HardenedBSD-12-STABLE-v1200058.4 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Highlights:

• MFC r345078: hwpmc/core: Adopt to upcoming Skylake TSX errata. (4252e660ecb50dfdae262be111061aa85fcb5864)
• MFC: r344757: Fix double free in case of mount error. (6b0855e01b577ab90fb58fca2fbcd7139e7dc527)
• MFC: r344754: Do not panic if inode bitmap is corrupted. (d58ea7668a31fbc14f05ba8975a87c1dc5cdb194)
• MFC: r344755: Fix integer overflow possibility. (66bedc8f13366ff9df84786d1e1e8a864800918f)
• MFC r344670: Allow FIONBIO and FIOASYNC ioctls on POSIX shm descriptors. (aaa017b23b47f1cb67b49eb8d4939d2aab9159df)
• MFC r344562: FFS: allow sendfile(2) to work with block sizes greater than the page size (a32149b5deac882f31f0aa448f8ed69244af8a20)
• HBSD: Revert "MFC r343964, r344121, r344128, r344593, r344594:" Revert of FreeBSD's ASR implementation. (9729cbe04506cba471aaa5a4c25f712ddf4f75a7)
• MFC r344140,r344141,r344142,r344143,r344388,r344547: Add CBC-MAC authentication. Add AES-CCM encryption, and plumb into OCF. (9b2dd6cb463ad737942a99e34af81c65dfb4d14b)
• HBSD: same shit like with librt, move libexecinfo's so to /lib (4403befcd40c2c573e428c6b2452cefcb5679ceb)
• MFC r344494,r344495: evdev: export event device properties through sysctl interface (dd53f13958e1e1306f3cecffbf0af504f5dddf68)
• Disable WITH_RETPOLINE on stable/12. (4e79588d3043e5f24f223c5a42a662b79d870abc)
• MFC r344449: scp: validate filenames provided by server against wildcard (531e90823d82662c5e008c9c04fa24a532e7eb48)
• MFC r344883: nptd 4.2.8p12 --> 4.2.8p13 [FreeBSD-SA-Candidate CVE-2019-8936]
• MFC r344063,r344088: Sync libarchive with vendor. [FreeBSD-SA-Candidate CVE-2019-1000019 CVE-2019-1000020]
• MFC: r344602 Merge OpenSSL 1.1.1b. (bd8357d913b260cf55f0818d30ff889d62a702ea)
• HBSD: Disable cfi-icall for usr.sbin/ppp (c9056e1d8c17af42a6fa933fb1e544b1705ba72f)
• Merge clang 7.0.1 and several follow-up changes (a39fc2a725d1f743ccd878ef7264dcba56f674de)
• MFC r343850: contigmalloc: handle M_EXEC. (bcfd287a0368013fdeaec7291890deb4aa10bfd1)
• ZFS updates
• ipfw updates
• pf updates
• ipfilter cleanups
• em, igbe updates
• net80211 updates
• iflib updates

Installer images:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

CHECKSUM.SHA512:

SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-bootonly.iso) = 0afcc9d2351f50c9dccb6c79ba2da2ea6d81d7729f0f8109061b053a51c5c0b929801c4c5affd603c802ea777d7293477232ca1db5c741556554ab3dbe6049ac
SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-disc1.iso) = 79a4255012da260ecd239d941825e5ace4373b25ad112dc0eb36377554ab64a874bf08092e3e258e2cd394a227eab7355909e4b166f61974419145351a44293e
SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-memstick.img) = 4f1aa178fc6ff3b38cfc55aaa5a668ef0b92a05afcfcf237a96483e70a8f67869f606e60de5f03a07ef15df004be23ec92225ba69fbc3070231943bddcba9738
SHA512 (HardenedBSD-12-STABLE-v1200058.4-amd64-mini-memstick.img) = efea297d2ae2580b3a95021be6e5c8e24bfb8e700fc5e3924bdb863f80537da604b0162e4b4fc2d8054de3d8f17f32f0cb0f91f4c273e66ce3e26ccfff54b783

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEu1M4jTvZiSgVy54wgZsRom/9GI0FAlyTB7MACgkQgZsRom/9
GI3WNA//XiGYLDMkiRWmHgpg4zmEs2ucv3DNwiCuNRsphBtIvTTFYiUyrF8ui3i3
1r52FN/kcVILMwT+b6NZuY54/Xl2E6jdXzJ11ZKQkRc1ZXrdOb/AGXU/jJ+jKpWj
BJYocyLcP+qZEj28ztLA60He0kGIEpmyK9lgpsSShVON0BJ/DIGy0h154nyMTZoz
YFYClcG72MOapmwpNDdntPXa5HpGwiz8r7EGnw3hKLXkngXkegDPQ/pnAkm5gePr
7qOpw/XwZzfH1xDUu721AwlyzjRDDOkL9mNpC3cn3hLJLR8El8YupVMQziUK/FBA
Y0wPPQ/TxNIQwtAM7SZW/p/B1tCpE2k7+BMWcJzEyWtfyr0KcoXW490Asgur9yL1
/v5RnORId64ulzmzXymEpsP8/8ujE0mlyVCh6i6MowwGbHgNkRORUSX0sDnclfOA
wkvmZ5nLQ6KQBhZ2wg2NL4xbjid0YGgirvVF8YnxnMz+k3jfUsqRIU/EZCZzucxa
kukEPNPTZZOtCEaLGC0rl8dfm2eRuxr+lRJ6l/bw68bIM5+x+DycF17UqN8+aeXR
rt9F47Uq8bdK0Rx/0mSawrq3jodGFjiZro4wyrYi11cb2bO/XmagA7QrnvYu5ZnI
QEQoVin8s+WA1cMeXNzs9UJYztKE1hKa1uNLZEAd1GJaFdvqir4=
=WtXM
-----END PGP SIGNATURE-----


Oliver Pinter (5):

• HBSD MFC r343827: r341692 changed cap_syslog(3) to preserve the stdio descriptors
• HBSD: sync HARDENEDBSD kernel config with GENERIC
• HBSD: sync OP-HBSD kernel config with recent HARDENEDBSD and GENERIC
• HBSD: add HardenedBSD's CFI related clang lib to ObsoleteFiles
• HBSD: same shit like with librt, move libexecinfo's so to /lib

Oliver Pinter + (96):

• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master

Shawn Webb (13):

• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
• HBSD: Resolve merge conflict
• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
• HBSD: Resolve merge conflicts
• HBSD: Do not set kernel config if we're not installing a new kernel
• HBSD: clang/llvm 7.0.1 fixups
• HBSD: Disable cfi-icall for usr.sbin/ppp
• HBSD: Do not require non-existent cfi_blacklist.txt
• HBSD: Bring HARDENEDBSD amd64 kernel up-to-date
• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
• HBSD: resolve merge conflicts
• HBSD: Revert "MFC r343964, r344121, r344128, r344593, r344594:"
• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master

ae (7):

• MFC r342908: Reduce the size of struct ip_fw_args from 240 to 128 bytes on amd64. And refactor the code to avoid unneeded initialization to reduce overhead of per-packet processing.
• MFC r344018: Remove `set' field from state structure and use set from parent rule.
• MFC r344103: In r335015 PCB destroing was made deferred using epoch_call().
• MFC r344870: Fix the problem with O_LIMIT states introduced in r344018.
• MFC r344873: Fix typo.
• MFC r345003: Add NULL pointer check to nat64_output().
• MFC r345004 (with modification): Add IP_FW_NAT64 to codes that ipfw_chk() can return.

asomers (6):

• MFC r340988:
• MFC r341598:
• MFC r341390, r341392, r341667
• MFC r342153, r342172-r342173
• MFC r300938, r342154
• MFC r343530:

avos (35):

• MFC r343542: upgt(4): unbreak build with UPGT_DEBUG
• MFC r343684: Drop unused M_80211_COM malloc(9) type.
• MFC r343697: net80211(4): fix rate check when 'roaming' ifconfig(8) option is set to 'auto'
• MFC r343574: Fix compilation with 'option NDISAPI + device ndis' and without 'device pccard' in the kernel config file.
• MFC r343681: run(4): fix allocated memory type for ieee80211_node(4)
• MFC r343577: rsu(4): add support for ifconfig(8) 'maxretry' option
• MFC r343682: sys/dev/wtap: Check return value from malloc(..., M_NOWAIT) and drop unneeded cast.
• MFC r343417: net80211: reuse TICKS_2_MSEC / MSEC_2_TICKS macros from sys/time.h
• MFC r343690: ifconfig(8): interpret VHT rates correctly for 'list roam / txparam' options
• MFC r343683: Do not acquire IEEE80211_LOCK twice in cac_timeout(); reuse locked function instead.
• MFC r343603: ipw(4): reuse ieee80211_tx_complete function
• MFC r343604: bwn(4): reuse ieee80211_tx_complete function
• MFC r343837: net80211(4): validate supplied roam:rate values from ifconfig(8)
• MFC r343698, r343700: ifconfig(8): display management / multicast wlan(4) rates properly
• MFC r343474: Remove 2GHz channel list copies from wireless drivers.
• MFC r343815: iwn(4): plug initialization path vs interrupt handler races
• MFC r343870: ipcs(1): drop obsolete error checking
• MFC r343871: recoverdisk(1): fclose() file supplied via '-r readlist' parameter when it's no longer needed
• MFC r343868: Correct ypldap(8) install path in OptionalObsoleteFiles.inc
• MFC r343909: newkey(8): fix 'tmpname' memory leak (always) and input file descriptor leak when output file cannot be opened
• MFC r343980: ifconfig(8): display 802.11n rates correctly for 'roam:rate' parameter
• MFC r343094: iwn(4): (partially) rewrite A-MPDU Tx path
• MFC r343501: Add NO_6_BYTE / NO_SYNC_CACHE quirks for (C|D|E).* Olympus digital cameras
• MFC r343696: net80211: do not setup roaming parameters for unsupported modes.
• MFC r343699: net80211: do not setup Tx parameters for unsupported modes.
• MFC r344198: GC ATA_REQUEST_TIMEOUT option remnants
• MFC r344201: Remove vi(1)-related files via 'make delete-old' when WITHOUT_VI=1 is set.
• MFC r344214: Refresh OptionalObsoleteFiles.inc for MK_PMC:
• MFC r344244: Fix memory / resource leaks in usr.sbin/rpc.ypupdated/update.c
• MFC r344245: snmp_hostres(3): fix a typo in sanity checks in handle_chunk()
• MFC r344744: rtwn_usb(4): fix LED blinking for RTL8192CU during scanning
• MFC r343990: net80211: hide casts for 'i_seq' field offset calculation inside ieee80211_getqos() and reuse it in various places.
• MFC r345002: iwm(4): use correct channel list source for Intel 3168
• MFC r344748: Allow to build ifconfig(8) without wireless support
• MFC r344745: rtwn_usb(4): fix Tx instability with RTL8192CU chipsets

bcr (1):

• MFC r343921: Add an example to pw.8 about how to add an existing user to a group.

bdrewery (3):

• MFC r343633:
• MFC r343877,r343880:
• MFC r344666:

brooks (1):

• MFC r344023:

bwidawsk (4):

• MFC r340000:
• MFC r339577:
• MFC r344043:
• MFC r344474-r344476

cperciva (2):

• MFC r343918: Teach /etc/rc.d/growfs how to handle systems running ZFS.
• MFC r344315: Fix sed script to insert Amazon NTP server into ntp.conf once rather than twice.

cy (9):

• MFC r343591:
• MFC r343701 & r343732:
• MFC r343702:
• MFC r343703
• MFC r343704:
• MFC r343705:
• MFC r344883:
• MFC r344838:
• MFC r345079:

dab (4):

• MFC r344024:
• MFC r344473:
• MFC r344470:
• MFC r344553:

dim (11):

• MFC r343748:
• MFC r342592:
• Merge clang 7.0.1 and several follow-up changes
• MFC r344112:
• MFC r343165 (by jhibbits):
• MFC r344261:
• MFC r344264:
• MFC r344386:
• MFC r344503:
• MFC r344381:
• MFC r344444:

emaste (14):

• MFC r343589: freebsd-update: regenerate man page database after update
• MFC r343409: freebsd-update: Stop installing empty component sets
• MFC r343407: freebsd-update: open $PAGER only if necessary
• MFC r343412: Fix a typo/wordsmith a description modified in [MFC of r343407]
• MFC r343411: freebsd-update: Clarify unsupported upgrade message
• MFC r343270: freebsd-update: Update /etc/passwd after password db changes
• MFC r343152: freebsd-update: Use BASEDIR when checking for src component
• MFC freebsd-update: Clarify unsupported release upgrade error message
• MFC r343410:
• MFC r344628: poll.2: POLLNVAL is returned also for insufficient rights
• MFC r344449: scp: validate filenames provided by server against wildcard
• Add UPDATING entry for r344898 - RETPOLINE BROKEN_OPTIONS
• MFC r344818: freebsd-update.8: update example to contemporary versions
• MFC r345087: Use consistent struct stat arg name in stat man page

erj (1):

• MFC r344132:

eugen (2):

• MFC r343112: jail(8): stop crashing with SIGSEGV inside run_command() function while processing not entirely correct jail.conf(5) file having something like "ip4.addr = 127.0.0.1;" and no "ip4 = ...;" so extrap variable stays NULL.
• MFC r343118: new small tool trim(1) to delete contents for blocks on flash based storage devices that use wear-leveling algorithms.

fsu (7):

• MFC r344751: Make superblock reading logic more strict.
• MFC: r344753: Validate block bitmaps.
• MFC: r344755: Fix integer overflow possibility.
• MFC: r344756, r345179: Do not read the on-disk inode in case of vnode allocation.
• MFC: r344754: Do not panic if inode bitmap is corrupted.
• MFC: r344752: Add additional on-disk inode checks.
• MFC: r344757: Fix double free in case of mount error.

gahr (1):

• MFC r34505: freebsd-update: restore old exit code when no updates are available locally

glebius (1):

• Merge r343895: Allow some nesting of ng_iface(4) interfaces and add a configuration knob.

gonzo (3):

• MFC r343204:
• MFC r343209:
• MFC r343560:

hselasky (4):

• MFC r343584: Export vendor specific USB MIDI device list to PnP info.
• MFC r343572: Add support for Audio Sink and Audio Source profiles to sdpd(8).
• MFC r343905: Improve Bluetooth device discovery support for Android and Microsoft devices.
• MFC r344477: Add new USB quirk.

imp (1):

• Revert the r343077 MFC after it was reverted in -current.

jah (3):

• MFC r343827:
• MFC r344561:
• MFC r344562:

jhb (8):

• MFC 341098: Add read-only sysctls for all tunables in the cxgbe(4) driver.
• MFC 340020: Don't enter DDB for fatal traps before panic by default.
• MFC 342658: Correct variable name in two panic messages: num_msi_irq -> num_msi_irqs.
• MFC 343048: Update the note about the need for COMPAT_FREEBSD kernel options.
• MFC 343056: Reject new sessions if the necessary queues aren't initialized.
• MFC 343456: Fix a few more places to handle ofld tx queues for RATELIMIT.
• MFC 343620: Don't set IFCAP_TXRTLMT during lagg_clone_create().
• MFC 344671: Don't assume all children of a nexus are ports.

jhibbits (4):

• MFC r343078:
• MFC r342811, r343168-r343169
• MFC r343763, r343944, r343946
• MFC r343924:

jilles (2):

• MFC r343896,r343922: dhclient: Pass through exit status from script
• MFC r342880,r343981,r344902: sh: Fix $((-9223372036854775808))

jkim (1):

• MFC: r344602

kevans (4):

• MFC r343601: install(1): Fix relative path calculation with partial common dest/src
• MFC r339831 (imp): Move LUA_ROOT to /boot/lua
• MFC r343543: bectl(8) test: Force destroy the zpool in cleanup
• MFC r344218: mdmfs(8): use -o reserve with malloc-backed md(4)

kib (41):

• MFC r343628: nvdimm: enumerate NVDIMM SPA ranges from the root device
• MFC r343629: nvdimm: only enumerate present nvdimm devices
• MFC r343757: Update CPUID bits definitions and CPU identification based on changes in SDM rev. 069.
• MFC r343808: Remove pointless initial value for i386 vm.pmap.pat_works sysctl definition.
• MFC r343724: Do not call PHOLD() while owning the allproc_lock sx.
• MFC r343890: do_execve(): lock vnode when needed.
• MFC r339877-r339879,r343564-r343566,r343580,r343754: Untangle jemalloc and mutexes initialization.
• MFC r343850: contigmalloc: handle M_EXEC.
• MFC r343617, r343618: Make iflib a loadable module.
• MFC r343891: Fix renameat(2) for CAPABILITIES kernelsi.
• MFC r343897, r343898: Some style for nullfs_mount(). Before using VTONULL(), check that the covered vnode belongs to nullfs.
• MFC r343899: In null_vptocnp(), cache vp->v_mount and use it for null_nodeget() call.
• MFC r343855, r343859: Use ifunc to select the barrier instruction for RDTSC.
• MFC r343966: struct xswdev on amd64 requires compat32 shims after ino64.
• MFC r343723: i386: Do not ever store to other-CPU counter64 slot.
• MFC r344118: Provide userspace versions of do_cpuid() and cpuid_count() on i386.
• MFC r344119: x86 __vdso_gettc(): use machine/cpufunc.h function for CPUID.
• MFC r344120: Unify i386 and amd64 getcontextx.c, and use ifuncs while there.
• Revert r344436, which was the merge of r344120.
• MFC r344293: Add definition for %cr4 PKRU enable bit.
• MFC r344296: Provide convenience C wrappers for RDPKRU and WRPKRU instructions.
• MFC r344303: Minor cleanup for mkuzip(8) man page.
• MFC r344256: amd64: cleanup pmap_init_pat().
• MFC r344592: procctl(2): fix -width parameter to .Bl.
• MFC r344351: Implement rangesets.
• MFC r344352: amd64: add defines and decode protection keys and SGX page faults reasons.
• MFC r344353: Add kernel support for Intel userspace protection keys feature on Skylake Xeons.
• MFC r344354: Add usermode helpers for the Intel userspace protection keys feature.
• MFC r344355: pkru(3) man page.
• MFC r339941 (by mckusick): In preparation for adding inode check-hashes, change the fsck_ffs inodirty() function to have a pointer to the inode being dirtied. No functional change (as for now the parameter is ununsed).
• Disable WITH_RETPOLINE on stable/12.
• MFC r343964, r344121, r344128, r344593, r344594: ASLR.
• MFC r341689, r341711, r341712, r341809: Add getfhat(2), fhlink(2), fhlinkat(2), fhreadlink(2) file handle system calls.
• MFC r345074: Remove useless version check.
• MFC r345075: Add register number, CPUID bits, and print identification for TSX force abort errata.
• MFC r345089: Some fixes for proccontrol(1) man page.
• MFC r345141: mips: remove dead comment and definitions.
• MFC r345189: Add symbolic name for TSC_AUX MSR address.
• MFC r345078: hwpmc/core: Adopt to upcoming Skylake TSX errata.
• MFC r344479 (by sobomax), r344605: Modularize xz.
• MFC r345246: i386: improve detection of the fast page fault assist.

kp (15):

• MFC r343520:
• MFC r344061:
• MFC r344691:
• MFC r343978:
• MFC r344692:
• MFC r341360:
• MFC r340073, r341359:
• MFC r339836, r340286, r341358:
• MFC r344764
• MFC r344720:
• pf: Small performance tweak
• pf tests: Disable noalias test
• MFC r344921:
• MFC r344794:
• MFC r344797:

lme (1):

• MFC r342945, r342947, r343020

marck (2):

• MFC 343548:
• MFC: r343164

marius (11):

• MFC: r343578 (partial)
• MFC: r343288
• MFC: r343753
• MFC: r342749
• MFC: r343203
• MFC: r343369
• MFC: r343934
• MFC: r343621
• MFC: r343622
• MFC: r339459
• MFC: r343372

markj (15):

• MFC r343719: Fix a race in vm_page_dequeue_deferred().
• MFC r343626: Prevent some kobj memory allocation failures from panicking the system.
• MFC r344231, r344440: Remove a redundant flag variable.
• MFC r344232: Fix refcount leaks in the SGX Linux compat ioctl handler.
• MFC r344369: Remove an obsolete comment.
• MFC r344307: Limit the number of entries allocated for a REPORT_ZONES command.
• MFC r344305, r344365: Impose a limit on the number of GEOM_CTL arguments.
• MFC r344278: Move a racy assertion in filt_pipewrite().
• MFC r344600: Add a missing return statement to g_concat_kernel_dump().
• MFC r343354: Remove extraneous setutxent() calls in write(1).
• MFC r344550: Improve vmem tuning for platforms without a direct map.
• MFC r344450, r344452, r344453: Fix a tracepoint lookup race in fasttrap_pid_probe().
• MFC r344670: Allow FIONBIO and FIOASYNC ioctls on POSIX shm descriptors.
• MFC r344588: Remove illumos-specific code from the x86 fasttrap_isa.c.
• MFC r344599: Fix fasttrap_sig{trap,segv}().

mav (23):

• MFC r343673: Fix integer math overflow in UMA hash_alloc().
• MFC r343745, r343752: Add missed tunables/sysctls for some new vdev variables.
• MFC r343728: Check element type before setting LEDs.
• MFC r343727: Use switch instead of chained if/else to improve readability.
• MFC r343562, r343563: Reimplement BIO_ORDERED handling in nvd(4).
• MFC r343585: Only sort requests of types that have concept of offset.
• MFC r343582,r343588:Relax BIO_FLUSH ordering in da(4), respecting BIO_ORDERED.
• MFC r343586: Remove BIO_ORDERED flag from BIO_FLUSH sent by ZFS.
• MFC r343125 (by cem): ioat(4): Set __result_use_check on ioat_acquire_reserve
• MFC r344441: Fix few issues in ioat(4) driver.
• MFC r344437: Allow I/OAT of present Xeon E5/E7 to work thorugh PLX NTB.
• MFC r344480: Remove disabled CTL_LEGACY_STATS support.
• MFC r344702: There is no `device atacard` but there is `device atapccard`.
• MFC r344660: Add to isp(4) tunables to limit MSI/MSI-X usage.
• MFC r344661, r344669: Limit 24xx adapters to only MSI interrupts by default.
• MFC r344489: Free some space in struct ctl_io_hdr for better use.
• MFC r344782: bridge: Fix spurious warnings about capabilities
• MFC r344743: Reduce CTL threads priority to about PUSER.
• MFC r344586: Scrap some debug printf's, unused for years.
• MFC r344636: Refactor command ordering/blocking mechanism in CTL.
• MFC r344844: Flush stdout after each iteration.
• MFC r344866: Add respective tunables to few ZFS sysctls.
• MFC r344903: Improve entropy for ZFS taskqueue selection.

mckusick (2):

• MFC of 344552 and 344732
• MFC of 344731

mm (1):

• MFC r344063,r344088:

mmacy (3):

• bump version to reflect MFC of CCM for the benefit of the ZoF port
• MFC r342793 - selectively disable ZFS without disabling loader
• MFC r342747 - zfsboot: support newer ZFS versions

mw (1):

• Merge ENA OOO RX fixes

ngie (5):

• MFC r343444:
• MFC r342904:
• MFC r343845:
• MFC r343362,r343365,r343367,r343368,r343461,r343751,r344310:
• MFC r342952:

nyan (1):

• MFC: r343011

oshogbo (2):

• MFC r343470: zfs: allow to change cache flush sysctl
• MFC r343471: libcasper: do not run registered exit functions

pfg (2):

• MFC r342910: grep(1) outputs NOT-matched lines with multi-byte characters
• MFC r344042: UMA: unsign some variables related to allocation in hash_alloc().

pkelsey (6):

• MFC r343287: Reduce pf.conf parsing cost for configs that define N queues from O(N^2) to O(N)
• MFC r343291: Convert vmx(4) to being an iflib driver.
• MFC r343995: Reduce the time it takes the kernel to install a new PF config containing a large number of queues
• MFC r343534: Don't re-evaluate ALTQ kernel configuration due to events on non-ALTQ interfaces
• MFC r343535: Speed up non-status operations applied to a single interface
• MFC r343919: Fix em(4) interrupt routing

pluknet (2):

• MFC r343945: Document the ENOBUFS errno in setsockopt(2).
• MFC r343967: Sync "struct addrinfo" declaration with netdb.h.

ram (1):

• MFC r342946: Remove accessing remote node and domain objects while processing cam actions. Issue: ocs_fc(4) driver panics. It's induced by setting the port_state sysctl to offline, then online, then offline, then online, and so forth and so on in rapid succession.

rgrimes (1):

• MFC r339707: Allow fdisk(8) to deal with sectors larger than 2048 especially for 4Kn drives with PMBR's

se (6):

• MFC r343303: Silence a CI warning regarding the use of strcpy().
• MFC r343339: Silence Clang Scan warning about use of unitialized variable.
• MFC r343408: Silence Clang Scan warnings regarding unsafe use of strcp().
• MFC r343479: Fix potential buffer overflow and undefined behavior.
• Add notes regarding the deprecation and removal of timed and timedc in -CURRENT to binaries and man-pages.
• MFC r343480,343482: Silence Clang Scan warning about unsafe use of strcpy.

sef (4):

• MFC r344402
• MFC r343881
• MFC r343882
• MFC r344140,r344141,r344142,r344143,r344388,r344547

shurd (1):

• MFC r344162:

smh (2):

• MFC r344701: Fix incorrect / unused sector_count for identify requests
• Revert zfsimpl.c accidentally committed in r345128

trasz (1):

• MFC r342114:

tuexen (3):

• MFC r343920:
• MFC r343439:
• MFC r344428:

ume (1):

• MFC r344491: An IPv6 address matching should be fixed. Specifying an IPv6 address by the -a option was broken since r309933.

vmaffione (9):

• MFC r343344
• MFC r343346
• MFC r343549
• MFC r343689
• MFC r343772, r343867
• MFC r343579
• MFC r344253
• MFC r344510
• MFC r344696:

wulf (3):

• MFC r343163:
• MFC r343327:
• MFC r344494,r344495:

ygy (2):

• MFC r343930:
• MFC r344709: