OpenBSD/src zOrsIAYlib/libc/hash sha256.c

   Sort by architecture.
VersionDeltaFile
1.4+4-4lib/libc/hash/sha256.c
+4-41 files

OpenBSD/src aKGnu8Dlib/libc/arch/amd64/hash Makefile.inc sha512_amd64.c, lib/libc/hash sha512.c

   Provide assembly implementation of SHA-512 for amd64 in libc

   Provide a generic assembly implementation for SHA-512 - this is
   considerably faster than the C version.

   Largely borrowed from libcrypto.

   With input from naddy@

   ok naddy@ tb@
VersionDeltaFile
1.1+304-0lib/libc/arch/amd64/hash/sha512_amd64_generic.S
1.1+29-0lib/libc/arch/amd64/hash/sha512_amd64.c
1.3+8-1lib/libc/hash/sha512.c
1.2+3-1lib/libc/arch/amd64/hash/Makefile.inc
+344-24 files

OpenBSD/src my2EmKvlib/libc/arch/aarch64/hash Makefile.inc sha256_aarch64.c, lib/libc/hash Makefile.inc sha256.c

   Provide assembly implementation of SHA-256 for aarch64 in libc

   Provide a CE assembly implementation that can be used on hardware that
   has the CE SHA-256 instructions. This is considerably faster than the
   generic C implementation.

   Largely borrowed from libcrypto.

   With input from naddy@

   ok tb@
VersionDeltaFile
1.1+199-0lib/libc/arch/aarch64/hash/sha256_aarch64_ce.S
1.1+34-0lib/libc/arch/aarch64/hash/sha256_aarch64.c
1.28+2-2lib/libc/hash/Makefile.inc
1.3+3-1lib/libc/hash/sha256.c
1.6+4-0lib/libc/hidden/sha2.h
1.1+4-0lib/libc/arch/aarch64/hash/Makefile.inc
+246-36 files

OpenBSD/src OSSHxYpgnu/llvm/llvm/lib/Target/Sparc/AsmParser SparcAsmParser.cpp

   SparcAsmParser: fix off by one and allow %r31 to be used

   rust contains a sparc64.s file with

   .cfi_register %r15, %r31

   This fails with 'src/arch/sparc64.s:59:26: error: invalid register name'
   Changing RegNo < 31 to RegNo <= 31 fixes this.

   ok kettenis kirill
VersionDeltaFile
1.3+1-1gnu/llvm/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp
+1-11 files

OpenBSD/src ZQNdMGiregress/usr.bin/mandoc/man/EX indent.out_ascii indent.in, regress/usr.bin/mandoc/man/blank indent.out_ascii

   test man(7) input lines starting with space characters;
   related to man_html.c rev. 1.142
VersionDeltaFile
1.1+24-0regress/usr.bin/mandoc/man/EX/indent.in
1.1+22-0regress/usr.bin/mandoc/man/nf/indent.out_html
1.1+20-0regress/usr.bin/mandoc/man/EX/indent.out_ascii
1.6+13-5regress/usr.bin/mandoc/man/nf/indent.in
1.9+12-4regress/usr.bin/mandoc/man/nf/indent.out_ascii
1.1+15-0regress/usr.bin/mandoc/man/blank/indent.out_ascii
+106-96 files not shown
+144-1512 files

OpenBSD/src ebHiF3Dusr.bin/mandoc man_html.c

   Do not use <br/> inside <pre> because it causes ugly formatting.

   Bug reported long ago by Mohamed Akram <mohd.akram at outlook.com>.
   Patch from Michael Stapelberg <stapelberg at debian.org>.
VersionDeltaFile
1.142+2-2usr.bin/mandoc/man_html.c
+2-21 files

OpenBSD/src Rwc0Mktusr.bin/tmux screen-write.c

   Use correct X position when combining characters, GitHub issue 5511 from
   Francesc Rosas.
VersionDeltaFile
1.288+7-4usr.bin/tmux/screen-write.c
+7-41 files

OpenBSD/src E5YJwW4lib/libc/arch/amd64/hash sha256_amd64.c sha256_amd64_shani.S, lib/libc/hash Makefile.inc sha256.c

   Provide assembly implementations of SHA-256 for amd64 in libc.

   Provide a generic assembly implementation for SHA-256 - this is
   considerably faster than the C version.

   Provide a SHA-NI assembly implementation that can be used on hardware that
   has the SHA-NI instructions. This is considerably faster than the generic
   assembly implementation.

   Both are largely borrowed from libcrypto.

   With input from naddy@

   ok naddy@ tb@
VersionDeltaFile
1.1+299-0lib/libc/arch/amd64/hash/sha256_amd64_generic.S
1.1+203-0lib/libc/arch/amd64/hash/sha256_amd64_shani.S
1.1+33-0lib/libc/arch/amd64/hash/sha256_amd64.c
1.2+8-1lib/libc/hash/sha256.c
1.27+6-2lib/libc/hash/Makefile.inc
1.5+5-1lib/libc/hidden/sha2.h
+554-41 files not shown
+559-47 files

OpenBSD/src RA3eLNalib/libssl tls13_legacy.c

   Simplify handling of remaining record content on switch to legacy stack.

   Now that the legacy stack uses struct tls_content, store any remaining
   record content directly, rather than fudging up a record that the legacy
   stack will process on the next read.

   ok kenjiro@ tb@
VersionDeltaFile
1.46+13-35lib/libssl/tls13_legacy.c
+13-351 files

OpenBSD/src V4u0xbclib/libssl tls13_record.c

   Allocate TLS 1.3 receive buffers lazily

   The receive buffer is not used for records created for sending. Avoid
   allocating a maximum-sized buffer in tls13_record_new() and instead
   allocate a header-sized buffer when tls13_record_recv() is first called.
   The buffer will grow as needed once the record length is known.

   This avoids an unnecessary allocation for outgoing records and reduces
   the initial allocation size for incoming records.

   ok tb jsing
VersionDeltaFile
1.11+7-14lib/libssl/tls13_record.c
+7-141 files

OpenBSD/src mjMbcuOlibexec/getty ttys.5, sbin/init init.8 init.c

   init(8): remove support for the window= field in /etc/ttys

   This feature was introduced in 4.3BSD, and announced in "Bug Fixes
   and Changes in 4.3BSD", dated April 15, 1986. The feature provided
   a way to start a window system associated with a tty before
   starting getty(8).

   However the implementation has a few negatives and these days
   graphical environments are better started in other ways.

   In particular:
   - the window command is run with root privileges
   - init(8) does not track or supervise the process as part of the
     tty session.
   - reloading /etc/ttys by sending SIGHUP to init, can leave a stale
     window command cached incorrectly
   - repeated reloads leak memory

   Rather than fix all these issues, remove the feature instead.

    [5 lines not shown]
VersionDeltaFile
1.73+2-65sbin/init/init.c
1.16+4-15libexec/getty/ttys.5
1.51+5-5sbin/init/init.8
+11-853 files

OpenBSD/src 2nTIHV2share/mk bsd.own.mk, sys/arch/sparc64/conf Makefile.sparc64

   sys/sparc64: switch the base to LLVM toolchain

   OK: deraadt@
VersionDeltaFile
1.114+9-4sys/arch/sparc64/conf/Makefile.sparc64
1.5+4-4sys/arch/sparc64/stand/bootblk/genassym.sh
1.13+6-1sys/arch/sparc64/stand/Makefile.inc
1.217+3-3share/mk/bsd.own.mk
+22-124 files

OpenBSD/src 4oyugbMlib/libcrypto cert.pem

   update cert.pem based on newer mozilla ca root store, ok tb@
VersionDeltaFile
1.36+192-198lib/libcrypto/cert.pem
+192-1981 files

OpenBSD/src CW6lx0qsys/sys sem.h

   raise defaulfs for kern.seminfo.semmni and semmns to accommodate most
   common use of PostgreSQL.  ok deraadt
VersionDeltaFile
1.31+3-3sys/sys/sem.h
+3-31 files

OpenBSD/src pqjcrBRgnu/llvm/lld/ELF Driver.cpp Writer.cpp

   llvm/sparc64: match BFD -N alignment

   BFD aligns nonpaged PT_LOAD segments to their maximum contained section
   alignment. Do the same for SPARCV9 instead of retaining the 1 MiB
   maximum page alignment.

   This removes roughly 1 MiB of leading padding from ofwboot without
   changing its load address or memory layout.

   OK: deraadt@, kettenis@
VersionDeltaFile
1.12+10-0gnu/llvm/lld/ELF/Writer.cpp
1.26+6-0gnu/llvm/lld/ELF/Driver.cpp
+16-02 files

OpenBSD/src WXx7HEBregress/usr.bin/mandoc/tbl/space man-nogroff.out_ascii man-nogroff.in, usr.bin/mandoc roff.c tbl_layout.c

   Overhaul printing of whitespace before tbl(7) in man(7).
   This is the last major piece i intend to put in for making mandoc(1)
   compatible with groff-1.23.

   In spite of the change in man_term.c 1.194 (August 2022)
   which removed unconditional vertical space before .TS,
   GNU eqn(1) still prints vertical space in some cases
   where the layout contains vertical lines.
VersionDeltaFile
1.1+119-0regress/usr.bin/mandoc/tbl/space/man.in
1.1+62-0regress/usr.bin/mandoc/tbl/space/man.out_ascii
1.1+51-0regress/usr.bin/mandoc/tbl/space/man-nogroff.in
1.280+34-12usr.bin/mandoc/roff.c
1.40+40-6usr.bin/mandoc/tbl_layout.c
1.1+34-0regress/usr.bin/mandoc/tbl/space/man-nogroff.out_ascii
+340-1812 files not shown
+414-4518 files

OpenBSD/src 3YfNPZ4usr.bin/mandoc tbl_html.c

   stop including "roff.h" which this file does not need
VersionDeltaFile
1.37+1-2usr.bin/mandoc/tbl_html.c
+1-21 files

OpenBSD/src t9q8voiusr.bin/tmux spawn.c layout.c

   Add a way for floating panes to stay above zoom (-A) flag. Use by
   default for modal panes to match popups.
VersionDeltaFile
1.370+100-30usr.bin/tmux/window.c
1.150+25-8usr.bin/tmux/cmd-split-window.c
1.78+14-5usr.bin/tmux/cmd-select-pane.c
1.59+7-7usr.bin/tmux/resize.c
1.52+8-5usr.bin/tmux/spawn.c
1.97+9-4usr.bin/tmux/layout.c
+163-595 files not shown
+191-7911 files

OpenBSD/src 8gx324Jsys/net if.c

   SIOCGIFDATA (on most architectures) leaked 4 bytes of kernel stack.

   from deraadt@; from Acts1631

   this is errata/7.9/010_ifioctl.patch.sig
VersionDeltaFile
1.763.2.3+3-1sys/net/if.c
+3-11 files

OpenBSD/src vuvdlHXsys/net if.c

   Backout previous, commit message was wrong.
VersionDeltaFile
1.763.2.2+1-3sys/net/if.c
+1-31 files

OpenBSD/src 4tJ1mDusys/net if.c

   SIOCGIFDATA (on most architectures) leaked 4 bytes of kernel stack.

   from deraadt@; from Acts1631

   this is errata/7.8/046_ifioctl.patch.sig
VersionDeltaFile
1.741.2.3+3-1sys/net/if.c
+3-11 files

OpenBSD/src FN11urRsys/net if.c

   Backout previous, commit message was wrong.
VersionDeltaFile
1.741.2.2+1-3sys/net/if.c
+1-31 files

OpenBSD/src AbyKGVUlib/libexpat Changes, lib/libexpat/lib xmltok_impl.c xmlparse.c

   Backport all changes from libexpat 2.8.3.

   Sources from 2.8.3, header from 2.7.5, no ABI change.
   CVE-2026-45186 CVE-2026-50219 CVE-2026-56131 CVE-2026-56132
   CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406
   CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410
   CVE-2026-56411 CVE-2026-56412 CVE-2026-72522

   this is errata/7.9/014_expat.patch.sig
VersionDeltaFile
1.47.2.1+734-725lib/libexpat/lib/xmlparse.c
1.9.4.1+366-26lib/libexpat/tests/basic_tests.c
1.35.2.1+243-22lib/libexpat/Changes
1.10.4.1+110-4lib/libexpat/tests/misc_tests.c
1.5.4.1+72-17lib/libexpat/tests/handlers.c
1.18.12.1+13-10lib/libexpat/lib/xmltok_impl.c
+1,538-80441 files not shown
+1,708-87547 files

OpenBSD/src RHiW011lib/libexpat Changes, lib/libexpat/lib xmltok.c xmlparse.c

   Backport all changes from libexpat 2.8.3.

   Sources from 2.8.3, header from 2.7.3, no ABI change.
   CVE-2026-45186 CVE-2026-50219 CVE-2026-56131 CVE-2026-56132
   CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406
   CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410
   CVE-2026-56411 CVE-2026-56412 CVE-2026-72522

   this is errata/7.8/050_expat.patch.sig
VersionDeltaFile
1.44.2.4+734-725lib/libexpat/lib/xmlparse.c
1.7.2.3+366-26lib/libexpat/tests/basic_tests.c
1.32.2.4+333-34lib/libexpat/Changes
1.8.2.2+112-5lib/libexpat/tests/misc_tests.c
1.4.2.2+72-17lib/libexpat/tests/handlers.c
1.18.2.1+19-6lib/libexpat/lib/xmltok.c
+1,636-81341 files not shown
+1,805-89347 files

OpenBSD/src SnEYvtqsys/kern tty.c

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.

   from deraadt@; from Acts1632, OK kettenis@

   this is errata/7.9/013_ttyioctl.patch.sig
VersionDeltaFile
1.183.2.1+3-1sys/kern/tty.c
+3-11 files

OpenBSD/src YJfVxQNsys/kern tty.c

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.

   from deraadt@; from Acts1632, OK kettenis@

   this is errata/7.8/049_ttyioctl.patch.sig
VersionDeltaFile
1.182.2.1+3-1sys/kern/tty.c
+3-11 files

OpenBSD/src 9bGh8sosys/uvm uvm_io.c

   sysctl_proc_args() did not check if uvm_io() returned no data, which
   could result in uninitialised memory being returned. Rather than callers
   of uvm_io() having to carefully check for this condition, treat it as an
   error.

   from dgl@; OK kettenis@; initial report from Acts1631

   this is errata/7.9/012_kernproc.patch.sig
VersionDeltaFile
1.30.14.1+2-2sys/uvm/uvm_io.c
+2-21 files

OpenBSD/src ENKjoWEsys/uvm uvm_io.c

   sysctl_proc_args() did not check if uvm_io() returned no data, which
   could result in uninitialised memory being returned. Rather than callers
   of uvm_io() having to carefully check for this condition, treat it as an
   error.

   from dgl@; OK kettenis@; initial report from Acts1631

   this is errata/7.8/048_kernproc.patch.sig
VersionDeltaFile
1.30.10.1+2-2sys/uvm/uvm_io.c
+2-21 files

OpenBSD/src ldNys2hsys/kern kern_pledge.c

   Don't panic if ni_pledge is unset in pledge_namei.

   from dgl@; OK deraadt@

   this is errata/7.9/011_nipledge.patch.sig
VersionDeltaFile
1.356.2.1+2-2sys/kern/kern_pledge.c
+2-21 files

OpenBSD/src acyo5qgsys/kern kern_pledge.c

   Don't panic if ni_pledge is unset in pledge_namei.

   from dgl@; OK deraadt@

   this is errata/7.8/047_nipledge.patch.sig
VersionDeltaFile
1.333.2.4+2-2sys/kern/kern_pledge.c
+2-21 files