BSD Commit Log Search

   ld.so: print symbol name if lazy binding failed

   It's a useful clue where to go look and various people working in ports
   used similar diffs to track problems they were facing down.

   fine by guenther
   ok deraadt jca

   Do not redraw overlays unless actually asked to, GitHub issue 5398 from
   Noam Stolero.

   add syspatch pubkey for 8.1

   Sync recent style fixes in httpd/relayd back into iked/snmpd.

   OK rsadowski@

   Use -Ohashalg to restrict output to specfic hash instead of awk.

   netstat(1) prints interface multicast counter.

   Use -g option as modifier for -i, -I, and -w to show per interface
   multicast packet counter.  Make -q more specific to suppress 0 for
   values actually printed.

   input and OK claudio@

   add 8.1 firmware key

   sync

   move to 8.0-beta (which means a few days of snapshot bumpiness)

   move to a better place

   rpki-client: only record NCA history on successful runs

   ok claudio job

   When 64-bit DMA is enabled for PCIe models, set IFXF_MBUF_64BIT to let the
   kernel know it's ok to "enable mbufs in high memory" as long as all other
   interfaces are also so inclined.

   ok kettenis@ mvs@ bluhm@

   Stop mashing together ps_flags ans p_flag.  This fine when we did the
   initial "struct process" / "struct proc" split, but we added more flags
   and they collide now.  This is incredible confusing and needs to die.
   Instead make some readjustments to the ddb default "ps" output and print
   them both separately.

   ok claudio@, jca@

   Unhook loongson from the build.

   The last compiler update unfortunately does not work on mips64el, with clang 22
   built with clang 19 being apparently functional, but clang 22 rebuilt with
   the previous clang 22 hitting deterministic SIGSEGV on various files.

   I don't have the time and energy to try and debug this (which is likely an
   endianness problem, as octeon appears to run happily with clang 22), especially
   when it takes 10 days for clang to rebuild itself on these machines; and
   switching back to gcc 4 won't help much as modern software in ports will
   require a working C++>=11 compiler to build anyway.

   ok visa@

                          ----------
                         /          \
                        /    REST    \
                       /      IN      \
                      /     PEACE      \

    [10 lines not shown]

   Do not make the size of the cmmu table public, and comment out some code at
   compile time if we are building on a simple CMMU configuration, such as on
   luna88k.

   Tested by and ok aoyoma@

   Declare the cmmu-related variables as const, rather than
   attribute(section(.rodata)), and initialize them (while MMU is not set up)
   using explicit casts.

   This gets rid of "ignoring changed section attributes" harmless assembler
   warnings.

   Joint work with aoyama@; tested by and ok aoyama@

   With the previous fix to m8820x_initialize_cpu()
   [sys/arch/m88k/m88k/m88k_machdep.c r1.66], we no longer force
   single-processor kernels to nevertheless override MAX_CPU, and remove the
   ability to override it in <machine/cpu.h>.

   Tested by and ok aoyama@

   Make sure m8820x_initialize_cpu() initializes logical cpu #0 on non-MP kernels.
   This is usually the case, but some luna88k setups could have the running cpu at
   a physical position different from zero, causing some of the actual cpu_info
   initialization to be done in the wrong array element.

   Tested by and ok aoyama@

   Faster CMMU walk in m8820x_cpu_number(): we don't need to iterate on
   instruction cmmus.

   Tested by and ok aoyama@

   Make sure replies contain the expected server-id.

   We only speak to and expect an answer from a specific server when we
   are requesting or renewing a lease. In all other case we accept an
   answer from any server.

   Pointed out by Clouditera Security.
   OK tb

   Make sure we received a client identifier.

   Pointed out by Clouditera Security.
   OK tb

   Make sure the message belongs to the current transaction.

   Pointed out by Clouditera Security.
   OK tb

   Check that the server selected ciphersuite is valid for use with TLSv1.2.

   In the legacy stack, ensure that the server selected ciphersuite is valid
   for use with TLSv1.2 - this effectively means that it is not a TLSv1.3
   ciphersuite. We currently fail the handshake, but at a later stage.

   Reported by Tom Gouville from the tlspuffin team.

   ok tb@

   mrouted(8) logs errno message when ioctl(2) fails.

   from Russell Howe

   When signaling untraced processes with a SIGKILL check the right process
   for PS_EXITING.

   Fix for the sys/kern/ptrace regress hangs.
   OK kettenis@

   Small section missed from previous.

   Remove check for use of TLSv1.2 ciphersuites with TLSv1.1 and earlier.

   We no longer negotiate any TLS version lower than TLSv1.2, so this is now
   redundant.

   ok tb@

   Replace SHA-256 and SHA-512 implementations in libc.

   Replace the existing SHA-256 and SHA-512 implementations in libc with
   versions that leverage some of the recent code in libcrypto. The existing
   API is retained, along with reuse of the existing SHA2_CTX definitions.

   These versions use static inline functions instead of macros and spell
   out the full variable rotations to follow the specification, rather than
   trying to outsmart the compiler.

   This also gives us a basis to provide per-architecture accelerated
   implementations, based on those in libcrypto.

   ok naddy@ tb@

   Add modal panes, created currently with new-pane -O. There is one modal
   pane per window and it must be a floating pane. These are intended to
   replace popups. Currently a modal pane will unzoom a zoomed window and
   rezoom it when it is closed (a bit like modes do), but this is planned
   to change when we get an always-on-top flag.

   Clear the "waiting for editor" area before writing so stray characters
   aren't visible from underneath.