BSD Commit Log Search

   netinet6: keep negotiated IPv6CP IFID unchanged for link-local address

   When sppp/PPPoE installs a peer-suggested IPv6CP interface identifier,
   in6_ifattach_linklocal() forced EUI64 G/U bit adjustments on the
   provided IFID. This unconditionally set the universal bit, rewriting a
   valid negotiated IFID like ::1 into ::200:0:0:1, yielding
   fe80::200:0:0:1 instead of fe80::1.

   RFC 5072 Section 5 specifies that the PPP link-local address is formed
   using the negotiated Interface Identifier as-is. Skip EUI64 bit
   modification on point-to-point interfaces. Non-P2P callers retain
   existing behaviour, while callers passing NULL continue using
   in6_get_ifid().

   Reported by Martin Crossley <admin AT crossleys DOT biz>.

   OK stsp@

   Clip floating panes exactly at window edge, don't let the border creep
   into the first outside column.

   Invalidate scene when window is resized.

   Add a -C flag to new-pane to have a modal pane close when the mouse is
   clicked outside it, GitHub issue 5400.

   Fix possible exit race in the parser

   Call pthread_cond_broadcast() on exit with its mutex held to ensure
   that the receiving threads are all either parked or running and then
   checking quit before calling pthread_cond_wait().
   Also once woken recheck the value of quit and exit the main loop early.

   OK tb@

   If drawing border but not actually on a border, use the default line
   style.

   Add copy-mode-current-line-style to set style for current line in copy
   mode, GitHub issue 5391 from Leo Henon.

   Use OF_getpropbool() instead of OF_getproplen() where appropriate.

   ok jsg@

   DNS names are not proper C strings, they can contain NUL octets.

   If we want to use string functions (e.g. for comparison) we first need
   to convert them.

   with dgl some time ago
   OK dlg

   Use decimal encoding for special characters in DNS labels.

   with dgl some time ago
   OK dlg

   Rework the IdleHoldTimer and how fast reconnects are implemented.

   On first error bgpd should allow a fast reconnect - this is especially
   helpful for passive sessions. The way this was implemented was error
   prone with a special case in session_accept().

   Adjust the FSM so that on the first IDLE transistion the session uses
   a IdleHoldTime of 0 sec but then increased to INTERVAL_IDLE_HOLD_INITIAL.
   At the same time the outgoing connection is delatyed via ConnectRetryTimer.
   Doing this moves the session quickly into active state and allows new
   connections in but delays the reconnect like before.

   Additionally the STATE_ACTIVE / EVNT_START FSM case is adjusted to initiate
   a connect immediatly. This allows a 'bgpctl nei X up' to work also for
   sessions in ACTIVE state. Also passive sessions will initiate a connection
   in this case, which is a new behaviour.

   OK tb@

   Use peer_dump_done() in the EXPORT_NONE and EXPORT_DEFAULT_ROUTE cases of
   peer_dump().

   peer_dump_done() calls peer_blast_done() and it issues the End-Of-RIB
   marker. This unifies all the peer_dump finalizers to use peer_dump_done().

   OK tb@

   Switch a few uint32_t to unsigned int where it makes sense.

   Instead of mixing uint32_t with unsigned long long use unsigned int for
   those. In most cases those are simple counts that can't get too big.
   The same is the case for max_prefix and max_out_prefix. There is no good
   reason to use uint32_t there.

   OK tb@

   In struct rde_peer_stats use unsigned long long instead of uint64_t to
   simplify printing the values out.

   OK tb@

   Use correct cursor position for range end, GitHub issue 5414.

   Increase escape-time for tmux's own queries (refresh-client -l and
   window size) as well, GitHub issue 5388 from Jackson Edmonds.

   verify that ChannelTimeout in a Match block is effective

   verify that RekeyLimit in a Match block is effective

   fix ChannelTimeout and RekeyLimit not being applied in sshd_config
   Match blocks; reported by Alex Harrison

   s/= - 1/= -1/; from serity---

   bn_mul_div: use (unsigned long long) instead of (uint64_t) to print with %llu

   Don't use SCSI_DATA_IN for patrol read commands that don't have a data
   buffer.  Noticed while looking into crashes reported by job@ but doesn't
   fix anything.

   ok dlg@

   Enable on Spacemit K3.

   Add add ECDSA tests (based on the RSA tests)

   relayd: add ECDSA support to the CA privsep engine

   Add an EC_KEY_METHOD that forwards the sign operation to the CA process,
   clone the existing RSA engine. ssl_load_pkey() now handles both RSA
   and EC keys and attaches the cert hash accordingly.

   The engine and signing code was migrated from smtpd from (op@) with
   some tweaks by me.

   OK op@

   vmd(8): validate memory ranges in vmd before vmm(4).

   While vmm(4) does its own check on the number of memory ranges, do
   the check in vmd(8) to fail fast and provide feedback to the user.

   Report and diff by Andrew Griffiths.

   ok @hshoexer

   authpf(8) read_config() should chop off trailing white space

   if administrator mistakenly types into configuration file

   anchor=authpf_test

   where 'authpf_test' is followed by white space, the authpf(8)
   is going to use anchor 'authpf_test ' instead of the 'authpf_test'
   which is defined in pf.conf(5) as 'anchor authpf_test/*'

   issue kindly reported and patch submitted by

   Avinash Duduskar <avinash.duduskar (_at_) gmail (_dot_) com>

   OK sashan@

   Bring back up_generate_addpath_all() using the rib entry queue

   add-path send all can take a fair amount of shortcuts compared to the
   other add-path send modes. The rib entry queue (struct pq_entry) holds
   all the information to update the adj-rib-out.

   For general updates just walk the pq list and insert / withdraw all
   paths. A path can only be once on the list so the code just needs to
   walk it and call up_process_prefix for updates. If up_process_prefix()
   returns UP_FILTERED or UP_EXCLUDED then try to withdraw the prefix. This
   uses the same codepath as for any withdraw in the queue.

   Tested on the NLNOG ring looking glass server.
   OK tb@

   Change cellused/size to 16 bits and time to 32 bits in grid_line and add
   the OSC 133 positions (size stays the same).

   Disambigulate all warnings about CCR corruption

   OK tb@