- Add ret protector options as no-ops.
- Add a clang pass that identifies potential ROP gadgets and replaces ROP
friendly instructions with safe alternatives. This initial commit fixes
this framework.
- Add RETGUARD to clang for amd64. This security mechanism uses per-function
random cookies to protect access to function return instructions, with the
effect that the integrity of the return address is protected, and function
return instructions are harder to use in ROP gadgets.
- Put the new retguard symbols in their own section,
'.openbsd.randomdata.retguard', to make them easier to work with in the
kernel hibernate code.
- Pass -nopie to the linker when -pg is specified to make the
profiler(gprof) work properly.
- Work around a bug where discarding the .ARM.exidx section in the armv7 kernel
linker script makes ld.lld(1) crash. This has been fixed in a different
(proper?) way upstream but backporting their fix is a bit too invasive.
- Merge '.openbsd.randomdata.*' sections into a single '.openbsd.randomdata'
section when linking, as we do when using ld from binutils.
from Brad (maintainer)
Intel(R) Threading Building Blocks (Intel(R) TBB) lets you easily write
parallel C++ programs that take full advantage of multicore performance,
that are portable, composable and have future-proof scalability.
ok bcallah@
Protozero is a minimalistic protocol buffer decoder and encoder in C++.
Designed for high performance. Suitable for writing zero copy parsers and
encoders with minimal need for run-time allocation of memory.
Low-level: this is designed to be a building block for writing a very
customized decoder for a stable protobuf schema. If your protobuf schema is
changing frequently or lazy decoding is not critical for your application
then this approach offers no value: just use the C++ API that can be
generated with the Google Protobufs 'protoc' program.
ok landry@
DragonFly BSD.
ok rsadowski@
libaio_compat is a port of the POSIX asynchronous I/O library from
DragonFly BSD to OpenBSD.
This version of AIO is aimed at standards compliance; it is not aimed at
either reasonability or performance. It merely wraps synchronous I/O
routines.
- upstream renamed the project to buildbot-worker, so rename the package
and rc script accordingly. Set @conflict for the upgrade path.
- vastly improve the rc script, passing --nodaemon and using rc_bg -
this way, if the buildbot is not reachable, rcctl will not return a
(failed) status (thx ajacoutot@)
- switch to python3
- enable tests
This is a plugin for setuptools that integrates Twisted trial. Once
installed, "python ./setup.py trial" will run the package's unit
tests using Twisted trial. The package can also optionally be
configured so that "python ./setup.py test" will use Twisted trial
instead of pyunit a.k.a. unittest.
ok ajacoutot@
