IABSD.fr/ports/databases
Branch :
Log
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
 |
3a00fabd | 2023-06-16 06:04:01 | use v5.36 | |
|
fb35d399 | 2023-06-16 04:54:20 | use v5.36 | |
|
711b71c7 | 2023-06-16 04:17:56 | use v5.36 | |
|
f7a765cf | 2023-06-15 14:33:13 | use v5.36 tighten restrictions on IS NULL constructor | |
|
d503056b | 2023-06-15 12:53:07 | start moving to use v5.36 | |
 |
2e8b030b | 2023-06-12 10:06:29 | Support USE_NOBTCFI in ports to add -z nobtcfi to linker command lines and record this information in the sqlports db. ok kn@ tb@ OpenBSD is starting to support branch target identification on amd64 and arm64 (part of the features on Apple m2, and on Intel 11th gen/newer CPUs with "control-flow enhancement technology"). On amd64 it is currently being enabled/disabled in snapshot kernels at various times while we gain more information about which software in ports is working/not. This works by placing certain opcodes at legitimate targets of branch instructions (which are ignored on earlier CPUs as they are NOPs there) and trapping if an indirect call/jump is attempted to a location which does not contain such an opcode. This makes it harder for an attacker to jump to a location containing code of their choosing. For more details on the Intel implementatios See chapter 17 of SDM vol.1 https://www.intel.com/content/www/us/en/developer/articles/technical/intel-sdm.html Our system compilers on amd64/arm64 add the required opcodes at valid targets, but some code in ports is built with a compiler which does not do that, also some ports have asm code which has not had the required instructions added at those points yet (i.e. endbr64 on amd64). In those cases, the whole binary can be annotated with a segment type PT_OPENBSD_NOBTCFI as an indicator to the kernel not to enforce branch target control flow integrity for the produced binary. The relevant compiler options to enable (default on OpenBSD)/disable are: amd64: -fcf-protection=branch, -fcf-protection=none arm64: -mbranch-protection=bti, -mbranch-protection=none | |
 |
78acd796 | 2023-06-10 07:25:45 | update databases/pspg to 5.7.7 (bugfix release) | |
 |
eb035696 | 2023-06-02 11:00:19 | Update to evolution-data-server-3.48.3. | |
|
c4abc42a | 2023-05-31 09:15:27 | update to mongodb-4.4.22 | |
 |
7df2f4df | 2023-05-30 12:53:15 | update to 1.76 |