From nobody Fri Jan 12 06:19:55 2024 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TBBGc0Ffxz56729 for ; Fri, 12 Jan 2024 06:20:08 +0000 (UTC) (envelope-from jrtc27@jrtc27.com) Received: from mail-wm1-f44.google.com (mail-wm1-f44.google.com [209.85.128.44]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4TBBGb3vMQz4FgS for ; Fri, 12 Jan 2024 06:20:07 +0000 (UTC) (envelope-from jrtc27@jrtc27.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-40e62979feeso11516025e9.0 for ; Thu, 11 Jan 2024 22:20:07 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1705040406; x=1705645206; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=XFnR3zNvNmQPJiyLqmsrt7mZ6T0f6tb0MvtwqIWRusc=; b=FlnS3+8dfjf14q96k++wvPZqIUbLhCW9uEuoDaEf/RzAwUzvvLhrEy04fz3vZoAKzm HvO4oUdoXR6wwcY2AWtunthpnbATo47NBKvSmx9vxJdL8uCJFMj5ZXs6H5D5b6r3NmUk WvVdAOOkSV+oZtRh/JrJFb27UKI9BDgZMUbaHq4wUiecPx4TOoZ05aovIII5BAr+LjZs h1vTRtSfvxHJv97fqbkQrCz/qUxsGTOiGGdzWqUlYY+em8+ha1OD00SVKVeHfeOaBOdB S4EA/PucZR1s5o5+FdB3GHE94TarMkZi/UeUon6CwBsUlKI/Dacy4QGDJubBsaSuhVtF tYsQ== X-Gm-Message-State: AOJu0Yy5ztQPUqyuiToF9+zFGPdg8VUpEIovZMiPgNJ2lUqqMjiIUJbj wh+3r3m3zQF8mf2Znd0rLaLyI8wVgwicZA== X-Google-Smtp-Source: AGHT+IEnopjSseAY9BVzY8A7ZS060Go6tm7cbiMcIuPMfuzvMzjnNd1jmYsolAjsumWHpIoIjJiobw== X-Received: by 2002:a05:600c:4fd5:b0:40d:6f89:a839 with SMTP id o21-20020a05600c4fd500b0040d6f89a839mr551398wmq.30.1705040405950; Thu, 11 Jan 2024 22:20:05 -0800 (PST) Received: from smtpclient.apple ([131.111.5.246]) by smtp.gmail.com with ESMTPSA id f15-20020a05600c154f00b0040e3b12052bsm8453909wmg.5.2024.01.11.22.20.05 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 11 Jan 2024 22:20:05 -0800 (PST) Content-Type: text/plain; charset=us-ascii List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-src-main@freebsd.org X-BeenThere: dev-commits-src-main@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.200.91.1.1\)) Subject: Re: git: cb350ba7bf7c - main - kerberos: Fix numerous segfaults when using weak crypto From: Jessica Clarke In-Reply-To: <202401111331.40BDVZfn015429@gitrepo.freebsd.org> Date: Fri, 12 Jan 2024 06:19:55 +0000 Cc: "src-committers@freebsd.org" , "dev-commits-src-all@freebsd.org" , "dev-commits-src-main@freebsd.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <202401111331.40BDVZfn015429@gitrepo.freebsd.org> To: Cy Schubert X-Mailer: Apple Mail (2.3774.200.91.1.1) X-Rspamd-Queue-Id: 4TBBGb3vMQz4FgS X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US] On 11 Jan 2024, at 13:31, Cy Schubert wrote: >=20 > The branch main has been updated by cy: >=20 > URL: = https://cgit.FreeBSD.org/src/commit/?id=3Dcb350ba7bf7ca7c4cb97ed2c20ab45af= 60382cfb >=20 > commit cb350ba7bf7ca7c4cb97ed2c20ab45af60382cfb > Author: Cy Schubert > AuthorDate: 2023-12-06 15:30:05 +0000 > Commit: Cy Schubert > CommitDate: 2024-01-11 13:26:42 +0000 >=20 > kerberos: Fix numerous segfaults when using weak crypto >=20 > Weak crypto is provided by the openssl legacy provider which is > not load by default. Load the legacy providers as needed. >=20 > When the legacy provider is loaded into the default context the = default > provider will no longer be automatically loaded. Without the = default > provider the various kerberos applicaions and functions will = abort(). Hi, This has completely broken macOS and Linux cross-building. Please either fix this quickly or, if unable to, revert until such time as you can. Note that patches can be tested by creating a PR against the GitHub mirror. Jess