src

Clone Tools

Stats

Commits this week: 13
Total Committers: 7
Last Commit:
Commits this week: 13

Lines of code count not available

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated a few seconds ago
All Commits Reviews
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Tuesday 06 Apr
6:15 pm

Lucas Holt

Update mport package manager to 2.1.0

Options
    • -1
    • +5
    /contrib/mport/README.md
    • -3
    • +3
    /contrib/mport/libexec/mport.check-fake/Makefile
    • -158
    • +167
    /contrib/mport/libexec/mport.create/mport.create.c
    • -3
    • +3
    /contrib/mport/libexec/mport.info/Makefile
    • -28
    • +17
    /contrib/mport/libexec/mport.install/mport.install.c
    • -3
    • +3
    /contrib/mport/libexec/mport.list/mport.list.c
    • -9
    • +4
    /contrib/mport/libmport/Makefile
    • -59
    • +60
    /contrib/mport/libmport/asset.c
    • -251
    • +248
    /contrib/mport/libmport/bundle_read_install_pkg.c
    • -0
    • +3
    /contrib/mport/libmport/bundle_read_update_pkg.c
    • -13
    • +12
    /contrib/mport/libmport/bundle_write.c
    • -75
    • +72
    /contrib/mport/libmport/clean.c
    • -224
    • +222
    /contrib/mport/libmport/create_primative.c
    • -78
    • +81
    /contrib/mport/libmport/db.c
    • -24
    • +62
    /contrib/mport/libmport/delete_primative.c
  16. … 29 more files in changeset.
6:08 pm

Lucas Holt

bump version.

Options
    • -0
    • +16
    /UPDATING
    • -1
    • +1
    /sys/conf/newvers.sh
6:01 pm

Lucas Holt

document

Options
    • -1
    • +5
    /UPDATING
6:00 pm

Lucas Holt

Due to a race condition between lookup of ".." and remounting a filesystem, a process running inside a jail might access filesystem hierarchy outside of jail.

Obtained from: FreeBSD

Options
    • -0
    • +5
    /sys/kern/vfs_mount.c
6:00 pm

Lucas Holt

Due to a race condition between lookup of ".." and remounting a filesystem, a process running inside a jail might access filesystem hierarchy outside of jail.

Obtained from: FreeBSD

Options
    • -0
    • +5
    /sys/kern/vfs_mount.c
5:59 pm

Lucas Holt

document change

Options
    • -0
    • +9
    /UPDATING
5:56 pm

Lucas Holt

A particular case of memory sharing is mishandled in the virtual memory system. It is possible and legal to establish a relationship where multiple descendant processes share a mapping which shadows memory of an ancestor process. In this scenario, when one process modifies memory through such a mapping, the copy-on-write logic fails to invalidate other mappings of the source page. These stale mappings may remain even after the mapped pages have been reused for another purpose.

Obtained from: FreeBSD

Options
    • -0
    • +27
    /sys/vm/vm_fault.c
5:56 pm

Lucas Holt

A particular case of memory sharing is mishandled in the virtual memory system. It is possible and legal to establish a relationship where multiple descendant processes share a mapping which shadows memory of an ancestor process. In this scenario, when one process modifies memory through such a mapping, the copy-on-write logic fails to invalidate other mappings of the source page. These stale mappings may remain even after the mapped pages have been reused for another purpose.

Obtained from: FreeBSD

Options
    • -0
    • +27
    /sys/vm/vm_fault.c
Thursday 18 Mar
11:08 am

Lucas Holt

Import mport 2.0.6

Options
    • -3
    • +3
    /contrib/mport/libexec/mport.list/mport.list.c
    • -0
    • +3
    /contrib/mport/mport/mport.c
Wednesday 24 Feb
5:19 pm

Lucas Holt

When a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.

Options
    • -1
    • +4
    /lib/libc/sys/jail.2
    • -4
    • +36
    /sys/kern/kern_descrip.c
    • -1
    • +1
    /sys/kern/kern_jail.c
    • -0
    • +1
    /sys/sys/filedesc.h
5:19 pm

Lucas Holt

When a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.

Options
    • -1
    • +4
    /lib/libc/sys/jail.2
    • -4
    • +36
    /sys/kern/kern_descrip.c
    • -1
    • +1
    /sys/kern/kern_jail.c
    • -0
    • +1
    /sys/sys/filedesc.h
2:31 pm

Lucas Holt

A process running inside a jail can avoid being killed during jail termination. If a jail is subsequently started with the same root path, a lingering jailed process may be able to exploit the window during which a devfs filesystem is mounted but the jail's devfs ruleset has not been applied, to access device nodes which are ordinarily inaccessible. If the process is privileged, it may be able to escape the jail and gain full access to the system.

Obtained from: FreeBSD

Options
    • -0
    • +6
    /sys/kern/kern_fork.c
    • -0
    • +18
    /sys/kern/kern_jail.c
    • -0
    • +1
    /sys/sys/jail.h
2:31 pm

Lucas Holt

A process running inside a jail can avoid being killed during jail termination. If a jail is subsequently started with the same root path, a lingering jailed process may be able to exploit the window during which a devfs filesystem is mounted but the jail's devfs ruleset has not been applied, to access device nodes which are ordinarily inaccessible. If the process is privileged, it may be able to escape the jail and gain full access to the system.

Obtained from: FreeBSD

Options
    • -0
    • +6
    /sys/kern/kern_fork.c
    • -0
    • +18
    /sys/kern/kern_jail.c
    • -0
    • +1
    /sys/sys/jail.h
1:14 pm

Lucas Holt

bump version.

Options
    • -1
    • +1
    /sys/conf/newvers.sh
1:00 pm

Lucas Holt

Document xen fix

Options
    • -0
    • +2
    /UPDATING
1:00 pm

Lucas Holt

Document xen fix

Options
    • -0
    • +4
    /UPDATING
12:57 pm

Lucas Holt

Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one reported to the backend driver, and the backend driver then loops over the results, performing follow-up actions based on the success or failure of each operation.

Unfortunately, when running in HVM/PVH mode, the BSD backend drivers

mishandle this: Some errors are ignored, effectively implying their success

from the success of related batch elements. In other cases, errors resulting

from one batch element lead to further batch elements not being inspected,

and hence successful ones to not be possible to properly unmap upon error

recovery.

Obtained from: FreeBSD

Options
    • -0
    • +21
    /sys/dev/xen/blkback/blkback.c
12:57 pm

Lucas Holt

Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one reported to the backend driver, and the backend driver then loops over the results, performing follow-up actions based on the success or failure of each operation.

Unfortunately, when running in HVM/PVH mode, the BSD backend drivers

mishandle this: Some errors are ignored, effectively implying their success

from the success of related batch elements. In other cases, errors resulting

from one batch element lead to further batch elements not being inspected,

and hence successful ones to not be possible to properly unmap upon error

recovery.

Obtained from: FreeBSD

Options
    • -0
    • +21
    /sys/dev/xen/blkback/blkback.c
10:36 am

Lucas Holt

use sysrc instead of making potential duplicates

Options
    • -3
    • +3
    /etc/rc.d/firstboot
10:08 am

Lucas Holt

Fix a security issue with PAM where the rules would not be applied.

Options
    • -1
    • +8
    /UPDATING
    • -3
    • +3
    /lib/libpam/modules/pam_login_access/login_access.c
10:08 am

Lucas Holt

Fix a security issue with PAM where the rules would not be applied.

Options
    • -0
    • +5
    /UPDATING
    • -3
    • +3
    /lib/libpam/modules/pam_login_access/login_access.c
Saturday 13 Feb
3:34 pm

Lucas Holt

document some of the changes since 2.0.2

Options
    • -0
    • +17
    /UPDATING
3:32 pm

Lucas Holt

bump the version

Options
    • -1
    • +1
    /sys/conf/newvers.sh
3:23 pm

Lucas Holt

fix build

Options
    • -298
    • +0
    /libexec/mport.check-fake/mport.check-fake.c
    • -126
    • +0
    /libexec/mport.check-for-older/mport.check-for-older.c
    • -1
    • +5
    /libexec/mport.create/Makefile
    • -2
    • +4
    /libexec/mport.info/Makefile
    • -53
    • +0
    /libexec/mport.init/mport.init.c
    • -96
    • +0
    /libexec/mport.merge/mport.merge.c
3:14 pm

Lucas Holt

Fix some more mport

Options
    • -298
    • +0
    /libexec/mport.check-fake/mport.check-fake.c
    • -126
    • +0
    /libexec/mport.check-for-older/mport.check-for-older.c
    • -1
    • +5
    /libexec/mport.create/Makefile
    • -2
    • +4
    /libexec/mport.info/Makefile
3:13 pm

Lucas Holt

Switch to external mport and place it in contrib.

Update to 2.0.5

Options
    • -0
    • +41
    /contrib/mport/.gitignore
    • -0
    • +11
    /contrib/mport/Jenkinsfile
    • -0
    • +26
    /contrib/mport/LICENSE
    • -0
    • +5
    /contrib/mport/Makefile
    • -0
    • +12
    /contrib/mport/README.md
    • -0
    • +14
    /contrib/mport/SECURITY.md
    • -0
    • +17
    /contrib/mport/libexec/Makefile
    • -0
    • +14
    /contrib/mport/libexec/mport.check-fake/Makefile
    • -0
    • +298
    /contrib/mport/libexec/mport.check-fake/mport.check-fake.c
    • -0
    • +14
    /contrib/mport/libexec/mport.check-for-older/Makefile
    • -0
    • +126
    /contrib/mport/libexec/mport.check-for-older/mport.check-for-older.c
    • -0
    • +14
    /contrib/mport/libexec/mport.create/Makefile
    • -0
    • +215
    /contrib/mport/libexec/mport.create/mport.create.c
    • -0
    • +14
    /contrib/mport/libexec/mport.delete/Makefile
    • -0
    • +119
    /contrib/mport/libexec/mport.delete/mport.delete.c
  16. … 124 more files in changeset.
3:13 pm

Lucas Holt

Switch to external mport and place it in contrib.

Update to 2.0.5

Options
    • -0
    • +41
    /contrib/mport/.gitignore
    • -0
    • +11
    /contrib/mport/Jenkinsfile
    • -0
    • +26
    /contrib/mport/LICENSE
    • -0
    • +5
    /contrib/mport/Makefile
    • -0
    • +12
    /contrib/mport/README.md
    • -0
    • +14
    /contrib/mport/SECURITY.md
    • -0
    • +17
    /contrib/mport/libexec/Makefile
    • -0
    • +14
    /contrib/mport/libexec/mport.check-fake/Makefile
    • -0
    • +298
    /contrib/mport/libexec/mport.check-fake/mport.check-fake.c
    • -0
    • +14
    /contrib/mport/libexec/mport.check-for-older/Makefile
    • -0
    • +126
    /contrib/mport/libexec/mport.check-for-older/mport.check-for-older.c
    • -0
    • +14
    /contrib/mport/libexec/mport.create/Makefile
    • -0
    • +215
    /contrib/mport/libexec/mport.create/mport.create.c
    • -0
    • +14
    /contrib/mport/libexec/mport.delete/Makefile
    • -0
    • +119
    /contrib/mport/libexec/mport.delete/mport.delete.c
  16. … 124 more files in changeset.
Tuesday 09 Feb
5:02 pm

Lucas Holt

add xfce config

Options
    • -1
    • +16
    /share/skel/dot.xinitrc
5:01 pm

Lucas Holt

Update Jenkinsfile

Options
    • -2
    • +2
    /Jenkinsfile
Sunday 07 Feb
12:07 pm

Lucas Holt

add some more

Options
    • -1
    • +8
    /share/skel/dot.xinitrc