OpenBSD/src THwi85rusr.sbin/bgpd rde_decide.c rde_rib.c

   Rename rde_generate_updates() to rde_enqueue_updates().

   OK tb@
VersionDeltaFile
1.108+7-7usr.sbin/bgpd/rde_decide.c
1.296+3-3usr.sbin/bgpd/rde_rib.c
1.703+2-2usr.sbin/bgpd/rde.c
1.351+2-2usr.sbin/bgpd/rde.h
1.74+2-2usr.sbin/bgpd/rde_peer.c
+16-165 files

OpenBSD/src rG9zhsGusr.sbin/relayd ssl.c

   relayd: remove X509_dup() call that leaks memory

   While there, add error checks for X509_set_{pubkey,issuer_name}().

   From Marc Jorge
VersionDeltaFile
1.40+9-6usr.sbin/relayd/ssl.c
+9-61 files

OpenBSD/src MAFkmKNusr.sbin/bgpctl bgpctl.c output.c

   For bgpctl show mrt detail print the last change time as an ISO format time.

   If abs_time is set then switch fmt_monotime() to absolute timestamps.
   This uses monotime_to_time, gmtime and strftime("%FT%TZ") to get an
   ISO format timestamp string.

   While there also adjust get_rel_monotime() to be more like
   monotime_to_time() and stop treating negative numbers as error.
   In fmt_monotime() check the monotime against 0 to print 'Never' for timers
   that are not running.

   With this bgpctl show mrt detail prints:
       Last update: 2019-05-08T20:03:06Z

   OK tb@
VersionDeltaFile
1.322+24-15usr.sbin/bgpctl/bgpctl.c
1.77+2-2usr.sbin/bgpctl/output.c
+26-172 files

OpenBSD/src BVjqXxUusr.sbin/bgpd rde_prefix.c

   Cleanup log messages in rde_prefix.c

   Try to not use function name in log messages and make them less developer
   focused.

   OK tb@
VersionDeltaFile
1.63+17-15usr.sbin/bgpd/rde_prefix.c
+17-151 files

OpenBSD/src XoZwdHaregress/lib/libcrypto/x509/rfc3779 rfc3779.c

   rfc3779 test: exercise IPAddressFamily_cmp a bit more

   This populates an IPAddrBlocks object with not all that sensible data and
   tests behavior of serialization and deserialization of this thing. Prior
   to x509_addr.c rev 1.96 this would call memcmp() on NULL.
VersionDeltaFile
1.13+168-1regress/lib/libcrypto/x509/rfc3779/rfc3779.c
+168-11 files

OpenBSD/src W4zqWG0sys/dev/fdt fanpwr.c

   Add support for the RK8600 regulator used for cpu voltage on Radxa Zero 3
   boards.

   ok kettenis@
VersionDeltaFile
1.11+8-2sys/dev/fdt/fanpwr.c
+8-21 files

OpenBSD/src HNNo9Ojusr.bin/tmux cmd-resize-pane.c server-client.c

   Pane resizing code for floating panes, mostly by Michael Grant.
VersionDeltaFile
1.54+157-18usr.bin/tmux/cmd-resize-pane.c
1.459+96-40usr.bin/tmux/server-client.c
1.1322+2-2usr.bin/tmux/tmux.h
+255-603 files

OpenBSD/src qUCIkOklib/libagentx ax.c, usr.sbin/snmpd ax.c

   Implement a better fix. The previous fix allowed to overflow in a
   different spot. This would still only lead to a crash, and would only be
   reachable by arbitrary users if the admin enabled the agentx socket, and
   set custom permissions.

   OK deraadt@, mvs@
VersionDeltaFile
1.9+6-9usr.sbin/snmpd/ax.c
1.13+6-9lib/libagentx/ax.c
+12-182 files

OpenBSD/src iyyVaDbusr.bin/ssh sshd_config.5 ssh_config.5

   mention that compression could potentially leak information about session
   contents (cf. the CRIME attack on TLS) if a connection allows attacker-
   controlled traffic over it alongside trused traffic. This might occur
   in some forwarding scenarios.

   with deraadt@
VersionDeltaFile
1.398+9-2usr.bin/ssh/sshd_config.5
1.424+9-2usr.bin/ssh/ssh_config.5
+18-42 files

OpenBSD/src wJGiFVZusr.bin/ssh sftp-server.8

   mention usefulness of request type allow/denylisting for servers
   accepting untrusted clients
VersionDeltaFile
1.32+13-2usr.bin/ssh/sftp-server.8
+13-21 files

OpenBSD/src rUiyE8alib/libc/sys open.2

   document EACESS if __pledge_open() in /usr/share/zoneinfo terminates
   on a non-regular file
   ok dgl
VersionDeltaFile
1.62+7-1lib/libc/sys/open.2
+7-11 files

OpenBSD/src P230JeHsys/kern vfs_lookup.c

   only allow __pledge_open(2) to open regular files in the /usr/share/zoneinfo
   directory.  other file types return EACCES.
   ok dgl
VersionDeltaFile
1.93+6-1sys/kern/vfs_lookup.c
+6-11 files

OpenBSD/src ADzWxhRusr.sbin/iscsid vscsi.c

   In the vscsi_callback() handle ISCSI_SCSI_STAT_CHCK_COND more carefully.

   Especially the embedded sense data needs to be extracted respecting the
   real buffer length. Make sure at least 2 bytes are availabe for the lenght
   and also check that the resulting len is not bigger then the buffer
   itself.

   Reported by Frank Denis
   OK deraadt@
VersionDeltaFile
1.19+6-3usr.sbin/iscsid/vscsi.c
+6-31 files

OpenBSD/src JP4fusRusr.sbin/bgpd rde_rib.c

   Also copy aspa_state and aspa_generation in path_copy() this way
   the linked db copy of the path gets the right ASPA cache data.

   OK tb@
VersionDeltaFile
1.295+4-1usr.sbin/bgpd/rde_rib.c
+4-11 files

OpenBSD/src 6Sx8ztqdistrib/sets/lists/man mi

   sync
VersionDeltaFile
1.1770+0-4distrib/sets/lists/man/mi
+0-41 files

OpenBSD/src VD3p1mQusr.sbin/bgpd rde_update.c rde.h

   Introduce a force_update flag to force pend_prefix_add() calls
   in adjout_prefix_update().

   peer_dump() can be called with a preloaded Adj-RIB-Out and in that case
   the code needs to force updates out. This is done instead of walking the
   table twice -- once with peer_dump() and then with peer_blast().
   Using the force_update flag there ensures that all entries are properly
   sent to the peer.

   OK tb@
VersionDeltaFile
1.196+17-12usr.sbin/bgpd/rde_update.c
1.350+10-11usr.sbin/bgpd/rde.h
1.73+10-9usr.sbin/bgpd/rde_peer.c
1.19+5-2usr.sbin/bgpd/rde_adjout.c
+42-344 files

OpenBSD/src t46PReyusr.bin/sndiod dev.c

   sndiod: Allow control slots to have NULL opt pointer

   This case is not encoutered yet, but to control non-audio properties
   the control slots must work with no opt structure.
VersionDeltaFile
1.134+8-9usr.bin/sndiod/dev.c
+8-91 files

OpenBSD/src nhIDd28usr.sbin/bgpd rde.c

   Adjust last commit, the loop termination was not quite correct.

   Set pte to NULL before the inner pt_get loop so that the outer
   loop terminates correctly on (!found && pte != NULL).
   Since pte is NULL now plen needs to be set earlier as well.

   OK tb@
VersionDeltaFile
1.702+5-3usr.sbin/bgpd/rde.c
+5-31 files

OpenBSD/src Ra7l9tSdistrib/sets/lists/base mi

   sync
VersionDeltaFile
1.1184+4-0distrib/sets/lists/base/mi
+4-01 files

OpenBSD/src 9b5SoXzusr.sbin/bgpd rde_decide.c

   Use clearer semantics on how rde_generate_updates is called.

   Adjust prefix_evaluate and prefix_evaluate_nexthop so that
   rde_generate_updates() is only called with a few options.
   Either new is valid or old is valid. If both are invalid then
   there is no need to call rde_generate_updates(). If both are
   valid only new matters and old_pathid_tx is set to 0.

   In prefix_evaluate() most calls are with either new or old set to NULL.
   If both are set then new->path_id_tx == old->path_id_tx.

   In prefix_evaluate_nexthop() if old was valid then new becomes invalid
   but if old was invalid new may still be invalid.

   OK tb@
VersionDeltaFile
1.107+29-15usr.sbin/bgpd/rde_decide.c
+29-151 files

OpenBSD/src jRiKGEYusr.sbin/bgpd rtr_proto.c

   Respect RTR min-version in the implicit downgrade path and release
   activity lock when closing the connection.

   Check min_version in the implict downgrade case and error out if the
   suggested version is too low. Also trigger the RTR_EVNT_NEGOTIATION_DONE
   event only after parsing all of the header. If the PDU was bad don't
   trigger this event.

   In the rtr_fsm() when closing a connection check the state of the
   active_lock and if the lock is held, reset the cache, release the lock and
   recalculate the sets. The internal state is corrupt if a connection error
   triggerd during an exchange so it makes no sense to carry a bad cache
   around.

   OK tb@
VersionDeltaFile
1.54+24-9usr.sbin/bgpd/rtr_proto.c
+24-91 files

OpenBSD/src qRgKMQ8usr.bin/sndiod midi.c midi.h

   sndiod: Add a reference counter to the port structure

   Using a counter is simpler than (ab-)using the midi endpoint bitmaps
   to figure out if the port is in use. In turn this allows holding a
   reference to the port without involving midi endpoint
   connections. This change also reduces the differences between MIDI
   ports and audio devices: less logic, less bugs.
VersionDeltaFile
1.36+5-7usr.bin/sndiod/midi.c
1.20+2-1usr.bin/sndiod/midi.h
+7-82 files

OpenBSD/src 9UnlvxKusr.bin/sndiod midi.c

   sndiod: When connecting midi endpoints, check their modes

   As sndiod always uses IN|OUT, the behavior is unchanged.
VersionDeltaFile
1.35+3-3usr.bin/sndiod/midi.c
+3-31 files

OpenBSD/src QZj3gftusr.bin/sndiod sock.c midi.c

   sndiod: Save a pointer to the struct opt associated to the midi endpoint

   As the socket code holds a reference to the struct opt, it's simpler
   to just save it and release it when the socket is closed. This avoids
   iterating over the full set of midi endpoint structures.

   No behavior change
VersionDeltaFile
1.60+12-14usr.bin/sndiod/sock.c
1.34+1-20usr.bin/sndiod/midi.c
1.19+1-2usr.bin/sndiod/midi.h
1.11+2-1usr.bin/sndiod/sock.h
+16-374 files

OpenBSD/src eUKncT1usr.bin/sndiod midi.c sock.c

   sndiod: Unlink the MIDI port from the socket when its closed

   Not unlinking the port is bad style and might keep the port open after
   the socket is closed.
VersionDeltaFile
1.33+17-1usr.bin/sndiod/midi.c
1.59+2-1usr.bin/sndiod/sock.c
1.18+2-1usr.bin/sndiod/midi.h
+21-33 files

OpenBSD/src WQdlLsDusr.bin/sndioctl sndioctl.c

   sndioctl: Allow list elements to be added or removed
VersionDeltaFile
1.25+11-9usr.bin/sndioctl/sndioctl.c
+11-91 files

OpenBSD/src ow3Qa9ousr.bin/sndioctl sndioctl.c

   sndioctl: Split the parse_modeval() function

   No behavior change
VersionDeltaFile
1.24+18-3usr.bin/sndioctl/sndioctl.c
+18-31 files

OpenBSD/src FBTG8T6usr.bin/sndiod sock.c

   sndiod: Fix confusion between OPT_NMAX and DEV_NMAX

   Both macros have the same value, so no behavior change.
VersionDeltaFile
1.58+2-2usr.bin/sndiod/sock.c
+2-21 files

OpenBSD/src x8YBmZpusr.bin/sndiod opt.c dev.c

   sndiod: Add the server.mode control making the setting dynamic

   The default mode remains "-m play,rec" but now it can be changed with
   sndioctl(1). If the server is switched to play-only mode, then
   existing clients will start recording silence. Similarly if it's
   switched to rec-only mode, clients are muted.

   ok armani, deraadt, rsadowski
VersionDeltaFile
1.17+44-9usr.bin/sndiod/opt.c
1.133+24-29usr.bin/sndiod/dev.c
1.54+10-11usr.bin/sndiod/sndiod.c
1.54+8-4usr.bin/sndiod/dev.h
1.12+9-1usr.bin/sndiod/opt.h
1.31+2-2usr.bin/sndiod/siofile.c
+97-566 files

OpenBSD/src wJPB71kusr.bin/tmux tty-keys.c tmux.h

   Increase escape delay if the buffer contains a partial paste end, fixes
   issues with at least Windows Terminal. From jing dot empty at gmail.com
   GitHub issue 5088.
VersionDeltaFile
1.206+23-2usr.bin/tmux/tty-keys.c
1.1321+2-1usr.bin/tmux/tmux.h
+25-32 files