HardenedBSD-12-STABLE-v1200059.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Highlights:

• MFC: r348590, r348591 Modify mountd so that it incrementally updates the kernel exports upon a reload. (8fc34de4348e10c2fe3caa879207e8f680869353)
• MFC r349098: Add macOS-like three finger drag trackpad gesture to psm(4) (59d69e81f89ec2bf540bd541ca70b98ebed5d56f)
• MFC r349505: Upgrade to Bzip2 version 1.0.7. (1ab7a3c679d7799521e36a9c39b4a2b80fd38c6b) [CVE-2016-3189 CVE-2019-12900]
• MFC r349320, r349324: coredump: avoid writing to core files not owned by the effective user. (a6fa17ec3d64e79811898fc7583e84f3f395a918)
• MFC r349268: nandsim: correct test to avoid out-of-bounds access (331c7e44e797346bb0dfc378df9e0e5817d95f22) [FreeBSD-SA-Candidate]
• MFC r349627: Remove the CDIOCREADSUBCHANNEL_SYSSPACE ioctl. (38642b530610dedbc0ad196142084e1ca430f7c0) [FreeBSD-SA-19:11.cd_ioctl CVE-2019-5602]
• MFC r349619: libc: correct iconv buffer overflow (cb54f676c0944a9d5fdcd51694a7b2c22b7a2e56) [FreeBSD-SA-19:09.iconv CVE-2019-5600)
• MFC r349592: Import tzdata 2019b (13738a6816f88c46ee5bd68fad8fa28190bafb63)
• MFC r346455-r346458, r348520, r348529, r348817, r348818 psm driver update (da6caf7e1c0ec69c62f78a9d35daaf98537fa3cf)
• MFC r348993,349135: Sync libarchive with vendor including security fixes (1859a7c1c120cf5f715a3ed1ba33d4803545fc39)
• MFC r348802: Remove lazy FPU switch support from amd64. (6fc5e4fc0f3d8e3dc5a20afeefcb4b91a14e1b7c)
• MFC r348764: Allow UMA hash tables to expand faster then 2x in 20 seconds. (2a2c9badd703299881fa77922e15fe59a2c4a10f)
• MFC r349192: Add the ability to limit how much the code will fragment the RACK send map in response to SACKs. (92a5c7e46d2dd9da06acaada6e80f09025178556) [FreeBSD-SA-19:08.rack CVE-2019-5599]
• MFC r347949, r347955: Implement the M_NEXTFIT allocation strategy for vmem(9). (fc11b182567b0181381f92b138c27e643b6bb372)
• MFC r348742: Fix a race between fasttrap and the user breakpoint handler. (932a7c43f8c578b2f7ce11159255f7821a7fd262)
• MFC r348539: amd64 ef_rt_arch_call: Preserve %rflags around call into EFI RT service. (16f0086b6fe2ab6a7d01baa506bafc3d1e31eba4)
• MFC r348235: Add `missing` and `or-flush` options to "ipfw table create" command to simplify firewall reloading. (07cb67bb29cc94ecde0224398ccef951224299c5)
• MFC r348065: Correct the way remaining battery life is calculated (e520b68ee6de2278be76b743e809b021976e768f)
• MFC r348059: vt efifb: add suspend/resume calls (52c1462530025659fbbc14e6b27dfdcaac5779ba)
• AHCI and CAM updates
• RISC-V updates
• ZFS updates
• bhyve updates
• cuse updates
• cxgbe updates
• dhclient updates
• epoch updates
• iflib updates
• mountd updates
• CVE-2019-5601 for UFS is already fixed in our previous release, but you may need to do additional steps, for more information please see FreeBSD's SA: https://www.freebsd.org/security/advisories/FreeBSD-SA-19:10.ufs.asc

Installer images:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

CHECKSUM.SHA512:

SHA512 (HardenedBSD-12-STABLE-v1200059.1-amd64-bootonly.iso) = 18319be6e915849a48765235fd57008e6e93f232cfda46b3d0947d7088222e138f7c3d94c26d721987ee0029070d7b37fef7e5eec356d7e7c2d17e738cf24be3
SHA512 (HardenedBSD-12-STABLE-v1200059.1-amd64-disc1.iso) = 45285fb7c1e63e3e22bd56722f3f8a98c982d8543dddea02cd3cd763e9a0f0672e09810bb5e4e2180db3c6cae79947a6540f05ec0f15133a120535d33da8d477
SHA512 (HardenedBSD-12-STABLE-v1200059.1-amd64-memstick.img) = a0d5aa1afda605ecf8b2165dddac8e42ae01e6a240ac1218c1aede175e0022aee72c7e2ea516654d3205e2d72a64fdef886313246abfc2d4245e1347230ad1ca
SHA512 (HardenedBSD-12-STABLE-v1200059.1-amd64-mini-memstick.img) = a21a72e40d8ed986c28631189bbfa326d87a597b906ba786e378d4f254d352d189fa2eda91a29e0e72d3d23ee1c178e83604b01b773d95708c9130b24e77e056

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=Ilar
-----END PGP SIGNATURE-----


Oliver Pinter (4):

• HBSD: add device tpm to OP-HBSD kernel config
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• HBSD: resolve merge conflict in kern_mmap after 8f8856facd684bfebec514f6a258622e1ff93f2f
• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master

Oliver Pinter + (41):

• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
• Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master

Shawn Webb (7):

• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
• HBSD: Resolve merge conflicts
• Merge remote-tracking branch 'freebsd/stable/12' into hardened/12-stable/master
• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
• HBSD: Resolve merge conflicts
• Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
• HBSD: Resolve merge conflict

ae (8):

• MFC r348236: Restore IPV6_NEXTHOP option support that seem was partially broken since r286195.
• MFC r348235: Add `missing` and `or-flush` options to "ipfw table create" command to simplify firewall reloading.
• MFC r348682: Initialize V_nat64out methods explicitly.
• MFC r348774: Use underscores for internal variable name to avoid conflicts.
• MFC r349267: Add "tcpmss" opcode to match the TCP MSS value.
• MFC r349364: Restore ipfw(8)'s compact output support broken after r331668.
• MFC r349365: Mark default rule with IPFW_RULE_NOOPT flag, so it can be showed in compact form.
• MFC r349366: Follow the RFC 3128 and drop short TCP fragments with offset = 1.

allanjude (4):

• MFC r347953:
• MFC r348068, r348071
• MFC r348065:
• MFC r348714:

asomers (12):

• MFC r345034:
• MFC r345202:
• MFC r345677:
• MFC r346078:
• MFC r346750:
• MFC r346847:
• MFC r347032:
• MFC r348077:
• MFC r348113:
• MFC r348251:
• MFC r348316:
• MFC r348737:

avg (11):

• MFC r344359: fix userland illumos taskq code to pass relative timeout to cv_timedwait
• MFC r344360: zpool.8: document -D flag for zpool status
• MFC r344361: zpool.8: sort zpool status flags in the same order as in illumos manual
• MFC r345411: intpm: change translation of HBA error status to smbus(4) errors
• MFC r348153-r348155: gpioled: add a new hint for initial state
• MFC r348152: Add USB ID for CP2112
• MFC r348159: add mrsas_shutdown method
• MFC r348227: amdgpio: remove new line symbols from pin names
• MFC r348228: amdgpio: fix reading status of input pins
• MFC r348772: Restore ARC MFU/MRU pressure
• drm2/intel_iic: stop using iicbus_set_nostop

bapt (1):

• MFC r346149:

br (17):

• MFC 339774:
• MFC r344252:
• MFC r345581:
• MFC r345796:
• MFC r346633:
• MFC r346634:
• MFC r346896:
• MFC r346994:
• MFC r347225:
• MFC r347226:
• MFC r347337:
• MFC r347342:
• MFC r347344:
• MFC r347351:
• MFC r347427:
• MFC r347514:
• MFC r348364:

cperciva (2):

• MFC r347370: Bump EC2 AMI filesystem size up to 4000 MB.
• MFC r348681: Only respond to the PCIe Attention Button if a device is already plugged in.

cy (20):

• MFC r348310:
• MFC r348311:
• MFC r348312:
• MFC r348320:
• MFC r348718:
• MFC r348575:
• MFC r348666:
• MFC r348667:
• MFC r348985:
• MFC r349152:
• MFC r342972:
• MFC r349153:
• MFC r349331:
• MFC r349362:
• MFC r349399-349400,349567-349568:
• MFC r349401:
• MFC r349448:
• MFC r349449, r349452:
• MFC r349450-349451:
• MFC r349503-349504:

delphij (1):

• MFC r349505: Upgrade to Bzip2 version 1.0.7.

dim (1):

• MFC r348500:

emaste (8):

• MFC r348059: vt efifb: add suspend/resume calls
• MFC r348497: octusb: fix detach loop over USB ports
• MFC r348498: libatf: remove workaround not required after atf >= 0.18 update
• vtfontcvt: whitespace and other cleanup
• MFC r347228: makesyscalls: use @generated tag in generated files
• MFC r349619: libc: correct iconv buffer overflow
• MFC r349268: nandsim: correct test to avoid out-of-bounds access
• MFC r349239, r349241: update vm_map_protect.9

eugen (2):

• MFC r345085 for mfi.4, mrsas.4: document how to get ATA TRIM support for SSD while using LSI RAID adapters as it was completely obscure before: mfi has no TRIM support at all and mrsas provides TRIM if underlying adapter does it (for Non-RAID drives generally).
• MFC r345970: network.subr: improve configuration of cloned gif(4) interfaces

gjb (3):

• MFC r348439: Increase the size of the Vagrant default image size, as the 3GB size is too small to bootstrap the firstboot_pkgs list.
• MFC r349160: Fix passing ${CONF_FILES} (which contains MAKE_CONF and SRC_CONF, __MAKE_CONF and SRCCONF, respectively) through to arm_install_base() and chroot_arm_build_release(). This prevents failures when the target image is intended to be build with make.conf(5) and src.conf(5) overrides, which are correctly handled for non-embedded image builds.
• MFC r349372: Include files containing metadata specific to the branch in the directory where the individual distribution sets exist.

hselasky (14):

• MFC r348603: Make sure the DMA tags get freed in mlx5en(4).
• MFC r348604: In xhci(4) there is no stream ID in the completion TRB. Instead iterate all the stream IDs in stream mode to find the matching USB transfer.
• MFC r348631: In usb(4) fix a lost completion event issue towards libusb(3). It may happen if a USB transfer is cancelled that we need to fake a completion event. Implement missing support in ugen_fs_copy_out() to handle this.
• MFC r348797: Fix for reading the configuration descriptor in libusb. Catch invalid configuration descriptor reads early on to avoid issues with devices that don't check for a valid USB configuration read request.
• MFC r349367: Fix for deadlock situation in cuse(3)
• MFC r349368: Free all allocated unit IDs in cuse(3) after the client character devices have been destroyed to avoid creating character devices with identical name.
• MFC r349370: Fix parsing of corrupt data in usbdump(8). Check that the transfer type array lookup is within bounds to avoid segfault.
• MFC r349409 and r349410: Fix support for LIBUSB_HOTPLUG_ENUMERATE in libusb. Currently all devices are enumerated regardless of of the LIBUSB_HOTPLUG_ENUMERATE flag. Make sure when the flag is not specified no arrival events are generated for currently enumerated devices.
• MFC r349522: Need to apply the PCIM_BAR_MEM_BASE mask to the physical memory address before returning it to the user. Some of the least significant bits have special meaning and should be masked away.
• MFC r349369: Convert all IPv4 and IPv6 multicast memberships into using a STAILQ instead of a linear array.
• MFC r340404, r340415, r340417, r340419 and r340420: Synchronize epoch(9) code with -head to make merging new patches and features easier. The FreeBSD version has been bumped to force recompilation of external kernel modules.
• MFC r349506: Implement API for draining EPOCH(9) callbacks.
• MFC r349507: Need to wait for epoch callbacks to complete before detaching a network interface.
• Restore binary compatibility for epoch(9) API. This is a direct commit.

ian (9):

• MFC r348120:
• MFC r348123, r348164, r348166
• MFC r348141, r348143
• MFC r341386 (by manu):
• MFC r348169-r348170, r348172-r348173, r348183-r348184
• MFC r348740-r348741, r348995
• MFC r341268, r342003-r342007, r342087-r342088, r342091
• MFC r340130, r340134:
• MFC r343826, r346698, r349057-r349060, r349073-r349077, r349080-r349086, r349088, r349091-r349097, r349115, r349119, r349130-r349132, r349143-r349145, r349164-r349168, r349174, r349269-r349273

jamie (1):

• Unmount filesystems on jail removal with "-f", to get around a situation where the jail root vnode reference is stopping the filesystem from unmounting, when the jail is removed by still exists in a dying state.

jhb (7):

• MFC 347964: Expose the MD_CLEAR capability used by Intel MDS mitigations to guests.
• MFC 346650: Add support for AES-CCM to ccr(4).
• MFC 348205: Add deprecation warnings for IPsec algorithms deprecated in RFC 8221.
• MFC 348206,348231,348454: GELI crypto deprecation warnings.
• MFC 348543: Warn about deprecated features on all major OS versions.
• MFC 346931,346933: Note that ccr(4) now supports AES-CCM.
• MFC 348542: Add 'device cxgbe' explicitly in the synopsis.

jhibbits (8):

• MFC r344958,r344960,r344961
• MFC r345829,345831,349402
• MFC r344915:
• MFC r346173,r347943
• MFC r347167,r348079
• MFC r346777:
• MFC r348299
• MFC r347986:

johalun (1):

• MFC r348338: pseudofs: Ignore unsupported commands in vop_setattr.

jtl (1):

• MFC r349192: Add the ability to limit how much the code will fragment the RACK send map in response to SACKs. The default behavior is unchanged; however, the limit can be activated by changing the new net.inet.tcp.rack.split_limit sysctl.

ken (1):

• MFC r348247: ------------------------------------------------------------------------ r348247 | ken | 2019-05-24 13:58:29 -0400 (Fri, 24 May 2019) | 57 lines

kevans (3):

• MFC r348509: jail_getid(3): add special-case immediate return for jid 0
• MFC r348510: bectl(8): Don't accept jid=0 from jail_getid
• MFC r348569: [zfsboot] Fix boot env back compat (#190)

kib (29):

• MFC r348257: Add PG_PS_PDP_FRAME symbol.
• MFC r348258: Make pmap_kextract() work on large map. Fix assert.
• MFC r348246: Fix a corner case in demotion of kernel mappings.
• MFC r348432: Minor tweaks to the layout.
• MFC r348433: Remove TODO comment after posixshmcontrol(1) added.
• MFC r348306: Correct some inconsistencies in the earliest created kernel page tables which affect demotion.
• MFC r348476, r348630 (by alc): Simplify flow of pmap_demote_pde_locked() and add more comprehensive debugging checks.
• MFC r348544: hwpmc_intel: List all Silvermont ids.
• MFC r348536: Remove dead check.
• MFC r348533: Remove dead store.
• MFC r348539: amd64 ef_rt_arch_call: Preserve %rflags around call into EFI RT service.
• MFC r348541: efirt efi_enter(): Release acquired locks and restore FPU ownership if efi_arch_enter() returned an error.
• MFC r348815: Correct definition for PGEX_SGX.
• MFC r348816: Style MAP_ENTRY_ and MAP_ definitions.
• MFC r348360: Do not go into sleep in sleepq_catch_signals() when SIGSTOP from PT_ATTACH was consumed.
• MFC r347151,347181,347968,348421,348698,348701: Switch to use shared vnode locks for text files during image activation.
• MFC r348798: amd64 trap.c: Modernize syntax around trap_msg[].
• MFC r348813: Make trap_msg array constant as well.
• MFC r348799: i386 trap.c: Remove unused MAX_TRAP_MSG define.
• MFC r348802: Remove lazy FPU switch support from amd64.
• MFC r349297: Remove redundand 'else' and 'return'.
• MFC r349299: Add libc stub for pthread_getthreadid_np(3).
• MFC r349427: amd64 pmap: Fix pkru handling in pmap_remove().
• MFC r349511: Typo.
• MFC r349512: Mention proccontrol(1) -m kpti.
• MFC r349519: Style.
• MFC r349320, r349324: coredump: avoid writing to core files not owned by the effective user.
• MFC r349611, r349614: Style.
• MFC r349608: Use traditional 'p' local to designate td->td_proc in kern_mmap.

luporl (7):

• MFC r348005: [PowerPC64] stand: fix build using clang 8 as compiler
• MFC r348025: Unbreak the build when `ELF_VERBOSE` is defined after r348005
• MFC r348112: Fix PPC64 kernel build with clang8 + lld8
• MFC r348028:
• MFC r343744:
• MFC r345676:
• MFC r349188

lwhsu (1):

• MFC r346160:

marius (7):

• MFC: r343979
• MFC: r344060, r344064
• MFC: r344062 (partial)
• MFC: r347211
• MFC: r347221, r347245
• MFC: r347222
• MFC: r347390

markj (65):

• MFC r348241: Modernize the MAKE_JUST_KERNELS hint in the top-level makefile.
• MFC r348003, r348011: Add a man page for DEFINE_IFUNC.
• MFC r342766: Don't enable interrupts in init_secondary().
• MFC r342732: Use regular stores to update PTEs in the riscv pmap layer.
• MFC r343529: Remove a redundant test.
• MFC r342734: Fix some issues with the riscv pmap_protect() implementation.
• MFC r342735: Synchronize access to the allpmaps list.
• MFC r342736: Fix a use-after-free in the riscv pmap_release() implementation.
• MFC r342764: Clear PGA_WRITEABLE in pmap_remove_pages().
• MFC r342765: Fix dirty bit handling in pmap_remove_write().
• MFC r340029 (by jhb): Set PTE_A and PTE_D for user mappings in pmap_enter().
• MFC r340030 (by jhb): Restrict setting PTE execute permissions on RISC-V.
• MFC r340159 (by jhb): Rework setting PTE_D for kernel mappings.
• MFC r342733: Set PTE_U on PTEs created by pmap_enter_quick().
• MFC r344106: Implement transparent 2MB superpage promotion for RISC-V.
• MFC r344107: Implement pmap_clear_modify() for RISC-V.
• MFC r344108: Implement per-CPU pmap activation tracking for RISC-V.
• MFC r340027 (by jhb): Don't allow debuggers to modify SSTATUS, only to read it.
• MFC r340028 (by jhb): SBI calls expect a pointer to a u_long rather than a pointer.
• MFC r348444: libelftc: Add MLINKS.
• MFC r348547: rpc.yppasswdd: Fix dirname(3) usage after r305952.
• MFC r348443: readelf: Make -t imply -S, for compatibility with GNU binutils.
• MFC r348430: elfcopy: Remove an unneeded memset.
• MFC r348431: elfcopy: Optimize for insertions at the end of the section list.
• MFC r348545: Typo.
• MFC r348457: Remove a redundant vm_page_remove() call.
• MFC r348502: Add a vm_page_wired() predicate.
• MFC r347439: Atomically update the global gMsgId in libnetgraph.
• MFC r348782: vmrun: Add a missing close-paren to the usage message.
• MFC r348660: Remove an outdated header comment for vm_page.c.
• MFC r348655: libelftc: Fix some minor style bugs.
• MFC r348743: Make the linuxkpi's alloc_pages() consistently return wired pages.
• MFC r348745, r348751: Conditionalize an in_epoch() call on INVARIANTS.
• MFC r348742: Fix a race between fasttrap and the user breakpoint handler.
• MFC r348746: Remove the volatile qualifer from uma_kmem_total.
• MFC r348747: Add sysctls for uma_kmem_{limit,total}.
• MFC r348785: Replace uses of vm_page_unwire(m, PQ_NONE) with vm_page_unwire_noq(m).
• MFC r348459: acpi_dock(4): Notify devd(8) on dock status change.
• MFC r347949, r347955: Implement the M_NEXTFIT allocation strategy for vmem(9).
• MFC r347950: Use M_NEXTFIT in memguard(9).
• MFC r348652: libelf: Use a red-black tree to manage the section list.
• MFC r348654: elfcopy: Use elf_getscn() instead of iterating over all sections.
• MFC r348657: elfcopy: Use libelftc's string table routines to build .shstrtab.
• MFC r349148: Add some missing MLINKs for tree(3).
• MFC r349196: Make zlib encoding messages idempotent.
• MFC r344827-344830, r344845: Implement minidump support for RISC-V.
• MFC r349627: Remove the CDIOCREADSUBCHANNEL_SYSSPACE ioctl.
• MFC r349438: Avoid a divide-by-zero when bad checksum counters overflow.
• MFC r349439: Free DHCP options with length zero.
• MFC r349334: Remove a lingering use of splbio().
• MFC r349419: Remove references to splbio in ffs_softdep.c.
• MFC r349432: Add a return value to vm_page_remove().
• MFC r349218: Group vm_page_activate()'s definition with other related functions.
• MFC r349423 elfcopy: Provide a size hint when creating the section string table.
• MFC r349420 libelftc: Micro-optimize string table insertion.
• MFC r349421: libelftc: Consistently use size_t for string table offsets and sizes.
• MFC r349422: libelftc: Fix the documented prototype for elftc_string_table_destroy().
• MFC r349424: libdwarf: Use the cached strtab pointer when reading string attributes.
• MFC r349546: Fix mutual exclusion in pipe_direct_write().
• MFC r349547: Use a consistent snapshot of the fd's rights in fget_mmap().
• MFC r349730: elfcopy: Clear errors after fetching the shstrtab index.
• MFC r349733: Defer funsetown() calls for a TTY to tty_rel_free().
• MFC r349441 (by rgrimes): Emulate the "TEST r/m{16,32,64}, imm{16,32,32}" instructions (opcode F7H).
• MFC r349599: Fix handling of errors from sblock() in soreceive_stream().
• MFC r349671: Cache the next queue element when traversing a page queue.

mav (51):

• MFC r348117: Allocate buffers smaller then ABD chunk size as linear.
• MFC r348417: Fix busy status leak in case of incorrect passthrough args.
• MFC r348496: Document max_chains bump to 16384 at r330049.
• MFC r348332: Fix array out of bound panic introduced in r306219.
• MFC r344314 (by pjd): In the vdev_geom_open_by_path() function we assume that vdev path starts with "/dev/". Make sure this is the case.
• MFC r344316 (by pjd): The way ZFS searches for its vdevs is the following: first it looks for a vdev that has the same name as the one stored in metadata and that has all VDEV labels in place. If it cannot find a GEOM provider with the given name and all VDEV labels it will scan all GEOM providers for the best match (the most VDEV labels available), but here the name is ignored.
• MFC r344317 (by pjd): Grabage-collect no longer used variable.
• MFC r344318 (by pjd): Change assertion to log the incorrect io_type we've got.
• MFC r344320 (by pjd): Simplify the code.
• MFC r345728 (by pjd): If the autoexpand pool property is turned on and vdev is healthy try to expand the pool automatically when we detect underlying GEOM provider size change.
• MFC r348557: MFV r348534: 9616 Bogus error when attempting to set property on read-only pool
• MFC r348558: MFV r348535: 9677 panic from zio_write_gang_block() when creating dump device on fragmented rpool
• MFC r348559: MFV r348537: 8601 memory leak in get_special_prop()
• MFC r348561: MFV r348548: 9617 too-frequent TXG sync causes excessive write inflation
• MFC r348562: MFV r348550: 1700 Add SCSI UNMAP support
• MFC r348563: MFV r348551: 9862 fix typo in comment in vdev_impl.h
• MFC r348564: MFV r348552: 9682 page fault in dsl_async_clone_destroy() while opening pool
• MFC r348565: MFV r348553: 9681 ztest failure in spa_history_log_internal due to spa_rename()
• MFC r348566: MFC r348554: 9688 aggsum_fini leaks memory
• MFC r348567: MFV r348555: 9690 metaslab of vdev with no space maps was flushed during removal
• MFC r348570: MFV r348568: 9466 add JSON output support to channel programs
• MFC r348574: MFV r348573: 9993 zil writes can get delayed in zio pipeline
• MFC r348577: MFV r348576: 9963 Seperate tunable for disabling ZIL vdev flush
• MFC r348579: MFV r348578: 9962 zil_commit should omit cache thrash
• MFC r348581: MFV r348580: 9559 zfs diff handles files on delete queue in fromsnap poorly
• MFC r348584: MFV r348583: 9847 leaking dd_clones (DMU_OT_DSL_CLONES) objects
• MFC r348586: MFV r348585: 9683 Allow bypassing devid in vdev_disk_open()
• MFC r348788: Explicitly start ARC adjustment on limits change.
• MFC r348790: Fix comparison signedness in arc_is_overflowing().
• MFC r348422: Pass data pointers to the driver in way in expects.
• MFC r348764: Allow UMA hash tables to expand faster then 2x in 20 seconds.
• MFC r349376: Fix strsep_quote() on strings without quotes.
• MFC r349281: Fix individual_element_index when some type has 0 elements.
• MFC r349284: Make ELEMENT INDEX validation more strict.
• MFC r349287: Remove ancient SCSI-2/3 mentioning.
• MFC r349292: Decouple enc/ses verbosity from bootverbose.
• MFC r349006: Move write aggregation memory copy out of vq_lock.
• MFC r349029: Update td_runtime of running thread on each statclock().
• MFC r349035: Properly align struct multilist_sublist to cache line.
• MFC r349039: Alike to ZoL disable metaslab allocation tracing code.
• MFC r349040: Minimize aggsum_compare(&arc_size, arc_c) calls.
• MFC r349178: Optimize kern.geom.conf* sysctls.
• MFC r349190: Fix typo in r349178.
• MFC r349195: Use sbuf_cat() in GEOM confxml generation.
• MFC r349220: Add wakeup_any(), cheaper wakeup_one() for taskqueue(9).
• MFC r349243: Optimize xpt_getattr().
• MFC r349246: SPC-3 and up require some UAs to be returned as fixed.
• MFC r340041 (by miwi): - Add quirk for Samsung on Mac Mini 7,1
• MFC r340092 (by imp): Implement ability to turn on/off PHYs for AHCI devices.
• MFC r341811 (by delphij): Remove questionable initialization for ICH8M, rely on BIOS to properly initialize the controller.
• MFC r349321: Improve AHCI Enclosure Management and SES interoperation.

mckusick (2):

• MFC of 348259
• MFC of 349032

mhorne (12):

• MFC r346021: RISC-V: initialize pcpu slightly earlier
• MFC 348835-348836: Fix global pointer relaxations in the RISC-V kernel
• MFC r348837: Add TSLOG events to initriscv()
• MFC r348838: Announce real and available memory at boot
• MFC r348839: Clean up some GENERIC options
• MFC r348840: Remove unused mcall_trap() function
• MFC r348886: RISC-V: expose extension bits in AT_HWCAP
• MFC r348887: procstat: Recognize HWCAP and HWCAP2 with auxv command
• MFC r349481: Add some missing RISC-V ELF defines
• MFC r349482,r349563: readelf: Add support for RISC-V specific e_flags
• MFC r349483: libelftc: add RISC-V bfd targets
• MFC r349563: readelf: Add RISC-V DWARF register aliases

mm (3):

• MFC r347990: Sync libarchive with vendor.
• MFC r347999:
• MFC r348993,349135: Sync libarchive with vendor including security fixes

np (5):

• MFC r348491:
• MFC r346570, r348440
• MFC r349242, r349501, r349514, and r349517.
• MFC r349499:
• MFC r349500:

philip (2):

• MFC r349592: Import tzdata 2019b
• MFC r349098: Add macOS-like three finger drag trackpad gesture to psm(4)

rgrimes (1):

• MFC: r347065 (by jhb) Emulate the "ADD reg, r/m" instruction (opcode 03H).

rmacklem (5):

• MFC: r347476 Factor out some exportlist list operations into separate functions.
• MFC: r347498 Factor code into two new functions in preparation for a future commit.
• MFC: r347583 Replace global list for grouplist with list(s) for each exportlist element.
• MFC: r348452 Replace a single linked list with a hash table of lists.
• MFC: r348590, r348591 Modify mountd so that it incrementally updates the kernel exports upon a reload.

sjg (1):

• ficl pfopen: verify file

slavash (1):

• MFC r348601: Fix prio vs. nonprio tagged traffic in RDMACM

tijl (1):

• MFC r349548:

tuexen (1):

• MFC r348728:

vangyzen (2):

• MFC r349278
• MFC r349285

vmaffione (7):

• MFC r346184
• MFC r347944
• MFC r348669
• MFC r348834
• MFC r348929
• MFC r349019
• MFC r349175

wblock (1):

• MFC r349600.

wulf (1):

• MFC r346455-r346458, r348520, r348529, r348817, r348818

zeising (2):

• MFC 349133 349146 349150: document PCIOCATTACHED
• MFC r349607: pci(4): Use plural registers