Newer bugs come first
- Check the index hasn't changed after writing the cmp entry.
- Fix a locking issue in the IPPROTO_SCTP level SCTP_PEER_ADDR_THLDS socket
- Fix a locking bug in the IPPROTO_SCTP level SCTP_EVENT socket option.
- Fix locking for IPPROTO_SCTP level SCTP_DEFAULT_PRINFO socket option.
- Fix an off-by-one error in the input validation of the SCTP_RESET_STREAMS socketoption.
- Limit the user-controllable amount of memory the kernel allocates via IPPROTO_SCTP level socket options.
- Fix getsockopt() for IP_OPTIONS/IP_RETOPTS.
- Avoid overfow in vtruncbuf()
- Limit option_len for the TCP_CCALGOOPT.
- Correct vm_fault_copy_entry() handling of backing file truncation after the file mapping was wired.
- In vm_fault_copy_entry(), we should not assert that entry is charged if the dst_object is not of swap type.
- Handle a guest executing a vm instruction by trapping and raising an undefined instruction exception.
- disallow clock_settime too far in the future to avoid panic
- Fix parsing error when processing cmsg in SCTP send calls.