OpenBSD/src a9ohwZ8lib/libagentx agentx.c

   fix memory leaks in error paths
   found with cppcheck, ok martijn@
VersionDeltaFile
1.26+3-1lib/libagentx/agentx.c
+3-11 files

OpenBSD/src T4lgIrqsys/net if_veb.c

   run veb_ip_filter against the right mbuf in veb_broadcast.

   found by jsg@ and smatch
VersionDeltaFile
1.67+2-2sys/net/if_veb.c
+2-21 files

OpenBSD/src LeCsTDPusr.bin/tmux spawn.c

   Setting working directory after fork means there is a race with
   pane_current_path (especially on platforms with systemd which have to
   take time to do some additional faffing around). To avoid this, change
   it before fork and back in the parent afterwards. GitHub issue 4719.
VersionDeltaFile
1.35+27-14usr.bin/tmux/spawn.c
+27-141 files

OpenBSD/src K7w67nNsys/net if_veb.c

   make sure we're in the same pvlan before doing the secondary vid checks.
VersionDeltaFile
1.66+15-4sys/net/if_veb.c
+15-41 files

OpenBSD/src H3Lzk5elib/libfuse fuse_common.h fuse.h

   This is a preperatory patch to move things around to be ready for
   supporting the low-level FUSE API:

   It introduces the following new files.

   - /usr/include/fuse/fuse_common.h
   - /usr/include/fuse/fuse_lowlevel.h
   - /usr/src/lib/libfuse/fuse_chan.c

   Additionally, it relocates all libfuse header files to the
   /usr/include/fuse directory so that it now contains.

   - /usr/include/fuse/fuse.h
   - /usr/include/fuse/fuse_opt.h
   - /usr/include/fuse/fuse_common.h
   - /usr/include/fuse/fuse_lowlevel.h

   Relevant definitions have been moved into their appropriate
   files, and I took the opportunity for some minor cleanup. The

    [4 lines not shown]
VersionDeltaFile
1.1+107-0lib/libfuse/fuse_common.h
1.15+14-73lib/libfuse/fuse.h
1.1+44-0lib/libfuse/fuse_lowlevel.h
1.1+30-0lib/libfuse/fuse_chan.c
1.57+8-11lib/libfuse/fuse.c
1.26+15-3lib/libfuse/fuse_private.h
+218-873 files not shown
+231-959 files

OpenBSD/src 0Lj4Mmwusr.bin/ssh servconf.c gss-serv.c

   add a GssDelegateCreds option for the server, controlling whether it
   accepts delgated credentials offered by the client. This option
   mirrors GssDelegateCreds in ssh_config.

   From Dmitry Belyavskiy via GHPR614; ok dtucker@
VersionDeltaFile
1.439+12-2usr.bin/ssh/servconf.c
1.34+6-1usr.bin/ssh/gss-serv.c
1.389+4-1usr.bin/ssh/sshd_config.5
1.171+2-1usr.bin/ssh/servconf.h
+24-54 files

OpenBSD/src gOVv6a5usr.bin/ssh sshd_config.5

   errant line
VersionDeltaFile
1.388+2-3usr.bin/ssh/sshd_config.5
+2-31 files

OpenBSD/src RoWMxy7usr.bin/ssh sshd_config.5

   There is a warning next to the authorized_keys command="" flag that
   forcing a command doesn't automatically disable forwarding. Add one
   next to the sshd_config(5) ForceCommand directive too.

   feedback deraadt@
VersionDeltaFile
1.387+11-2usr.bin/ssh/sshd_config.5
+11-21 files

OpenBSD/src OwbLuwhusr.bin/ssh sftp-server.c

   increment correct variable when counting group memberships.
   Reported by Kevin Day via bz3903
VersionDeltaFile
1.150+2-2usr.bin/ssh/sftp-server.c
+2-21 files

OpenBSD/src DbJbEwIsys/dev/pci/drm/i915/display intel_dp.c

   drm/i915/dp: Initialize the source OUI write timestamp always

   From Imre Deak
   e656ba6ca534743960f66f70adac9246243fd9e9 in linux-6.12.y/6.12.61
   5861258c4e6a829a10200b41ba3fb4d7d1a4054f in mainline linux
VersionDeltaFile
1.29+4-1sys/dev/pci/drm/i915/display/intel_dp.c
+4-11 files

OpenBSD/src 27phWWSsys/dev/pci/drm drm_fb_helper.c, sys/dev/pci/drm/i915/display intel_fbdev.c

   drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup

   From Thomas Zimmermann
   482330f8261b4bea8146d9bd69c1199e5dfcbb5c in linux-6.12.y/6.12.61
   eb76d0f5553575599561010f24c277cc5b31d003 in mainline linux
VersionDeltaFile
1.45+0-6sys/dev/pci/drm/drm_fb_helper.c
1.17+0-6sys/dev/pci/drm/i915/display/intel_fbdev.c
1.4+0-4sys/dev/pci/drm/radeon/radeon_fbdev.c
+0-163 files

OpenBSD/src hJwOPedsys/dev/pci/drm/amd/display/amdgpu_dm amdgpu_dm.c

   drm/amd/display: Don't change brightness for disabled connectors

   From Mario Limonciello
   901a8766734b6eab3994740906830f66749261d5 in linux-6.12.y/6.12.61
   81f4d4ba509522596143fd5d7dc2fc3495296b0a in mainline linux
VersionDeltaFile
1.191+15-0sys/dev/pci/drm/amd/display/amdgpu_dm/amdgpu_dm.c
+15-01 files

OpenBSD/src HyLTZjmsys/dev/pci/drm/amd/display/dc/core dc_stream.c

   drm/amd/display: Check NULL before accessing

   From Alex Hung
   f7cf491cd5b54b5a093bd3fdf76fa2860a7522bf in linux-6.12.y/6.12.61
   3ce62c189693e8ed7b3abe551802bbc67f3ace54 in mainline linux
VersionDeltaFile
1.10+8-3sys/dev/pci/drm/amd/display/dc/core/dc_stream.c
+8-31 files

OpenBSD/src yRlsztysys/dev/pci/drm/amd/amdgpu amdgpu_gmc.c

   drm/amd/amdgpu: reserve vm invalidation engine for uni_mes

   From Michael Chen
   204d3bb80c9272b23b111884dd6a3a750e45c844 in linux-6.12.y/6.12.61
   971fb57429df5aa4e6efc796f7841e0d10b1e83c in mainline linux
VersionDeltaFile
1.16+3-0sys/dev/pci/drm/amd/amdgpu/amdgpu_gmc.c
+3-01 files

OpenBSD/src NpB94wbsys/dev/pci/drm/amd/display/dc/hwss/dce110 dce110_hwseq.c, sys/dev/pci/drm/amd/display/dc/hwss/dcn20 dcn20_hwseq.c

   Revert "drm/amd/display: Move setup_stream_attribute"

   From Alex Deucher
   a2b16ee991df0e12a492046352833052faac2364 in linux-6.12.y/6.12.61
   3126c9ccb4373d8758733c6699ba5ab93dbe5c9d in mainline linux
VersionDeltaFile
1.6+0-7sys/dev/pci/drm/amd/display/dc/virtual/virtual_stream_encoder.c
1.9+3-0sys/dev/pci/drm/amd/display/dc/link/link_dpms.c
1.7+0-2sys/dev/pci/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c
1.10+0-2sys/dev/pci/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c
1.9+0-1sys/dev/pci/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c
+3-125 files

OpenBSD/src bh3Pm3osys/dev/pci/drm/amd/amdgpu amdgpu_device.c

   drm/amdgpu: fix cyan_skillfish2 gpu info fw handling

   From Alex Deucher
   b46aaeafd6da945c4370538ae8a24b34333fb231 in linux-6.12.y/6.12.61
   7fa666ab07ba9e08f52f357cb8e1aad753e83ac6 in mainline linux
VersionDeltaFile
1.90+2-0sys/dev/pci/drm/amd/amdgpu/amdgpu_device.c
+2-01 files

OpenBSD/src 8fdArE1share/man/man4 cdpcie.4 Makefile

   cdpcie(4)
VersionDeltaFile
1.1+44-0share/man/man4/cdpcie.4
1.872+2-2share/man/man4/Makefile
+46-22 files

OpenBSD/src cwLaCzKsys/arch/riscv64/conf GENERIC RAMDISK, sys/dev/fdt cdpcie.c files.fdt

   Add a driver for the Cadence PCIe controller.  So far this driver support
   the variant found on the Sophgo SG2042 SoC.

   ok mlarkin@
VersionDeltaFile
1.1+623-0sys/dev/fdt/cdpcie.c
1.217+5-1sys/dev/fdt/files.fdt
1.55+3-1sys/arch/riscv64/conf/GENERIC
1.48+3-1sys/arch/riscv64/conf/RAMDISK
+634-34 files

OpenBSD/src Ycjd96psys/dev/pci pcidevs_data.h pcidevs.h

   regen
VersionDeltaFile
1.2107+9-1sys/dev/pci/pcidevs_data.h
1.2112+3-1sys/dev/pci/pcidevs.h
+12-22 files

OpenBSD/src s0xR70ksys/dev/pci pcidevs

   Add a couple of missing AMD/ATI device IDs.

   ok jsg@
VersionDeltaFile
1.2119+3-1sys/dev/pci/pcidevs
+3-11 files

OpenBSD/src 2qOFRcTregress/lib/libcrypto/ec ec_asn1_test.c

   ec_asn1_test: change a comma to a full stop
VersionDeltaFile
1.41+2-2regress/lib/libcrypto/ec/ec_asn1_test.c
+2-21 files

OpenBSD/src RgVC9T1regress/lib/libcrypto/asn1 asn1complex.c

   asn1complex: use ASN1_STRING_get0_data() instead of ASN1_STRING_data()
VersionDeltaFile
1.5+4-4regress/lib/libcrypto/asn1/asn1complex.c
+4-41 files

OpenBSD/src Ekh1JCFlib/libcrypto/asn1 p5_pbe.c

   Remove last internal use of ASN1_STRING_data()

   PKCS5_pbe_set0_algor() is no longer public, but its parameters are
   provided directly via public API, namely the wonderful PKCS8_encrypt()
   and PKCS12_pack_p7encdata().

   Muppetry abounds. To wit:

   If saltlen < 0, the call to ASN1_STRING_set(pbe->salt, NULL, saltlen)
   would error. Let's do that up front in a more obvious way. We don't
   care about side-effects to pbe->salt since we free it on error anyway.

   If saltlen == 0, we default it to PKCS5_PBE1_SALT_LEN. This is
   particularly funky in case the caller passed in salt != NULL, in
   which case we can only hope and pray this buffer is long enough.

   If the caller passed a salt, copy it to pbe->salt via ASN1_STRING_set().

   If there's no salt, allocate a buffer of the appropriate length, fill it

    [9 lines not shown]
VersionDeltaFile
1.31+19-13lib/libcrypto/asn1/p5_pbe.c
+19-131 files

OpenBSD/src JX2IGAAregress/usr.bin/ssh multiplex.sh

   Avoid "if ! thing || ! otherthing; then" constructs since they seem
   to cause portability problems.
VersionDeltaFile
1.41+9-5regress/usr.bin/ssh/multiplex.sh
+9-51 files

OpenBSD/src i0z1js6regress/usr.bin/ssh test-exec.sh

   spaces->tab
VersionDeltaFile
1.138+3-3regress/usr.bin/ssh/test-exec.sh
+3-31 files

OpenBSD/src fA7ExyBdistrib/miniroot install.sub

   Improve keydisk partition detection

   Using the correct extended regular expression with sed -E.

   Further tweaks and OK kn@
VersionDeltaFile
1.1282+2-2distrib/miniroot/install.sub
+2-21 files

OpenBSD/src 01jUwM6distrib/sets/lists/comp clang.armv7 clang.arm64

   sort
VersionDeltaFile
1.47+167-167distrib/sets/lists/comp/clang.armv7
1.47+167-167distrib/sets/lists/comp/clang.arm64
1.38+164-164distrib/sets/lists/comp/clang.loongson
1.34+164-164distrib/sets/lists/comp/clang.macppc
1.38+164-164distrib/sets/lists/comp/clang.octeon
1.28+164-164distrib/sets/lists/comp/clang.powerpc64
+990-9904 files not shown
+1,646-1,64610 files

OpenBSD/src RCY883Jsys/dev/acpi acpi.c amltypes.h

   Many recent AMD SoCs need to have their NVMe placed into D3cold at suspend
   time to properly resume.  Other machines break when we do that.  To solve
   this dilemma, Microsoft introduced a "StorageD3Enable" ACPI property that
   tells us what to do.  Note that despite its name, this property seems to
   be relevant for PCI devices that aren't storage related as well.

   Implement support in our ACPI code to choose between D3hot and D3cold and
   use the "StorageD3Enable" property to make that decision.  This should fix
   machines that no longer resume properly after the (somewhat) recent
   improvements to S0ix suspend for AMD laptops.

   ok jca@, deraadt@
VersionDeltaFile
1.456+56-2sys/dev/acpi/acpi.c
1.52+2-1sys/dev/acpi/amltypes.h
+58-32 files

OpenBSD/src 9J1Gu63etc/rc.d spamlogd unbound

   hoist OPTIND reset from rc.d(8) services to rc.subr(8)

   See unbound r1.10 and r.11 for context;  in base only unbound and spamlogd
   use getopts and the problem is in rc.subr's getopts, parsing options when
   the service script is used directly:  /etc/rc.d/unbound [-dqf] ...

   Reset getopts in rc.subr once for anything that comes afterwards instead of
   in every script using it.

   'rcctl [-dqf] ...' and netstart are not affected as they run rc.subr in its
   own process and use FUNCS_ONLY=1, respectively.

   tested by obsd at mulh.net
   OK aja
VersionDeltaFile
1.9+2-2etc/rc.d/spamlogd
1.12+2-2etc/rc.d/unbound
1.167+2-1etc/rc.d/rc.subr
+6-53 files

OpenBSD/src ykiUoWxsbin/pfctl parse.y, sbin/ping ping.c

   sort the "va" keyword to be in alpha order, some programs use bsearch

   noticed by deraadt@
VersionDeltaFile
1.722+3-3sbin/pfctl/parse.y
1.251+2-2sbin/ping/ping.c
+5-52 files