OpenBSD/src RIwq3gmsbin/pfctl pfctl.c

   ambigious -> ambiguous
VersionDeltaFile
1.406+2-2sbin/pfctl/pfctl.c
+2-21 files

OpenBSD/src 99071WAlib/libssl d1_lib.c

   libssl: avoid narrowing return value in dtls1_ctrl

   dtls1_ctrl() and ssl3_ctrl() return long, but the intermediate return
   value was stored in an int. Use long to avoid truncating values returned
   by ssl3_ctrl().

   CID 497395

   From Yuji Hashimoto

   ok tb jsing
VersionDeltaFile
1.67+2-2lib/libssl/d1_lib.c
+2-21 files

OpenBSD/src duJIUU2lib/libcrypto crypto_ex_data.c, lib/libcrypto/man CRYPTO_set_ex_data.3 OPENSSL_init_crypto.3

   Make CRYPTO_cleanup_all_ex_data() a compatibility no-op

   The ex_data callback registry is process-wide, but this API could free
   it while other threads were still using libcrypto, resulting in a
   use-after-free.

   Retain the public symbol as a compatibility no-op and mark it
   deprecated. Move the actual cleanup to an internal function called by
   OPENSSL_cleanup(). Replace the in-tree callers with OPENSSL_cleanup()
   at final shutdown to preserve cleanup behavior and coverage.

   Document both APIs and the requirement that OPENSSL_cleanup() only be
   called after all threads and components have stopped using libcrypto.

   ok tb
VersionDeltaFile
1.8+30-5lib/libcrypto/man/OPENSSL_init_crypto.3
1.18+24-3lib/libcrypto/man/CRYPTO_set_ex_data.3
1.7+13-2lib/libcrypto/crypto_ex_data.c
1.42+4-5usr.bin/openssl/openssl.c
1.46+3-5regress/lib/libssl/ssl/ssltest.c
1.12+3-4regress/lib/libcrypto/dsa/dsatest.c
+77-248 files not shown
+93-4714 files

OpenBSD/src YtiaUvQusr.bin/mandoc cgi.c

   Delay starting HTML output until we are sure that we have some data
   to offer to the user, either from a manual page file that can actually
   be opened or at least a list of links to pages matching the user's query.

   When no information whatsoever can be accessed, always return
   HTTP 400 Bad Request (e.g. for an unsupported, nonexistent, or unreadable
   path or an invalid architecture) or HTTP 500 Internal Server Error (e.g.
   for a system call failure, an inaccessible or invalid configuration file,
   an inaccessible directory, or a corrupt database).

   This also prepares for pledge(2)/unveil(2) improvements by making it
   possible to invoke these system calls after open(2)ing the chosen
   manual page file.
VersionDeltaFile
1.122+55-44usr.bin/mandoc/cgi.c
+55-441 files

OpenBSD/src OFFzzjCsys/dev/wscons wsemul_vt100var.h wsemul_sun.c

   Clamp numeric arguments of terminal escape sequences to an arbitrary value of
   100,000. The existing logic would happily process as many digits as provided,
   which could make the values wraparound at 2**32, or be considered as negative
   values if cast to a signed type, leading to incorrect processing.

   Bug report by Acts1631.
VersionDeltaFile
1.49+28-6sys/dev/wscons/wsemul_vt100.c
1.38+17-4sys/dev/wscons/wsemul_sun.c
1.15+4-2sys/dev/wscons/wsemul_vt100var.h
+49-123 files

OpenBSD/src KFwAPfUsbin/ifconfig brconfig.c

   whitespace fixes, no functional change
VersionDeltaFile
1.47+3-3sbin/ifconfig/brconfig.c
+3-31 files

OpenBSD/src mmz1UBysbin/ifconfig brconfig.c

   collapse ranges of community ids when printing pvlan info.

   mostly borrowed from the code that collapses ranges of vids when
   printing the allowed vlan tags on ports.
VersionDeltaFile
1.46+19-5sbin/ifconfig/brconfig.c
+19-51 files

OpenBSD/ports snqU16caudio/sndiortp Makefile distinfo, audio/sndiortp/pkg DESCR

   audio/sndiortp: Update to v1.1.0

   ok rsadowski
VersionDeltaFile
1.2+2-2audio/sndiortp/distinfo
1.2+0-3audio/sndiortp/pkg/DESCR
1.2+1-1audio/sndiortp/Makefile
+3-63 files

OpenBSD/src VR82Se9lib/libsndio mio.c sndio.7, usr.bin/sndiod sock.c sndiod.c

   sndiod: Unify "midithru/N" and "midi/N" ports

   Add the -p option to register MIDI ports that programs can
   access as "midi/<name>". They have the same functionnality as the
   current "midithru/<number>" ports. The default MIDI port becomes
   simply "midi/default", which is automatically created (similarly
   to the default audio device).

   The "midithru/<number>" syntax is still accepted for backwards
   compatibility.
VersionDeltaFile
1.28+11-12lib/libsndio/sndio.7
1.23+16-2usr.bin/sndiod/sndiod.8
1.62+10-2usr.bin/sndiod/sndiod.c
1.70+7-1usr.bin/sndiod/sock.c
1.24+2-2lib/libsndio/mio.c
+46-195 files

OpenBSD/ports QGmPnNjprint/htmldoc Makefile distinfo

   Update to htmldoc-1.9.24.
VersionDeltaFile
1.27+2-2print/htmldoc/distinfo
1.67+1-2print/htmldoc/Makefile
+3-42 files

OpenBSD/src OjNSFZcsys/net if_veb.c

   cope with the port map being NULL in veb_vid_inuse.

   avoids a null deref when configuring pvlans before ports on a veb.
VersionDeltaFile
1.73+4-1sys/net/if_veb.c
+4-11 files

OpenBSD/src WZiZyLsbin/stty stty.c

   use TCSANOW (which is 0) for the 2nd parameter of tcsetattr instead of 0
VersionDeltaFile
1.23+2-2bin/stty/stty.c
+2-21 files

OpenBSD/ports mdSoo4kastro/py-skyfield Makefile

   skyfield missing dep on py-certifi

   reported by Mikolaj Kucharski
VersionDeltaFile
1.23+2-0astro/py-skyfield/Makefile
+2-01 files

OpenBSD/src 8kx3C1kusr.sbin/vmd i8253.c

   vmd: only assert IRQ0 for i8253 channel 0

   From ssnf at ssnf.xyz
VersionDeltaFile
1.48+3-2usr.sbin/vmd/i8253.c
+3-21 files

OpenBSD/src TnJXluXusr.sbin/vmd i8253.c

   vmd: reset i8253 input latch on writes

   Writes should ovewrite all bits.

   From ssnf at ssnf.xyz
VersionDeltaFile
1.47+2-2usr.sbin/vmd/i8253.c
+2-21 files

OpenBSD/src kDkOZW1lib/libc/gen auth_subr.c

   libc: fix ability to set AUTHV_INTERACTIVE

   ok millert@
VersionDeltaFile
1.57+2-2lib/libc/gen/auth_subr.c
+2-21 files

OpenBSD/ports 6EmamRtmath/maxima Makefile distinfo, math/maxima/pkg PLIST

   update maxima to 5.50.0
VersionDeltaFile
1.30+99-50math/maxima/pkg/PLIST
1.29+2-2math/maxima/distinfo
1.57+1-1math/maxima/Makefile
+102-533 files

OpenBSD/ports PbzKSz9devel/cli11 Makefile, devel/cli11/pkg PLIST

   the last update broke a port I'm working on since PLIST was not updated

   ok jtt@
VersionDeltaFile
1.4+2-0devel/cli11/pkg/PLIST
1.8+1-0devel/cli11/Makefile
+3-02 files

OpenBSD/src 2z8hgVmusr.bin/mandoc roff_escape.c

   Fix a segfault that bluhm@ found on his i386 regress machine.

   Even in the "out:" code path of the escape sequence parser,
   for rval == ESCAPE_SPECIAL, some of the parsing results are
   still used for error reporting purposes, specifically to
   distinguish valid and invalid character names.

   So, when parsing fails so badly that there is no name whatsoever,
   it is not sufficient to bail out via "goto out;" but in addition,
   we must make sure that the return value does not remain ESCAPE_SPECIAL.

   However, other return values must remain intact even in case of
   extremely bad parsing errors.  For example, an \A escape sequence
   still qualifies as an ESCAPE_EXPAND sequence and must expand
   to the string "0" even if it lacks any argument whatsoever.
VersionDeltaFile
1.17+3-1usr.bin/mandoc/roff_escape.c
+3-11 files

OpenBSD/src 9aBoOZGetc rc

   Move /tmp clearing earlier in /etc/rc

   Moving pruning above relinking and early daemon startup to be able
   to clear everything old without removing entries that are in use.

   The goals are:

   1) free up at least one inode, because mkstemp needs at least one
   2) free up a few more, just in case.  We settled on 50.
   3) With an inode freed up for mktemp, create a directory and move all the
      deleteable files into that directory and remove it asyncronously.

   The first two goals were very fiddly to get right.

   Much help and discussion with deraadt@ plus dlg@ and kn@

   ok for an earlier diff from kn@
VersionDeltaFile
1.592+19-23etc/rc
+19-231 files

OpenBSD/ports kFkzvBtdevel/codex Makefile distinfo, devel/codex/patches patch-codex-rs_cli_src_main_rs patch-codex-rs_cli_src_doctor_rs

   devel/codex: update to 0.151.0
VersionDeltaFile
1.36+3-3devel/codex/patches/patch-codex-rs_Cargo_toml
1.3+2-2devel/codex/patches/patch-codex-rs_core_src_tools_handlers_apply_patch_rs
1.44+2-2devel/codex/distinfo
1.3+1-1devel/codex/patches/patch-codex-rs_cli_src_main_rs
1.2+1-1devel/codex/patches/patch-codex-rs_cli_src_doctor_rs
1.46+1-1devel/codex/Makefile
+10-102 files not shown
+12-128 files

OpenBSD/ports ymhR7gYmultimedia/pipewire/pipewire Makefile, multimedia/pipewire/pipewire/patches patch-src_daemon_pipewire_conf_in

   No need for this patch, pipewire takes care of it.
VersionDeltaFile
1.61+1-1multimedia/pipewire/pipewire/Makefile
1.8+0-0multimedia/pipewire/pipewire/patches/patch-src_daemon_pipewire_conf_in
+1-12 files

OpenBSD/ports EGZEgJvmultimedia/pipewire/wireplumber Makefile, multimedia/pipewire/wireplumber/files 10-wireplumber.conf.in

   Add configuration to start wireplumber automatically by pipewire.
VersionDeltaFile
1.24+6-0multimedia/pipewire/wireplumber/Makefile
1.1+5-0multimedia/pipewire/wireplumber/files/10-wireplumber.conf.in
1.15+3-0multimedia/pipewire/wireplumber/pkg/PLIST
+14-03 files

OpenBSD/ports ZUGpxSEx11/gtk+4 Makefile, x11/gtk+4/patches patch-gdk_gdk_c

   Skip the OpenURI portal when /proc/self/fd is unavailable so GTK uses the
   in-process gtk_show_uri_full()/GAppInfo path instead.
   This unbreaks opening files and directories when a portal is running.
VersionDeltaFile
1.1+22-0x11/gtk+4/patches/patch-gdk_gdk_c
1.126+2-0x11/gtk+4/Makefile
+24-02 files

OpenBSD/ports 0UnEFtgdevel/github-cli Makefile modules.inc

   update to github-cli 2.98.0; from David Uhden Collado
VersionDeltaFile
1.71+224-188devel/github-cli/distinfo
1.62+98-81devel/github-cli/modules.inc
1.80+1-1devel/github-cli/Makefile
+323-2703 files

OpenBSD/ports zQJNftnmultimedia/shotcut Makefile distinfo, multimedia/shotcut/patches patch-src_mainwindow_cpp patch-src_CMakeLists_txt

   Update to shotcut 26.8.1, ok ian

   https://github.com/mltframework/shotcut/releases/tag/v26.8.1
VersionDeltaFile
1.20+1,305-0multimedia/shotcut/pkg/PLIST
1.3+0-14multimedia/shotcut/patches/patch-CMakeLists_txt
1.22+2-2multimedia/shotcut/distinfo
1.15+1-1multimedia/shotcut/patches/patch-src_mainwindow_cpp
1.11+1-1multimedia/shotcut/patches/patch-src_CMakeLists_txt
1.29+1-1multimedia/shotcut/Makefile
+1,310-191 files not shown
+1,311-207 files

OpenBSD/ports j5FHdk0net/tdesktop distinfo Makefile, net/tdesktop/patches patch-Telegram_lib_webview_webview_platform_linux_webview_linux_webkitgtk_library_cpp patch-Telegram_SourceFiles_platform_linux_specific_linux_cpp

   net/tdesktop: update to 7.1.3

   fido's patches came from Nazarenko Mykyta's 64gram port

   I also drop my X11 scroll patches, because usptream had fixed scroll
   and now it works out of the box.

   OK: kn@ (maintainer)
VersionDeltaFile
1.1+19-0net/tdesktop/patches/patch-Telegram_cmake_lib_fido2_cmake
1.1+17-0net/tdesktop/patches/patch-Telegram_SourceFiles_webauthn_webauthn_common_cpp
1.228+4-5net/tdesktop/Makefile
1.169+2-2net/tdesktop/distinfo
1.13+0-3net/tdesktop/patches/patch-Telegram_SourceFiles_platform_linux_specific_linux_cpp
1.6+1-1net/tdesktop/patches/patch-Telegram_lib_webview_webview_platform_linux_webview_linux_webkitgtk_library_cpp
+43-113 files not shown
+43-119 files

OpenBSD/ports i9hF9Jddevel/appstream Makefile, devel/appstream/patches patch-compose_worker_asw-worker_c patch-compose_worker_asw-main_c

   Update to appstream-1.2.0.
VersionDeltaFile
1.14+54-36devel/appstream/pkg/PLIST-main
1.1+66-0devel/appstream/patches/patch-compose_asc-media-ipc_c
1.1+31-0devel/appstream/patches/patch-compose_worker_asw-ipc_c
1.1+23-0devel/appstream/patches/patch-compose_worker_asw-main_c
1.27+10-12devel/appstream/Makefile
1.1+17-0devel/appstream/patches/patch-compose_worker_asw-worker_c
+201-482 files not shown
+206-548 files

OpenBSD/src 0itpZkiusr.sbin/relayctl relayctl.8 relayctl.c

   relayctl: rework show output and add -v flag

   - Added -v flag for more detailed output.
   - Replaced tab separators with space-padded, truncated columns (%.Ns) for
     stable alignment.
   - Added a new "Checks" column for host checks (N/N), replacing the total: N/N
     checks sub-line.
   - Shortened redirect to rdr in the Type column to stay under 80 columns.
   - Without -v: compact status (down); with -v: error inlined (down (tcp connect
     timeout)).
   - Table status shows host count (N hosts) only with -v.
   - retries sub-line only appears with show hosts -v.
   - show hosts no longer lists tables; use show summary for that.

   OK kirill@
VersionDeltaFile
1.67+65-42usr.sbin/relayctl/relayctl.c
1.35+6-3usr.sbin/relayctl/relayctl.8
+71-452 files

OpenBSD/ports vsGLqasgraphics/libvips distinfo Makefile, graphics/libvips/pkg PLIST

   Update to libvips-8.18.6.
VersionDeltaFile
1.11+11-7graphics/libvips/Makefile
1.5+2-4graphics/libvips/pkg/PLIST
1.5+2-2graphics/libvips/distinfo
+15-133 files