Page MenuHomeFreeBSD

cy (Cy Schubert)
User

Projects

User Details

User Since
May 10 2014, 4:26 AM (370 w, 6 d)

Recent Activity

Wed, Jun 16

cy closed D29744: contrib/wpa: MFV wpa_supplicant/hostapd commit f91680c15.
Wed, Jun 16, 3:16 PM

Tue, Jun 15

cy committed R11:5ccbdb88aedb: security/krb5-devel: Broken on FreeBSD-11, OpenSSL 1.0.2 not supported (authored by cy).
security/krb5-devel: Broken on FreeBSD-11, OpenSSL 1.0.2 not supported
Tue, Jun 15, 4:45 PM

Mon, Jun 14

cy committed R11:a2729c7db8ee: devel/git-filter-repo: Put the man page in the correct place (authored by cy).
devel/git-filter-repo: Put the man page in the correct place
Mon, Jun 14, 11:06 PM
cy committed R11:6ff6811ef166: securty/sudo: Update to 1.9.7p1 (authored by cy).
securty/sudo: Update to 1.9.7p1
Mon, Jun 14, 9:01 PM
cy committed R11:a61b8452d712: devel/git-filter-repo: New port - a versatile tool for rewriting history (authored by cy).
devel/git-filter-repo: New port - a versatile tool for rewriting history
Mon, Jun 14, 4:04 PM
cy committed R11:757e51843f13: sysutils/cfengine-devel: Update to latest GH commit (authored by cy).
sysutils/cfengine-devel: Update to latest GH commit
Mon, Jun 14, 4:04 PM
cy committed R11:36175cf0ed4f: sysutils/cfengine-masterfiles-devel: Update to latest GH commit (authored by cy).
sysutils/cfengine-masterfiles-devel: Update to latest GH commit
Mon, Jun 14, 4:04 PM
cy committed R11:d69a288a9529: security/krb5-devel: update to the latest MIT/KRB5 github commit (authored by cy).
security/krb5-devel: update to the latest MIT/KRB5 github commit
Mon, Jun 14, 4:04 PM
cy committed R11:79b60c481694: mail/spamassassin-devel: update to latest github commit (authored by cy).
mail/spamassassin-devel: update to latest github commit
Mon, Jun 14, 4:04 PM
cy committed R11:f34318c56693: securty/sudo: Update to 1.9.7p1 (authored by cy).
securty/sudo: Update to 1.9.7p1
Mon, Jun 14, 4:04 PM
cy committed R11:c928905a72db: net/hostapd-devel: Update to the latest GH commit (authored by cy).
net/hostapd-devel: Update to the latest GH commit
Mon, Jun 14, 4:04 PM
cy committed R11:f59d9613982a: security/wpa_supplicant-devel: Update to latest GH commit (authored by cy).
security/wpa_supplicant-devel: Update to latest GH commit
Mon, Jun 14, 4:04 PM
cy committed R11:c6f1867664d5: net/hostapd-devel: Make use of fdatasync(2) (authored by cy).
net/hostapd-devel: Make use of fdatasync(2)
Mon, Jun 14, 4:04 PM
cy committed R11:ed47e1ecc5db: */*: Sync hostapd* and wpa_supplicant* with base ce276fe26d92010776 (authored by cy).
*/*: Sync hostapd* and wpa_supplicant* with base ce276fe26d92010776
Mon, Jun 14, 4:04 PM
cy committed R11:5fe9edba0d7d: security/wpa_supplicant-devel: Make use of fdatasync(2) (authored by cy).
security/wpa_supplicant-devel: Make use of fdatasync(2)
Mon, Jun 14, 4:04 PM
cy committed R10:dc9d54b5c1e0: wpa: The ap library is not needed by wpa_supplicant or wpa_cli (authored by cy).
wpa: The ap library is not needed by wpa_supplicant or wpa_cli
Mon, Jun 14, 5:57 AM

Sun, Jun 6

cy committed R10:d9d03b5409f3: sqlite3: import sqlite3 3.35.5 (authored by cy).
sqlite3: import sqlite3 3.35.5
Sun, Jun 6, 9:56 PM
cy committed R10:dad031410fa7: Import sqlite 3.34.1 (3340100). (authored by cy).
Import sqlite 3.34.1 (3340100).
Sun, Jun 6, 9:56 PM
cy committed R10:4616a539172f: sqlite3: import sqlite3 3.35.5 (authored by cy).
sqlite3: import sqlite3 3.35.5
Sun, Jun 6, 9:56 PM
cy committed R10:33d140e56ded: Import sqlite 3.34.1 (3340100). (authored by cy).
Import sqlite 3.34.1 (3340100).
Sun, Jun 6, 9:56 PM
cy committed R10:7a9c6cbae913: sqlite3: import sqlite3 3.35.5 (authored by cy).
sqlite3: import sqlite3 3.35.5
Sun, Jun 6, 9:55 PM
cy committed R10:c334ddd922ae: Import sqlite 3.34.1 (3340100). (authored by cy).
Import sqlite 3.34.1 (3340100).
Sun, Jun 6, 9:55 PM

Fri, Jun 4

cy committed R10:681500889424: wpa: Fix GCC 6 build (authored by cy).
wpa: Fix GCC 6 build
Fri, Jun 4, 4:15 AM

Thu, Jun 3

cy committed R10:40c7ff83e74e: wpa: Import wpa_supplicant/hostapd commit e8662e9d4 (authored by cy).
wpa: Import wpa_supplicant/hostapd commit e8662e9d4
Thu, Jun 3, 4:38 PM
cy committed R11:162a1c450f42: sysutils/nut-devel: Update to the latest networkupstools/nut github commit (authored by cy).
sysutils/nut-devel: Update to the latest networkupstools/nut github commit
Thu, Jun 3, 3:02 PM
cy committed R11:009dd6a1d389: mail/spamassassin-devel: update to latest github commit (authored by cy).
mail/spamassassin-devel: update to latest github commit
Thu, Jun 3, 3:02 PM
cy committed R11:ec2fe91031a6: sysutils/cfengine-devel: Update to latest GH commit (authored by cy).
sysutils/cfengine-devel: Update to latest GH commit
Thu, Jun 3, 3:02 PM
cy committed R11:2cabdfb5e86a: net/hostapd-devel: Update to the latest GH commit (authored by cy).
net/hostapd-devel: Update to the latest GH commit
Thu, Jun 3, 3:02 PM
cy committed R11:8f0fa47c89b6: sysutils/cfengine-masterfiles-devel: Update to latest GH commit (authored by cy).
sysutils/cfengine-masterfiles-devel: Update to latest GH commit
Thu, Jun 3, 3:02 PM
cy committed R11:220e0e908f09: security/wpa_supplicant-devel: Update to latest GH commit (authored by cy).
security/wpa_supplicant-devel: Update to latest GH commit
Thu, Jun 3, 3:02 PM
cy committed R11:a989dee5e573: security/krb5-devel: update to the latest MIT/KRB5 github commit (authored by cy).
security/krb5-devel: update to the latest MIT/KRB5 github commit
Thu, Jun 3, 3:02 PM
cy committed R11:67967c72eab1: security/libgcrypt: update to 1.9.3 (authored by cy).
security/libgcrypt: update to 1.9.3
Thu, Jun 3, 1:59 PM
cy committed R11:0591d3d3c3b0: security/sudo: update to 1.9.7 (authored by cy).
security/sudo: update to 1.9.7
Thu, Jun 3, 1:59 PM
cy committed R11:70b08e987327: security/libgcrypt: Make static an option (authored by cy).
security/libgcrypt: Make static an option
Thu, Jun 3, 1:59 PM
cy committed R11:e735db796840: misc/tkcron: Use default tk (authored by cy).
misc/tkcron: Use default tk
Thu, Jun 3, 1:59 PM
cy committed R10:c1f4b179fee7: MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14: (authored by cy).
MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:
Thu, Jun 3, 1:01 AM
cy committed R10:735956e48aad: Apply upstream fix 08968baec1122a58bb90d8f97ad948a75f8a5d69: (authored by delphij).
Apply upstream fix 08968baec1122a58bb90d8f97ad948a75f8a5d69:
Thu, Jun 3, 1:00 AM
cy committed R10:c8773c8018e7: ipfilter: Fix ip_nat memory leak and use-after-free (authored by cy).
ipfilter: Fix ip_nat memory leak and use-after-free
Thu, Jun 3, 12:58 AM
cy committed R10:fedf63143b6e: MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14: (authored by cy).
MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:
Thu, Jun 3, 12:58 AM
cy committed R10:2fb377976493: ipfilter: Fix ip_nat memory leak and use-after-free (authored by cy).
ipfilter: Fix ip_nat memory leak and use-after-free
Thu, Jun 3, 12:56 AM
cy committed R10:19cfc8e65587: MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14: (authored by cy).
MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:
Thu, Jun 3, 12:56 AM
cy committed R10:9a0f82285322: wpa: Fix a SIGBUS error in wpa_sm_set_rekey_offload (authored by cy).
wpa: Fix a SIGBUS error in wpa_sm_set_rekey_offload
Thu, Jun 3, 12:26 AM
cy committed R10:48b11217bf7e: libradius: fix no SSL build (authored by cy).
libradius: fix no SSL build
Thu, Jun 3, 12:26 AM

Tue, Jun 1

cy committed R10:25ecdc7d5277: wpa: Restructure wpa build (authored by cy).
wpa: Restructure wpa build
Tue, Jun 1, 2:40 AM
cy closed D30372: wpa: Restructure wpa build.
Tue, Jun 1, 2:40 AM

Mon, May 31

cy committed R11:cdce550a11e1: security/nmap: Assume maintainership (authored by cy).
security/nmap: Assume maintainership
Mon, May 31, 5:33 AM
cy added a comment to D30372: wpa: Restructure wpa build.

Building WITHOUT_OPENSSL doesn't make it far enough to test wpa build, libradius needs a little love:

Mon, May 31, 1:39 AM

Tue, May 25

cy committed R10:323a4e2c4e28: ipfilter: Fix ip_nat memory leak and use-after-free (authored by cy).
ipfilter: Fix ip_nat memory leak and use-after-free
Tue, May 25, 6:59 PM

Sun, May 23

cy committed R11:527821a60c9f: security/libgcrypt: Make static an option (authored by cy).
security/libgcrypt: Make static an option
Sun, May 23, 3:41 AM
cy committed R11:865a2a94e8fd: security/libgcrypt: update to 1.9.3 (authored by cy).
security/libgcrypt: update to 1.9.3
Sun, May 23, 3:41 AM

Fri, May 21

cy added a reviewer for D30372: wpa: Restructure wpa build: kevans.
Fri, May 21, 6:25 AM
cy added a reviewer for D30372: wpa: Restructure wpa build: bdrewery.
Fri, May 21, 12:19 AM

Thu, May 20

cy requested review of D30372: wpa: Restructure wpa build.
Thu, May 20, 11:53 PM

May 18 2021

cy committed R11:72d1eb161b86: security/sudo: update to 1.9.7 (authored by cy).
security/sudo: update to 1.9.7
May 18 2021, 8:07 PM

May 17 2021

cy committed R11:45ffb6de9ca3: security/krb5-devel: update to the latest MIT/KRB5 github commit. (authored by cy).
security/krb5-devel: update to the latest MIT/KRB5 github commit.
May 17 2021, 4:55 PM
cy committed R11:258eb54ac489: mail/spamassassin-devel: update to latest github commit (authored by cy).
mail/spamassassin-devel: update to latest github commit
May 17 2021, 4:55 PM
cy committed R11:9118d161cf69: net/hostapd-devel: Update to the latest GH commit (authored by cy).
net/hostapd-devel: Update to the latest GH commit
May 17 2021, 4:55 PM
cy committed R11:8b6124acf61b: sysutils/nut-devel: Update to the latest networkupstools/nut github commit. (authored by cy).
sysutils/nut-devel: Update to the latest networkupstools/nut github commit.
May 17 2021, 4:55 PM
cy committed R11:f419bbcd975d: security/wpa_supplicant-devel: Update to latest GH commit (authored by cy).
security/wpa_supplicant-devel: Update to latest GH commit
May 17 2021, 4:55 PM
cy committed R11:a4c5b60beaf0: sysutils/cfengine-masterfiles-devel: Update to latest GH commit (authored by cy).
sysutils/cfengine-masterfiles-devel: Update to latest GH commit
May 17 2021, 4:55 PM
cy committed R11:cc1924acb3c5: sysutils/cfengine-devel: Update to latest GH commit. (authored by cy).
sysutils/cfengine-devel: Update to latest GH commit.
May 17 2021, 4:55 PM
cy committed R11:b2472f31a98f: graphics/xpdf4: Update to 4.03 (authored by kib).
graphics/xpdf4: Update to 4.03
May 17 2021, 4:55 PM
cy committed R11:eaaf5dd03e57: sysutils/syslog-ng: Update to 3.32.2 (authored by cy).
sysutils/syslog-ng: Update to 3.32.2
May 17 2021, 4:55 PM

May 10 2021

cy closed D30159: Add new port: x11-wm/fvwm3.
May 10 2021, 3:53 AM
cy committed R11:d9ddaab20f54: New port: x11-wm/fvwm3: New FVWM window manager (authored by felix_palmen-it.de).
New port: x11-wm/fvwm3: New FVWM window manager
May 10 2021, 3:53 AM

May 7 2021

cy added a comment to D30159: Add new port: x11-wm/fvwm3.

Commit message in my D30159 branch (--pretty-fuller):

May 7 2021, 5:12 PM
cy accepted D30159: Add new port: x11-wm/fvwm3.

If you don't mind, I'll make the two minor corrections and commit it. Is that ok?

May 7 2021, 4:58 PM
cy committed R10:ce9de47260d4: sqlite3: import sqlite3 3.35.5 (authored by cy).
sqlite3: import sqlite3 3.35.5
May 7 2021, 1:10 AM

May 6 2021

cy committed R10:0511e356f5e2: sqlite3: Vendor import of sqlite3 3.35.5 (authored by cy).
sqlite3: Vendor import of sqlite3 3.35.5
May 6 2021, 8:15 PM
cy added a reverting change for R10:eccd5a4d3926: sqlite3: Vendor import of sqlite3 3.35.5: R10:8b10604cd159: Revert "sqlite3: Vendor import of sqlite3 3.35.5".
May 6 2021, 8:11 PM
cy committed R10:8b10604cd159: Revert "sqlite3: Vendor import of sqlite3 3.35.5" (authored by cy).
Revert "sqlite3: Vendor import of sqlite3 3.35.5"
May 6 2021, 8:11 PM
cy committed R10:eccd5a4d3926: sqlite3: Vendor import of sqlite3 3.35.5 (authored by cy).
sqlite3: Vendor import of sqlite3 3.35.5
May 6 2021, 5:52 AM

May 5 2021

cy committed R11:d87efbc45723: misc/tkcron: Use default tk (authored by cy).
misc/tkcron: Use default tk
May 5 2021, 7:24 PM
cy accepted D30114: bsnmpd: Return the correct uptime..
May 5 2021, 2:55 PM
cy added inline comments to D30116: kern: clarify boot time.
May 5 2021, 5:07 AM
cy accepted D30114: bsnmpd: Return the correct uptime..

This is certainly an improvement over the original.

May 5 2021, 4:40 AM

Apr 29 2021

cy committed R10:8e435de92c78: src.libnames.mk: Remove redundant am-utils library definition (authored by cy).
src.libnames.mk: Remove redundant am-utils library definition
Apr 29 2021, 2:08 PM
cy closed D29914: src.libnames.mk: Remove redundant am-utils library definition.
Apr 29 2021, 2:08 PM

Apr 28 2021

cy added a comment to D29553: Disable stack gap for ntpd during build..
In D29553#673797, @cy wrote:

I will do a little more testing and commit.

OK, just a reminder that without D29550, D29551 and D29552 this will not work. Currently there is no infrastructure in FreeBSD build system to use elfctl during build and those patches add that.

Apr 28 2021, 5:57 PM
cy added a comment to D29832: ntpd: Change default stack limit to 4096 pages..

So, I've looked at this more and setting the stack size to 4096 pages should technically also resolve this problem. I tested this restarting the daemon multiple times and in my case it worked. However, the problem will occur randomly due to random nature of stack gap randomization. By default, the maximum size of stack gap is 15.36MiB on amd64, I'm not sure about other platforms. The default value of kern.elf64.aslr.stack_gap is 3, so in case of amd64, where the default stack limit is equal to 512MiB, that gives us the 15.36MiB number. I used 4096 as this means that we are setting the stack limit to 16MiB, which should leave enough stack for ntpd to work - I think that 15.56MiB is needed (15.36 of stack gap and 200K taken from the fact that we were limiting this to 200K previously), but I rounded this up to 16MiB.

Apr 28 2021, 4:13 PM
cy added a comment to D29553: Disable stack gap for ntpd during build..

I will do a little more testing and commit.

Apr 28 2021, 2:49 PM
cy added a comment to D29832: ntpd: Change default stack limit to 4096 pages..

The work around works on my sandbox machine today but does not on the laptop when PIE is enabled on both. Without PIE and with ASLR there is no need for the workaround.

Apr 28 2021, 2:23 PM
cy added a comment to D29552: Add elfctl to toolchain..
Apr 28 2021, 2:21 PM

Apr 27 2021

cy accepted D29553: Disable stack gap for ntpd during build..

This is probably the only solution, as it works with PIE enabled, regardless of whether ASLR is enabled or not. See discussion at D29832.

Apr 27 2021, 10:25 PM
cy added a comment to D29832: ntpd: Change default stack limit to 4096 pages..

Having done a couple of reboots since enabling PIE and increasing stack to 200, now after this last reboot about an hour ago it now fails regardless of how much stack I give it (even obscene amounts). Increasing stack to 200, 1024, 20000, 200000, all of which I've tried, will not work after this latest reboot.

Apr 27 2021, 10:23 PM
cy requested changes to D29832: ntpd: Change default stack limit to 4096 pages..

Juxtapositioned to this is that enabling PIE causes firefox to segfault but that's for another review.

Apr 27 2021, 6:57 PM
cy added a comment to D29832: ntpd: Change default stack limit to 4096 pages..

Adjusting the stack to 200, like OpenBSD does, resolves this issue when PIE is enabled.

Apr 27 2021, 6:43 PM
cy added a comment to D29832: ntpd: Change default stack limit to 4096 pages..

Ok, I can finally reproduce the problem with kern.elf64.aslr.pie_enable=1. PIE introduces a new set of problems that were not addressed by procctl() at the time.

Apr 27 2021, 6:26 PM
cy added a comment to D29832: ntpd: Change default stack limit to 4096 pages..
In D29832#673048, @cy wrote:
In D29832#672594, @kib wrote:

Does ntpd still mlocall(2) itself? Issue there, I believe, is that all this memory, including gap, is wired.

Why not disable stack gap instead, with elfctl -e +noaslrstkgap ntpd (I think this is the right syntax)?

We already disable stack gap at line 447 of ntpd.c. Upstream inserted this patch after we applied it locally.

Currently, ntpd does not start when ASLR is enabled, which means that calling procctl does not help. However, either disabling stackgap with elfctl or significantly increasing the stack limit help with this issue.

Apr 27 2021, 1:52 PM

Apr 26 2021

cy requested changes to D29553: Disable stack gap for ntpd during build..

This is already done at line 447 of ntpd.c. Why do we need this?

Apr 26 2021, 5:42 PM
cy added inline comments to D29832: ntpd: Change default stack limit to 4096 pages..
Apr 26 2021, 5:40 PM
cy added a comment to D29832: ntpd: Change default stack limit to 4096 pages..
In D29832#672594, @kib wrote:

Does ntpd still mlocall(2) itself? Issue there, I believe, is that all this memory, including gap, is wired.

Why not disable stack gap instead, with elfctl -e +noaslrstkgap ntpd (I think this is the right syntax)?

Apr 26 2021, 5:33 PM

Apr 22 2021

cy requested review of D29914: src.libnames.mk: Remove redundant am-utils library definition.
Apr 22 2021, 6:16 AM

Apr 19 2021

cy committed R11:825f26eb2031: net/hostapd-devel: Update to the latest GH commit (authored by cy).
net/hostapd-devel: Update to the latest GH commit
Apr 19 2021, 4:53 PM
cy committed R11:84d220dbf776: security/wpa_supplicant-devel: Update to latest GH commit (authored by cy).
security/wpa_supplicant-devel: Update to latest GH commit
Apr 19 2021, 4:53 PM
cy committed R11:34fc8cf3ddc2: mail/spamassassin-devel: update to latest github commit (authored by cy).
mail/spamassassin-devel: update to latest github commit
Apr 19 2021, 4:53 PM
cy committed R11:eadcc5b7b95a: sysutils/cfengine-masterfiles-devel: Update to latest GH commit (authored by cy).
sysutils/cfengine-masterfiles-devel: Update to latest GH commit
Apr 19 2021, 4:53 PM
cy committed R11:32db96fb9d4b: sysutils/cfengine-devel: Update to latest GH commit. (authored by cy).
sysutils/cfengine-devel: Update to latest GH commit.
Apr 19 2021, 4:53 PM

Apr 18 2021

cy committed R10:55fc118be8f0: contrib/wpa: Complete the revert of Import wpa. (authored by cy).
contrib/wpa: Complete the revert of Import wpa.
Apr 18 2021, 12:34 AM

Apr 17 2021

cy committed R10:8c6732ac7775: usr.sbin/wpa: complete the revert of wpa import (authored by cy).
usr.sbin/wpa: complete the revert of wpa import
Apr 17 2021, 5:51 PM