BSD Commit Log Search

   imsg_init.3: mark imsg_get as intentionally undocumented

   noticed by chohag at jtan.com
   ok claudio

   Use imsg_get_data for IMSG_CTL_LOG_VERBOSE instead of blindly trusting the
   size of the imsg.

   Reported by Shibo, Hugo Systopia Team

   Unify IMSG_CTL_LOG_VERBOSE handlers to look the same.

   Fix inverted logic in bus_dmamap_load() and its variants that checks
   whether virtual address continuity is needed.  This fixes an issue where
   cache flushes during bus_dmamap_sync() would fault.

   ok jca@

   Fix inverted logic in bus_dmamap_load() and its variants that checks
   whether virtual address continuity is needed.  This fixes an issue where
   cache flushes during bus_dmamap_sync() would fault.

   ok jca@

   At startup move peers quickly to active state but delay the connection
   open by SESSION_CLEAR_DELAY

   This allows new connection in right after startup but still delays
   the connect like before. This is mainly needed for the integration
   tests that depend on quick startups.

   Issue noticed by anton@
   OK tb@

   getty(8): don't pass an empty string to login(1)

   Entering some text and then deleting it would pass an empty string to
   login(1) leading to an error message. Fix this by checking if name is
   blank.

   This was worked out by Piotr Durlej who submitted a proposed fix. I ended
   up going with a simpler fix though. After I came up with my fix I noticed
   that FreeBSD commited an identical change as part of a larger commit they
   made in 2003.

   Discussed with deraadt@

   For whatever reason the first IPv6 packet is always lost and so the
   bgp session just does not come up in time. Ping6 the neighbor first
   so that nd6 lookups are finished before the bgp connection opened.

   Extend fill-character to allow inside and outside to be separate and use
   a different default (filled characters rather than dots) for inside.

   Use shorter timeouts and explicit session ups to make this more reliable.

   FUSE callbacks return a negated errno. Return -ENOSYS if an operation is
   not implemented by a file system.

   OK claudio@

   File systems can provide a pointer to private data to fuse_main(3)
   or fuse_new(3). However, if the file system implements init() then
   this will be replaced by the return value of init(). If a file
   system wants to keep the original value then it can retrieve it by
   calling fuse_get_context(3).

   OK claudio@

   use sshpkt_fatal instead of plain fatal() for errors in the packet
   code as this provides context of the failing peer (address, port,
   user, etc). Based on patch from Dag-Erling Smørgrav

   Don't attempt to validate the mount directory during option parsing.
   Instead, check the result of realpath(3) before calling mount(2)
   and rely on this to confirm that it is indeed a directory.

   File systems like ntfs-3g that don't call fuse_parse_cmdline(3)
   will now print an error message if the directory doesn't exist
   rather than silently failing.

   OK claudio@

   Fix signed integer overflow in Storable

   Storable for Perl has a signed integer overflow when deserializing
   a crafted SX_HOOK record

   CVE-2026-57433

   https://lists.security.metacpan.org/cve-announce/msg/41780100/

   Fix integer overflow in perl pack and unpack

   Perl has an integer overflow in S_measure_struct leading to an
   out-of-bounds heap read in pack and unpack.

   CVE-2026-57432

   https://lists.security.metacpan.org/cve-announce/msg/41780102/

   Fix for incorrect regular expression matches

   Perl produce silently incorrect regular expression matches when an
   alternation of more than 65535 fixed string branches is compiled
   into a trie in Perl_study_chunk

   CVE-2026-13221

   https://lists.security.metacpan.org/cve-announce/msg/41780104/

   sync

   sys/uvm: fix uao_dropswap() index typo

   The loop variable indexes the current pgs[] batch, not the page within
   the object. Pass the fetched page's object offset to uao_dropswap(), as
   the other resident page callers do.

   OK: kettenis@

   Unconditionally set cpuresetfn and powerdownfn.  The K3 firmware that I'm
   currently working with claims to implement the System Reset Extension,
   but the reset doesn't actually work.  Looking at the K1/K3 firmware
   code reveals that the firmware would do the same thing as this driver,
   so overriding these functions should be fine.

   ok jsg@

   Switch show-options over to using a format and add -F.

   Add support for the Spacemit K3 SoC.  Fix a pasto in most of the
   Spacemit K1 UART reset control definitions spotted while working
   on this code.

   ok jsg@

   Add a menu on empty areas to allow a new pane to be created.

   Show user hooks correctly with show-hooks.

   ospf6d: preserve configured interface type on link update

   When an interface undergoes a link state change (RTM_IFINFO),
   if_update() unconditionally overwrites iface->type based on current
   interface flags. This causes interfaces explicitly configured with "type
   p2p" in ospf6d.conf to revert to broadcast (IF_TYPE_BROADCAST) on link
   bounce.

   Introduce F_IFACE_TYPE to track whether the interface type was set by
   configuration, and only auto-derive the type from interface flags when
   this flag is not set.

   Reported and tested by Atanas Vladimirov.

   OK claudio@

   vmd(8): guard synchronous imsg channel with a mutex.

   Serialize vcpu access to the synchronous imsg channel for communicating
   PCI register access to virtio device child processes. If vmd ever
   becomes MP, VCPUs could interleave during the io emulation on the imsg
   channel.

   Report and original diff by Andrew Griffiths. Modified to move the
   mutex into the global state of the vm process instead of per-device.

   ok hshoexer@

   ice(4): enable use of 128 DMA segments for TSO packets again

   This diff contains two fixes for the ice_tso_detect_sparse()
   function to prevent the 'Too many data commands' error:

    1. Replace wrong computation of nsegs with already
       specified map->dm_nsegs from the DMA layer.

    2. Reinstate ICE_MAX_TX_SEGS for max. No. of Segments
       per MSS section.

   Tested by bluhm

   OK bluhm@, stsp@

   Improve SHA-3 performance.

   Replace the tiny-sha3 keccakf implementation with an unrolled and
   interleaved algorithm, that is hidden away in an obsolete reference
   implementation.

   This gets us 3.3x speed up on arm64 (Apple M2), a 1.3x speed up on amd64
   (Intel i7-1165G7) and 6x speed up on sparc64 (M3000).

   ok tb@

   Correctly handle bit count for SHA-512.

   The SHA-512 bit counter is 128 bits - as such, we need to handle overflow
   and increment the second 64 bit field.

   Reported by claudio@

   ok claudio@ tb@

   Add A modifier to cycle through a series of values, GitHub issue 5412
   from Fernando Daciuk.