Age | Commit message (Collapse) | Author |
|
kept. Rename LIBUSB to LIBUSBHID as there is only one LIBUSB use and
many more attempts to refer to LIBUSBHID.
|
|
|
|
|
|
|
|
|
|
OK deraadt@
|
|
for those tests that are expected to fail because they're not yet
implemented.
okay bluhm@
|
|
okay bluhm@
|
|
- actually use the ERRORS framework for REGRESS_LOG
- put it at end of file, as best working (years of practice on bsd.port.mk)
- actually use .SILENT
- fix REGRESS_IGNORE_FAIL. Don't put a - in front of lines, but just
don't error out as false on FAILED tests.
This finally allows ^C to actually interrupt a testsuite.
- add one missing .PHONY (quite a few more for later)
okay bluhm@
|
|
timeout based on CPU seconds is pretty useless, most hanging tests
sleep and do not spin. The timeout could not be distinguished from
failure. Only 3 tests used it.
OK anton@ schwarze@ cheloha@ otto@
|
|
ok deraadt@
|
|
since clang doesn't seem to support secure-plt for small pic.
ok deraadt@, millert@
|
|
|
|
in cases where you don't want it installed, or it isn't built.
ok jsg
|
|
duplicate work.
|
|
|
|
Might help speed up parts like base-clang. Also, better be consistent.
ok kettenis@ deraadt@
|
|
|
|
|
|
As of usr.bin/xinstall/install.c revision 1.68, -S is a no-op and
install(1) will always create files safely, thus clean the option usage
from the tree.
Diff from Lauri Tirkkonen <lotheac at iki dot fi>, thanks.
|
|
ok ajacoutot@, tb@
|
|
It is not typical for "make build" to do pruning of the base system, but
... not sure where else we can do this
ok kettenis
|
|
|
|
ok deraadt@
|
|
ok tedu@
|
|
print SKIPPED. This helps to detect such incomplete tests.
OK anton@
|
|
OK deraadt@
|
|
with base gcc, whereas with clang it causes an error.
Suggested by and OK kettenis@
|
|
ok kettenis@ deraadt@
|
|
compiler flags. Pass DIST_CFLAGS from the crunchgen-generated .mk
file.
Compile the install media with -fno-unwind-tables to avoid emitting
.eh_frame sections. This saves substantial space on amd64.
with/ok kettenis@
|
|
OK anton@ benno@
|
|
OK anton@ jca@ tb@ benno@
|
|
|
|
will be installed as /usr/bin/ld.bfd on supported systems. This allows
users to fall back on the old linker by using the -fuse-ld=bfd option on
systems where lld is the default linker.
Switch armv7 to use lld as the default linker. On arm64 we already use lld
as the default linker. Other platforms will keep using the GNU linker for
now.
ok patrick@, deraadt@, phessler@
|
|
random cookies to protect access to function return instructions, with the
effect that the integrity of the return address is protected, and function
return instructions are harder to use in ROP gadgets.
On function entry the return address is combined with a per-function random
cookie and stored in the stack frame. The integrity of this value is verified
before function return, and if this check fails, the program aborts. In this way
RETGUARD is an improved stack protector, since the cookies are per-function. The
verification routine is constructed such that the binary space immediately
before each ret instruction is padded with int03 instructions, which makes these
return instructions difficult to use in ROP gadgets. In the kernel, this has the
effect of removing approximately 50% of total ROP gadgets, and 15% of unique
ROP gadgets compared to the 6.3 release kernel. Function epilogues are
essentially gadget free, leaving only the polymorphic gadgets that result from
jumping into the instruction stream partway through other instructions. Work to
remove these gadgets will continue through other mechanisms.
Remaining work includes adding this mechanism to assembly routines, which must
be done by hand. Many thanks to all those who helped test and provide feedback,
especially deaadt, tb, espie and naddy.
ok deraadt@
|
|
|
|
ok deraadt@
|
|
ok patrick@
|
|
compatibility layer.
|
|
ok guenther@
|
|
one location under /usr/share/relink.
Be more specific in src/etc/rc reorder_libs() what filesystems
need r/w remount and ensure that their mount state is restored.
Idea and positive feedback from deraadt@
OK aja@ tb@
|
|
ok jsg@, patrick@, deraadt@
|
|
any longer; ok espie@ deraadt@
|
|
|
|
ok espie@
|
|
deleting ../ in the path
|
|
but keep gcc4 in the build for these as well
ok deraadt@
|
|
|
|
clang optimizes better for size with -Oz so use that as a default to avoid
overflowing the ramdisk floppies. gcc now accepts -Oz as an alias for -Os.
ok kettenis@
|
|
okay schwarze@
|