src/share, branch releng/10.4

Revis manual pages. [SA-18:08.tcp]

2018-08-15T02:31:10+00:00

Fix unauthenticated EAPOL-Key decryption vulnerability.
[SA-18:11.hostapd]

Approved by:	so

Address concerns about CPU usage while doing TCP reassembly.

2018-08-06T17:50:40+00:00

Currently, the per-queue limit is a function of the receive buffer
size and the MSS.  In certain cases (such as connections with large
receive buffers), the per-queue segment limit can be quite large.
Because we process segments as a linked list, large queues may not
perform acceptably.

The better long-term solution is to make the queue more efficient.
But, in the short-term, we can provide a way for a system
administrator to set the maximum queue size.

We set the default queue limit to 100.  This is an effort to balance
performance with a sane resource limit.  Depending on their
environment, goals, etc., an administrator may choose to modify this
limit in either direction.

Approved by:	so
Security:	FreeBSD-SA-18:08.tcp
Security:	CVE-2018-6922

MF10: r323870, MFC: r275751

2017-09-21T20:13:03+00:00

Add _NEW flag to mtx(9), sx(9), rmlock(9) and rwlock(9).
A _NEW flag passed to _init_flags() to avoid check for double-init.

Approved by:	re (gjb)

MFC r322810 and r322830:

2017-09-06T15:33:23+00:00

Add new mlx5ib(4) driver to the kernel source tree which supports
Remote DMA over Converged Ethernet, RoCE, for the ConnectX-4 series of
PCI express network cards.

There is currently no user-space support and this driver only supports
kernel side non-routable RoCE V1. The krping kernel module can be used
to test this driver. Full user-space support including RoCE V2 will be
added as part of the ongoing upgrade to ibcore from Linux 4.9. Otherwise
this driver is feature equivalent to mlx4ib(4). The mlx5ib(4) kernel
module will only be built when WITH_OFED=YES is specified.

Approved by:		re (marius)
Sponsored by:		Mellanox Technologies

MFC of 276737, 322200, 322201, 322271, and 322297

2017-08-24T21:44:23+00:00

276737: Remove old ioctl use and support
322200: Remove (broken) search for alternate superblocks
322201: Show differences when alternate superblock fails to match
322271: Cleanup for 322200.
322297: Restore fsck_ffs ability to find alternate superblocks

Discussed with: kib, imp
Differential Revision: https://reviews.freebsd.org/D11589
Approved by: re (kib)

MFC r284152:

2017-08-21T10:07:12+00:00

  Add makefile to build geom_map kld. Document some GEOM_* options
  in NOTES and geom(4).

PR:		197766
Approved by:	re (kib)

MFC r321812:

2017-08-08T11:25:09+00:00

Update pci_vendors to 2017.07.27

MFC 321858: Add alternate Turkish keyboard layout F, submitted by Ufur Guler.

2017-08-08T10:45:22+00:00

MFC 321859: While here, adjust a few file and path names in comments.

Regenerate src.conf(5) per r322100

2017-08-05T17:01:00+00:00

MFC r320702,r320703:

2017-08-05T16:55:07+00:00

r320702:

Formalize LEAPSECONDS and OLDTIMEZONES in share/zoneinfo/... as
`MK_ZONEINFO_LEAPSECONDS_SUPPORT == yes` and
`MK_ZONEINFO_OLD_TIMEZONES_SUPPORT == yes`.

Keep `LEAPSECONDS` and `OLDTIMEZONES` for backwards compatibility,
but print out a warning notifying users that they should use the new
variables, in an effort to migrate them to the variables. This is being
done mostly for automated build tools, etc, that might rely on these
variables being set. The variables will be removed in the future on
^/head, e.g., after ^/stable/12 is cut.

Relnotes:       yes

r320703:

Add tests to help verify Links functionality for .../contrib/tzdata/backwards

MFC with:	r320702