Matthew D Fleming e3813573bd Rework memguard(9) to reserve significantly more KVA to detect ...

use-after-free over a longer time.  Also release the backing pages of
a guarded allocation at free(9) time to reduce the overhead of using
memguard(9).  Allow setting and varying the malloc type at run-time.
Add knobs to allow:

 - randomly guarding memory
 - adding un-backed KVA guard pages to detect underflow and overflow
 - a lower limit on the size of allocations that are guarded

Reviewed by:    alc
Reviewed by:    brueffer, Ulrich Spörlein <uqs spoerlein net> (man page)
Silence from:   -arch
Approved by:    zml (mentor)
MFC after:      1 month

2010-08-11 22:10:37 +00:00

..

bus_if.m

Virtualize pci_remap_msi_irq() call from general MSI code. It allows MSI

2010-06-14 07:10:37 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

…

genassym.sh

…

imgact_aout.c

Reorganize syscall entry and leave handling.

2010-05-23 18:32:02 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Don't leak core_buf or gzfile if doing a compressed core file and we

2010-04-30 03:13:24 +00:00

imgact_gzip.c

…

imgact_shell.c

Introduce exec_alloc_args(). The objective being to encapsulate the

2010-07-27 17:31:03 +00:00

inflate.c

…

init_main.c

Add descriptions to a handful of sysctl nodes.

2010-08-09 14:48:31 +00:00

init_sysent.c

Regenerate

2010-06-28 18:17:21 +00:00

kern_acct.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

kern_alq.c

- Rework the underlying ALQ storage to be a circular buffer, which amongst other

2010-04-26 13:48:22 +00:00

kern_clock.c

- Simplify logic in handling ticks wrap-up

2010-07-07 12:00:11 +00:00

kern_clocksource.c

Fix several un-/signedness bugs of r210290 and r210293. Add one more check.

2010-07-20 15:48:29 +00:00

kern_condvar.c

…

kern_conf.c

Add "show cdev" ddb command.

2010-08-06 09:44:01 +00:00

kern_cons.c

Add descriptions to a handful of sysctl nodes.

2010-08-09 14:48:31 +00:00

kern_context.c

Move prototypes for kern_sigtimedwait() and kern_sigprocmask() to

2010-06-30 18:03:42 +00:00

kern_cpu.c

cpufreq: allocate long-lived buffer for handling of sysctl requests

2010-07-23 16:46:42 +00:00

kern_cpuset.c

…

kern_ctf.c

…

kern_descrip.c

Remove one zero from the double-0.

2010-04-23 14:32:58 +00:00

kern_dtrace.c

…

kern_environment.c

…

kern_et.c

Use proper sysctl type (quad) for et_frequency. It fixes output on sparc64.

2010-07-21 12:23:49 +00:00

kern_event.c

Defer freeing a kevent list until after dropping kqueue locks.

2010-03-30 18:31:55 +00:00

kern_exec.c

The interpreter name should no longer be treated as a buffer that can be

2010-07-28 04:47:40 +00:00

kern_exit.c

Tweak the in-kernel API for sending signals to threads:

2010-06-29 20:41:52 +00:00

kern_fail.c

…

kern_fork.c

…

kern_gzio.c

Do not set IO_NODELOCKED while writing to vnodes as our consumers

2010-04-30 03:10:53 +00:00

kern_idle.c

…

kern_intr.c

Store interrupt trap frame into struct thread. It allows interrupt handler

2010-06-10 16:14:05 +00:00

kern_jail.c

Back out r210974. Any convenience of not typing "persist" is outweighed

2010-08-08 23:22:55 +00:00

kern_kthread.c

Allow a const char * to be passed as the process name to kproc_kthread_add()

2010-05-21 17:14:36 +00:00

kern_ktr.c

Probabilly defaulting to KTR_GEN is not the right decision when KTR_MASK

2010-07-21 10:14:04 +00:00

kern_ktrace.c

Add descriptions to a handful of sysctl nodes.

2010-08-09 14:48:31 +00:00

kern_linker.c

…

kern_lock.c

…

kern_lockf.c

…

kern_lockstat.c

…

kern_malloc.c

Rework memguard(9) to reserve significantly more KVA to detect

2010-08-11 22:10:37 +00:00

kern_mbuf.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

kern_mib.c

When compat32 binary asks for the value of hw.machine_arch, report the

2010-07-22 09:13:49 +00:00

kern_module.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

kern_mtxpool.c

…

kern_mutex.c

Right now, WITNESS just blindly pipes all the output to the

2010-05-11 18:24:22 +00:00

kern_ntptime.c

kern_ntptime: drop a comment that became stale after r207359

2010-04-29 09:18:36 +00:00

kern_osd.c

…

kern_physio.c

…

kern_pmc.c

…

kern_poll.c

…

kern_priv.c

…

kern_proc.c

Add the support for reporting the NOCOREDUMP flag from

2010-05-27 08:10:12 +00:00

kern_prot.c

Revert r210225 - turns out I was wrong; the "/*-" is not license-only

2010-07-18 20:57:53 +00:00

kern_resource.c

Revert r210225 - turns out I was wrong; the "/*-" is not license-only

2010-07-18 20:57:53 +00:00

kern_rmlock.c

…

kern_rwlock.c

Print the pointer to the lock with the panic message. The previous

2010-03-24 19:21:26 +00:00

kern_sdt.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

kern_sema.c

…

kern_shutdown.c

Fix compilation in the !SMP case.

2010-04-20 12:22:06 +00:00

kern_sig.c

Fix function name in error messages.

2010-07-20 02:23:12 +00:00

kern_switch.c

Update several places that iterate over CPUs to use CPU_FOREACH().

2010-06-11 18:46:34 +00:00

kern_sx.c

Fix a sign bug that caused adaptive spinning in sx_xlock() to not work

2010-06-08 16:17:47 +00:00

kern_synch.c

…

kern_syscalls.c

Count number of threads that enter and leave dynamically registered

2010-06-28 18:06:46 +00:00

kern_sysctl.c

…

kern_tc.c

Revert r210225 - turns out I was wrong; the "/*-" is not license-only

2010-07-18 20:57:53 +00:00

kern_thr.c

Tweak the in-kernel API for sending signals to threads:

2010-06-29 20:41:52 +00:00

kern_thread.c

Retire td_syscalls now that it is no longer needed.

2010-07-15 20:24:37 +00:00

kern_time.c

…

kern_timeout.c

Update several places that iterate over CPUs to use CPU_FOREACH().

2010-06-11 18:46:34 +00:00

kern_umtx.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

kern_uuid.c

…

kern_xxx.c

…

ksched.c

sched_getparam was just plain broke for time-share

2010-03-03 21:46:51 +00:00

link_elf_obj.c

completely ignore zero-sized elf sections in modules of elf object type (amd64)

2010-07-23 17:07:51 +00:00

link_elf.c

…

linker_if.m

…

Make.tags.inc

…

Makefile

…

makesyscalls.sh

Count number of threads that enter and leave dynamically registered

2010-06-28 18:06:46 +00:00

md4c.c

…

md5c.c

…

p1003_1b.c

…

posix4_mib.c

Add a facility to dynamically adjust or unconfigure p1003_1b mib.

2010-06-02 09:59:05 +00:00

sched_4bsd.c

Add a new ipi_cpu() function to the MI IPI API that can be used to send an

2010-08-06 15:36:59 +00:00

sched_ule.c

Add a new ipi_cpu() function to the MI IPI API that can be used to send an

2010-08-06 15:36:59 +00:00

serdev_if.m

…

stack_protector.c

…

subr_acl_nfs4.c

The acl_cnt field is unsigned; no point in checking if it's >= 0.

2010-06-03 13:41:55 +00:00

subr_acl_posix1e.c

The 'acl_cnt' field is unsigned; no point in checking if it's >= 0.

2010-06-03 13:43:58 +00:00

subr_autoconf.c

…

subr_blist.c

…

subr_bufring.c

Switch to our preferred 2-clause BSD license.

2010-05-05 20:39:02 +00:00

subr_bus.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

subr_clock.c

…

subr_devstat.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

subr_disk.c

Revert r210225 - turns out I was wrong; the "/*-" is not license-only

2010-07-18 20:57:53 +00:00

subr_eventhandler.c

Split eventhandler_register() into an internal part and a wrapper function

2010-03-19 19:51:03 +00:00

subr_fattime.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

subr_firmware.c

Bump up the firmware_table from 30 to 50. bwn needs more than 30, it

2010-03-07 22:37:35 +00:00

subr_hash.c

Decompose the most lousy named file in sys/kern; kern_subr.c.

2010-02-21 19:53:33 +00:00

subr_hints.c

…

subr_kdb.c

fix a few cases where a string is passed via format argument instead of

2010-06-11 19:27:21 +00:00

subr_kobj.c

…

subr_lock.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

subr_log.c

…

subr_mbpool.c

…

subr_mchain.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

subr_module.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

subr_msgbuf.c

…

subr_param.c

Add Xen to the list of virtual vendors. In the non PV (HVM) case this fixes

2010-08-06 15:04:40 +00:00

subr_pcpu.c

Update several places that iterate over CPUs to use CPU_FOREACH().

2010-06-11 18:46:34 +00:00

subr_power.c

…

subr_prf.c

Use type-specific inline function imax() instead of deprecated macro MAX().

2010-07-12 15:32:45 +00:00

subr_prof.c

Revert r210225 - turns out I was wrong; the "/*-" is not license-only

2010-07-18 20:57:53 +00:00

subr_rman.c

…

subr_rtc.c

…

subr_sbuf.c

…

subr_scanf.c

…

subr_sglist.c

…

subr_sleepqueue.c

Update comment for tdsignal() -> tdsendsignal() rename. Forgot to include

2010-06-30 18:00:45 +00:00

subr_smp.c

The r208165 fixed a bug related to unsigned integer overflowing for the

2010-08-09 00:23:57 +00:00

subr_stack.c

…

subr_taskqueue.c

Remove unused variable that snuck in during development.

2010-07-22 17:23:43 +00:00

subr_trap.c

Retire td_syscalls now that it is no longer needed.

2010-07-15 20:24:37 +00:00

subr_turnstile.c

…

subr_uio.c

Push down the page queues into vm_page_cache(), vm_page_try_to_cache(), and

2010-05-08 20:34:01 +00:00

subr_unit.c

Remove redundant high >= 0.

2010-07-09 10:57:55 +00:00

subr_witness.c

Bump the witness pendlist to 768 to accomodate the increased number of

2010-07-29 16:13:26 +00:00

sys_generic.c

Send SIGPIPE to the thread that issued the offending system call

2010-06-29 20:44:19 +00:00

sys_pipe.c

Update a comment: It no longer makes sense to talk about the page queues

2010-05-08 23:01:47 +00:00

sys_process.c

Extend ptrace(PT_LWPINFO) to report siginfo for the signal that caused

2010-07-04 11:48:30 +00:00

sys_socket.c

Send SIGPIPE to the thread that issued the offending system call

2010-06-29 20:44:19 +00:00

syscalls.c

Regenerate

2010-06-28 18:17:21 +00:00

syscalls.master

Count number of threads that enter and leave dynamically registered

2010-06-28 18:06:46 +00:00

systrace_args.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

sysv_ipc.c

Move SysV IPC freebsd32 compat shims helpers from freebsd32_misc.c to

2010-03-19 11:01:51 +00:00

sysv_msg.c

Move SysV IPC freebsd32 compat shims from freebsd32_misc.c to corresponding

2010-03-19 11:04:42 +00:00

sysv_sem.c

In another move to join with the age of the Fruitbat, increase SYSV

2010-06-11 09:27:33 +00:00

sysv_shm.c

If i is going to be used in the loop unconditionally the declaration

2010-06-29 01:04:24 +00:00

tty_compat.c

…

tty_info.c

…

tty_inq.c

Remove statistics from the TTY queues.

2010-02-07 15:42:15 +00:00

tty_outq.c

Remove statistics from the TTY queues.

2010-02-07 15:42:15 +00:00

tty_pts.c

Do not leak master pty or ptmx vnode.

2010-04-08 08:58:18 +00:00

tty_tty.c

…

tty_ttydisc.c

…

tty.c

Add new make_dev_p(9) flag MAKEDEV_ETERNAL to inform devfs that created

2010-08-06 09:42:15 +00:00

uipc_accf.c

…

uipc_cow.c

Remove page queues locking from all sf_buf_mext()-like functions. The page

2010-05-06 17:43:41 +00:00

uipc_debug.c

…

uipc_domain.c

…

uipc_mbuf2.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

uipc_mbuf.c

Revert r210225 - turns out I was wrong; the "/*-" is not license-only

2010-07-18 20:57:53 +00:00

uipc_mqueue.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

uipc_sem.c

Add a facility to dynamically adjust or unconfigure p1003_1b mib.

2010-06-02 09:59:05 +00:00

uipc_shm.c

Minimize the use of the page queues lock for synchronizing access to the

2010-06-02 15:46:37 +00:00

uipc_sockbuf.c

…

uipc_socket.c

Fix a bug where MSG_TRUNC was not returned in all necessary cases for

2010-08-07 17:57:58 +00:00

uipc_syscalls.c

Send SIGPIPE to the thread that issued the offending system call

2010-06-29 20:44:19 +00:00

uipc_usrreq.c

Remove spurious '/*-' marks and fix some other style problems.

2010-07-22 05:42:29 +00:00

vfs_acl.c

The 'acl_cnt' field is unsigned; no point in checking if it's >= 0.

2010-06-03 13:45:27 +00:00

vfs_aio.c

Convert aio syscall registration to SYSCALL_INIT_HELPER.

2010-03-19 11:11:34 +00:00

vfs_bio.c

Fix (hopefully) the spelling of "queuing."

2010-08-09 23:32:37 +00:00

vfs_cache.c

Use ISO C99 integer types in sys/kern where possible.

2010-06-21 09:55:56 +00:00

vfs_cluster.c

Bumping the read-ahead count once more, to value equivalent to 512 KiB on

2010-08-09 22:56:10 +00:00

vfs_default.c

Add VOP_ADVLOCKPURGE so that the file system is called when purging

2010-05-12 21:24:46 +00:00

vfs_export.c

…

vfs_extattr.c

Revert r210225 - turns out I was wrong; the "/*-" is not license-only

2010-07-18 20:57:53 +00:00

vfs_hash.c

…

vfs_init.c

…

vfs_lookup.c

Support only LOOKUP operation for "/" in relookup() because lookup()

2010-03-26 11:33:12 +00:00

vfs_mount.c

- Reduce scope of vnode lock. vfs_mount_alloc() doesn't need vnode to be

2010-02-18 22:22:45 +00:00

vfs_subr.c

In order for MAXVNODES_MAX to be an "int" on powerpc and sparc, we must

2010-08-04 05:09:02 +00:00

vfs_syscalls.c

In revoke(), verify that VCHR vnode indeed belongs to devfs.

2010-07-06 18:20:49 +00:00

vfs_vnops.c

Correct arguments order.

2010-06-26 21:44:45 +00:00

vnode_if.src

Add VOP_ADVLOCKPURGE so that the file system is called when purging

2010-05-12 21:24:46 +00:00