OpenBSD/src 6RsQoYhshare/man/man7 roff.7

   ourput -> output
VersionDeltaFile
1.107+2-2share/man/man7/roff.7
+2-21 files

OpenBSD/src yOpor9yusr.bin/sndiod midi.c

   correct test for non-NULL; ok ratchov@
VersionDeltaFile
1.46+2-2usr.bin/sndiod/midi.c
+2-21 files

OpenBSD/src hyeQFctshare/man/man7 roff.7, usr.bin/mandoc roff.h roff.c

   Ignore various roff(7) requests that are new in groff-1.23 and groff-1.24.
   Most of these only serve debugging purposes, and some are related to
   features that are not relevant in manual pages and that we do not support
   in the first place.

   Two special cases are notable: .msoquiet is ignored because insecure
   (just like .mso already was), and .soquiet is treated as an exact
   alias for .so, without suppressing any diagnostics, because in manual
   pages, missing include files are never harmless.

   List of requests that needed checking provided by G. Branden Robinson.
VersionDeltaFile
1.106+46-4share/man/man7/roff.7
1.279+23-10usr.bin/mandoc/roff.c
1.60+13-2usr.bin/mandoc/roff.h
+82-163 files

OpenBSD/src MLpze73regress/lib/libm/lgamma lgamma.c

   regress/lib/libmlgamma: remove no longer needed __POSIX_VISIBLE 201403

   These days we default to POSIX 2024 with XSI extensions. The original define
   was only needed when our default was POSIX 2008 and we needed to advance to
   a newer standard to run this test.
VersionDeltaFile
1.4+1-4regress/lib/libm/lgamma/lgamma.c
+1-41 files

OpenBSD/src H9pmgTgregress/usr.bin/mandoc/roff/string stringup_bad.out_ascii stringup.out_utf8, share/man/man7 roff.7

   groff-1.23.0 invented new roff(7) requests .stringup and .stringdown that
   change the case of the named user-defined string in place.  I haven't seen
   them used in any manual page yet and - like for all roff(7) requests - do
   not recommend using them, but i chose to implement them anyway because that
   was almost as trivial as it would have been to mark them as unsupported.

   G. Branden Robinson reminded me of the new feature.
VersionDeltaFile
1.278+33-2usr.bin/mandoc/roff.c
1.105+15-2share/man/man7/roff.7
1.11+11-5regress/usr.bin/mandoc/roff/string/Makefile
1.1+16-0regress/usr.bin/mandoc/roff/string/stringup.in
1.1+9-0regress/usr.bin/mandoc/roff/string/stringup_bad.out_ascii
1.1+9-0regress/usr.bin/mandoc/roff/string/stringup.out_utf8
+93-94 files not shown
+114-1010 files

OpenBSD/src ZWVfJXLusr.bin/mandoc manpath.c

   Stop clobbering the return value of getenv(3) with strtok(3).
   The getenv(3) manual discourages tampering with the returned string.
   Instead, copy the value to the heap such that it can be safely modified.

   This fixes a bug that Luca Del Re <l.osd at ldr.name>
   found on Alpine Linux and reported to bsd.lv.

   The consequence of the bug was likely implementation-dependent, but
   on both OpenBSD and Alpine Linux, the first colon after the first
   byte of the MANPATH variable was set to NUL in the actual environment
   of the man(1) process, and this truncated value would later be
   passed to the pager child process by execv(3).  Hence, while
   MANPATH=:mypath1 worked as expected, the pager would only see
   MANPATH=mypath1 if man(1) saw any of the following:
   MANPATH=mypath1:
   MANPATH=mypath1:mypath2
   MANPATH=mypath1::mypath2
VersionDeltaFile
1.34+22-16usr.bin/mandoc/manpath.c
+22-161 files

OpenBSD/src RQvhqQVsys/kern kern_pledge.c

   Don't panic if ni_pledge is unset in pledge_namei.

   ok deraadt
VersionDeltaFile
1.360+2-2sys/kern/kern_pledge.c
+2-21 files

OpenBSD/src vHXtXv5sys/kern vfs_syscalls.c

   Consistently guard against NULL vp->v_mount in vfs_syscalls.c

   OK kirill@

   Reported-by: syzbot+5c4d0d721f4b850a14d6 at syzkaller.appspotmail.com
VersionDeltaFile
1.388+7-7sys/kern/vfs_syscalls.c
+7-71 files

OpenBSD/src vZZn2gKsys/dev/usb usb_subr.c

   Trim trailing \n from usb descriptor strings

   deraadt@ "I like this"
VersionDeltaFile
1.167+6-4sys/dev/usb/usb_subr.c
+6-41 files

OpenBSD/src A7Afikqsys/kern exec_subr.c

   A specially crafted ELF interpreter binary can trigger a KASSERT() in
   vmcmd_map_readvn().  While this points at some deficiencies in
   elf_load_file(), we have no intention to supporting such weirdly crafted
   binaries (even if they're technically valid).  So return EINVAL instead.

   ok deraadt@
VersionDeltaFile
1.72+3-2sys/kern/exec_subr.c
+3-21 files

OpenBSD/src W7vry7fgnu/usr.bin/binutils-2.17/bfd libbfd.h bfd-in2.h, gnu/usr.bin/binutils-2.17/include/elf sparc.h

   ld.bfd: add SPARC64 GOTDATA relocation support

   Tested and feedback by claudio@

   OK: kettenis@
VersionDeltaFile
1.8+53-9gnu/usr.bin/binutils-2.17/bfd/elfxx-sparc.c
1.5+10-0gnu/usr.bin/binutils-2.17/bfd/reloc.c
1.2+6-0gnu/usr.bin/binutils-2.17/include/elf/sparc.h
1.9+5-0gnu/usr.bin/binutils-2.17/bfd/libbfd.h
1.13+5-0gnu/usr.bin/binutils-2.17/bfd/bfd-in2.h
+79-95 files

OpenBSD/src dSTYjwtsys/kern tty.c

   TIOCGSID can dereference a freed t_session, because we are storing s_leader
   in the wrong place.  This is a cold hard crash crashes.  Some folk are
   looking at fixing this properly but it will take some time, so in the meantime
   we should just fail the ioctl.
   From Acts1632, ok kettenis
VersionDeltaFile
1.185+3-1sys/kern/tty.c
+3-11 files

OpenBSD/src oOiNnExbin/ksh vi.c

   ksh: allow editing empty line with 'v' in vi-mode

   ok tb@
VersionDeltaFile
1.71+1-3bin/ksh/vi.c
+1-31 files

OpenBSD/src on662UGsys/arch/arm64/dev aplns.c simplebus.c

   Specify the correct "read" and "write" bits to the NVMMU based on the
   opcode of the NVMe command.  Drop the opcode itself, since it isn't needed.
   This allows us to drop the magic "null check" bit that is no longer
   supported by the firmware that Apple ships with newer macOS releases.
   Based on work done by Sven Peter over at Asahi Linux.

   ok jmatthew@
VersionDeltaFile
1.24+59-1sys/arch/arm64/dev/simplebus.c
1.20+5-9sys/arch/arm64/dev/aplns.c
+64-102 files

OpenBSD/src yHN4jWAusr.bin/ssh sshd.8

   Refer to id_mldsa44_ed25519.pub in the pubkey list. bz#3989.
VersionDeltaFile
1.331+3-3usr.bin/ssh/sshd.8
+3-31 files

OpenBSD/src EgCIGaagnu/usr.bin/perl regexp.h regexec.c

   Fix out-of-bounds heap reads and writes in perl regex

   Perl versions through 5.45.1 have out-of-bounds heap reads and writes
   during regular expression matching via an undersized superlinear cache
   in S_regmatch

   This is CVE-2026-15534

   https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0
   https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb
VersionDeltaFile
1.33+19-12gnu/usr.bin/perl/regexec.c
1.22+2-2gnu/usr.bin/perl/regexp.h
+21-142 files

OpenBSD/src J6FEI0ksys/dev/fdt dwpcie.c

   Add support for the Spacemit K3 PCIe controller.
VersionDeltaFile
1.64+140-11sys/dev/fdt/dwpcie.c
+140-111 files

OpenBSD/src SCmKL3Rsys/arch/riscv64/dev smtcomphy.c

   Add support for the K3 PCIe/USB3 combo PHY.
VersionDeltaFile
1.4+172-4sys/arch/riscv64/dev/smtcomphy.c
+172-41 files

OpenBSD/src 981SCBusys/arch/riscv64/dev smtclock.c

   Attach to the K3 PLL clock block.  This doesn't enable any of the clocks
   (yet), but the associated regmap is needed for the K3 PCIe/USB combo PHY.
VersionDeltaFile
1.7+9-2sys/arch/riscv64/dev/smtclock.c
+9-21 files

OpenBSD/src mul5f3Gsbin/dhcpleased engine.c

   Prevent read buffer overflow in verbose debug logging.

   When we receive more than 8 nameservers in a DHCP lease we would
   overread the nameservers buffer because the loop was not bounded by
   items in the array but the whole size.

   Pointed out by Stuart Thomas some time ago, thanks!
VersionDeltaFile
1.68+7-4sbin/dhcpleased/engine.c
+7-41 files

OpenBSD/src o0TNiI6sbin/isakmpd log.h monitor.c

   isakmpd: Handle malformed MONITOR_BIND message

   Using a stack allocated sockaddr_storage avoids the malloc(3)
   entirely.  Add length checks for the payload sent by the child.

   When a malicious child sends us a malformed message the privsep
   protocol is out of sync.  Thus terminate gracefully with log_fatalx().

   While there, attribute log_fatalx() with __dead.

   Reported by Shibo, Hugo Systopia Team

   ok markus@ tb@ deraadt@
VersionDeltaFile
1.84+9-16sbin/isakmpd/monitor.c
1.26+2-2sbin/isakmpd/log.h
+11-182 files

OpenBSD/src GUz4KeOsys/dev/pci if_em_hw.h if_em_hw.c

   disable dynamic power gating on Panther Lake and later

   described in Intel changes as known to cause hangs

   tested on 0x57b3 / E1000_DEV_ID_PCH_PTP_I219_LM25

   partly from Intel's DPDK driver
   ok jmatthew@
VersionDeltaFile
1.129+10-4sys/dev/pci/if_em_hw.c
1.103+2-1sys/dev/pci/if_em_hw.h
+12-52 files

OpenBSD/src LX2nzVvsys/dev/pci if_em_hw.h if_em_hw.c

   change K1 exit timeout on Meteor Lake and later

   without this my Panther Lake machine could not receive non-broadcast packets

   tested on 0x57b3 / E1000_DEV_ID_PCH_PTP_I219_LM25 and
   0x550b / E1000_DEV_ID_PCH_MTP_I219_V18

   partly from Intel's DPDK driver
   ok jmatthew@
VersionDeltaFile
1.128+35-1sys/dev/pci/if_em_hw.c
1.102+9-1sys/dev/pci/if_em_hw.h
+44-22 files

OpenBSD/src UXMjrkslib/libssl ssl_lib.c

   SSL_CTX_new(): fix spelling of NULL
VersionDeltaFile
1.336+3-3lib/libssl/ssl_lib.c
+3-31 files

OpenBSD/src daS7gexsys/dev/pci if_em_hw.h if_em.c

   match Panther Lake and Wildcat Lake

   tested on 0x57b3 / E1000_DEV_ID_PCH_PTP_I219_LM25
   needs workarounds coming in another commit to be useable
   ok jmatthew@
VersionDeltaFile
1.127+20-1sys/dev/pci/if_em_hw.c
1.101+7-1sys/dev/pci/if_em_hw.h
1.384+7-1sys/dev/pci/if_em.c
+34-33 files

OpenBSD/src G4VXgBbsys/dev/pci if_em_hw.h if_em.c

   add a mac type for Meteor Lake

   needed for generation specific workarounds
   ok jmatthew@
VersionDeltaFile
1.126+15-2sys/dev/pci/if_em_hw.c
1.383+3-1sys/dev/pci/if_em.c
1.100+2-1sys/dev/pci/if_em_hw.h
+20-43 files

OpenBSD/src xafYjIysys/dev/pci if_em.c if_em_hw.h

   simplify mac type tests

   Reduces the number of places to change when adding mac types.
   Tested by bluhm@ in a machine full of em(4) cards, ok jmatthew@
VersionDeltaFile
1.125+12-65sys/dev/pci/if_em_hw.c
1.99+2-6sys/dev/pci/if_em_hw.h
1.382+2-3sys/dev/pci/if_em.c
+16-743 files

OpenBSD/src 8V4wAY5sys/dev/pci dwiic_pci.c

   match on Intel Wildcat Lake
VersionDeltaFile
1.36+7-1sys/dev/pci/dwiic_pci.c
+7-11 files

OpenBSD/src ZJZyZxRsys/dev/pci pcidevs.h pcidevs_data.h

   regen
VersionDeltaFile
1.2135+249-1sys/dev/pci/pcidevs_data.h
1.2140+63-1sys/dev/pci/pcidevs.h
+312-22 files

OpenBSD/src 2RS5VUssys/dev/pci pcidevs

   add Intel Wildcat Lake ids

   from:
   Intel Core Processor (Series 3)
   Datasheet, Volume 1 of 2, Doc. No.: 913965, Rev.: 001
VersionDeltaFile
1.2147+63-1sys/dev/pci/pcidevs
+63-11 files