From owner-svn-src-stable@freebsd.org Mon Nov 11 08:03:50 2019 Return-Path: Delivered-To: svn-src-stable@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id B34591AEA3A; Mon, 11 Nov 2019 08:03:50 +0000 (UTC) (envelope-from antoine.brodin.freebsd@gmail.com) Received: from mail-qv1-f67.google.com (mail-qv1-f67.google.com [209.85.219.67]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 47BNg73x4Nz3PBQ; Mon, 11 Nov 2019 08:03:47 +0000 (UTC) (envelope-from antoine.brodin.freebsd@gmail.com) Received: by mail-qv1-f67.google.com with SMTP id c9so4499694qvz.9; Mon, 11 Nov 2019 00:03:47 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=02SEFZZ6/rJoM1txdfQFf+2fmMYuAGF/4DYlI3R3+fI=; b=gzRBZmCEPyUTvl7/4ZpYTE6Vm/wGHr51IObF+obMwDlbUSogPunGH1EBHbSyARzhgp SilDOok1bxj1qmct2hmzjlXWCselLim6uARGVAJH+VULZGw1dM2urzIsGailgBpCPLM9 t7K4IDPGpXwxslSgYrlrjIc5QRdRidY2Hl4FA20VD14y00mjp26RmWg9G1A5MtH3mswj K1uMOElLkEVPmau8uODyzaEI9sIkKJnVX1RZoAiTco+AUKV8xNpZKi+wpSMrqD0CsXez 3NwtWwf5N7hAqAA1uguiR3nI1MFzedwSsC6f1RIo4I3Y8Zj0NtGKhXeRWHeWTx08H5er KzVQ== X-Gm-Message-State: APjAAAXcdzsHNAHJgGuJoCkzdCN/FF3f9RKbCq+tZo/cyXgXu+6NPk/3 ugkS+sHqvie/bb9thRKGXMlLAo1C+V8qFvTVCEPi6dkc X-Google-Smtp-Source: APXvYqwM5j6uiuoOTwqlNZUYxunUiYE8EKd9Q1nT+NZj6kAJwzNRrXPurowCvre9KbeGSWQ8f5DvQTwfJVzhpMj4g6k= X-Received: by 2002:a0c:facf:: with SMTP id p15mr1265583qvo.212.1573459420618; Mon, 11 Nov 2019 00:03:40 -0800 (PST) MIME-Version: 1.0 References: <201911101841.xAAIfEXV088995@repo.freebsd.org> In-Reply-To: <201911101841.xAAIfEXV088995@repo.freebsd.org> From: Antoine Brodin Date: Mon, 11 Nov 2019 09:03:28 +0100 Message-ID: Subject: Re: svn commit: r354598 - in stable: 11/contrib/libc++/include 11/sys/sys 12/contrib/libc++/include 12/sys/sys To: Dimitry Andric Cc: src-committers , svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-11@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 47BNg73x4Nz3PBQ X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-6.00 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLY(-4.00)[]; TAGGED_FROM(0.00)[] X-BeenThere: svn-src-stable@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for all the -stable branches of the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 08:03:50 -0000 On Sun, Nov 10, 2019 at 7:41 PM Dimitry Andric wrote: > > Author: dim > Date: Sun Nov 10 18:41:13 2019 > New Revision: 354598 > URL: https://svnweb.freebsd.org/changeset/base/354598 > > Log: > MFC r354460: > > Merge commit e8316372b from llvm git (by Louis Dionne): > > [libc++] Add `__truncating_cast` for safely casting float types to > integers > > This is needed anytime we need to clamp an arbitrary floating point > value to an integer type. > > Thanks to Eric Fiselier for the patch. > > Differential Revision: https://reviews.llvm.org/D66836 > > llvm-svn: 370891 > > Merge commit b92deded8 from llvm git (by Louis Dionne): > > [libc++] Move __clamp_to_integral to , and harden against > min()/max() macros > > llvm-svn: 370900 > > Merge commit 0ec6a4882 from llvm git (by Louis Dionne): > > [libc++] Fix potential OOB in poisson_distribution > > See details in the original Chromium bug report: > https://bugs.chromium.org/p/chromium/issues/detail?id=994957 > > Together, these fix a security issue in libc++'s implementation of > std::poisson_distribution, which can be exploited to read data which is > out of bounds. > > Note there are no programs in the FreeBSD base system that use > std::poisson_distribution, so this is only a possible issue for ports > and external programs which have been built against libc++. Therefore, > I am bumping __FreeBSD_version for the benefit of our port maintainers. > > Requested by: emaste > Security: potential OOB read > > Modified: > stable/11/contrib/libc++/include/cmath > stable/11/contrib/libc++/include/random > stable/11/sys/sys/param.h > Directory Properties: > stable/11/ (props changed) > > Changes in other areas also in this revision: > Modified: > stable/12/contrib/libc++/include/cmath > stable/12/contrib/libc++/include/random > stable/12/sys/sys/param.h > Directory Properties: > stable/12/ (props changed) Hi, It seems that some recent changes to stable/11 are broken, lots of ports now fail to build on stable/11. Antoine (with hat: portmgr)