OpenBSD/src pKF1G21 — usr.bin/tmux tmux.1 tmux.c

   Tighten up TMUX_TMPDIR - do not allow relative paths or .. or if
   realpath fails. From Alexandre Fiori.
VersionDeltaFile
1.225+50-8usr.bin/tmux/tmux.c
1.1174+5-2usr.bin/tmux/tmux.1
+55-102 files

OpenBSD/src tvEcRXs — sys/dev/pci/drm/include/linux delay.h

   change some busy wait delays to tsleep

   Previously tsleep was avoided in usleep_range(), drm_msleep() and
   fsleep() on precision grounds.  That shouldn't be a problem after
   kern_synch.c rev 1.225.

   This change prevents inteldrm GuC initialisation errors seen on
   Alder Lake by daniel@ and rsadowski@

   Problem found by and initial patch from daniel@
VersionDeltaFile
1.9+10-3sys/dev/pci/drm/include/linux/delay.h
+10-31 files

OpenBSD/src oqkTMve — usr.bin/tmux tty-keys.c

   Discard keys if there is no session, fixes crash reported by Artyom
   Pertsovsky.
VersionDeltaFile
1.215+11-1usr.bin/tmux/tty-keys.c
+11-11 files

OpenBSD/src xawQkTg — usr.bin/tmux tmux.c

   Fix some indentation.
VersionDeltaFile
1.224+3-3usr.bin/tmux/tmux.c
+3-31 files

OpenBSD/src fQC9DNV — usr.bin/tmux window.c session.c

   Do not overflow window indexes at INT_MAX in new-window -a and
   renumber-windows. GitHub issue 5637 from Alexandre Fiori.
VersionDeltaFile
1.109+12-4usr.bin/tmux/session.c
1.379+2-2usr.bin/tmux/window.c
+14-62 files

OpenBSD/src m5qJKcr — lib/libcrypto/bytestring bytestring.h, lib/libssl bytestring.h

   bytestring.h: add missing 1 to CBB_add_asn1 doc comment
VersionDeltaFile
1.27+2-2lib/libssl/bytestring.h
1.7+2-2lib/libcrypto/bytestring/bytestring.h
+4-42 files

OpenBSD/src uSx9I9K — sys/kern subr_prof.c

   profil(2): release the dirfd reference, and publish pr_cdir once

   Fixes both leaks reported by Acts1631, plus the race that fixing the
   first one exposes.

   - Take the vnode reference while the file reference is still held, then
     FRELE() it.
   - Acquire pr_ucred together with pr_cdir, after validation, so an
     EBADF/ENOTDIR return cannot leave a cred held with pr_cdir still NULL
   - Re-test pr_cdir before publishing to and release the loser's resource

   deraadt@ Looks good
VersionDeltaFile
1.44+16-5sys/kern/subr_prof.c
+16-51 files

OpenBSD/src N9ocvc9 — usr.bin/tmux mode-tree.c

   Keep the scroll position in tree mode when the list is rebuilt, GitHub
   issue 5631 from Kim A Brandt.
VersionDeltaFile
1.103+18-13usr.bin/tmux/mode-tree.c
+18-131 files

OpenBSD/src qOH0NZR — usr.sbin/bgpd rde_rib.c

   Do a prefix re-evaluation if the validation state of a route changes.

   The validation state of a route does not change the route evaluation
   but if the state changes the result of the outbound filters may change.
   Because of this do the same dance we do for the filtered flag and
   re-evaluate the prefix.

   Move the validation state also into the middle of the re-evaluation dance
   even though it is not strictly needed. At least that way it is more
   consistent with the rest of the code.

   Reported by N0zoM1z0
   OK tb@
VersionDeltaFile
1.306+12-6usr.sbin/bgpd/rde_rib.c
+12-61 files

OpenBSD/src UUSAq66 — sys/arch/arm/arm pmap7.c

   sys/arm: avoid cache faults on untranslated aliases

   An executable PV entry does not establish a usable hardware translation;
   for an unreferenced prefaulted page, pmap_enter() can install an L2 PTE
   with its access flag clear while leaving the L1 descriptor invalid.
   pmap_clean_page() nevertheless uses such aliases for cache maintenance;
   during address space teardown, a translation abort can reenter
   uvm_fault() while the current thread owns the map write lock, provoking
   recursive acquisition of vmmaplk.

   Inspect each executable alias's L1 descriptor before issuing cache
   maintenance by virtual address; if it is invalid, use
   cpu_idcache_wbinv_all() and return, since the operation covers the
   remaining aliases. This preserves data cache cleaning and instruction
   cache invalidation without translating the unusable address; aliases
   with valid L1 descriptors retain the existing per page operation.

   This idea follow discovered discussion in linux-arm-kernel:
   https://lists.infradead.org/pipermail/linux-arm-kernel/2018-January/556458.html

    [4 lines not shown]
VersionDeltaFile
1.70+10-2sys/arch/arm/arm/pmap7.c
+10-21 files

OpenBSD/src BGR4kga — sys/dev/ic qwx.c

   properly handle potential case of empty packets returned from qwx hardware

   tested by Jean-Michel Bessot, phessler@, and myself
   ok phessler@
VersionDeltaFile
1.141+5-8sys/dev/ic/qwx.c
+5-81 files

OpenBSD/src trFdNNZ — sys/dev/ic qwx.c

   add missing DMA syncs for qwx(4) SRNG DMA descriptor memory

   tested by Jean-Michel Bessot, phessler@, and myself
   ok phessler@
VersionDeltaFile
1.140+7-2sys/dev/ic/qwx.c
+7-21 files

OpenBSD/src 0gmE39d — sbin/iked ikev2.c

   iked: Remove invalid SPI size 8 in delete path

   DELETE does not provide the SPI of the IKE SA to be deleted.  It
   is the IKE SA that is used to send the DELETE notify.  Therefore,
   SPI size 8 is not valid.  With the previous change, such DELETE
   notifies will be dropped.  Therefore remove the now dead code.

   See https://www.rfc-editor.org/rfc/rfc7296.html#section-3.11

   ok markus@
VersionDeltaFile
1.404+9-27sbin/iked/ikev2.c
+9-271 files

OpenBSD/src 71t6VnP — sys/arch/amd64/amd64 vmm_machdep.c

   vmm(4): Do not access raw PSL_I

   With SEV-ES enabled we can not directly access PSL_I in RFLAGS.
   Instead we have to use the GUEST_INTR_MASK bit in vmcb->v_intr_shadow
   which indicates the actual PSL_I state.

   ok dv@ mlarkin@
VersionDeltaFile
1.91+3-2sys/arch/amd64/amd64/vmm_machdep.c
+3-21 files

OpenBSD/src dXsb1Rz — usr.sbin/rpki-client validate.c extern.h

   rpki-client: rename valid_x509() to valid_cert()

   x509 usually indicates an X509 * argument and cert a struct cert *.
   This got changed in the surgery today and valid_cert() is now free,
   so we can fix this.

   ok claudio
VersionDeltaFile
1.189+7-7usr.sbin/rpki-client/parser.c
1.91+3-3usr.sbin/rpki-client/filemode.c
1.90+2-2usr.sbin/rpki-client/validate.c
1.299+2-2usr.sbin/rpki-client/extern.h
+14-144 files

OpenBSD/src dy0DwQA — usr.sbin/rpki-client extern.h parser.c

   rpki-client: check all !TA certs for resource coverage

   For historic reasons, EE certs did not have their resources checked for
   coverage in the parent. Since we have the exception of EE certs that need
   special casing for inheritance (MFT/TAK/GBR), this can be done at the end
   of valid_x509(). The check is not expensive since this only goes up as
   many issuers as needed to hit explicit resources.

   Rename the misnamed valid_cert() to valid_resources() for lack of a better
   idea and call it from the end of valid_x509(). Remove the remaining calls
   since they're now redundant, and make valid_resources() static.

   ok job
VersionDeltaFile
1.89+6-4usr.sbin/rpki-client/validate.c
1.188+2-3usr.sbin/rpki-client/parser.c
1.90+2-3usr.sbin/rpki-client/filemode.c
1.298+1-2usr.sbin/rpki-client/extern.h
+11-124 files

OpenBSD/src MmTfaNA — sys/dev/usb uaudio.c

   uaudio: Make sure the reported format and channels are usable

   A bogus device may trigger a division by zero if the number of
   channels or sample size are 0. Similarly, memory corruption may occur
   if the reported sample size is larger than four bytes.

   Found by Acts1631 <acts1631kjv at proton.me>, who proposed a diff that
   inspired this fix. Thanks!
VersionDeltaFile
1.189+16-1sys/dev/usb/uaudio.c
+16-11 files

OpenBSD/src aMHWeHh — sys/arch/arm64/dev apldc.c

   The MTP firmware needs to stay around after "loading" it; the comprocessor
   that runs the firmware seems to reference the firmware image that we pass
   it directly instead of making its own copy.  This fixes a regression on
   laptops with a dockchannel touchpad after the recent changes to apldart(4).

   ok tobhe@
VersionDeltaFile
1.13+23-20sys/arch/arm64/dev/apldc.c
+23-201 files

OpenBSD/src GxNksT5 — usr.sbin/bgpctl bgpctl.c parser.c, usr.sbin/bgpd bgpd.conf.5 bgpd.h

   Add shorthand for well-known BGP community "DOWNGRADE"

   From https://datatracker.ietf.org/doc/html/draft-ietf-grow-downgrade-bgp-community

   OK claudio@
VersionDeltaFile
1.506+5-1usr.sbin/bgpd/parse.y
1.141+5-1usr.sbin/bgpctl/parser.c
1.549+3-2usr.sbin/bgpd/bgpd.h
1.325+3-1usr.sbin/bgpctl/bgpctl.c
1.259+2-1usr.sbin/bgpd/bgpd.conf.5
+18-65 files

OpenBSD/src J4xED6Y — usr.bin/tmux window.c screen-redraw.c

   As well as tracking modified (dirty) lines during a synchronized update,
   also track scrolled lines. This means they can be scrolled as one
   instead of forcing each line to be redrawn - much less expensive for a
   very common operation. From Ben Maurer in GitHub issue 5611.
VersionDeltaFile
1.293+153-30usr.bin/tmux/screen-write.c
1.1448+6-2usr.bin/tmux/tmux.h
1.162+3-3usr.bin/tmux/screen-redraw.c
1.378+2-2usr.bin/tmux/window.c
+164-374 files

OpenBSD/src qXYO9wC — usr.sbin/rpki-client parser.c validate.c

   rpki-client: match CRLDP and referring Manifest for all !TA certs

   Now that crl->mftcrldp is always set, we can move the comparison of
   cert->crl with crl->mftdp into valid_x509() so that all certs which
   come through here must satisfy this requirement. While TA certs are
   not validated here, add a check for cert->purpose to avoid potential
   NULL accesses.

   ok job
VersionDeltaFile
1.88+13-8usr.sbin/rpki-client/validate.c
1.187+1-6usr.sbin/rpki-client/parser.c
+14-142 files

OpenBSD/src aTPGigk — usr.sbin/rpki-client filemode.c

   rpki-client: teach filemode about crl->mftcrldp

   The following commit relies on mftcrldp being set on every crl.
   In filemode use the repo from which the CRL was loaded.

   ok job
VersionDeltaFile
1.89+13-8usr.sbin/rpki-client/filemode.c
+13-81 files

OpenBSD/src 8EwR4dy — usr.sbin/pkg_add/OpenBSD PackageRepository.pm

   key= in the signify gzip comment used to include the path, but this was
   dropped in signify.c:1.137 so that only bare filenames are used. teach
   pkg_add about this so that the signer is still recorded in +CONTENTS
   for installed packages. from espie
VersionDeltaFile
1.179+5-3usr.sbin/pkg_add/OpenBSD/PackageRepository.pm
+5-31 files

OpenBSD/src M1FEtUd — usr.sbin/pkg_add/OpenBSD PkgInfo.pm

   for pkg_info -C, don't print an error if there's no @signer in the plist
   from espie; problem reported by Luigi Vianello
VersionDeltaFile
1.55+3-2usr.sbin/pkg_add/OpenBSD/PkgInfo.pm
+3-21 files

OpenBSD/src iCpCanm — sys/dev/usb uaudio.c

   uaudio: Handle bogus endpoint intervals

   Fixes possible division by zero that bogus uaudio hardware may cause.
   If the interval is 0 (not allowed for isoc endpoints), assume that the
   descriptor is not filled and use 1ms, which works on all devices.
   Skip endpoints with intervals of more than 10ms, which make no sense
   for audio.

   Found by Acts1631 <acts1631kjv at proton.me>
VersionDeltaFile
1.188+17-1sys/dev/usb/uaudio.c
+17-11 files

OpenBSD/src 14Dfh3x — usr.sbin/bgpd rde_aspa.c

   Adjust ASPA comments that still talk about the long gone per-provider
   AFI flags.
VersionDeltaFile
1.10+2-3usr.sbin/bgpd/rde_aspa.c
+2-31 files

OpenBSD/src hDui0ho — sys/net if_etherbridge.c

   veb(4) SIOCBRDGRTS and SIOCBRDGVRTS ioctls leaked kernel stack data
   from Acts1631; ok deraadt@ mvs@
VersionDeltaFile
1.11+3-3sys/net/if_etherbridge.c
+3-31 files

OpenBSD/src 0CaY5jD — usr.bin/sndiod midi.c

   sndiod: Don't abort if a MIDI endpoint connects with non-empty buffers

   When the server.thru control is set, the midi endpoints may have
   non-empty buffers, which would cause the server to abort.

   Found and fixed by Acts1631 <acts1631kjv at proton.me>, thanks!
VersionDeltaFile
1.47+2-8usr.bin/sndiod/midi.c
+2-81 files

OpenBSD/src 468vPoE — usr.sbin/rpki-client filemode.c extern.h

   rpki-client: pass a struct cert * to valid_x509() rather than an X509 *

   ok job
VersionDeltaFile
1.186+7-7usr.sbin/rpki-client/parser.c
1.87+4-3usr.sbin/rpki-client/validate.c
1.88+3-3usr.sbin/rpki-client/filemode.c
1.297+3-3usr.sbin/rpki-client/extern.h
+17-164 files

OpenBSD/src s8cul9L — usr.bin/tmux tty-features.c

   Add margins for WezTerm and ghostty, from Michael Grant.
VersionDeltaFile
1.46+4-2usr.bin/tmux/tty-features.c
+4-21 files