BSD Commit Log Search

   clear the SA_ONSTACK flag following a successful call to exec

   During the 4.4BSD conversion from sigstack to sigaltstack one too
   many lines of code may have been deleted. See: SCCS rev 7.44

   Restore the missing line and the historical BSD behaviour and match
   the requirement stated in the XSI specification for exec.

   Flagged by Sortix os-test.

   ok deraadt@

   also pledge "route" to get at SIOCGIFDATA.
   doing privsep just for that would be a poor trade.

   allow SIOCGIFDATA in pledge "route"

   Add another test case covering .ce inside a conditional block inside
   tbl(7) data that uses ".if n" rather than ".if 1" and that does not
   use text blocks, thus being closer to the original afl(1) report
   that i discussed with Jan Schreiber on 7 Sep 2020.
   While here, also test ".if 0 .ce" inside tbl(7) data.

   Make deprecation of ASN1_STRING_data(3) more prominent

   The function has been deprecated for a long time: OpenSSL did so when
   adding ASN1_STRING_get0_data in 1.1.0. beck removed it from OpenSSL 4.
   The reason is that it returns a modifiable "string" and you should not
   be modifying an ASN1_STRING this way. You should be using one of the
   clumsy, inconvenient accessors.

   schwarze merged the deprecation when adding documentation for
   ASN1_STRING_get0_data() in 2018. Make this a bit more obvious: move
   function to the end of the documented functions in this page, and mark
   it deprecated in the SYNOPSIS, too.

   I'm aware that deprecation does not work. I was hopeful to be able to
   remove the function in the last cycle, but that did not happen and it
   might not happen in this cycle either. It will happen at some point,
   though.

   Prompted by a question by brad

   grammar; an program -> a program

   Add Gorno-Altaysk

   I flew in and out a few weeks ago to hike in the Altai mountains.

   sync

   airport: marked ISL, SXF, TXL and YKZ closed, add VDE

   OK: ian@

   Bump size of key comment buffers.  Prevents warnings on some platforms.
   ok djm@

   document MALLOC_OPTIONS=D output;  OK otto@

   Provide assembly implementations of SHA-1 for amd64 in libc

   Provide a generic assembly implementation for SHA-1 - this is considerably
   faster than the C version.

   Provide a SHA-NI assembly implementation that can be used on hardware that
   has the SHA-NI instructions. This is considerably faster than the generic
   assembly implementation.

   Largely borrowed from libcrypto.

   With input from naddy@

   ok naddy@ tb@

   spelling

   RFC 8446 -> 9846

   pointed out by kenjiro

   Change RFC references from 8446 to 9846 and adjust section numbers

   with/ok kenjiro

   SSL_get_finished: remove comment about TLSv1.0 and TLSv1.1

   ok kenjiro

   Provide assembly implementation of SHA-512 for aarch64 in libc

   Provide a CE assembly implementation that can be used on hardware that
   has the CE SHA-512 instructions. This is considerably faster than the
   generic C implementation.

   Largely borrowed from libcrypto.

   With input from naddy@

   ok naddy@ tb@

   Sort by architecture.

   Provide assembly implementation of SHA-512 for amd64 in libc

   Provide a generic assembly implementation for SHA-512 - this is
   considerably faster than the C version.

   Largely borrowed from libcrypto.

   With input from naddy@

   ok naddy@ tb@

   Provide assembly implementation of SHA-256 for aarch64 in libc

   Provide a CE assembly implementation that can be used on hardware that
   has the CE SHA-256 instructions. This is considerably faster than the
   generic C implementation.

   Largely borrowed from libcrypto.

   With input from naddy@

   ok tb@

   SparcAsmParser: fix off by one and allow %r31 to be used

   rust contains a sparc64.s file with

   .cfi_register %r15, %r31

   This fails with 'src/arch/sparc64.s:59:26: error: invalid register name'
   Changing RegNo < 31 to RegNo <= 31 fixes this.

   ok kettenis kirill

   test man(7) input lines starting with space characters;
   related to man_html.c rev. 1.142

   Do not use <br/> inside <pre> because it causes ugly formatting.

   Bug reported long ago by Mohamed Akram <mohd.akram at outlook.com>.
   Patch from Michael Stapelberg <stapelberg at debian.org>.

   Use correct X position when combining characters, GitHub issue 5511 from
   Francesc Rosas.

   Provide assembly implementations of SHA-256 for amd64 in libc.

   Provide a generic assembly implementation for SHA-256 - this is
   considerably faster than the C version.

   Provide a SHA-NI assembly implementation that can be used on hardware that
   has the SHA-NI instructions. This is considerably faster than the generic
   assembly implementation.

   Both are largely borrowed from libcrypto.

   With input from naddy@

   ok naddy@ tb@

   Simplify handling of remaining record content on switch to legacy stack.

   Now that the legacy stack uses struct tls_content, store any remaining
   record content directly, rather than fudging up a record that the legacy
   stack will process on the next read.

   ok kenjiro@ tb@

   Allocate TLS 1.3 receive buffers lazily

   The receive buffer is not used for records created for sending. Avoid
   allocating a maximum-sized buffer in tls13_record_new() and instead
   allocate a header-sized buffer when tls13_record_recv() is first called.
   The buffer will grow as needed once the record length is known.

   This avoids an unnecessary allocation for outgoing records and reduces
   the initial allocation size for incoming records.

   ok tb jsing

   init(8): remove support for the window= field in /etc/ttys

   This feature was introduced in 4.3BSD, and announced in "Bug Fixes
   and Changes in 4.3BSD", dated April 15, 1986. The feature provided
   a way to start a window system associated with a tty before
   starting getty(8).

   However the implementation has a few negatives and these days
   graphical environments are better started in other ways.

   In particular:
   - the window command is run with root privileges
   - init(8) does not track or supervise the process as part of the
     tty session.
   - reloading /etc/ttys by sending SIGHUP to init, can leave a stale
     window command cached incorrectly
   - repeated reloads leak memory

   Rather than fix all these issues, remove the feature instead.

    [5 lines not shown]

   sys/sparc64: switch the base to LLVM toolchain

   OK: deraadt@

   update cert.pem based on newer mozilla ca root store, ok tb@