BSD Commit Log Search

   Alberta moved to permanent -06 on 2026-06-18, update test data

   Use uint32_t for ipsecflowinfo.

   Type of ipsecflowinfo was mixture of uint32_t, u_int32_t and int.
   Convert to uint32_t consistently.

   OK mvs@

   Prevent display-panes from shifting the active pane scroll position by
   copying the screen from before zoom, also do not let resize consume
   blank lines.

   Add some missing calls to invalidate scene.

   octsmi: Find multi-PHY parent

   octeon: Regenerate cn3xxx_dts.S

   Regenerate the built-in device tree blob source using current dtc.

   No change in the blob.

   vmd(8): disambiguate fd variable naming

   Split out fd tracking in the global "struct vmd" instance with
   explicit names to not reuse the same one for storing semantically
   different fds. Some vmd processes were using .vmd_fd to track the
   open /dev/vmm while another used it for a socket(2) instance for
   ioctls. This makes it hard to reason about and future changes
   harder to review.

   No intended behavioral change.

   Testing help from Mischa Peters.

   ok @hshoexer

   Remove the active-pane flag for now, there are some gaps in how this
   works and I don't like it. May come back in a different form (maybe just
   for windows).

   Remove redundant BIO_write() length assertions in b64_write()

   b64_write() asserted that BIO_write() does not return more bytes than
   requested in two places. Other BIO_write() call sites do not make this
   check, and there is no special handling here that depends on asserting this
   condition.

   ok tb@ beck@ joshua@

   Remove stale SECURE RENEGOTIATION reference

   SSL_CTX_set_options(3) no longer has a SECURE RENEGOTIATION section,
   but SSL_OP_LEGACY_SERVER_CONNECT still referenced it. Replace the
   dangling cross reference with a note that the option is no longer set
   by default.

   ok tb@ beck@

   avoid free with bad arg when trigger_len is <= 0
   ok kettenis@

   Move per-client window sizes into control.c since the only user is for
   control mode.

   Change %% to escape single quotes (%1 remains with no quoting and %%
   with double quotes) to avoid a single quote being able to terminate
   quoted sections of commands. Fixes unexpected behaviour with session
   names containing single quotes reported by Aliz Hammond.

   Clear cfg_client if the client is destroyed to prevent UAF found by Ilya
   Grigoriev.

   base key for 81

   sync

   no longer needed

   add iwx to the i386 build

   Add it to both GENERIC and RAMDISK_CD, with the latter pointed out by
   stsp@ and deraadt@

   ok stsp@

   Update to tzdata2026c from https://github.com/JodaOrg/global-tz

   Major changes:
    o Alberta moved to permanent -06 on 2026-06-18
    o Morocco moves to permanent +00 on 2026-09-20

   sync

   add 8.1 packages key

   no longer needed

   sync

   remove more loongson

   Make dtls1_do_write_ccs() self contained.

   A ChangeCipherSpec message is always the same single byte. Make
   dtls1_do_write_ccs() know how to send this message, which avoids the use of
   buffers and needing to keep copies for retransmission.

   ok kenjiro@ tb@

   Clean up sequence number and message header handling.

   dtls1_set_message_header() is only called in one place - inline the write
   handshake sequence number handling. Rename dtls1_set_message_header_int()
   to dtls1_set_message_header().

   The dtls12_write_ccs() code does not use handshake sequence numbers (since
   they're not handshake messages) - stop pretending that it does.

   ok kenjiro@ tb@

   Fix uninitialized var for sscanf %n.

   Fix netstat(1) man page and options.

   Use switch -v to avoid IPv6 address truncation everywhere.  Remove
   special meaning of -l for IPv6 multicast routing table.  Fix
   combination of options in usage.  Clarify man page.

   input and OK claudio@

   Make IP multicast router global variable MP safe.

   Use a multicast router rwlock to protect the mrt_mrouter array.
   Since we support one router per route table, also implement an API
   version per router.  Sockets in mrt_mrouter are reference counted.
   Fix the name space a bit by using mrt_ prefix consistently.  Keep
   existing netlock and kernel lock until fine grained locking has
   been finished.

   OK claudio@

   ld.so: print symbol name if lazy binding failed

   It's a useful clue where to go look and various people working in ports
   used similar diffs to track problems they were facing down.

   fine by guenther
   ok deraadt jca