Mateusz Guzik ee3fd7bbb1 Plug capability races. ...

fp and appropriate capability lookups were not atomic, which could result in
improper capabilities being checked.

This could result either in protection bypass or in a spurious ENOTCAPABLE.

Make fp + capability check atomic with the help of sequence counters.

Reviewed by:	kib
MFC after:	3 weeks

2014-10-04 08:08:56 +00:00

..

bus_if.m

Stage one of multipass suspend/resume

2014-09-23 02:56:40 +00:00

capabilities.conf

Allow sigwait(2) in capabilities mode.

2014-01-28 01:49:49 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

…

genassym.sh

…

imgact_aout.c

…

imgact_binmisc.c

Allow multiple image activators to run on the same execution by changing

2014-09-04 21:31:25 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Add missing proctree locking to fill_kinfo_proc consumers.

2014-08-30 03:10:55 +00:00

imgact_gzip.c

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

imgact_shell.c

Allow multiple image activators to run on the same execution by changing

2014-09-04 21:31:25 +00:00

inflate.c

…

init_main.c

Rename global cnt to vm_cnt to avoid shadowing.

2014-03-22 10:26:09 +00:00

init_sysent.c

Regen per r263318.

2014-03-18 21:34:11 +00:00

kern_acct.c

acct: create a special plimit object and set it for exiting processes

2013-06-30 19:08:06 +00:00

kern_alq.c

Prevent alq from panic when the invalid alq_file path specified.

2014-04-05 16:54:47 +00:00

kern_clock.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_clocksource.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_condvar.c

Fix lc_lock/lc_unlock() support for rmlocks held in shared mode. With

2013-09-20 23:06:21 +00:00

kern_conf.c

Remove global device lock acquisition from dev_relthread(), replacing it

2013-10-22 10:40:26 +00:00

kern_cons.c

Convert from timeout(9) to callout(9).

2014-09-22 14:27:26 +00:00

kern_context.c

…

kern_cpu.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_cpuset.c

Modify cpuset_setithread() to take a CPU ID as an integer, not a char.

2014-09-16 01:21:47 +00:00

kern_ctf.c

…

kern_descrip.c

Plug capability races.

2014-10-04 08:08:56 +00:00

kern_dtrace.c

Commit the rest of the changes that were intended to be part of r266826.

2014-05-29 01:42:22 +00:00

kern_environment.c

Make getenv_*() functions and respectively TUNABLE_*_FETCH() macros not

2013-11-01 10:32:33 +00:00

kern_et.c

Fix build breakage. Apparently all ARM configs build kern_et.c, but only a

2014-04-02 17:34:17 +00:00

kern_event.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

kern_exec.c

Use bzero instead of explicitly zeroing stuff in do_execve.

2014-09-29 23:59:19 +00:00

kern_exit.c

Fix up proc_realparent to always return correct process.

2014-09-03 06:25:34 +00:00

kern_fail.c

…

kern_ffclock.c

…

kern_fork.c

Make fdunshare accept only td parameter.

2014-06-28 05:41:53 +00:00

kern_gzio.c

…

kern_hhook.c

Move hhook's per-vnet initialisation to an earlier SYSINIT SI_SUB stage to

2013-06-15 10:08:34 +00:00

kern_idle.c

…

kern_intr.c

Migrate ie->ie_assign_cpu and associated code to use an int for CPU rather

2014-09-17 17:33:22 +00:00

kern_jail.c

Avoid unlocking unlocked mutex in RCTL jail code. Specific test case

2014-09-09 16:05:33 +00:00

kern_khelp.c

Cleanup and simplification in khelp_{register|deregister}_helper(). No

2013-06-15 06:45:17 +00:00

kern_kthread.c

Do not use potentially stale thread in kthread_add()

2013-08-17 17:02:43 +00:00

kern_ktr.c

Drop KTR records when we're in the debugger so that the debugger isn't

2014-07-02 22:13:07 +00:00

kern_ktrace.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_linker.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_lock.c

Add function and wrapper to switch lockmgr and vnode lock back to

2014-08-29 09:02:01 +00:00

kern_lockf.c

Correct the problem reported by test16 from

2014-07-08 08:10:15 +00:00

kern_lockstat.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_loginclass.c

Initialize loginclass mutex using MTX_SYSINIT instead of using SI_SUB_CPU.

2014-05-14 09:03:02 +00:00

kern_malloc.c

svn revisions r269964 and r269963 seemed to have impaired small memory

2014-09-22 05:07:22 +00:00

kern_mbuf.c

Test for absence of M_NOFREE before attempting to purge the mbuf's tags.

2014-09-30 23:16:26 +00:00

kern_mib.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_module.c

…

kern_mtxpool.c

Garbage collect mtxpool_lockbuilder, the mutex pool historically used

2014-05-02 07:57:40 +00:00

kern_mutex.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_ntptime.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_osd.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_physio.c

Fix some issues in change 254760 pointed out by Bruce Evans:

2013-08-29 16:41:40 +00:00

kern_pmc.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_poll.c

- Remove empty wrappers ether_poll_[de]register_drv(). [1]

2014-09-28 14:05:18 +00:00

kern_priv.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_proc.c

Plug a hypothetical use after free in sysctl kern.proc.groups.

2014-09-04 01:21:33 +00:00

kern_prot.c

Fix getppid for traced processes.

2014-08-24 09:04:09 +00:00

kern_racct.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_rangelock.c

Change the queue of locks in kern_rangelock.c from holding lock requests in

2013-08-15 20:19:17 +00:00

kern_rctl.c

…

kern_resource.c

rlimit: avoid unnecessary copying of rlimits

2013-12-13 20:54:45 +00:00

kern_rmlock.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_rwlock.c

Drop the 3rd clause from all 3 clause BSD licenses where I am the sole

2014-02-05 18:13:27 +00:00

kern_sdt.c

Print a backtrace if the SDT(9) stub gets called so that there's at least

2014-02-22 01:41:45 +00:00

kern_sema.c

…

kern_sharedpage.c

Remove the deprecated VM_ALLOC_RETRY flag for the vm_page_grab(9).

2013-08-22 07:39:53 +00:00

kern_shutdown.c

Add error return to dumpsys(), and use it in doadump().

2014-07-25 23:52:53 +00:00

kern_sig.c

Revert the handling of all siginfo sa_flags except SA_SIGINFO to the

2014-08-24 16:37:50 +00:00

kern_switch.c

…

kern_sx.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_synch.c

pause_sbt(): Take the cold path (ie. use DELAY()) if KDB is active

2014-09-08 08:44:50 +00:00

kern_syscalls.c

…

kern_sysctl.c

Don't make a temporary copy of fixed sysctl strings.

2014-07-10 21:46:57 +00:00

kern_tc.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_thr.c

…

kern_thread.c

Style.

2014-09-03 08:40:16 +00:00

kern_time.c

Split up sys_ktimer_getoverrun() into a sys_ and a kern_ variant

2014-08-07 16:49:50 +00:00

kern_timeout.c

If we're doing RSS then ensure that the callwheel swi's are CPU pinned.

2014-06-30 04:25:51 +00:00

kern_umtx.c

In do_lock_pi(), do not override error from umtxq_sleep_pi() when

2014-08-22 18:42:14 +00:00

kern_uuid.c

Fix a bug in be_uuid_dec(); it called le16dec() instead of be16dec(),

2014-02-13 22:24:36 +00:00

kern_xxx.c

…

ksched.c

…

link_elf_obj.c

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

link_elf.c

Remove ia64.

2014-07-07 00:27:09 +00:00

linker_if.m

…

Make.tags.inc

Remove AppleTalk support.

2014-03-14 06:29:43 +00:00

Makefile

…

makesyscalls.sh

Fix syscalls that can be loaded as kernel modules - they were not given

2013-12-15 23:19:42 +00:00

md4c.c

…

md5c.c

…

p1003_1b.c

…

posix4_mib.c

…

sched_4bsd.c

Restore pre-r239157 handling of sched_yield(), when thread time slice was

2014-08-23 17:31:56 +00:00

sched_ule.c

Reprase r271616 comments.

2014-09-17 17:43:32 +00:00

serdev_if.m

…

stack_protector.c

…

subr_acl_nfs4.c

…

subr_acl_posix1e.c

…

subr_autoconf.c

…

subr_blist.c

Remove reference to the rlist code from comments, and fix a typo visible

2013-02-05 20:08:33 +00:00

subr_bufring.c

…

subr_bus_dma.c

Add bus_dmamap_load_ma() function to load map with the array of

2013-10-27 21:39:16 +00:00

subr_bus.c

Don't panic if a resource is allocated twice. Instead, print a warning and

2014-09-26 18:37:49 +00:00

subr_busdma_bufalloc.c

Replace kernel virtual address space allocation with vmem. This provides

2013-08-07 06:21:20 +00:00

subr_capability.c

Remove duplicated includes.

2014-06-26 13:57:44 +00:00

subr_clock.c

Fix a 2038 bug.

2014-05-01 22:28:14 +00:00

subr_counter.c

Create two public UMA_ZONE_PCPU zones: 64 bit sized and pointer sized.

2014-02-10 19:59:46 +00:00

subr_devstat.c

change defaule permissions on /dev/devstat. while i'm here remove

2014-03-24 18:13:41 +00:00

subr_disk.c

…

subr_dummy_vdso_tc.c

…

subr_eventhandler.c

…

subr_fattime.c

Fix a comment typo; conversion tables are for leap years, not leap seconds.

2014-04-20 13:37:22 +00:00

subr_firmware.c

…

subr_hash.c

…

subr_hints.c

Preserve one character space for a trailing '\0'.

2014-02-14 20:54:03 +00:00

subr_kdb.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_kobj.c

…

subr_lock.c

Drop the 3rd clause from all 3 clause BSD licenses where I am the sole

2014-02-05 18:13:27 +00:00

subr_log.c

MFcalloutng (r244255 by mav, with minor changes):

2013-03-04 16:07:55 +00:00

subr_mbpool.c

All mbuf external free functions never fail, so let them be void.

2014-07-11 13:58:48 +00:00

subr_mchain.c

…

subr_module.c

…

subr_msgbuf.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_param.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_pcpu.c

Create two public UMA_ZONE_PCPU zones: 64 bit sized and pointer sized.

2014-02-10 19:59:46 +00:00

subr_pctrie.c

- Add a new general purpose path-compressed radix trie which can be used

2013-05-12 04:05:01 +00:00

subr_power.c

…

subr_prf.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_prof.c

…

subr_rman.c

Nuke the never-used RF_TIMESHARE feature, reducing the complexity of the

2014-07-16 22:18:19 +00:00

subr_rtc.c

…

subr_sbuf.c

Unbreak the ABI by reverting r268494 until the compat shims are provided

2014-07-28 07:20:22 +00:00

subr_scanf.c

…

subr_sfbuf.c

Move KASSERT into locked region.

2014-08-11 15:06:07 +00:00

subr_sglist.c

Add sglist_append_bio(9) to append a struct bio's data to a sglist

2014-01-13 04:41:08 +00:00

subr_sleepqueue.c

sysctl subsystem uses sxlocks so avoid to setup dynamic sysctl nodes

2014-06-24 15:16:55 +00:00

subr_smp.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_stack.c

…

subr_syscall.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

subr_taskqueue.c

Temporary revert r269661, it looks like the patch isn't complete.

2014-08-07 14:32:28 +00:00

subr_terminal.c

vt(4): Add cngrab() and cnungrab() callbacks

2014-08-27 10:04:10 +00:00

subr_trap.c

Fix two issues with /dev/mem access on amd64, both causing kernel page

2014-03-21 14:25:09 +00:00

subr_turnstile.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

subr_uio.c

Remove zero-copy sockets code. It only worked for anonymous memory,

2013-09-16 06:25:54 +00:00

subr_unit.c

Move the definition of the struct unrhdr into a separate header file,

2013-08-30 07:37:45 +00:00

subr_vmem.c

Do not set M_BESTFIT if a strategy has already been provided. This

2014-04-16 21:39:43 +00:00

subr_witness.c

Make the witness lock limit an option.

2014-08-03 05:00:43 +00:00

sys_capability.c

Prepare fget_unlocked for reading fd table only once.

2014-07-23 19:33:49 +00:00

sys_generic.c

fd: replace fd_nfiles with fd_lastfile where appropriate

2014-06-22 01:31:55 +00:00

sys_pipe.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

sys_procdesc.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

sys_process.c

Require p_cansched() for changing a process' protection status via

2014-10-02 21:18:16 +00:00

sys_socket.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

syscalls.c

Regen per r263318.

2014-03-18 21:34:11 +00:00

syscalls.master

Remove dead code from umtx support:

2014-03-18 21:32:03 +00:00

systrace_args.c

Regen per r263318.

2014-03-18 21:34:11 +00:00

sysv_ipc.c

…

sysv_msg.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

sysv_sem.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

sysv_shm.c

Automatically prefault a limited number of mappings to resident pages in

2014-08-31 17:38:41 +00:00

tty_compat.c

…

tty_info.c

…

tty_inq.c

…

tty_outq.c

…

tty_pts.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

tty_tty.c

…

tty_ttydisc.c

…

tty.c

tty_rel_free() can be called more than once for the same tty so make sure

2014-09-28 21:12:23 +00:00

uipc_accf.c

The accept filter code is not specific to the FreeBSD IPv4 network stack,

2014-07-26 19:27:34 +00:00

uipc_debug.c

Fix socket buffer timeouts precision using the new sbintime_t KPI instead

2013-09-01 23:34:53 +00:00

uipc_domain.c

- Implement two new system calls:

2013-03-02 21:11:30 +00:00

uipc_mbuf2.c

…

uipc_mbuf.c

Change a very strange code in m_demote() to simple assertion.

2014-09-04 19:27:30 +00:00

uipc_mqueue.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

uipc_sem.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

uipc_shm.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

uipc_sockbuf.c

Improve transmit sending offload, TSO, algorithm in general.

2014-09-22 08:27:27 +00:00

uipc_socket.c

- Make hhook_run_socket() vnet-aware instead of adding CURVNET_SET() around

2014-09-08 09:04:22 +00:00

uipc_syscalls.c

Provide sf_buf_ref() to optimize refcounting of already allocated

2014-08-11 12:59:55 +00:00

uipc_usrreq.c

Partial revert of r262867.

2014-08-03 22:37:21 +00:00

vfs_acl.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

vfs_aio.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

vfs_bio.c

Add KASSERTs to catch the case where a developer may have forgotten to

2014-09-04 00:10:06 +00:00

vfs_cache.c

vn_path_to_global_path: update comment.

2014-08-03 07:59:19 +00:00

vfs_cluster.c

When allocating a pbuf for the cluster write, do not sleep waiting

2013-08-27 01:31:12 +00:00

vfs_default.c

Remove unused arguments for VOP_GETPAGES(), VOP_PUTPAGES().

2014-09-10 12:36:41 +00:00

vfs_export.c

Further refine the handling of stop signals in the NFS client. The

2013-02-21 19:02:50 +00:00

vfs_extattr.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

vfs_hash.c

Add exported vfs_hash_index() function, which calculates the canonical

2013-01-14 05:41:40 +00:00

vfs_init.c

Remove Giant acquisition from the mount and unmount pathes.

2014-08-03 03:27:54 +00:00

vfs_lookup.c

Plug a memory leak in case of failed lookups in capability mode.

2014-08-24 12:51:12 +00:00

vfs_mount.c

Bring in the new automounter, similar to what's provided in most other

2014-08-17 09:44:42 +00:00

vfs_mountroot.c

Move root_mount_hold() functionality to separate mutex.

2014-06-11 08:14:08 +00:00

vfs_subr.c

In the syncer, drop the sync mutex while patting the watchdog.

2014-10-01 15:32:28 +00:00

vfs_syscalls.c

In kern_linkat() and kern_renameat(), do not call namei(9) while

2014-09-25 20:42:25 +00:00

vfs_vnops.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

vnode_if.src

Remove unused arguments for VOP_GETPAGES(), VOP_PUTPAGES().

2014-09-10 12:36:41 +00:00