BSD Commit Log Search

   wycheproof: recognize Cobblestone-{128,256}

   Put back the whitelist approach previous to 1.18, because without a
   specific whitelist, arbitrary *TINY* requests can flow through here
   which lack the required structure header.  Issue found by gnezdo.
   ok gnezdo jmatthew

   SIOCGIFDATA (on most architectures) leaked 4 bytes of kernel stack.
   from Acts1631

   Reassemble IP fragments in correct routing domain.

   Fragment reassembly in pf(4) and inet(4) and inet6(4) did not respect
   the routing domain.  Fragments from different routing domains could
   be merged together.  Keep track of rdomain in pf and network stack.
   Convert routing table to routing domain where necessary.  Sort
   struct fields by size.

   report and diff from Acts1631; fixes by bluhm@; OK sashan@

   remove a stale .Sx internal link;
   similar to a patch sent in by <hi at pgray.dev>

   iked: remove pointless call to X509_get_subject_name()

   A deserialized certificate always has a subject, so this check doesn't
   do anything useful. This was added in r1.7 (2010) as a mostly cosmetic
   return check, and it has been useless since r1.30 (2014) when the subject
   variable became unused. A subsequent removal of subject in r1.66 (2020)
   made this look weird (why would you check subject but not issuer, SPKI,
   ...?), so garbage collect it.

   ok hshoexer

   Overhaul documentation of the -offset and -width arguments to make
   the macro reference section easier to read and less repetitive,
   and to document these arguments more precisely in a less obtrusive place.

   * Move the gory details out of the descriptions of .Bd and .Bl;
   only state the defaults and recommended arguments there.
   * Stop documenting -offset right and -offset center.  Neither is
   implemented in mandoc(1), both are handled very poorly by groff
   and almost never occur in the wild.
   * Add a new WIDTH SPECIFICATIONS section after the macro reference.

   add regress test for servers that hang durig banner write;
   from Thomas Yiu

   openssh-10.5

   remove ml-dsa/x25519 from the default algorithm list for release
   (it will be back soon)

   make reading server banner non-blocking; prevents one stuck server
   from blocking a many-host keyscan; from Thomas Yiu

   ok dtucker@ markus@

   hdestroy(3): stop freeing key values

   POSIX leaves ownership of ENTRY.key with the caller. Our current behaviour
   came from NetBSD when this code was imported in 2004. NetBSD and FreeBSD
   both stopped freeing key values in July 2014. NetBSD in commit fe0a1a6 and
   FreeBSD in commit e19f362.

   Remove the call to free(3) to align ourselves with NetBSD, FreeBSD and
   POSIX. Also adjust rsync for the change in semantics.

   Flagged by Sortix os-test.

   ok millert@, deraadt@

   rune obsolete /usr/libexec/cpp

   ok deraadt@

   Check HMAC() return value to avoid a later use of uninitialized data

   CID 25423

   ok tb@

   limits.h: bump _POSIX_THREAD_THREADS_MAX to 64

   This matches POSIX and the other BSDs. The mismatch was flagged by Sortix
   os-test.

   ok guenther@, asou@, deraadt@

   sync

   acpidmar(4): Store PCI domain in softc for segment mapping

   Ensure we get a valid segement and enforce use of the IOMMU.

   While there:
    - tweak printf to use segment instead of PCI domain
    - use ACPI provided segment instead of hardcoded 0 in ivhd_showpage()

   ok kettenis@

   iked: avoid parameter overload

   Old ca_validate_cert() API interpreted data pointer as parsed X509
   structure if len == 0 and crashed if a zero size certificate buffer
   was passed instead.  Now we have an explicit certifcate and key
   parameter.

   from hshoexer@ markus@; ok bluhm@ tb@ tobhe@

   this is errata/7.9/009_iked.patch.sig

   iked: avoid parameter overload

   Old ca_validate_cert() API interpreted data pointer as parsed X509
   structure if len == 0 and crashed if a zero size certificate buffer
   was passed instead.  Now we have an explicit certifcate and key
   parameter.

   from hshoexer@ markus@; ok bluhm@ tb@ tobhe@

   this is errata/7.8/045_iked.patch.sig

   Fix LCP MRU option handing.  Pointed out by Arthur Chan.

   from yasuoka@; ok mvs deraadt

   this is errata/7.9/008_npppd.patch.sig

   Fix LCP MRU option handing.  Pointed out by Arthur Chan.

   from yasuoka@; ok mvs deraadt

   this in errata/7.8/044_npppd.patch.sig

   iked: avoid parameter overload

   Old ca_validate_cert() API interpreted data pointer as parsed X509
   structure if len == 0 and crashed if a zero size certificate buffer
   was passed instead.  Now we have an explicit certifcate and key
   parameter.

   from markus@

   ok bluhm@ tb@

   manuel -> manual

   drm/fb-helper: Fix a locking bug in an error path

   From Bart Van Assche
   e7731507270c2c63f00cfbf210fe96b964e9b42e in linux-6.18.y/6.18.44
   bd64240dc88caaf7b96dd869f36f165f51b52039 in mainline linux

   drm/i915/vrr: require valid min/max vfreq for VRR

   From Jani Nikula
   df1582c0a101e2e2f133dd331d2a3258bb6a7518 in linux-6.18.y/6.18.44
   f8a9262c7a6fc2de9802e14b0228114f0333869e in mainline linux

   drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()

   From Ville Syrjala
   894d4a7395662059d2c6009fd17e1598af06405e in linux-6.18.y/6.18.44
   4b274b0b61ab2a529e5c22e9aa033f3028e639fc in mainline linux

   drm/exec: Remove the index parameter from drm_exec_for_each_locked_obj[_reverse]

   From Thomas Hellstrom
   b8ad916ba4e18e428693ffd89ae66ac9754b5558 in linux-6.18.y/6.18.44
   ce44b78512e9102aea54ff6b6e521d6c8de9f31c in mainline linux

   drm/amd/display: Exit idle optimizations before programming

   From Leo Li
   3cb42a973f889f13204f220612eb0be89f90a661 in linux-6.18.y/6.18.44
   8419331e64d92a8de5fc4feef0e305f201fb8b33 in mainline linux

   drm/amd/display: check GRPH_FLIP status before sending event

   From Leo Li
   dbbe08d73b8bcedf0eb8bacb4b3c43b09c92c032 in linux-6.18.y/6.18.44
   48ab86360af117123eb1b15e38f068acf3826400 in mainline linux

   drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions

   From Timur Kristof
   30b2d0843a4101934109c1e7f9240b153d631c10 in linux-6.18.y/6.18.44
   8882f8897e554053af9e72f4c2da8b1e2cce56c7 in mainline linux