OpenBSD/src 14Dfh3xusr.sbin/bgpd rde_aspa.c

   Adjust ASPA comments that still talk about the long gone per-provider
   AFI flags.
VersionDeltaFile
1.10+2-3usr.sbin/bgpd/rde_aspa.c
+2-31 files

OpenBSD/src hDui0hosys/net if_etherbridge.c

   veb(4) SIOCBRDGRTS and SIOCBRDGVRTS ioctls leaked kernel stack data
   from Acts1631; ok deraadt@ mvs@
VersionDeltaFile
1.11+3-3sys/net/if_etherbridge.c
+3-31 files

OpenBSD/src 0CaY5jDusr.bin/sndiod midi.c

   sndiod: Don't abort if a MIDI endpoint connects with non-empty buffers

   When the server.thru control is set, the midi endpoints may have
   non-empty buffers, which would cause the server to abort.

   Found and fixed by Acts1631 <acts1631kjv at proton.me>, thanks!
VersionDeltaFile
1.47+2-8usr.bin/sndiod/midi.c
+2-81 files

OpenBSD/src 468vPoEusr.sbin/rpki-client filemode.c extern.h

   rpki-client: pass a struct cert * to valid_x509() rather than an X509 *

   ok job
VersionDeltaFile
1.186+7-7usr.sbin/rpki-client/parser.c
1.87+4-3usr.sbin/rpki-client/validate.c
1.88+3-3usr.sbin/rpki-client/filemode.c
1.297+3-3usr.sbin/rpki-client/extern.h
+17-164 files

OpenBSD/src s8cul9Lusr.bin/tmux tty-features.c

   Add margins for WezTerm and ghostty, from Michael Grant.
VersionDeltaFile
1.46+4-2usr.bin/tmux/tty-features.c
+4-21 files

OpenBSD/src TxJ7jDWregress/usr.bin/ssh multiplex.sh

   backout regress bits related to multiplexing change
VersionDeltaFile
1.43+0-19regress/usr.bin/ssh/multiplex.sh
+0-191 files

OpenBSD/src ue9DabMusr.bin/ssh clientloop.h ssh.c

   backout

   > avoid race between multiple processes attempting to
   >
   > establish multiplexing control socket by moving socket creation earlier in
   > ssh(1)'s life. Patch from Jens Rosenboom via bz3971

   It caused problems with ControlPersist sessions.

   Reported by semarie@ job@
VersionDeltaFile
1.116+35-36usr.bin/ssh/mux.c
1.642+2-6usr.bin/ssh/ssh.c
1.43+1-2usr.bin/ssh/clientloop.h
+38-443 files

OpenBSD/src L9BMQrPusr.sbin/vmd lapic.h i82093aa.c

   vmd(8): Implement missing lapic/ioapic modes

   Implement missing lapic/ioapic modes to fix support for 32 bit linux guests

   ok dv
VersionDeltaFile
1.7+74-11usr.sbin/vmd/lapic.c
1.43+32-8usr.sbin/vmd/pci.c
1.4+28-11usr.sbin/vmd/i82093aa.c
1.5+3-1usr.sbin/vmd/lapic.h
+137-314 files

OpenBSD/src EPnjjbUsys/dev softraid_raid5.c softraid.c

   Avoid leaking sr_workunit's during rebuild.

   Adapted from a larger diff submitted by Dariusz Swiderski.

   ok jsing@
VersionDeltaFile
1.33+7-2sys/dev/softraid_raid5.c
1.439+7-2sys/dev/softraid.c
+14-42 files

OpenBSD/src Grlh8Cuusr.bin/tmux tmux.1

   Note about default-shell, from Meriel Sartha Mittelbach.
VersionDeltaFile
1.1173+10-4usr.bin/tmux/tmux.1
+10-41 files

OpenBSD/src 0qUdqFCusr.sbin/vmd vionet.c

   vmd(8): drop packets if tap(4) returns ENOMEM.

   If there are no mbufs available to queue a packet on write(2), we
   should drop the packet instead of toggling the device reset state.

   The virtio network device was inspecting the wrong errno as well.

   Also drop packets if EMSGSIZE is set on error. Only in unexpected
   cases should we flag the device needs a reset.

   Issue reported by Mischa Peters.

   ok bluhm@, jan@, mlarkin@ and makes sense to deraadt@
VersionDeltaFile
1.38+14-4usr.sbin/vmd/vionet.c
+14-41 files

OpenBSD/src SVykrXwusr.bin/ssh packet.c

   Check that compressed payloads don't inflate beyond the maximum payload length

   From a report by Oleh Konko (1seal)

   OK djm@
VersionDeltaFile
1.346+3-1usr.bin/ssh/packet.c
+3-11 files

OpenBSD/src 0Ra3GGDusr.bin/ssh ssh-agent.c

   ssh-agent: no unlink(2) on empty filename

   from markus@ ok me
VersionDeltaFile
1.333+3-2usr.bin/ssh/ssh-agent.c
+3-21 files

OpenBSD/src FQ7KleXusr.bin/ssh misc-agent.c

   ssh-agent: fix socket cleanup for -a option (no pathspec)

   from markus@ ok me
VersionDeltaFile
1.11+4-2usr.bin/ssh/misc-agent.c
+4-21 files

OpenBSD/src 3Kt3LiCregress/lib/libcrypto/test test.h test.c

   test: improve output log and report format

   Bring the test framework output closer to the output of Go's testing
   package, in order to make it easier to trace issues in the output from
   very large tests with many sub-tests.

   Also add test_skipnow(), and make test_skip/test_skipf wrappers around
   test_logf_internal so skip reasons get the same call location prefix as
   other log output.

   This also makes it easier for a followup to add timing for tests, which
   will help determine which tests are slow.

   ok tb
VersionDeltaFile
1.8+276-81regress/lib/libcrypto/test/test.c
1.6+19-7regress/lib/libcrypto/test/test.h
+295-882 files

OpenBSD/src Yk2HsU9usr.sbin/vmd acpi.c acpi.h

   vmd(8): place acpi tables in upper reserved memory

   The original decision to place ACPI tables at 0x90000 caused "legacy" linux
   bootloaders like lilo to overwrite the tables. While this doesn't damage
   the vm, it does cause linux to revert to uniprocessor mode. Place the tables
   in a mem reserved region adjacent to the pci mmio hole instead.

   tested on various guest OSes

   ok dv
VersionDeltaFile
1.27+29-21usr.sbin/vmd/x86_vm.c
1.2+10-11usr.sbin/vmd/acpi.h
1.4+8-7usr.sbin/vmd/acpi.c
+47-393 files

OpenBSD/src Yfvs7dNlib/libssl Makefile tls12_internal.h

   Add TLSv1.2 error handling

   Provide error handling for use with the TLSv1.2 context - for now this
   is a duplicate of the TLSv1.3 error handling, which we may deduplicate
   in the future.

   ok tb@
VersionDeltaFile
1.1+99-0lib/libssl/tls12_error.c
1.7+26-1lib/libssl/tls12_internal.h
1.91+2-1lib/libssl/Makefile
+127-23 files

OpenBSD/src mm0J7SIlib/libssl tls13_lib.c

   Unwrap.
VersionDeltaFile
1.80+2-3lib/libssl/tls13_lib.c
+2-31 files

OpenBSD/src WIdmhRhlib/libssl Makefile tls12_record_layer.c

   Add TLSv1.2 handshake message handling.

   Provide struct tls12_handshake_msg and wire it to the new TLSv1.2
   stack, allowing handshake messages to be built and parsed.

   ok beck@ tb@
VersionDeltaFile
1.1+188-0lib/libssl/tls12_handshake_msg.c
1.2+79-3lib/libssl/tls12_handshake.c
1.6+25-1lib/libssl/tls12_internal.h
1.46+14-1lib/libssl/tls12_record_layer.c
1.90+2-1lib/libssl/Makefile
+308-65 files

OpenBSD/src KCZoWS2lib/libssl tls12_record_layer.c tls12_handshake.h

   Add a TLSv1.2 state machine and skeleton client/server.

   This provides the basis for a new TLSv1.2 stack and is heavily based on
   our TLSv1.3 implementation. All TLSv1.2 handshake messages are included,
   however the state table only includes a minimal TLS connection - additional
   state transitions will be added in due course.

   This code is not currently used and further development will occur in tree.

   ok beck@ tb@
VersionDeltaFile
1.1+528-0lib/libssl/tls12_handshake.c
1.5+125-1lib/libssl/tls12_internal.h
1.1+124-0lib/libssl/tls12_server.c
1.1+118-0lib/libssl/tls12_client.c
1.1+53-0lib/libssl/tls12_handshake.h
1.45+7-1lib/libssl/tls12_record_layer.c
+955-21 files not shown
+959-37 files

OpenBSD/src KcONEh0usr.bin/mandoc out.c

   On some platforms, e.g. Linux Clang 22.1.8 / glibc 2.43, strchr(3)
   now implements the C23 behaviour where passing a const pointer to
   strchr(3) also returns a const pointer.

   Solve this by disentangling the horribly complicated logic in
   tblcalc_literal() that did multiple checks on "mw".  Instead, handle
   the case "maximum width -> parse into words and break lines" which
   needs a mutable copy of the content separately from the case
   "unlimited width" which works with the original const char*.
   This makes the code much more readable.  No functional change.

   Small issue found by Lexi Winter <ivy at FreeBSD.org>,
   reported via Alexander Ziaee <ziaee at freebsd.org>.
VersionDeltaFile
1.60+32-28usr.bin/mandoc/out.c
+32-281 files

OpenBSD/src YW4QqEtusr.bin/tmux screen-redraw.c

   Get x and y the right way round, fixes crash when opening a mode prompt
   when the client is offset into the window; may be the crash reported by
   sthen@.
VersionDeltaFile
1.161+2-2usr.bin/tmux/screen-redraw.c
+2-21 files

OpenBSD/src FRcaGI1sbin/reboot reboot.c

   oops not ready
VersionDeltaFile
1.41+0-6sbin/reboot/reboot.c
+0-61 files

OpenBSD/src sQI4YKxsbin/reboot reboot.c

   tcdrain.diff
VersionDeltaFile
1.40+7-1sbin/reboot/reboot.c
+7-11 files

OpenBSD/src ax4Fqunsys/dev/pci if_ixl.c

   ixl(4): Fix hardmtu and rxmax

   Table 1-3. Link layer Ethernet port features

       Maximum Transmit Unit Size (MTU) is 9728 - Ethernet header/CRC =
       9728 - 18 = 9710 bytes (jumbo frames)
       MTU can be further reduced by additional header fields such as
       Virtual Local Area Network (VLAN) tag(s), etc.

   Table 8-12. LAN Rx Queue Context in the Private Host Memory

       The "rxmax" parameter defines the whole packet size starting at
       the L2 header up to including the Ethernet CRC.
   ...
       The RXMAX must not be set to a larger value than 5 x DBUFF
       (since receive packet must never span on more than 5 buffers).

   Tested by bluhm@

   ok jmatthew@
VersionDeltaFile
1.118+4-3sys/dev/pci/if_ixl.c
+4-31 files

OpenBSD/src Q5iDzKlsys/netinet ip_esp.c

   Fix IPsec AES GMAC crypto.

   The CRYPTO_AES_GMAC algorithm needs an unique initialization vector.
   Replace arc4random_buf() with replay64 counter.

   OK tb@ hshoexer@
VersionDeltaFile
1.202+2-1sys/netinet/ip_esp.c
+2-11 files

OpenBSD/src ibcuspiusr.bin/tmux tmux.h tty-features.c

   Some terminals have extended DECSCUSR to allow it to reset to the
   default style and put that as the Se capability in their terminfo entry.
   Change so that if Ss and Se exist, tmux does not overwrite them with its
   own. GitHub issue 5476.
VersionDeltaFile
1.111+7-3usr.bin/tmux/tty-term.c
1.45+4-4usr.bin/tmux/tty-features.c
1.1447+3-2usr.bin/tmux/tmux.h
+14-93 files

OpenBSD/src rrSwy4gregress/sys/arch/amd64/vmcall vmcall.c, sys/arch/amd64/amd64 vmm_machdep.c

   vmm(4): Skip VMCALL/VMMCALL at CPL 0; otherwise abort by signal

   On Intel we have to use #GP(0), on AMD #UD.  Adjust regression test.
   With Miguel Landaeta (miguel at miguel cc), thanks!

   go ahead mlarkin
VersionDeltaFile
1.2+25-3regress/sys/arch/amd64/vmcall/vmcall.c
1.90+15-5sys/arch/amd64/amd64/vmm_machdep.c
+40-82 files

OpenBSD/src lOqBvumsys/arch/amd64/amd64 vmm_machdep.c, sys/arch/amd64/include vmmvar.h

   fix some issues dv@ found in vmm/vmd

   dv pointed out some correctness issues around lapic and x2apic reserved
   bits in various registers.

   ok dv
VersionDeltaFile
1.89+116-16sys/arch/amd64/amd64/vmm_machdep.c
1.6+95-19usr.sbin/vmd/lapic.c
1.26+15-1usr.sbin/vmd/x86_vm.c
1.123+8-1sys/arch/amd64/include/vmmvar.h
1.4+2-1usr.sbin/vmd/lapic.h
+236-385 files

OpenBSD/src M0KleAVusr.bin/tmux tty-term.c tmux.h

   Add a feature for mintty's application escape to avoid dodgy terminals
   whinging about not supporting it, GitHub issue 5626 from Pete Dietl.
VersionDeltaFile
1.44+15-1usr.bin/tmux/tty-features.c
1.1172+7-2usr.bin/tmux/tmux.1
1.482+3-5usr.bin/tmux/tty.c
1.110+3-1usr.bin/tmux/tty-term.c
1.1446+3-1usr.bin/tmux/tmux.h
+31-105 files