BSD Commit Log Search

   Use bpf_mfilter in bpf_movein since it operates on an mbuf

   With this bpf_filter is no longer used by the kernel and all the code
   around it can be hidden from _KERNEL.

   OK tb@

   Use correct bpf filter calls in ppp(4)

   10 years ago the bpf_filter interface was changed and bpf_mfilter was
   introduced. bpf_filter no longer support passing an mbuf as pkt by using
   a buflen of 0. Finally adjust this code and switch it over to bpf_mfilter.

   OK tb@

   When a manual page file requested via man(1) is not found in any mandoc.db(5)
   but is then found by the fallback search in the file system, do not warn
   about an outdated mandoc.db if the manual page tree that contains the
   requested file does not contain a mandoc.db file in the first place.

   This avoids bogus, annoying warnings in two situations:
   (1) when users choose to have their own, private manual page tree
   without putting a mandoc.db into it; and
   (2) on operating systems allowing a configuration where makewhatis(8)
   and mandoc.db(5) are not used at all.

   Issue found by Paul Bredbury <brebs at sent.com> on Alpine Linux, where
   installing apropos(1) and makewhatis(8) is optional and not the default.

   reenable ssh-mldsa44-ed25519 at a low priority position

   asn1_multi: slightly improve order of variable declarations and freeing

   asn1_multi: explicitly test against NULL twice

   asn1_multi: assign and test twice

   tweak nearby whitespace

   asn_multi: rename bad label to err

   asn1_multi: rework creation of the returned stack

   Currently, the ASN1_TYPE ret is created up front and further populated
   via a possibly failing call to ASN1_STRING_type_new(). On failure, the
   incomplete ret is returned, indicating success to the caller, which may
   or may not fail later.

   Instead, create the inner ASN1_STRING first, then the ASN1_TYPE. Use
   setter API with proper ownership transfer rather than fiddling with
   deeply nested ASN1 structures. This way we only succeed if everything
   actually succeeded.

   ok kenjiro

   asn1_multi: fix a comment

   Shorter, more precise and closer to grammatically correct.

   ok kenjiro

   asn1_multi: plug leak if sk_ASN1_TYPE_push() fails

   If the push of typ onto sk fails, the exit path does not free it.
   Fix that and avoid function nesting when calling ASN1_generate_v3().

   Prompted by a similar fix in OpenSSL

   ok kenjiro

   a_type: add XXX to consider adding an internal ASN1_TYPE_set0()

   ok kenjiro

   Daan Vreeken agreed to rescind the advertising clause.

   https://mail-index.netbsd.org/source-changes/2025/11/26/msg159202.html

   Frank van der Linden agreed to rescind the advertising clause.

   https://mail-index.netbsd.org/source-changes/2026/01/02/msg159829.html

   replace testing of vendor PQ signature algorithm
   "ssh-mldsa44-ed25519 at openssh.com" with the IANA-registered
   "ssh-mldsa44-ed25519"

   IANA has allocated a non-vendor codepoint for ssh-mldsa44-ed25519,
   so use it instead of the vendored "@openssh.com" name.

   Note: this replaces the vendored name, which was only marked as
   experimental and not enabled by default.cw

   If you have ssh-mldsa44-ed25519 at openssh.com keys manually configured
   in sshd, then you will need to remove them from sshd_config and
   restart.

   Create screen before zoom may need to use it.

   Do not allow cursor on/off to escape synchronized updates.

   drm: apple: Switch back to drm_atomic_helper_commit_tail_rpm()

   From Janne Grunau
   bd8ce96f6e76b98940352b18fe735a7943471ed7 in AsahiLinux/linux

   This implictly gets rid of drm_atomic_helper_wait_for_flip_done()
   and makes graphical output on Apple Silicon machines noticably
   snappier.

   ok kettenis@ jsg@

   Update libexpat to version 2.8.4

   Relevant for OpenBSD are security fixes #1321 #1331 #1322, other
   changes #1315 #1325 #1334 #1340 #1319 #1320.  Library bump is not
   necessary.
   CVE-2026-66046 CVE-2026-76641 CVE-2026-76957

   OK tb@

   Use unveil(2) and clamp down on pledge(2).
   The main() program establishes a baseline, allowing the maximum
   that might ever be needed: stdio rpath and read access to the MAN_DIR.
   The top level page generators (pg_show, pg_search) narrow unveil(2)
   to the specific manual page tree selected by the user.
   When the selected manual page file has been opened, the pledge is narrowed
   to just stdio (in resp_catman, resp_format, pg_searchres, pg_index).
   Except for internal errors and bad requests, which error out early,
   exactly one of these narrowing codepaths is always trodden.

   When changing selection-mode to line, set up the selection start and end
   correctly, GitHub issue 5545.

   Extend word commands to use any Unicode whitespace character, GitHub
   issue 5562 from Hongyi Zhao.

   uaudio: Factor duplicate tests of UAC version in uaudio_open_stream()

   No behavior change

   uaudio: Fix NULL pointer dereference triggered by specific hardware bug

   Analysed and reported by Acts1631 <acts1631kjv at proton.me>, thanks!

   uaudio: Set the rate before the alternate setting of UAC2 devices

   Unlike UAC1 devices, UAC2 devices set their sample rate with their
   clock unit which is independent of the alternate setting. The Neural
   DSP Quad Cortex Mini (and probably others) requires the sample rate to
   be set before the alternate setting is switched.

   From Laurence Tratt <laurie at tratt.net>, thanks!

   uaudio: Append the implicit feedback capability to the dmesg attach line

   uaudio: Enable implicit feedback on devices that claim to support it

   The Behringer UMC204HD appears to have broken explicit feedback (the
   sync endpoint sends always zeros) resulting in periodic drops.
   Enabling implicit feedback (i.e. adjust play-direction data rate to
   record-direction one) fixes this device.

   From Artem Sheldyaev <artem at sheldyaev.org>, thanks!

   Activiation -> Activation

   sync