BSD Commit Log Search

   For the three numerical sort options, mention what the key is
   because the description of the -u option refers to the term "key".
   While here, improve a few minor points in the vicinity, too.
   Triggered by a question from <VanDung dot Ha at freedom dot nl> on bugs@.
   OK sthen@ deraadt@ jmc@

   Rename a bunch of confusingly named variables

   Variables of the type serialized or deserialized are called val_in or
   val_out in all other manuals, so align this page to using those rather
   than the confusing X509_CRL **der_out, etc.

   Add regress coverage for X509_NAME_oneline and X509_NAME_print

   const correct d2i_* prototypes

   Update libexpat to version 2.7.0.

   Relevant for OpenBSD are security fixes #893 #973, other changes
   #921 #941 #959 #971 #969 #970.  No library bump necessary, only
   version defines have been changed in public header file.  CVE-2024-8176

   tested and OK tb@

   Fix accounting of the pending update counter

   There are two issues:
   - In peer_blast_upcall() pending_update must be increased for every
     prefix inserted.
   - In prefix_adjout_flush_pending() the EoR marker needs special handling.
     The EoR marker is not accounted but must be freed here.

   OK tb@

   Fix EVP_CIPHER_CTX_ctrl() return checks

   While this API tries to translate negative return values (i.e. -1) to 0
   in BoringSSL and LibreSSL, it is still possible for it to return negative
   values in prinicple. We even incorrectly document that -1 can be returned
   while Boring and OpenSSL plead the Fifth.

   In OpenSSL 3 there are now code paths that explicitly return -1 and they
   started shifting their return checks to <= 0 - of course they do this in
   inconsistent and sometimes incorrect manner. While these paths aren't
   reachable from ssh right now, who can really tell what happens in the two
   hundred lines of inscrutable bloated mess this has become.

   So error check with <= 0 to ensure that we don't accidentally translate an
   error to success.

   ok markus schwarze

   drm/i915: Plumb 'dsb' all way to the plane hooks

   From Ville Syrjala
   f96fbd79e874798f1863249e36e16661df8a0a82 in linux-6.12.y/6.12.19
   01389846f7d61d262cc92d42ad4d1a25730e3eff in mainline linux

   drm/i915/color: Extract intel_color_modeset()

   From Ville Syrjala
   7f74b1f4a9474fa04d56d0f41fa6c89cd8103715 in linux-6.12.y/6.12.19
   84d2d0430f0833cdf52a3d051906add051f20ef0 in mainline linux

   drm/sched: Fix preprocessor guard

   From Philipp Stanner
   c78f4052cf40265adb396b927194e79e30524080 in linux-6.12.y/6.12.19
   23e0832d6d7be2d3c713f9390c060b6f1c48bf36 in mainline linux

   drm/fbdev-ttm: Support struct drm_driver.fbdev_probe

   From Thomas Zimmermann
   dad0617fe3b95e780c7bf6987c2fa8b19af668cb in linux-6.12.y/6.12.19
   c7c1b9e1d52b0a0dbb0ee552efdc3360c0f5363c in mainline linux

   drm: Add client-agnostic setup helper

   From Thomas Zimmermann
   09d1157182d0f669c48c7f5d1b0621ff46db21ea in linux-6.12.y/6.12.19
   d07fdf9225922d3e36ebd13ccab3df62b1ccdab3 in mainline linux

   drm/fbdev: Add memory-agnostic fbdev client

   From Thomas Zimmermann
   7f5535fcbba2ce7f1908ee7e5c350032a4b1e9d0 in linux-6.12.y/6.12.19
   5d08c44e47b9d41366714552bdd374ac4b595591 in mainline linux

   drm/fbdev-helper: Move color-mode lookup into 4CC format helper

   From Thomas Zimmermann
   f9c843f56d01086a9ff80140ce9eedeceb001aca in linux-6.12.y/6.12.19
   eb1f4adf9101573fc2347978a60d71c4f1176cca in mainline linux

   drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M

   From Richard Thier
   4ca67d51d90dd85d2137e76d509f564e299f32c4 in linux-6.12.y/6.12.19
   29ffeb73b216ce3eff10229eb077cf9b7812119d in mainline linux

   drm/amd/pm: always allow ih interrupt from fw

   From Kenneth Feng
   6c7025b9f86e3bc5c164a117b7a36ce73ac820aa in linux-6.12.y/6.12.19
   da552bda987420e877500fdd90bd0172e3bf412b in mainline linux

   drm/amdkfd: Fix NULL Pointer Dereference in KFD queue

   From Andrew Martin
   c3cbeafb4e0001d9146df50b470885e02664f3c7 in linux-6.12.y/6.12.19
   fd617ea3b79d2116d53f76cdb5a3601c0ba6e42f in mainline linux

   drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

   From Ma Ke
   e0345c3478f185ca840daac7f08a1fcd4ebec3e9 in linux-6.12.y/6.12.19
   374c9faac5a763a05bc3f68ad9f73dab3c6aec90 in mainline linux

   drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro

   From Imre Deak
   729e7d4b1c5484928bd930ba94bb010e5b88a555 in linux-6.12.y/6.12.19
   879f70382ff3e92fc854589ada3453e3f5f5b601 in mainline linux

   drm/i915/dsi: convert to struct intel_display

   From Jani Nikula
   0131280ddf38a1a487037737c67b67646f6c7c9b in linux-6.12.y/6.12.19
   7c05c58c15d49b75eefaa24154cce771f1db955b in mainline linux

   Move remote address update after ikev2_pld_parse() to make sure
   the received packet is validated and authenticated before we update
   our connection state.

   Initially reported by IIJ
   Feedback and ok yasuoka@ markus@

   Implement busdma(9) bounce buffering for raw memory.

   In _bus_dmamap_load_raw() use the same logic for bounce buffers as
   in _bus_dmamap_load_buffer().  Then xhci(4) attaches when running
   on a KVM hypervisor with AMD SEV enabled.

   from hshoexer@

   don't error on explicit fence in drm_gem_plane_helper_prepare_fb()

   mglocker@ encountered this.  With a screen sometimes staying black when
   coming back from screen saver idle.

   minor libssl bump (SSL_OP_NO_RENEGOTIATION/SSL_OP_ALLOW_CLIENT_RENEGOTIATION)
   code #ifdef'ing these and compiled with new headers won't work as expected on
   earlier libraries

   minor libtls bump to match libssl bump

   ok tb@

   pkey_ec_derive: fix call to ECDH_compute_key()

   The last argument is a pointer to the KDF, so use NULL, not 0.

   Simplify field and private key encoding

   Reach into the group (p and order are always available) and use
   BN_num_bytes() rather than using clumsy and badly named API.
   It's shorter and more readable.

   ok jsing

   Make srtp.h self-standing by including ssl.h

   ok miod

   Set SO_BROADCAST since the client sends packets to a broadcast
   address.  This is required now since the kernel is just fixed to
   require this.  Report from anton

   ok anton

   Set M_BCAST for packets going to 0.0.0.0 or 255.255.255.255, so the
   upper layers can handle them properly.  Found by IIJ.

   ok bluhm

   remove assumption that the sshd_config and any configs included from
   it can fit in a (possibly enlarged) socket buffer, by having the
   sshd listener mainloop actively manage sending the configuration to
   the sshd-session subprocess.

   work by markus@ w/ a little feedback from me;
   ok me and committing on his behalf