is greater than sc->areq. This is a bounds check to ensure we're not just cramming arbitrarily sized nonsense into the driver and overflowing the heap.
MFC r302281 Correct PERSISTENT RESERVE OUT command and populate scsi_cmd->length.
MFC r303110 Remove uneeded parens.
MFC r303032 Fixup DA cable detection routines to not set the cable type to unknown if they do not match one of two cable types.

sephe (1):
MFC 302541,302605

slm (1):
MFC r302673 Use real values to calculate Max I/O size instead of guessing.

sobomax (2):
MFC: merge in all new features and improvements into mkuzip(8) from current, which includes:
MFC: merge in all new features and improvements into geom_uzip(8) from current, which includes:

truckman (1):
MFC r302667