OpenBSD/src EAMeWdHusr.bin/tmux tmux.1 tmux.h

   Store count of how many times a hook is fired and the last time.
VersionDeltaFile
1.16+36-14usr.bin/tmux/hooks.c
1.7+29-1usr.bin/tmux/monitor.c
1.76+28-1usr.bin/tmux/cmd-show-options.c
1.92+23-1usr.bin/tmux/options.c
1.1416+8-1usr.bin/tmux/tmux.h
1.1150+4-2usr.bin/tmux/tmux.1
+128-206 files

OpenBSD/src 0BIuz2qsys/net pf_ioctl.c

   Null-terminate strings in DIOCADDQUEUE

   OK sashan@

   Reported-by: syzbot+a6aee90c45b70ad6dde5 at syzkaller.appspotmail.com
VersionDeltaFile
1.433+4-1sys/net/pf_ioctl.c
+4-11 files

OpenBSD/src C6gG5VJsbin/unwind/libunbound/iterator iterator.c, sbin/unwind/libunbound/services mesh.c outside_network.h

   sync to unbound 1.25.2; heavy lifting by sthen
VersionDeltaFile
1.22+321-67sbin/unwind/libunbound/services/outside_network.c
1.23+159-75sbin/unwind/libunbound/services/listen_dnsport.c
1.13+96-11sbin/unwind/libunbound/services/outside_network.h
1.24+47-20sbin/unwind/libunbound/iterator/iterator.c
1.25+52-14sbin/unwind/libunbound/services/mesh.c
1.19+56-3sbin/unwind/libunbound/validator/validator.c
+731-19026 files not shown
+951-26632 files

OpenBSD/src atjQrL4usr.bin/tmux cmd-pipe-pane.c server-fn.c

   When destroying pane, also close pipe and destroy its event. GitHub
   issue 5424.
VersionDeltaFile
1.64+6-2usr.bin/tmux/cmd-pipe-pane.c
1.149+7-1usr.bin/tmux/server-fn.c
+13-32 files

OpenBSD/src pfcc0urusr.sbin/unbound/iterator iterator.c, usr.sbin/unbound/services outside_network.c listen_dnsport.c

   merge unbound 1.25.2
VersionDeltaFile
1.35+321-67usr.sbin/unbound/services/outside_network.c
1.42+159-75usr.sbin/unbound/services/listen_dnsport.c
1.19+96-11usr.sbin/unbound/services/outside_network.h
1.43+47-20usr.sbin/unbound/iterator/iterator.c
1.35+52-14usr.sbin/unbound/services/mesh.c
1.30+56-3usr.sbin/unbound/validator/validator.c
+731-19041 files not shown
+1,100-31947 files

OpenBSD/src zxS0Qkfusr.sbin/unbound/iterator iterator.c, usr.sbin/unbound/services outside_network.c listen_dnsport.c

   import unbound 1.25.2, fixes various issues in
   https://nlnetlabs.nl/projects/unbound/download/#unbound-1-25-2
   (the quic/ngtcp2/dnscrypt-related issues are not a problem here though,
   as we don't build support for those)

   thanks phessler@ for tests
VersionDeltaFile
1.1.1.33+321-67usr.sbin/unbound/services/outside_network.c
1.1.1.3+276-0usr.sbin/unbound/testcode/unittcpreuse.c
1.1.1.32+159-75usr.sbin/unbound/services/listen_dnsport.c
1.1.1.18+96-11usr.sbin/unbound/services/outside_network.h
1.1.1.36+47-20usr.sbin/unbound/iterator/iterator.c
1.1.1.33+52-14usr.sbin/unbound/services/mesh.c
+951-18746 files not shown
+1,478-32452 files

OpenBSD/src k3fAktWregress/sys/kern/sosplice/udp args-max-multi.pl

   Fix typo in function args.  Reported by Matthias Pitzl
VersionDeltaFile
1.3+1-1regress/sys/kern/sosplice/udp/args-max-multi.pl
+1-11 files

OpenBSD/src luvPfUVusr.sbin/relayctl relayctl.c, usr.sbin/relayd control.c

   relayd/relayctl: convert imsg_get() to imsgbuf_get()

   The special return value is unused, so it's just using the other function.

   ok rsadowski
VersionDeltaFile
1.65+3-3usr.sbin/relayctl/relayctl.c
1.69+2-2usr.sbin/relayd/control.c
+5-52 files

OpenBSD/src i3o20xxsbin/iked control.c, usr.sbin/ikectl ikectl.c

   iked/ikectl: convert imsg_get() to imsgbuf_get()

   The special return value is unused, so it's just using the other function.

   ok rsadowski
VersionDeltaFile
1.37+3-3usr.sbin/ikectl/ikectl.c
1.47+2-2sbin/iked/control.c
+5-52 files

OpenBSD/src 8vG5ATysys/arch/macppc/macppc openfirm.c

   sys/macppc: bound OF_getprop() bounce copy

   The Open Firmware getprop service returns the full property size while
   copying at most buflen bytes. macppc redirects the firmware write through
   OF_buf, but copied the returned size into the caller's buffer, allowing an
   oversized property to overwrite adjacent memory.

   Here, I limit the second copy to buflen while preserving getprop's return
   value.

   This fixes stack corruption when QEMU OpenBIOS returns the 60 byte e1000 reg
   property to pci_intr_map(), which requests one 20 byte PCI record. With this
   change, em0 attaches and the ramdisk reaches the installer.

   OK: kettenis@, jca@
VersionDeltaFile
1.14+2-2sys/arch/macppc/macppc/openfirm.c
+2-21 files

OpenBSD/src IVwz1ZSusr.sbin/unwindctl unwindctl.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.35+3-3usr.sbin/unwindctl/unwindctl.c
+3-31 files

OpenBSD/src tnizdvMusr.sbin/slaacctl slaacctl.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.29+3-3usr.sbin/slaacctl/slaacctl.c
+3-31 files

OpenBSD/src jmpg8chusr.sbin/dhcpleasectl dhcpleasectl.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.15+3-3usr.sbin/dhcpleasectl/dhcpleasectl.c
+3-31 files

OpenBSD/src fX0fZ4Vusr.sbin/dhcp6leasectl dhcp6leasectl.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.7+3-3usr.sbin/dhcp6leasectl/dhcp6leasectl.c
+3-31 files

OpenBSD/src gHLdrlKsbin/slaacd slaacd.c engine.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.83+5-5sbin/slaacd/slaacd.c
1.103+5-5sbin/slaacd/engine.c
1.75+5-5sbin/slaacd/frontend.c
1.18+2-2sbin/slaacd/control.c
+17-174 files

OpenBSD/src fzgW9iBsbin/unwind frontend.c resolver.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.93+5-5sbin/unwind/frontend.c
1.176+5-5sbin/unwind/resolver.c
1.78+5-5sbin/unwind/unwind.c
1.24+2-2sbin/unwind/control.c
+17-174 files

OpenBSD/src 6MUlrSPsbin/dhcpleased dhcpleased.c engine.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.46+5-5sbin/dhcpleased/dhcpleased.c
1.66+5-5sbin/dhcpleased/engine.c
1.48+5-5sbin/dhcpleased/frontend.c
1.13+2-2sbin/dhcpleased/control.c
+17-174 files

OpenBSD/src 2r84pWdsbin/dhcp6leased frontend.c dhcp6leased.c

   Convert imsg_get to imsgbuf_get.

   OK florian@
VersionDeltaFile
1.23+5-5sbin/dhcp6leased/frontend.c
1.22+5-5sbin/dhcp6leased/dhcp6leased.c
1.40+5-5sbin/dhcp6leased/engine.c
1.10+2-2sbin/dhcp6leased/control.c
+17-174 files

OpenBSD/src 6SD7E4cusr.bin/ssh kex-names.c kex.h

   ssh: implement mlkem768brainpoolp256r1-sha256; ok djm@
VersionDeltaFile
1.9+3-1usr.bin/ssh/kex-names.c
1.132+2-1usr.bin/ssh/kex.h
+5-22 files

OpenBSD/src IuPTIPVusr.bin/ssh kexmlkem768ecdh.c kexgen.c

   ssh: implement mlkem768nistp256-sha256; ok djm@
VersionDeltaFile
1.1+303-0usr.bin/ssh/kexmlkem768ecdh.c
1.13+12-1usr.bin/ssh/kexgen.c
1.131+12-1usr.bin/ssh/kex.h
1.13+2-6usr.bin/ssh/kexecdh.c
1.35+3-1usr.bin/ssh/ssh_api.c
1.8+3-1usr.bin/ssh/kex-names.c
+335-105 files not shown
+345-1511 files

OpenBSD/src xTPnvYJsys/arch/riscv64/riscv64 clock.c

   Make use of the RISC-V Sstc extension for the system clock

   Lets us program the timer without doing an SBI ecall, saving a bunch of
   cycles.  Bonus, on platforms which implement it, it works around an
   ongoing issue in Linux kvm.

   Initial diff from Nick Owens, ok kettenis@
VersionDeltaFile
1.15+14-4sys/arch/riscv64/riscv64/clock.c
+14-41 files

OpenBSD/src D43Kzyjgnu/usr.bin/clang/libLLVMMipsCodeGen Makefile

   llvm: g/c local changes for now-retired loongson platform

   forgotten entry pointed out by deraadt@
VersionDeltaFile
1.13+1-2gnu/usr.bin/clang/libLLVMMipsCodeGen/Makefile
+1-21 files

OpenBSD/src EsCWdeFusr.bin/tmux options-table.c cmd-swap-window.c

   Add after-swap-window hook from basicalllymiloud at gmail dot com.
VersionDeltaFile
1.30+2-2usr.bin/tmux/cmd-swap-window.c
1.242+2-1usr.bin/tmux/options-table.c
+4-32 files

OpenBSD/src Q8Gpx6husr.sbin/smtpd smtpd.h ca.c

   remove unused ca_X509_verify()

   Prompted by Frank Denis finding that the CRL argument is unused.
   ok martijn@ op@
VersionDeltaFile
1.50+1-44usr.sbin/smtpd/ca.c
1.696+1-2usr.sbin/smtpd/smtpd.h
+2-462 files

OpenBSD/src tpladdSsys/dev/pci mfii.c

   Management commands with no data buffer still need the pointer to the
   command itself set.  Fixes crashes seen after using the patrol read start/stop
   commands as reported by job@

   ok dlg@
VersionDeltaFile
1.93+7-9sys/dev/pci/mfii.c
+7-91 files

OpenBSD/src abqkOy9sys/dev/pci/drm drm_linux.c, sys/dev/pci/drm/include/linux pci.h

   pci_resize_resource() takes another argument in 6.18.40 drm

   A bitmask of pci bars to skip.  No callers of this are currently enabled
   and the code we have is only for bar 0.
VersionDeltaFile
1.144+2-2sys/dev/pci/drm/drm_linux.c
1.22+2-2sys/dev/pci/drm/include/linux/pci.h
+4-42 files

OpenBSD/src uduKdn0sys/dev/pci/drm/amd/amdgpu amdgpu_device.c, sys/dev/pci/drm/i915/gt intel_region_lmem.c

   PCI: Fix restoring BARs on BAR resize rollback path

   From Ilpo Jarvinen
   4b5322f0002aac02a0f9907ac2358811330d982c in linux-6.18.y/6.18.40
   337b1b566db087347194e4543ddfdfa5645275cc in mainline linux
VersionDeltaFile
1.100+3-1sys/dev/pci/drm/amd/amdgpu/amdgpu_device.c
1.8+1-1sys/dev/pci/drm/i915/gt/intel_region_lmem.c
+4-22 files

OpenBSD/src 3H4iU53sys/dev/pci/drm drm_edid.c

   drm/edid: fix OOB read in drm_parse_tiled_block()

   From Xiang Mei
   9cc0f8e63e8c34cf43def35cbd305ba711181a1f in linux-6.18.y/6.18.40
   faaa1e1155833e7d4ce7e3cfaf64c0d636b190db in mainline linux
VersionDeltaFile
1.49+8-0sys/dev/pci/drm/drm_edid.c
+8-01 files

OpenBSD/src kYYy2CMsys/dev/pci/drm/amd/amdgpu amdgpu_device.c amdgpu_irq.c

   drm/amdgpu: initialize irq.lock spinlock earlier

   From Thadeu Lima de Souza Cascardo
   290ad0a548915bc2f457e6d315e1537f00e16497 in linux-6.18.y/6.18.40
   a2b270c0ecf6d95bcd14ef4c20d0301a88143ff5 in mainline linux
VersionDeltaFile
1.99+2-0sys/dev/pci/drm/amd/amdgpu/amdgpu_device.c
1.15+0-2sys/dev/pci/drm/amd/amdgpu/amdgpu_irq.c
+2-22 files

OpenBSD/src PD9yZvxsys/dev/pci/drm/amd/amdkfd kfd_svm.c

   drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm

   From Mario Limonciello
   96ac562a9ea3020981f536384711190841c81aa8 in linux-6.18.y/6.18.40
   8fa5655da368d0306c03e9dc9cda8ae2a7840926 in mainline linux
VersionDeltaFile
1.29+1-0sys/dev/pci/drm/amd/amdkfd/kfd_svm.c
+1-01 files