Fix kernel memory disclosure in control message and SCTP notifications.

Security:	FreeBSD-SA-14:17.kmem
Security:	CVE-2014-3952, CVE-2014-3953


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268432 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Document FreeBSD-SA-14:17.kmem

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268439 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Bump __FreeBSD_version after SA-14:17.kmem so we have something
to test against in the freebsd.org cluster.


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268443 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC r268212:
Note that most errors are possible for all syscalls from utimes(2)
family.  Minor wording corrections.


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268485 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC r256920

The TCP delayed ACK logic isn't aware of LRO passing up large aggregated
segments thinking it received only one segment. This causes it to enable
the delay the ACK for 100ms to wait for another segment which may never
come because all the data was received already.

Doing delayed ACK for LRO segments is bogus for two reasons: a) it pushes
us further away from acking every other packet; b) it introduces additional
delay in responding to the sender.  The latter is especially bad because it
is in the nature of LRO to aggregated all segments of a burst with no more
coming until an ACK is sent back.

Change the delayed ACK logic to detect LRO segments by being larger than
the MSS for this connection and issuing an immediate ACK for them to keep
the ACK clock ticking without interruption.


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268506 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Anticipate when we will announce 9.3-RELEASE.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268513 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC r267986:
Remove odd practice of inverting error codes.

-EPERM is equal to ERESTART, returning which from ioctl() handler causes
infinite syscall restart.


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268547 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC r268419:
Fix use-after-free on XPT_RESET_BUS.

That command is not queued, so does not use later status update.


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268548 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC	r268272:

minor perf enhancement for UTF-8

Reduce some duplicate code.

Reference:
https://www.illumos.org/issues/628

Obtained from:	Illumos


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268573 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC	r267627:
strptime: add support for %t and %n

Posix strptime() requires support for %t and %n, which were added
to the illumos port.  Curiously we were skipping white spaces by
default in most other cases making %t meaningless.

We now skip spaces in the case of the %e specifier as strftime(3)
explicitly adds a space for the single digit case.

Reference:
http://pubs.opengroup.org/onlinepubs/009695399/functions/strptime.html

PR:		173421
Obtained from:	Illumos (Rev. a11c1571b6942161b0186d0588609448066892c2)


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268574 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
MFC: r268008
There might be a potential race condition for the NFSv4 client
when a newly created file has another open done on it that
update the open mode. This patch moves the code that updates
the open mode up into the block where the mutex is held to
ensure this cannot happen. No bug caused by this potential
race has been observed, but this fix is a safety belt to ensure
it cannot happen.


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268579 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Switch stable/9 back to STABLE now that release/9.3.0 is
tagged.

Approved by:	re (implicit)
Sponsored by:	The FreeBSD Foundation


git-svn-id: svn+ssh://svn.freebsd.org/base/stable/9@268592 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f