Remove the -xx, now we have the list of 20 platforms that have incomplete
fspecs. Instead of augmenting the platform spec with an autogenerated one,
we should understand why we have missing entries in the first place.

(christos)

Add casts to appease clang

(christos)

fix clang lint build (except for the programs that enables -T)

(christos)

Fail on incomplete mtree specs

(christos)

Add an option to warn and error out for mtree missing entries.

(christos)

PR/58196: Jan-Benedict Glaw: If there was no spec file specified, generate
one on the fly. Should fix reproducible builds where the mode and the
ownership/group is not fixed and picked up from the filesystem.

(christos)

Simple script to create an mtree spec file from a directory tree with
fixed default owner/group/perms.

(christos)

also mention kpause(9) here.

(christos)

PR/58233: RVP: Fix lzip dictionary size calculation

(christos)

PR/58223: RVP: Don't write to stdout when testing.

(christos)

Document environment variable use.

(christos)

add an environment variable to override the number ot threads.

(christos)

Fix build as a tool (Jan-Benedict Glaw)

(christos)

comment out strict boolean lint check because isspace() returns int and lint
complains.

(christos)

revert previous.

(christos)

Allow c99 array designators

(christos)

next should increement by 1 not 2.

(christos)

fix clang lint build.

(christos)

PR/58220: Kouichi Hashikawa: use ${TOOL_AWK}

(christos)

mention that we handle battery controls too.

(christos)

Expose a sysctl interface hw.acpi.thinkpad<M>.bat[<N>].<behavior> to control
some aspects of battery charging behavior on supported systems:

    charge_start
threshold below which to start charging (in %, 0-99)

    charge_stop
threshold above which to stop charging (in %, 1-100)

    force_discharge
discharge while on AC power, e.g., for calibration

    charge_inhibit
inhibit charging while on AC power

From Malte Dehling

(christos)

thinkpad cosmetic patches (Malte Dehling)

(christos)

Remove 0 initializations (since the softc is zalloc'ed) and the initial
refresh which will have no data.

(christos)

Add ${TOOL_DATE} (Jan-Benedict Glaw)

(christos)

PR/58202: Malte Dehling: Don't link libzfs

(christos)

PR/58201: Malte Dehling: re-order sysmon initialization before acpi
registration, to avoid needing to call to acpi_deregister_notify on sysmon
failure.

(christos)

PR/58200: Kouichi Hashikawa: ./makeobsolete uses platform's sed

(christos)

use __func__

(christos)

make a separate sorting function and KNF (thanks rillig)

(christos)

For the NetBSD tools build we provide our own fts.h not FreeBSD's so the
comparator should have the NetBSD signature.

(christos)

pass lint, simplify

(christos)

makefs: Fix symlink permission bits

Permission bits for symlinks are taken straight from `lstat()`. However, the
actual bits presented to the user are filesystem/kernel specific. For example,
Linux with ext2/3/4 will use 0777 for symlinks, whereas NetBSD/FFS will
show 0755. As far as `makefs` is in the loop, the target filesystem will likely
be FFS, so use 0755.

(christos)

makefs: Sort directory contents by name (Jan-Benedict Glaw)

`makefs` inserts nodes into its internal data structures in the order as
returned by `readdir()` calls. As this is unpredictable, sort entries by
name before creating the target filesystem.

  This is done by first converting the (per-directory) linked list into
a plain array, sort it, finally re-link the list. Special case for the
sorting function: The "." directory entry seems to be ment to be always
at the front, so always check that first.

(christos)

VAX boot.fs: Fix owner/group/permissions for VAX's boot.fs (Jan-Benedict Glaw)

(Initial patch from Christos Zoulas.)  Don't create an archive based on local
permission bits and owner/group. Instead, feed a small manifest into `pax`
and let it to its work.

  NB: Don't also feed in an entry for the current directory ".", as `pax` will
then archive all files in the current directory, in `readdir()` order.

(christos)

`nm`: Generate a stable symbol table (Jan-Benedict Glaw)

Release artifacts may contain symbol lists. Binutils's `nm` sorts them by
symbol name, locale based. Inserting a plain `sort` (with `LC_ALL=C`) here
sorts them by address, and (with several symbols pointing to the same address)
sorting by name is also stable (think of embedded '_'.)

(christos)

PR/58170: Yoshitaka Tokugawa: Remove blocking statement when the requestor
asks for for an address that is in the cache and that access is prevented
by a cache acl because the querier has no way to know that this access is
denied, so it is not an abuse.

(christos)

more plugin set fixes

(christos)

Add comparison function so that it can be used to provide a stable sort
(Jan-Benedict Glaw)

(christos)

Set LC_ALL=C before calling sort so that it works consistently. Unfortunately
ENVIRON["LC_ALL"] = "C"; does not work like in gawk (Jan-Benedict Glaw)

(christos)

Be more explicit with sort fields to produce consistent results with gnu
sort (Jan-Benedict Glaw)

(christos)

fix compat build of filter-aaaa.so.0

(christos)

Don't build/install the compat plugin.

(christos)

PR/58136: Paul Ripke: Fix use after free.

(christos)

fix previous. Doing assignmnents of conditionals does not work for being
used as conditionals (thanks rillig@)

(christos)

avoid lint warning on the vax

(christos)

Now that the bug in bsd.lib.mk, MAKELINKLIB is not needed anymore (as it
should not be). Pointed out by kre@

(christos)

Merge two identical if's and fix a logic error in them ( && instead of ||)

(christos)

kre says this should be obsolete

(christos)

put back /var/run/named

(christos)

/var/run/named is not obsolete

(christos)

make qsort sorting deterministic

(christos)

update em-toggle-overwrite binding (Xose Vazquez Perez)

(christos)

spacify the paper size for PostScript

(christos)

specify the page size for PostScript

(christos)

specify the paper size for PostScript

(christos)

From Jan-Benedict Glaw:

Use `printf` instead of `echo` for precise output

`man` pages generated under NetBSD and Linux differ as the escape codes
may or may not be interpreted when going through those two chained `echo`es.
Instead just use `printf`, which produces the desired output, always.

(christos)

Use ${TOOL_DATE} (Jan-Benedict Glaw)

(christos)

Use ${TOOL_DATE} (Jan-Benedict Glaw)

(christos)

From Jan-Benedict Glaw:

Fix a redirection and prepare a stable sort for upper-/lowercase
option letters

This script is a mess, I strongly believe that it should be rewritten.
However, I'm not 100% sure why it was invented in the first place
(come on, the generated header file isn't _that_ complicated that
it couldn't be sanely managed by hand!), but let's fix the sorting
order by using LC_ALL=C.

Also add a few 'X' to the `mktemp` template to make non-BSD
implementations happy. As a bonus, actually *use* the initial `sed`
output instead of throwing it away by piping it into `sort` with
also connecting `sort`'s stdin with the original input file...

(christos)

break strength ties so that qsort is deterministic

(christos)

remove dup named dir

(christos)

Just build the staticlib.

(christos)

Fold long line

(christos)

- Create 3 new variables:
  MAKELINKLIB that follows MKLINKLIB but can be overwritten by Makefiles
  MAKESTATICLIB that follows MKSTATICLIB but can be overwritten by Makefiles
  LINKINSTALL that follows MAKELINKLIB but can be overwritten by Makefiles
  These give enough control to the module Makefiles so that they don't need
  to override the default library install rules which break the debug sets.
- Remove /usr/libexec/named which duplicated /usr/lib/named

(christos)

LIBISMODULE should be yes or no...

(christos)

mention gallium.old hack

(christos)

Don't ccreate dwarf-4 on these files because it breaks ctfconvert.

(christos)

Better output handling (des at FreeBSD)

(christos)

make this work again

(christos)

remove #include <ieeefp.h> for i386 now that it is included in math_private.h

(christos)

need <ieeefp.h> for i386.

(christos)

fix the cbrtl/powl test

(christos)

reduce diff with FreeBSD

(christos)

fix format.

(christos)

fix lint

(christos)

fix llvm build

(christos)

undo accidental commit.

(christos)

PR/58054: Martin Husemann: fix bug in expsign extraction and only use the
code for the floating point formats where it works (does not work for 112
bit mantisa in sparc64)

(christos)

Back-out unintented commit.

(christos)

PR/58104: Kouichi Hashikawa: Use ${TOOL_AWK}

(christos)

Fix DEBUG build.

(christos)

harmonize with the rest of MD limits files.

(christos)

use ${MKREPRO_TIMESTAMP} for baking in the date and time.

(christos)

Use ${TOOL_DATE} (Jan-Benedict Glaw)

(christos)

oops the #endif was too far down.

(christos)

Use the TOOL_GZIP we built as part of tools if available.

(christos)

Handle not having SIGINFO (Jan-Benedict Glaw)

(christos)

hook gzip to the build so that we can test it in other OS's. Not used yet.

(christos)

make it work as a tool

(christos)

- -n is the default on SMALL, so accept the flag silently.
- conditionalize TIMESPEC_TO_TIMEVAL
- add nbtool_config.h

(christos)

Start for a TOOL_GZIP

(christos)

revert previous, riastradh fixed it correctly and this is not needed.

(christos)

Restore the minimum build to install elfdefinitions.h. Provide a pre-built
copy, since we don't have m4 available. Use pax to install it because
using the Makefile needs more stuff available (nbsed) which we have not
built yet.

(christos)

From enh at google dot com in tech-userlevel. Don't limit writes to BUFSIZ,
change the limit to INT_MAX; improves performance dramatically. From:
https://github.com/apple-oss-distributions/Libc/commit/\
c5a3293354e22262702a3add5b2dfc9bb0b93b85\
#diff-3b844a19cfb0aab1a23f7fbc457d3bce7453513730c489a72f66ff89d6557ff3

(christos)

Add ${_MKTARGET_CREATE}

(christos)

Add ${_MKTARGET_CREATE}

(christos)

Remove dependency to elfdefinitions.h, this is a mess, since it needs
${TOOL_M4} which might not be available yet.

(christos)

Don't try to compile the arch-specific relocation code if we don't have the
built-in headers (for tools)

(christos)

fix insert key (Xose Vazquez Perez)

(christos)

don't install headers as executable.

(christos)

- fix nbincludes so that it can be included from any level
- add elftoolchain/common to the list of headers to be build before depend
- make libdwarf build the includes since it needs <sys/elfdefinitions.h>
  which does not exist on non-netbsd systems.

(christos)

Fix reproducible builds (Jan-Benedict Glaw)

(christos)

remove extra stat (Jan-Benedict Glaw)

(christos)

Fix reproducible builds (Jan-Benedict Glaw)

(christos)

Fix reproducible builds (Jan-Benedict Glaw)

(christos)

make all QUAD constants look the same.

(christos)

Sync with x86_64 the quad constants. No reason to be different

(christos)

Fix reproducible build (Jan-Benedict Glaw)

(christos)

centrally control if we are building kerberos

(christos)

fix lint

(christos)

add casts for compat code where time_t is 32 bits.

(christos)

PR/58018: Damir Holovati: ext2fs readdir (d_type conversion error)

(christos)

decode some {g,s}etsockopt*.

(christos)

Add _dlauxinfo.3

(christos)

Add _dlauxinfo

(christos)

no local in loops, simplify eval (thanks kre)

(christos)

pass lint on sparc64 where int_fast32_t is long.

(christos)

Make sure that the extra field is maximally aligned since it is used for
other struct storage.

(christos)

- fix named.conf (remove dnssec-enable option)
- use proper local variables instead of adding _ or other prefixes.
- centralize rm use
- use grep -q instead of > /dev/null
- reduce constant duplication

(christos)

remove obsolete option "dnssec-enable"

(christos)

-DDEBUG is broken for regex.c

(christos)

Fix DEBUG build.

(christos)

add one more source file

(christos)

new elftoolchain

(christos)

Use README to import

(christos)

changes for r4037

(christos)

Merge subversion r4037

(christos)

new sqlite3

(christos)

new sqlite

(christos)

merge conflicts between 3.43.0 and 3.45.1

(christos)

remove std= override from here. It happens on top of the bind tree.

(christos)

fix the version number.

(christos)

Put the standard NetBSD copyright on this file. Approved by John Brezak
via a message on LinkedIn.

(christos)

appease lint

(christos)

fabsl is defined in libc...

(christos)

libexecinfo needs libelf.

(christos)

one more timestamp fix I forgot to commit

(christos)

avoid stringop truncation, fix copyright string to prevent assembler warnings.

(christos)

add missing symbols for non long double architectures.

(christos)

fix 32 bit build (no atomic_*_8)

(christos)

fix the 32 bit tanl symbol.

(christos)

fix static unused issue until lint understands attributes better.

(christos)

Use 32 bit counters on non _LP64 machines because they don't have 64 bit
atomics.

(christos)

new tool

(christos)

new Makefile

(christos)

new tool

(christos)

add mdig and named-rrchecker

(christos)

add new bind tools

(christos)

new bind.

(christos)

changes for new bind.
XXX: removing lint libraries where lint does not work anymore is temporary.

(christos)

merge conflicts between 9.16.42 and 9.18.24

(christos)

add missing chunk for repro-build. fix gcc warnings.

(christos)

fix debug sets for sun2 (libgcc_s_g.a and libgcc_eh_g.a should be in shl.mi)

(christos)

Add a hook that adds more libraries after PROGDPLIBS

(christos)

fix static build

(christos)

default is now 16K

(christos)

Add -b <buflen> to specify the buffer size.

(christos)

Disentangle dhcp from bind by putting enough of bind 9.16.42 for it to build
here. Bind keeps removing the bits that dhcp uses to build and keeping bind
up-to-date and dhcp building is a losing battle.

(christos)

Add an options pretty-printer, pass some lint.

(christos)

PR/57945: Jan-Benedict Glaw: makefs: msdos filesystems with label not
reproducible.
When we specify a label, the volume label is used to create the root dir
and it gets stamped by the timestamp. We were trying to set the timestamp
in the fs-specific part of the options parsing which did not work since
the method was called only for fs_specific options. Move setting of the
timestamp just before we create the fs, where we reconcile the rest of
the options.

(christos)

new unbound

(christos)

bump libunbound

(christos)

merge differences between 1.16.3 and 1.19.1

(christos)

new nsd

(christos)

merge differences between nsd-4.6.0 and nsd-4.8.0

(christos)

Fix MKREPRO build (Jan-Benedict Glaw)

(christos)

Fix MKREPRO build (Jan-Benedict Glaw)

(christos)

Mention tzcode2024a

(christos)

Sync with tzcode2024a:
Release 2024a - 2024-02-01 09:28:56 -0800

  Changes to code

    The FROM and TO columns of Rule lines can no longer be "minimum"
    or an abbreviation of "minimum", because TZif files do not support
    DST rules that extend into the indefinite past - although these
    rules were supported when TZif files had only 32-bit data, this
    stopped working when 64-bit TZif files were introduced in 1995.
    This should not be a problem for realistic data, since DST was
    first used in the 20th century.  As a transition aid, FROM columns
    like "minimum" are now diagnosed and then treated as if they were
    the year 1900; this should suffice for TZif files on old systems
    with only 32-bit time_t, and it is more compatible with bugs in
    2023c-and-earlier localtime.c.  (Problem reported by Yoshito
    Umaoka.)

    localtime and related functions no longer mishandle some
    timestamps that occur about 400 years after a switch to a time
    zone with a DST schedule.  In 2023d data this problem was visible
    for some timestamps in November 2422, November 2822, etc. in
    America/Ciudad_Juarez.  (Problem reported by Gilmore Davidson.)

    strftime %s now uses tm_gmtoff if available.  (Problem and draft
    patch reported by Dag-Erling Sm淡rgrav.)

  Changes to build procedure

    The leap-seconds.list file is now copied from the IERS instead of
    from its downstream counterpart at NIST, as the IERS version is
    now in the public domain too and tends to be more up-to-date.
    (Thanks to Martin Burnicki for liaisoning with the IERS.)

  Changes to documentation

    The strftime man page documents which struct tm members affect
    which conversion specs, and that tzset is called.  (Problems
    reported by Robert Elz and Steve Summit.)

(christos)

sprinkle unused.

(christos)

https://www.phoronix.com/news/IWD-WPA-WiFi-Auth-Vulns
https://www.top10vpn.com/research/wifi-vulnerabilities/

PEAP client: Update Phase 2 authentication requirements

The previous PEAP client behavior allowed the server to skip Phase 2
authentication with the expectation that the server was authenticated
during Phase 1 through TLS server certificate validation. Various PEAP
specifications are not exactly clear on what the behavior on this front
is supposed to be and as such, this ended up being more flexible than
the TTLS/FAST/TEAP cases. However, this is not really ideal when
unfortunately common misconfiguration of PEAP is used in deployed
devices where the server trust root (ca_cert) is not configured or the
user has an easy option for allowing this validation step to be skipped.

Change the default PEAP client behavior to be to require Phase 2
authentication to be successfully completed for cases where TLS session
resumption is not used and the client certificate has not been
configured. Those two exceptions are the main cases where a deployed
authentication server might skip Phase 2 and as such, where a more
strict default behavior could result in undesired interoperability
issues. Requiring Phase 2 authentication will end up disabling TLS
session resumption automatically to avoid interoperability issues.

Allow Phase 2 authentication behavior to be configured with a new phase1
configuration parameter option:
'phase2_auth' option can be used to control Phase 2 (i.e., within TLS
tunnel) behavior for PEAP:
* 0 = do not require Phase 2 authentication
* 1 = require Phase 2 authentication when client certificate
  (private_key/client_cert) is no used and TLS session resumption was
  not used (default)
* 2 = require Phase 2 authentication in all cases

(christos)

Allow overriding the language standard to something newer.

(christos)

Mention bind security patches

(christos)

make things compile again.

(christos)

Apply patch for CVE-2023-50387 and CVE-2023-50868:

No public information has been posted (that I can find)

(christos)

Apply patch for CVE-2023-6516:

To keep its cache database efficient, `named` running as a recursive
resolver occasionally attempts to clean up the database. It uses
several methods, including some that are asynchronous: a small
chunk of memory pointing to the cache element that can be cleaned
up is first allocated and then queued for later processing. It was
discovered that if the resolver is continuously processing query
patterns triggering this type of cache-database maintenance, `named`
may not be able to handle the cleanup events in a timely manner.
This in turn enables the list of queued cleanup events to grow
infinitely large over time, allowing the configured `max-cache-size`
limit to be significantly exceeded. This issue affects BIND 9
versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.

(christos)

Apply patch for CVE-2023-5679:

A bad interaction between DNS64 and serve-stale may cause `named`
to crash with an assertion failure during recursive resolution,
when both of these features are enabled. This issue affects BIND
9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0
through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1
through 9.18.21-S1.

(christos)

Apply patch for CVE-2023-5517:

A flaw in query-handling code can cause `named` to exit prematurely
with an assertion failure when: - `nxdomain-redirect <domain>;` is
configured, and - the resolver receives a PTR query for an RFC 1918
address that would normally result in an authoritative NXDOMAIN
response. This issue affects BIND 9 versions 9.12.0 through 9.16.45,
9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through
9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

(christos)

Apply patch for CVE-2023-4408:

The DNS message parsing code in `named` includes a section whose
computational complexity is overly high. It does not cause problems
for typical DNS traffic, but crafted queries and responses may
cause excessive CPU load on the affected `named` instance by
exploiting this flaw. This issue affects both authoritative servers
and recursive resolvers. This issue affects BIND 9 versions 9.0.0
through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19,
9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and
9.18.11-S1 through 9.18.21-S1.

(christos)

PR/57925: Jan-Benedict Glaw: Honor $MKREPRO_TIMESTAMP, don't embed name and
stamp in gzip.

(christos)

put quotes back

(christos)

PR/57924: Jan-Benedict Glaw: Use $MKREPRO_TIMESTAMP for mkubootimage

(christos)

PR/57923: Jan-Benedict Glaw: Use $MKREPRO_TIMESTAMP for mkubootimage

(christos)

PR/57918: Taylor R Campbell: Don't try to print symbolically ioctls that
have bits set on the high 32 bits of a 64 bit long.

(christos)

fix usage string, improve error handling.

(christos)

PR/57915: Jan-Benedict Glaw: Use $MKREPRO_TIMESTAMP for repro builds in uBoot
images

(christos)

PR/57914: Jan-Benedict Glaw: Set reproducible timestamp
Cleanup lint.

(christos)

PR/57913: Jan-Benedict Glaw: Don't embed build timestamp into archive
While here, modernize backquotes.

(christos)

PR/57905: Mark Davies: handle empty string.

(christos)

fix typo

(christos)

PR/57905: Mark Davies: blocklistd fails to parse ipv6 addresses.

(christos)

PR/57912: Jan-Benedict Glaw: Use repro epoch for generating date string

(christos)

PR/57911: Jan-Benedict Glaw: Allow to set repro timestamp (and use it)

(christos)

PR/57910: Jan-Benedict Glaw: Fix typo preventing reproducible builds

(christos)

PR/57909: Jan-Benedict Glaw: Don't include (build) timestamp when doing a
reproducible build

(christos)

PR/57906: Jan-Benedict Glaw: Extend`mkbootimage` to allow for
$MKREPRO_TIMESTAMP usage

(christos)

check the right variable

(christos)

mention if we are prunning.

(christos)

mention which processing step we are in.

(christos)

mark unused argument

(christos)