HardenedBSD/hardenedbsd 91ac682contrib/wpa/src/crypto tls_openssl.c

HBSD: And missing bracket to wpa_supplicant's tls_openssl.c

github-issue: #314
github-issue: #315
MFC-to: 11-STABLE
X-MFC-with: ef3f402b239860e360fd8a21e7ffaa0e402c59af
Submitted-by: Piotr Kubaj <piotr.kubaj at hardenedbsd.org>
(cherry picked from commit 8565370dfbd3496aa0218cd0e20d9d9fabc8db2b)
Signed-off-by: Oliver Pinter <oliver.pinter at hardenedbsd.org>

HardenedBSD/hardenedbsd 72a659f. Makefile.inc1, lib/libnv Makefile

Merge remote-tracking branch 'origin/hardened/current/master' into 
hardened/current/unstable

* origin/hardened/current/master:
  Create an empty stdint.h for arm_neon.h to include.
  Add pointer to freebsd-numerics for libm.
  allwinner: a83t: Fix PLL_CPU clocks
  Unconditionally build libnv in legacy
  Fix buildworld on FreeBSD 10
  No longer install sys/nv.h and sys/cnv.h in lib/libnv/Makefile

HardenedBSD/hardenedbsd dddf7ed. Makefile.inc1, lib/libnv Makefile

Merge branch 'freebsd/current/master' into hardened/current/master

* freebsd/current/master:
  Create an empty stdint.h for arm_neon.h to include.
  Add pointer to freebsd-numerics for libm.
  allwinner: a83t: Fix PLL_CPU clocks
  Unconditionally build libnv in legacy
  Fix buildworld on FreeBSD 10
  No longer install sys/nv.h and sys/cnv.h in lib/libnv/Makefile

HardenedBSD/hardenedbsd 5ba22a5lib/libnv/tests cnv_tests.cc nvlist_append_test.c, share/man/man9 cnv.9

Merge remote-tracking branch 'origin/hardened/11-stable/master' into 
hardened/11-stable/unstable

* origin/hardened/11-stable/master:
  MFC r304910, r304912, r304915, r304952, r325019, r328164, r331094, r332664, 
r335341-r335345, r335347, r335379-r335380, r335382
  MFC r304908-r304909
  MFC r335757:
  MFC r335652-r335654
  MFC r336238:
  MFC r336257, r336258, r336263: Use the MSR name.
  MFC r335795,335796:   Make debug output produced by `setkey -x` command a more human 
readable.

HardenedBSD/hardenedbsd 456fbe3lib/libnv/tests cnv_tests.cc nvlist_append_test.c, share/man/man9 cnv.9

Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

* freebsd/11-stable/master:
  MFC r304910, r304912, r304915, r304952, r325019, r328164, r331094, r332664, 
r335341-r335345, r335347, r335379-r335380, r335382
  MFC r304908-r304909
  MFC r335757:
  MFC r335652-r335654
  MFC r336238:
  MFC r336257, r336258, r336263: Use the MSR name.
  MFC r335795,335796:   Make debug output produced by `setkey -x` command a more human 
readable.

HardenedBSD/hardenedbsd 8b7eda7sys/conf files.arm64, sys/crypto/armv8 stdint.h

Create an empty stdint.h for arm_neon.h to include.

The armv8crypto module includes arm_neon.h for the compiler intrinsic
functions. This includes the userland stdint.h file that doesn't exist in
the kernel. Fix this by providing an empty stdint.h to be used when we
include arm_neon.h.

Sponsored by:   DARPA, AFRL
Differential Revision:  https://reviews.freebsd.org/D16254

HardenedBSD/hardenedbsd cf1c97f. MAINTAINERS

Add pointer to freebsd-numerics for libm.
DeltaFile
+1-0MAINTAINERS
+1-01 files

HardenedBSD/hardenedbsd 7f147f6lib/libnv/tests nvlist_append_test.c cnv_tests.cc, share/man/man9 cnv.9

MFC r304910, r304912, r304915, r304952, r325019, r328164, r331094, r332664,
r335341-r335345, r335347, r335379-r335380, r335382

r304910:
Introduce cnv man page.

r304912:
Add missed header file for cnv.h .

r304915:
Bump date in the man page.

r304952:
Remove duplicated declaration.

r325019:
Introduce cnvlist_name() and cnvlist_type() functions.

Those function can be used when we are iterating over nvlist to reduce
amount of extra variables we need to declare.

r328164:
libnv: Use mallocarray(9) for the nv_calloc.

r331094:

    [50 lines not shown]

HardenedBSD/hardenedbsd ad41782lib/libnv Makefile, lib/libnv/tests cnv_tests.cc Makefile

MFC r304908-r304909

r304908:
Add cnv API.

cnv API is a set of functions for managing name/value pairs by cookie.
The cookie can be obtained by nvlist_next(), nvlist_get_parent() or
nvlist_get_pararr() function. This patch also includes unit tests.

Submitted by:   Adam Starak <starak.adam at gmail.com>

r304909:
Fix style issue in the cnv API.
Remove unused arguments in a macro.
Remove unused typedef.

HardenedBSD/hardenedbsd adc9f85sbin/ifconfig ifieee80211.c

MFC r335757:

ifconfig(8): Attempt to render non-printable sequences w/ UTF-8 Environment

Currently ifconfig(8) only prints the hex representation of ssid names
with non-ASCII characters. Many modern terminals are able to properly render
non-ASCII characters. This change checks if the terminal charmap is UTF-8,
and if so, will render the characters, rather than the hex value.

This behavior is circumvented by running ifconfig(8) in a non-UTF8 locale;
e.g. C or POSIX.

It was pointed out by kp@ during the review that APs have the option to
broadcast whether their SSIDs may be interpreted as UTF-8. Ideally, we would
honor this and only attempt this behavior if it's so-broadcasted by the AP.

However, a sample survey showed that hostapd will advertise this if
indicated in config but it doesn't seem to be so common in the AP market, so
this would be effectively useless as we'll rarely know if the SSID should be
renderable as UTF-8.

Despite this, it was decided to be OK with this anyways- there's a
straightforward path to doing it the right way based on advertisement by AP
if we need to go that route, and one can revert to old behavior easily
enough at runtime if we get it wrong.

HardenedBSD/hardenedbsd 82a02a0usr.sbin/config config.y mkmakefile.c

MFC r335652-r335654

r335652:
config(8): Make 'env' files consistent with other file-accepting options

Previously, only one 'env' file could be specified. Later 'env' directives
would overwrite earlier 'env' directives. This is inconsistent with every
other file-accepting directives which process files in order, including
hints.

A caveat applies to both hints and env that isn't mentioned: they're
concatenated in the order of appearance, so they're not actually applied in
the way one might think by supplying:

hints x
hints y

Hints in x will take precedence over same-name hints in y due to how
the kernel processes them, stopping at the first line that matches the hint
we're searching for. Future work will flip the order of concatenation so
that later files may still properly override earlier files.

In practice, this likely doesn't matter at all due to the nature of the
beast.


    [25 lines not shown]

HardenedBSD/hardenedbsd 48b3077sys/kern kern_exec.c

MFC r336238:

Round down the location of execpathp to slightly improve copyout speed.

In practice, this moves the padding from below the canary to above
execpathp has no impact on stack consumption.

Submitted by:          Wuyang-Chung (via github pull request #159)

HardenedBSD/hardenedbsd 4b4713asys/arm/allwinner/clkng ccu_a83t.c

allwinner: a83t: Fix PLL_CPU clocks

The PLL_CPU clocks formula is 24Mhz * N and not 24Mhz / N
Fix it by using a NKMP clock with fixed factor values for the one
unused.

HardenedBSD/hardenedbsd c858afausr.sbin/cpucontrol amd10h.c

MFC r336257, r336258, r336263:
Use the MSR name.

HardenedBSD/hardenedbsd 97c83e9. Makefile.inc1

Unconditionally build libnv in legacy

Rather than using a config(8) built from new tree linking libnv built on
host.
DeltaFile
+1-7Makefile.inc1
+1-71 files

HardenedBSD/hardenedbsd 69ce0c2tools/build strings.h Makefile

Fix buildworld on FreeBSD 10

Since r336126 we depend on explicit_bzero() for the libmd
bootstrap. Add it to -legacy if it is not found in /usr/include/strings.h.

Reviewed By:    ian
Approved By:    brooks (mentor)
Differential Revision: https://reviews.freebsd.org/D16245

HardenedBSD/hardenedbsd aafd1cflib/libnv Makefile, tools/build Makefile

No longer install sys/nv.h and sys/cnv.h in lib/libnv/Makefile

Use tools/build/Makefile to install the headers into ${WORLDTMP}/legacy
instead. Compared to r336026 this has the minor advantage that it avoids
unncessary header installation when building the non-bootstrap libnv.

Reviewed By:    bdrewery, kevans
Approved By:    brooks (mentor)
Differential Revision: https://reviews.freebsd.org/D16187

HardenedBSD/hardenedbsd 011b4e8sys/netipsec key_debug.c

MFC r335795,335796:
  Make debug output produced by `setkey -x` command a more human readable.

  Add text names of SADB message types and extension headers to the output.

  Obtained from: Yandex LLC
  Sponsored by: Yandex LLC
  Differential Revision:        https://reviews.freebsd.org/D16036

HardenedBSD/hardenedbsd d422a19usr.bin/indent lexi.c indent.c, usr.bin/indent/tests float.0.stdout float.0

Merge remote-tracking branch 'origin/hardened/current/master' into 
hardened/current/unstable

* origin/hardened/current/master:
  indent(1): rewrite the integer/floating constant scanning part of lexi.c

HardenedBSD/hardenedbsd bd0c4f4usr.bin/indent lexi.c indent.c, usr.bin/indent/tests float.0 float.0.stdout

Merge branch 'freebsd/current/master' into hardened/current/master

* freebsd/current/master:
  indent(1): rewrite the integer/floating constant scanning part of lexi.c

HardenedBSD/hardenedbsd 588e91acontrib/llvm/tools/lld/ELF Writer.cpp, lib/clang/include/lld/Common Version.inc

Merge remote-tracking branch 'origin/hardened/11-stable/master' into 
hardened/11-stable/unstable

* origin/hardened/11-stable/master:
  MFC r336227:
  MFC r333401 (by emaste):
  MFC r332965 (by emaste):
  MFC r335189:
  MFC r318355,318366: add -T (timestamp) option for reproducible builds

HardenedBSD/hardenedbsd 8bde919contrib/llvm/tools/clang/lib/Driver/ToolChains Gnu.cpp, lib/clang/include/lld/Common Version.inc

Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

* freebsd/11-stable/master:
  MFC r336227:
  MFC r333401 (by emaste):
  MFC r332965 (by emaste):
  MFC r335189:
  MFC r318355,318366: add -T (timestamp) option for reproducible builds

HardenedBSD/hardenedbsd 04c77c1usr.bin/indent lexi.c indent.c, usr.bin/indent/tests float.0.stdout float.0

indent(1): rewrite the integer/floating constant scanning part of lexi.c

Remove procedural code that did the scanning, which was faulty and didn't
support complex constants such as 0x1p-61. Replace it with a finite state
machine expressed as a transition table. The table was rewritten by hand
from lx's output, given parts of grammar expressed as regular expressions.

lx is Katherine Flavel's lexer generator, currently available at
https://github.com/katef/libfsm and the parts of grammar were taken from
http://quut.com/c/ANSI-C-grammar-l-2011.html and extended to support binary
integer constants which are a popular GCC extension.

Reported by:    bde

HardenedBSD/hardenedbsd 5da1b31contrib/llvm/tools/clang/lib/Driver/ToolChains Gnu.cpp

MFC r336227:

Pull in r336008 from upstream clang trunk:

  Request init/fini array on FreeBSD 12 and later

  Summary:

  It seems a bad idea to change the default in the middle of a release
  branch due to possible changes in global ctor / dtor ordering between
  .ctors and .init_array. With FreeBSD 11.0's release imminent lets
  change the default now for FreeBSD 12 (the current development
  stream) and later.

  FreeBSD rtld has supported .init_array / .fini_array for many years.
  As of Jan 1 2017 all supported FreeBSD releases and branches will
  have support.

  Reviewers: dim, brooks, arichardson

  Reviewed By: dim, brooks, arichardson

  Subscribers: bsdjhb, krytarowski, emaste, cfe-commits

  Differential Revision: https://reviews.llvm.org/D24867

    [2 lines not shown]

HardenedBSD/hardenedbsd ab9a9a0contrib/llvm/tools/lld/ELF Writer.cpp, lib/clang/include/lld/Common Version.inc

MFC r333401 (by emaste):

lld: Omit PT_NOTE for SHT_NOTE without SHF_ALLOC

A non-alloc note section should not have a PT_NOTE program header.

Found while linking ghc (Haskell compiler) with lld on FreeBSD.  Haskell
emits a .debug-ghc-link-info note section (as the name suggests, it
contains link info) as a SHT_NOTE section without SHF_ALLOC set.

For this case ld.bfd does not emit a PT_NOTE segment for
.debug-ghc-link-info.  lld previously emitted a PT_NOTE with p_vaddr = 0
and FreeBSD's rtld segfaulted when trying to parse a note at address 0.

LLVM PR:        https://llvm.org/pr37361
LLVM review:    https://reviews.llvm.org/D46623

PR:            226872
Reviewed by:    dim
Sponsored by:   The FreeBSD Foundation

HardenedBSD/hardenedbsd 2e3c732contrib/llvm/tools/lldb/source/Plugins/Process/FreeBSD FreeBSDThread.cpp

MFC r332965 (by emaste):

lldb: remove assertion that target_arch is FreeBSD

The target is not necessarily a FreeBSD binary - for example, it may be
a Linux binary running under the linuxulator.  Basic ptrace (live)
debugging already worked in this case, except for the assertion.

Sponsored by:   Turing Robotic Industries Inc.

HardenedBSD/hardenedbsd 79aa308contrib/wpa/src/crypto tls_openssl.c crypto_openssl.c, sys/arm/broadcom/bcm2835 bcm2835_sdhost.c

Merge remote-tracking branch 'origin/hardened/current/master' into 
hardened/current/unstable

* origin/hardened/current/master:
  Remove MODULE_PNP_INFO for ig4(4) driver
  Remove two checks that are always false
  HBSD: fix wpa_supplicant builds with LibreSSL
  Restore the check for the page size extension after r332489.

HardenedBSD/hardenedbsd 26d805asys/arm/broadcom/bcm2835 bcm2835_sdhost.c, sys/dev/ichiic ig4_pci.c

Merge branch 'freebsd/current/master' into hardened/current/master

* freebsd/current/master:
  Remove MODULE_PNP_INFO for ig4(4) driver
  Remove two checks that are always false
  Restore the check for the page size extension after r332489.

HardenedBSD/hardenedbsd eebfbfalib/libiconv_modules/mapper_std citrus_mapper_std.c, stand/zfs zfs.c

Merge remote-tracking branch 'origin/hardened/11-stable/master' into 
hardened/11-stable/unstable

* origin/hardened/11-stable/master:
  MFC r335874: Cut currdev dev and path fields for ZFS on the last colon.
  MFC r336113: gzip: fix for undefined behavior.
  MFC r336115; libiconv: correct undefined behavior.

HardenedBSD/hardenedbsd 7692422sbin/newfs_msdos mkfs_msdos.c newfs_msdos.c

MFC r335189:

Added option to cluster-align the start of the root directory.

Obtained from:  Android
Obtained from:  
https://android.googlesource.com/platform/system/core/+/052f27562154d175267999106bd6bf18fc8c363e
Obtained from:  
https://android.googlesource.com/platform/system/core/+/8218b6aae9cd4a19fa074a8a8203fe9275b35447
Differential Revision:  https://reviews.freebsd.org/D15672

HardenedBSD/hardenedbsd e3c1170lib/libiconv_modules/mapper_std citrus_mapper_std.c, stand/zfs zfs.c

Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

* freebsd/11-stable/master:
  MFC r335874: Cut currdev dev and path fields for ZFS on the last colon.
  MFC r336113: gzip: fix for undefined behavior.
  MFC r336115; libiconv: correct undefined behavior.

HardenedBSD/hardenedbsd c27d51dsbin/newfs_msdos newfs_msdos.c newfs_msdos.8

MFC r318355,318366: add -T (timestamp) option for reproducible builds

HardenedBSD/hardenedbsd b69d27elib/libiconv_modules/mapper_std citrus_mapper_std.c

Merge remote-tracking branch 'origin/hardened/10-stable/master' into 
hardened/10-stable/unstable

* origin/hardened/10-stable/master:
  MFC r336115; libiconv: correct undefined behavior.

HardenedBSD/hardenedbsd 822d0d5lib/libiconv_modules/mapper_std citrus_mapper_std.c

Merge remote-tracking branch 'origin/hardened/10-stable/master' into 
hardened/10-stable/master-libressl

* origin/hardened/10-stable/master:
  MFC r336115; libiconv: correct undefined behavior.

HardenedBSD/hardenedbsd 034caf8lib/libiconv_modules/mapper_std citrus_mapper_std.c

Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master

* freebsd/10-stable/master:
  MFC r336115; libiconv: correct undefined behavior.

HardenedBSD/hardenedbsd 14017dcstand/zfs zfs.c

MFC r335874: Cut currdev dev and path fields for ZFS on the last colon.

Previously the code cut those fields on second colon, that prevented
boot from boot environments with colon in their names.  This change
moves the limitation from dev field to path, which is empty by default.
DeltaFile
+1-1stand/zfs/zfs.c
+1-11 files

HardenedBSD/hardenedbsd f327aafsys/dev/ichiic ig4_pci.c

Remove MODULE_PNP_INFO for ig4(4) driver

ig4(4) does not support suspend/resume but present on the hardware where
such functionality is critical, like laptops. Remove PNP info to avoid
breaking suspend/resume on the systems where ig4(4) load is not explicitly
requested by the user.

PR:             229791
Reported by:    Ali Abdallah

HardenedBSD/hardenedbsd 25ee80csys/arm/broadcom/bcm2835 bcm2835_sdhost.c

Remove two checks that are always false

Outer loop condition contradicts inner check so code under inner condition
is not reachable. Remove it.

PR:            229722
Reported by:    David Binderman

HardenedBSD/hardenedbsd fd566a9lib/libiconv_modules/mapper_std citrus_mapper_std.c

MFC r336115;
libiconv: correct undefined behavior.

Detected on NetBSD:
# nm /usr/lib/libc.so|grep sanit
    /public/src.git/lib/libc/citrus/modules/citrus_mapper_std.c:173:8:
runtime error: left shift of 1 by 31 places cannot be represented in type 'int'

Obtained from:  NetBSD (CVS Rev. 1.11)

HardenedBSD/hardenedbsd 13c822eusr.bin/gzip gzip.c

MFC r336113:
gzip: fix for undefined behavior.

Unportable left shift reported with MKSANITIZER=yes
USE_SANITIZER=undefined:

# progress -zf ./games.tgz  tar -xp -C "./" -f -
/public/src.git/usr.bin/gzip/gzip.c:2126:33: runtime error: left shift of
251 by 24 places cannot be represented in type 'int'
100%
|****************************************************************************************************************|
44500 KiB  119.69 MiB/s    00:00 ETA

Refactor the following code into something that is more clear
and fix signed integer shift, by casting all buf[] elements to
(unsigned int):

unsigned char buf[8];
uint32_t usize;
[...]
else {
    usize = buf[4] | buf[5] << 8 |
            buf[6] << 16 | buf[7] << 24;
[...]


    [13 lines not shown]

HardenedBSD/hardenedbsd 0607c1dlib/libiconv_modules/mapper_std citrus_mapper_std.c

MFC r336115;
libiconv: correct undefined behavior.

Detected on NetBSD:
# nm /usr/lib/libc.so|grep sanit
    /public/src.git/lib/libc/citrus/modules/citrus_mapper_std.c:173:8:
runtime error: left shift of 1 by 31 places cannot be represented in type 'int'

Obtained from:  NetBSD (CVS Rev. 1.11)

HardenedBSD/hardenedbsd ef3f402contrib/wpa/src/crypto tls_openssl.c crypto_openssl.c

HBSD: fix wpa_supplicant builds with LibreSSL

github-issue: #314
github-issue: #315
MFC-to: 11-STABLE
Submitted-by: Piotr Kubaj <piotr.kubaj at hardenedbsd.org>
Signed-off-by: Oliver Pinter <oliver.pinter at hardenedbsd.org>
(cherry picked from commit b02a7e65566572d086da8b49e83356dfd65ca728)

HardenedBSD/hardenedbsd c85cfaebin/sh exec.c, cddl/contrib/opensolaris/cmd/dtrace/test/tst/common/ip tst.ipv4localudp.ksh

Merge remote-tracking branch 'origin/hardened/current/master' into 
hardened/current/unstable

* origin/hardened/current/master:
  sh: Don't treat % specially in CDPATH
  auditon(2): fix A_SETPOLICY with 64-bit values
  indent(1): move case_indent from parser state to the options struct
  Adjust comment to reality since r286171.
  Don't require a local sshd for the local TCP state dtrace test
  Fix the UDP tests for dtrace.
  Test PGA_REFERENCED after calling pmap_ts_referenced(), rather than before, so that a 
reference from a concurrently destroyed mapping is observed during the current scan.
  Assorted TSO fixes for em(4)/iflib(9) and dead code removal: - Ever since the workaround 
for the silicon bug of TSO4 causing MAC hangs   was committed in r295133, CSUM_TSO always 
got disabled unconditionally   by em(4) on the first invocation of em_init_locked(). 
However, even with   that problem fixed, it turned out that for at least e. g. 82579 not 
all   necessary TSO workarounds are in place, still causing MAC hangs even at   Gigabit 
speed. Thus, for stable/11, TSO usage was deliberately disabled   in r323292 (r323293 for 
stable/10) for the EM-class by default, allowing   users to turn it on if it happens to 
work with their particular EM MAC   in a Gigabit-only environment.   In head, the TSO 
workaround for speeds other than Gigabit was lost with   the conversion to iflib(9) in 
r311849 (possibly along with another one   or two TSO workarounds). Yet at the same time, 
for EM-class MACs TSO4   got enabled by default again, causing device hangs. Therefore, 
change the   default for this hardware class back to have TSO4 off, allowing users   to 
turn it on manually if it happens to work in their environment as   we do in 

    [62 lines not shown]

HardenedBSD/hardenedbsd 56cd58dbin/sh exec.c, cddl/contrib/opensolaris/cmd/dtrace/test/tst/common/ip tst.ipv4localudp.ksh

Merge branch 'freebsd/current/master' into hardened/current/master

* freebsd/current/master:
  sh: Don't treat % specially in CDPATH
  auditon(2): fix A_SETPOLICY with 64-bit values
  indent(1): move case_indent from parser state to the options struct
  Adjust comment to reality since r286171.
  Don't require a local sshd for the local TCP state dtrace test
  Fix the UDP tests for dtrace.
  Test PGA_REFERENCED after calling pmap_ts_referenced(), rather than before, so that a 
reference from a concurrently destroyed mapping is observed during the current scan.
  Assorted TSO fixes for em(4)/iflib(9) and dead code removal: - Ever since the workaround 
for the silicon bug of TSO4 causing MAC hangs   was committed in r295133, CSUM_TSO always 
got disabled unconditionally   by em(4) on the first invocation of em_init_locked(). 
However, even with   that problem fixed, it turned out that for at least e. g. 82579 not 
all   necessary TSO workarounds are in place, still causing MAC hangs even at   Gigabit 
speed. Thus, for stable/11, TSO usage was deliberately disabled   in r323292 (r323293 for 
stable/10) for the EM-class by default, allowing   users to turn it on if it happens to 
work with their particular EM MAC   in a Gigabit-only environment.   In head, the TSO 
workaround for speeds other than Gigabit was lost with   the conversion to iflib(9) in 
r311849 (possibly along with another one   or two TSO workarounds). Yet at the same time, 
for EM-class MACs TSO4   got enabled by default again, causing device hangs. Therefore, 
change the   default for this hardware class back to have TSO4 off, allowing users   to 
turn it on manually if it happens to work in their environment as   we do in 
stable/{10,11}. An alternative would be to add a whitelist of   EM-class devices where 

    [61 lines not shown]

HardenedBSD/hardenedbsd 322c132sys/i386/i386 pmap.c, sys/i386/include pmap.h

Restore the check for the page size extension after r332489.

Without this, the support for transparent superpage promotion on i386
was left disabled.

Reviewed by:    alc, kib
Differential Revision:  https://reviews.freebsd.org/D16279

HardenedBSD/hardenedbsd 6a77f92bin/sh exec.c main.c, bin/sh/tests/builtins cd11.0 Makefile

sh: Don't treat % specially in CDPATH

HardenedBSD/hardenedbsd eab3b9asys/security/audit audit_syscalls.c

auditon(2): fix A_SETPOLICY with 64-bit values

A_SETPOLICY is supposed to work with either 64 or 32-bit values, but due to a
typo the 64-bit version has never worked correctly.

Submitted by:   aniketp
Reviewed by:    asomers, cem
MFC after:      2 weeks
Sponsored by:   Google, Inc. (GSoC 2018)
Differential Revision:  https://reviews.freebsd.org/D16222

HardenedBSD/hardenedbsd e6f6e3ausr.bin/indent parse.c indent_globs.h

indent(1): move case_indent from parser state to the options struct

This was missed in r334927.

HardenedBSD/hardenedbsd 6d1b2c0cddl/contrib/opensolaris/cmd/dtrace/test/tst/common/ip tst.ipv4localtcp.ksh

Adjust comment to reality since r286171.

Sponsored by:          Netflix, Inc.

HardenedBSD/hardenedbsd 65ce161cddl/contrib/opensolaris/cmd/dtrace/test/tst/common/ip tst.localtcpstate.ksh

Don't require a local sshd for the local TCP state dtrace test

This change is similar to the one done in r286171 for
tst.ipv4localtcp.ksh. This not only reduces the requirements on the
system used for testing but results also in a graceful teardown of
the TCP connection.

Reviewed by:           gnn@
Sponsored by:          Netflix, Inc.
Differential Revision:  https://reviews.freebsd.org/D16276