OpenBSD/src hU1Bj4setc/rpki lacnic.constraints

   lacnic.constraints: allow 274845-275868

   Per https://www.mail-archive.com/apops@apops.net/msg02648.html
   and https://www.iana.org/assignments/as-numbers/as-numbers.xhtml

   tweaked version of a diff by/ok job
VersionDeltaFile
1.8+2-2etc/rpki/lacnic.constraints
+2-21 files

OpenBSD/src nYKeLLZusr.sbin/bgpd chash.c

   Don't typecast cg_meta to uint8_t * and access it like an array. This is
   not endian safe and breaks on big endian systems. Found the hard way by
   denis@. Instead use the same shit and mask operations as used in the
   other functions operating on cg_meta.
   OK denis@
VersionDeltaFile
1.6+7-3usr.sbin/bgpd/chash.c
+7-31 files

OpenBSD/src i1ii8Imsbin/ifconfig brconfig.c, sys/net if_veb.c

   allow vlan tags (and therefore vlan interfaces) on top of vports.

   bluhm@ really wants to test vlan interfaces on vports even though
   veb as a vlan aware switch allows vports with the right "untagged"
   pvid configured to do the same thing with less layering.
VersionDeltaFile
1.54+8-12sys/net/if_veb.c
1.44+8-2sbin/ifconfig/brconfig.c
+16-142 files

OpenBSD/src DTIyzwUsys/net hfsc.c

   replace hfsc_uptime with nsecuptime.

   hfsc_uptime is an alias to nsecuptime, so this is a nop.
VersionDeltaFile
1.52+5-7sys/net/hfsc.c
+5-71 files

OpenBSD/src yhn9hoKregress/usr.sbin/bgpd/unittests rde_decide_test.c

   Update rde_decide_test after changes to struct prefix.
   Reminded by anton@
VersionDeltaFile
1.17+25-25regress/usr.sbin/bgpd/unittests/rde_decide_test.c
+25-251 files

OpenBSD/src VPCeS5zusr.sbin/vmd vm.c

   Tighten vmd(8)'s pledge in the vm process.

   We no longer need recvfd at runtime after removal of send/receive.

   ok mlarkin@
VersionDeltaFile
1.116+3-4usr.sbin/vmd/vm.c
+3-41 files

OpenBSD/src OvXoqysshare/man/man4 bpf.4

   zap trailing whitespace; no output change
VersionDeltaFile
1.51+4-4share/man/man4/bpf.4
+4-41 files

OpenBSD/src Wl0Plsuusr.sbin/bgpd chash.c chash.h

   Implementation of a fast non-cryptographic hash function for small inputs

   Based on HashLen0to16() from CityHash64. Useful for hashing a few ids
   or pointer values that are local data into a hash. For such cases siphash
   is overkill and this seems to be fast and good enough.

   OK tb@
VersionDeltaFile
1.5+40-1usr.sbin/bgpd/chash.c
1.4+3-1usr.sbin/bgpd/chash.h
+43-22 files

OpenBSD/src DQBY2iOsys/tmpfs tmpfs_mem.c tmpfs_vfsops.c

   Modify the behavior of tmpfs limitations. Keep the global memory limit
   of all tmpfs instances, however each instance mounted with '-s' option
   decreases available limit by given value. This value can't be greater
   than available space. The instance mounted with  with '-s' option
   consumes it's own limit and does no impact to other tmpfs instances. The
   instances mounted without '-s' option share all available limit and do
   not affect on instances mounted with '-s'. Now it is impossible to mount
   instance with '-s' option if passed value is greater than available
   limit.

   Tested with dbp(1) by kirill, ok mpi

   For example, this machine has 2G of RAM, so tmpfs is limited with 1G.
   Please note, the +- 1Mb depends of how 'dd', 'df' and 'mount_tmpfs'
   expose the sizes.

   # mount_tmpfs tmpfs /mnt/t0
   # mount_tmpfs tmpfs /mnt/t1
   # mount_tmpfs -s 720M tmpfs /mnt/t2

    [104 lines not shown]
VersionDeltaFile
1.11+12-8sys/tmpfs/tmpfs_mem.c
1.21+11-2sys/tmpfs/tmpfs_vfsops.c
+23-102 files

OpenBSD/src LzHOrFZusr.bin/openssl ts.c

   openssl ts: simplify create_nonce()

   Just your average dumb TS code. Instead of handrolling a random ASN.1
   integer generator, we can use BN_rand() and convert the resulting bn to
   an ASN1_INTEGER. All this then also works without reaching into ASN1_STRING.

   ok kenjiro
VersionDeltaFile
1.30+7-17usr.bin/openssl/ts.c
+7-171 files

OpenBSD/src gu1Rmn4share/man/man5 port-modules.5

   Document new variables MODFONT_WEBDIR/MODFONT_WEBFILES.

   ok phessler@
VersionDeltaFile
1.277+15-4share/man/man5/port-modules.5
+15-41 files

OpenBSD/src 7dv0QZ2sbin/ifconfig brconfig.c ifconfig.c, sys/net if_veb.c if_etherbridge.c

   add Private VLAN support to veb(4) as per RFC 5517

   this extends the core etherbridge functionality so it stores the
   extra information needed to be usable by a pvlan aware bridge. in
   practice this means address entries in etherbridges store an extra
   vlan id on top of the one i just added to make veb vlan aware. a
   mac address remains scoped by what is now referred to as a "primary"
   vlan id, but has an additional "secondary" vlan id recorded against
   it. ie, the "key" to a address lookup in etherbridge is made up of
   the mac address and the primary vlan id, and the value returned by
   the lookup is the port the mac address should go to and the secondary
   vlan id.

   the non veb users of the etherbridge code just hard code these extra
   vlan ids to 0.

   because normal vlans function identically to a primary vlan in a
   pvlan topology (or primary vlans in pvlan function like normal
   vlans), the veb forwarding code pretends normal vlans are pvlans,

    [20 lines not shown]
VersionDeltaFile
1.53+714-85sys/net/if_veb.c
1.43+163-2sbin/ifconfig/brconfig.c
1.10+61-51sys/net/if_etherbridge.c
1.7+14-4sys/net/if_etherbridge.h
1.77+14-1sys/net/if_bridge.h
1.479+13-1sbin/ifconfig/ifconfig.c
+979-1446 files not shown
+1,006-15712 files

OpenBSD/src AldhEqPsys/dev/pci if_bnxtreg.h

   Update to the current version of the bnxt structure definitions from FreeBSD.
   This is necessary for adding support for newer hardware generations and
   should also help with work on LRO.  This shouldn't result in any functional
   changes yet however.
VersionDeltaFile
1.9+88,103-25,124sys/dev/pci/if_bnxtreg.h
+88,103-25,1241 files

OpenBSD/src vjZTf9Qregress/usr.bin/ssh/unittests/sshbuf test_sshbuf_getput_basic.c

   unit tests for sshbuf_get_nulterminated_string()
VersionDeltaFile
1.6+116-1regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_basic.c
+116-11 files

OpenBSD/src IvWXcyhusr.bin/ssh sshbuf-getput-basic.c sshbuf.h

   add a sshbuf_get_nulterminated_string() function to pull a \0-
   terminated string from a sshbuf. Intended to be used to improve
   parsing of SOCKS headers for dynamic forwarding.

   ok deraadt; feedback Tim van der Molen
VersionDeltaFile
1.14+39-1usr.bin/ssh/sshbuf-getput-basic.c
1.33+5-1usr.bin/ssh/sshbuf.h
+44-22 files

OpenBSD/src luPtR3msys/dev/pci if_ixl.c

   Determine how many queue pairs we have by looking at the I40E_PFLAN_QALLOC
   register, rather than assuming we have the full capacity of the whole
   chip, which is likely to be split among 2 or 4 functions.

   ok jan@ dlg@
VersionDeltaFile
1.113+7-7sys/dev/pci/if_ixl.c
+7-71 files

OpenBSD/src rbm330xsys/lib/libsa disklabel.c

   Delete spurious assignment.

   ok deraadt@
VersionDeltaFile
1.7+1-2sys/lib/libsa/disklabel.c
+1-21 files

OpenBSD/src tFvIWemusr.sbin/bgpd rde_adjout.c rde.h

   In the Adj-RIB-Out dmetric has no meaning (by default there is only one
   path). Also nhflags are not needed any more since the nexthop selection
   happens right before addition to the Adj-RIB-Out in up_prep_adjout().

   OK tb@
VersionDeltaFile
1.6+4-11usr.sbin/bgpd/rde_adjout.c
1.324+1-9usr.sbin/bgpd/rde.h
1.183+1-2usr.sbin/bgpd/rde_update.c
1.669+1-2usr.sbin/bgpd/rde.c
+7-244 files

OpenBSD/src e2wMLavusr.sbin/bgpd rde_adjout.c rde.h

   Split up the PREFIX flags, split the name space and use PREFIX_ADJOUT
   for those that only affect that struct.
   In the process retire PREFIX_FLAG_ADJOUT.
   OK tb@
VersionDeltaFile
1.5+41-45usr.sbin/bgpd/rde_adjout.c
1.323+12-12usr.sbin/bgpd/rde.h
1.182+7-7usr.sbin/bgpd/rde_update.c
1.281+1-12usr.sbin/bgpd/rde_rib.c
1.56+3-3usr.sbin/bgpd/rde_peer.c
1.668+2-4usr.sbin/bgpd/rde.c
+66-836 files

OpenBSD/src uE3hzC4usr.bin/ftp fetch.c

   ftp: fix spelling of NULL
VersionDeltaFile
1.221+2-2usr.bin/ftp/fetch.c
+2-21 files

OpenBSD/src FdtXWXEusr.bin/finger lprint.c

   finger: const char *t, *tzn: avoids compiler warnings with time.h r1.33

   ok jca millert
VersionDeltaFile
1.14+2-2usr.bin/finger/lprint.c
+2-21 files

OpenBSD/src ANNdkrklib/libc/time strptime.c localtime.c

   localtime, strptime: time.h r1.33 removed the need to cast away const

   ok jca millert
VersionDeltaFile
1.34+3-3lib/libc/time/strptime.c
1.72+2-2lib/libc/time/localtime.c
+5-52 files

OpenBSD/src znVx3FZinclude time.h, lib/libc/time ctime.3

   time.h: const correct tm_zone in struct tm

   The Base Specifications, Issue 8 incorporated Austin Group Defect 1533
   adding long tm_gmtoff (which we already have) and const char *tm_zone,
   which we have but without const. Adapt our struct. This was tested in
   an amd64 bulk without fallout and fixes a bunch of compiler warnings
   from strptime.c r1.32 where gmt[] and utc[] were moved to rodata.

   https://austingroupbugs.net/view.php?id=1533

   ok jca millert
VersionDeltaFile
1.50+3-3lib/libc/time/ctime.3
1.33+2-2include/time.h
+5-52 files

OpenBSD/src rF7w1QRsys/net pf_ioctl.c

   Those finishing touches were supposed to land
   with source/state limiter changes. I failed to
   spot them during code review.

   OK dlg@
VersionDeltaFile
1.426+27-35sys/net/pf_ioctl.c
+27-351 files

OpenBSD/src ylZwFUPusr.sbin/bgpd rde.h rde_decide.c

   The union struct wrapping for list and tree in struct prefix and
   prefix_adjout are no longer needed. Remove this extra wrapping.

   OK tb@
VersionDeltaFile
1.322+18-28usr.sbin/bgpd/rde.h
1.105+20-20usr.sbin/bgpd/rde_decide.c
1.667+12-12usr.sbin/bgpd/rde.c
1.280+10-10usr.sbin/bgpd/rde_rib.c
1.132+3-3usr.sbin/bgpd/mrt.c
1.181+3-3usr.sbin/bgpd/rde_update.c
+66-762 files not shown
+71-818 files

OpenBSD/src ox7duzpusr.sbin/bgpd rde_adjout.c rde.c

   Duplicate struct prefix into struct prefix_adjout and adjust code
   to work with that.

   Make sure that anything in the adj-rib-out uses the new struct. In
   some cases code has to be duplicated since it is no longer possible to
   use one code path to cover both Local-RIB and Adj-Out-RIB. This is
   mostly in the code handling the 'bgpctl show rib' family of commands.

   OK tb@
VersionDeltaFile
1.3+112-61usr.sbin/bgpd/rde_adjout.c
1.666+130-36usr.sbin/bgpd/rde.c
1.321+75-28usr.sbin/bgpd/rde.h
1.180+21-17usr.sbin/bgpd/rde_update.c
1.279+11-5usr.sbin/bgpd/rde_rib.c
1.54+3-3usr.sbin/bgpd/rde_peer.c
+352-1506 files

OpenBSD/src s9plY3busr.bin/ssh servconf.c

   Plug leaks while parsing Match blocks.  Coverity CID 469304, ok djm@
VersionDeltaFile
1.436+13-12usr.bin/ssh/servconf.c
+13-121 files

OpenBSD/src k92p7DYusr.bin/ssh readconf.c

   Plug leaks while parsing Match blocks.  Coverity CID 515634, ok miod@ djm@
VersionDeltaFile
1.407+5-4usr.bin/ssh/readconf.c
+5-41 files

OpenBSD/src VuxyC1aregress/usr.bin/ssh/unittests/authopt tests.c

   Free opts in FAIL_TEST.  It should always be NULL anyway so this is a no-op,
   but it should placate Coverity CID 405064.
VersionDeltaFile
1.5+2-1regress/usr.bin/ssh/unittests/authopt/tests.c
+2-11 files

OpenBSD/src PRe0Eunsys/dev/pci if_iavf.c

   Instead of assuming the PF gave us 4 queue pairs, use the number returned
   from the IAVF_VC_OP_GET_VF_RESOURCES message.

   ok bluhm@
VersionDeltaFile
1.27+4-6sys/dev/pci/if_iavf.c
+4-61 files