OpenBSD/src YV1932Rusr.bin/mg interpreter.c

   fix two leaks in interpreter.c; from Han Boetes (hboetes at gmail)

   - upon redefinition of a variable, free the content of the old varentry
   - free v1 if strndup fails, and delay the SLIST_INSERT_HEAD
VersionDeltaFile
1.37+9-4usr.bin/mg/interpreter.c
+9-41 files

OpenBSD/src aMqHc4Husr.sbin/acme-client acme-client.conf.5

   don't talk about CN, we no longer send it in the CSR, and CAs constructed
   their own anyway.
VersionDeltaFile
1.34+7-8usr.sbin/acme-client/acme-client.conf.5
+7-81 files

OpenBSD/src kzrebGNusr.sbin/acme-client keyproc.c

   don't include CN in the certificate signing request.

   the CA will decide whether to include a CN based on their
   configuration/profile and sets that up themselves.

   ok florian
VersionDeltaFile
1.19+1-17usr.sbin/acme-client/keyproc.c
+1-171 files

OpenBSD/src tfivCRwsys/dev/ic qwx.c

   Add missing bus_dmamap_unload(9).

   ok stsp@
VersionDeltaFile
1.101+2-1sys/dev/ic/qwx.c
+2-11 files

OpenBSD/src CGwcBgUsys/dev/usb uhub.c

   fix typo in comment, from Benjamin Lee McQueen
VersionDeltaFile
1.99+2-2sys/dev/usb/uhub.c
+2-21 files

OpenBSD/src 0Xhh5ftusr.bin/tmux grid.c

   Reuse the same extended slot when clearing non-RGB cells as well. From
   Michael K Darling in GitHub issue 4865.
VersionDeltaFile
1.143+14-10usr.bin/tmux/grid.c
+14-101 files

OpenBSD/src s1UJpJ7sys/sys videoio.h

   sys/videoio.h: sync with Linux

   1. media: v4l2-ctrls: Add hevc_ext_sps_[ls]t_rps controls
   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa05705107a40131a8335ad37817153709261738

   2. media: uapi: videodev2: Add support for AV1 stateful decoder
   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=406fc2e9ca65e0df345ebf4ce95aa87cb6416f35

   3. media: v4l: ctrls: add a control for flash/strobe duration
   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d89ccbf3dde727d91a242a5a3f3b70a90579b057

   4. media: v4l: ctrls: add a control for enabling strobe output
   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5be4154f6255d92d9d2ad5da658d7d33a655386f

   Here no ABI or API changes.

   Scope limited to few new defines, new struct and new enum value only.

   OK deraadt@
VersionDeltaFile
1.29+67-1sys/sys/videoio.h
+67-11 files

OpenBSD/src MvDLIsAsbin/pfctl pfctl_parser.c

   Print both nat-to and rdr-to in pfctl show rules.

   Kernel pf rule may have both nat-to and rdr-to fields.  pfctl printed
   only one of them.  By removing one else if, the user sees what the
   kernel does.

   OK henning@
VersionDeltaFile
1.358+13-10sbin/pfctl/pfctl_parser.c
+13-101 files

OpenBSD/src BrqMlYisys/arch/sparc64/sparc64 locore.s

   uvmexp.faults is now counter in MI code
   ok claudio kettenis
VersionDeltaFile
1.231+1-4sys/arch/sparc64/sparc64/locore.s
+1-41 files

OpenBSD/src 6fsUWiKsys/dev/pci if_ixl.c if_bnxt.c

   Also put LRO Flags inside an ifndef SMALL_KERNEL

   ok bluhm@
VersionDeltaFile
1.115+4-2sys/dev/pci/if_ixl.c
1.67+3-1sys/dev/pci/if_bnxt.c
1.67+3-1sys/dev/pci/if_ice.c
+10-43 files

OpenBSD/src uleHr0gusr.sbin/vmd vm.c

   vmd(8): prevent pause deadlock when vcpu doesn't halt

   Trying to pause a vm that's got a vcpu busy polling that never
   issues a HLT instruction results in a deadlock. Remove the check
   for if the vcpu is halted. We have other logic to handle "suspending"
   the vcpu thread if a vcpu halts with interrupts enabled. (The way
   vmm(4) works is if the vcpu halts without interrupts, we consider
   it a terminating event.)

   ok hshoexer@, mlarkin@
VersionDeltaFile
1.124+3-3usr.sbin/vmd/vm.c
+3-31 files

OpenBSD/src y8QdJ3Nusr.sbin/relayd proxy_protocol.c parse.y

   usr.sbin/relayd: add support for PROXY protocol in TCP relays

   patch from Christoph Liebender

   OK: rsadowski@
VersionDeltaFile
1.1+144-0usr.sbin/relayd/proxy_protocol.c
1.259+15-4usr.sbin/relayd/parse.y
1.261+14-1usr.sbin/relayd/relay.c
1.215+9-2usr.sbin/relayd/relayd.conf.5
1.277+7-1usr.sbin/relayd/relayd.h
1.36+4-3usr.sbin/relayd/Makefile
+193-116 files

OpenBSD/src 7TlNMZOusr.bin/calendar calendar.c

   uses tmpfile(), which is why it used "tmppath", which is why it now
   needs "rpath wpath cpath"
   spotted by brynet
VersionDeltaFile
1.39+3-2usr.bin/calendar/calendar.c
+3-21 files

OpenBSD/src Tr34KJMgnu/usr.bin/texinfo/util texindex.c

   This was using pledge "tmppath" with "rpath wpath cpath".
   The "tmppath" is not needed.
   ok semarie and others
VersionDeltaFile
1.8+2-2gnu/usr.bin/texinfo/util/texindex.c
+2-21 files

OpenBSD/src qvfhfxDusr.bin/calendar calendar.c

   pledge "rpath tmppath" is replace with unveil "/" "r", unveil "/tmp" "rwc",
   and "rpath wpath cpath"
   ok semarie
VersionDeltaFile
1.38+6-3usr.bin/calendar/calendar.c
+6-31 files

OpenBSD/src V8YAmM3usr.sbin/smtpd smtpc.c

   replace pledge "tmppath" with unveil "/tmp" "rwc" and "rpath wpath cpath".
   ok ok
VersionDeltaFile
1.22+4-2usr.sbin/smtpd/smtpc.c
+4-21 files

OpenBSD/src bvew56Wusr.sbin/bgpd rde.c

   Add more error logging for the ERR_UPD_ATTRLIST case.

   Split it into a bad_list case for all those duplicate attr checks and
   a bad_ibuf case that is used when the parsing hits a general issue.

   OK sthen@
VersionDeltaFile
1.686+12-7usr.sbin/bgpd/rde.c
+12-71 files

OpenBSD/src AVCDCNosys/dev/ic qwx.c

   Make qwx_dmamem_alloc() wait for resources if necessary.

   ok deraadt@, stsp@
VersionDeltaFile
1.100+6-8sys/dev/ic/qwx.c
+6-81 files

OpenBSD/src P6fu6Bcusr.bin/diff diff.c

   Instead of pledge "tmppath rpath", setup a "rwc" unveil on "/tmp", a
   "r" unveil on "/", and then pledge "rpath wpath cpath".
   ok semarie and others
VersionDeltaFile
1.69+6-2usr.bin/diff/diff.c
+6-21 files

OpenBSD/src K7tiIxyusr.bin/htpasswd htpasswd.c

   This is using pledge "tmppath" with "rpath wpath cpath".
   The "tmppath" is not needed.
   ok semarie and others
VersionDeltaFile
1.19+2-2usr.bin/htpasswd/htpasswd.c
+2-21 files

OpenBSD/src jmaugsCusr.bin/tmux input.c tty-keys.c

   Pass which clipboard is set through to the terminal, from Axel Lindskog
   in GitHub issue 4858.
VersionDeltaFile
1.251+24-21usr.bin/tmux/input.c
1.202+11-3usr.bin/tmux/tty-keys.c
1.457+3-3usr.bin/tmux/tty.c
1.247+3-3usr.bin/tmux/screen-write.c
1.1294+3-2usr.bin/tmux/tmux.h
+44-325 files

OpenBSD/src wg8e2FElibexec/ld.so/ldconfig ldconfig.c, usr.bin/m4 main.c

   These programs are using pledge "tmppath" with "rpath wpath cpath".
   The "tmppath" is not needed.
   ok semarie and others
VersionDeltaFile
1.40+2-2libexec/ld.so/ldconfig/ldconfig.c
1.89+2-2usr.bin/m4/main.c
1.37+2-2usr.bin/mail/main.c
1.81+2-2usr.bin/sendbug/sendbug.c
1.177+2-2usr.sbin/smtpd/smtpctl.c
1.358+2-2usr.sbin/smtpd/smtpd.c
+12-126 files

OpenBSD/src ZrJE9O1sys/dev/ic qwz.c

   correct bounds check on number of memory segments
   found with smatch, ok patrick@
VersionDeltaFile
1.22+2-3sys/dev/ic/qwz.c
+2-31 files

OpenBSD/src 4CtKiZLusr.bin/ssh sftp-client.c

   same treatment for remote/remote copies (i.e. scp -3): adjust
   permissions on destination directory only if we created it or -p
   was requested. bz3925
VersionDeltaFile
1.184+7-4usr.bin/ssh/sftp-client.c
+7-41 files

OpenBSD/src hQ8LQ3Qusr.bin/ssh sftp-client.c

   when uploading a directory using sftp/sftp (e.g. during a recursive
   transfer), don't clobber the remote directory permissions unless
   either we created the directory during the transfer or the -p flag
   was set. bz3925 ok dtucker@
VersionDeltaFile
1.183+7-4usr.bin/ssh/sftp-client.c
+7-41 files

OpenBSD/src nFltyTRusr.bin/ssh servconf.c

   make IPQoS first-match-wins in sshd_config as it's intended to be
   bz3924
VersionDeltaFile
1.445+2-2usr.bin/ssh/servconf.c
+2-21 files

OpenBSD/src zh15zLssys/dev/pci if_iwx.c

   Sprinkle some BUS_DMA_64BIT; this hardware has no issues handling full
   64-bit addresses.

   ok stsp@
VersionDeltaFile
1.198+8-7sys/dev/pci/if_iwx.c
+8-71 files

OpenBSD/src VDJSROvusr.sbin/bgpd mrt.c

   Call timer_remove_all with the right object.

   Copy-paste bug which was introduced with rev 1.128.
   Causes the parent to SIGSEGV on config reloads when mrt dumps are used.
VersionDeltaFile
1.134+3-3usr.sbin/bgpd/mrt.c
+3-31 files

OpenBSD/src UIomcmXusr.sbin/rpki-client rpki-client.8

   sync
VersionDeltaFile
1.139+4-4usr.sbin/rpki-client/rpki-client.8
+4-41 files

OpenBSD/src vEHIVzrusr.sbin/bgpd rde.c

   Call rde_filterstate_init() early since goto badflow will call
   rde_filterstate_clean() and so the state must be initalized.

   Fix for CID 501585
VersionDeltaFile
1.685+3-2usr.sbin/bgpd/rde.c
+3-21 files