OpenBSD src changes summary for 2016-05-04 ==========================================
bin/ksh distrib/special lib/libc lib/libkvm lib/libssl libexec/ftpd sbin/sysctl sys/arch/alpha/pci sys/arch/amd64/include sys/arch/amd64/pci sys/arch/arm/include sys/arch/hppa/include sys/arch/hppa64/include sys/arch/i386/pci sys/arch/landisk/include sys/arch/loongson/include sys/arch/macppc/dev sys/arch/macppc/include sys/arch/octeon/include sys/arch/sgi/pci sys/arch/socppc/include sys/arch/sparc64/dev sys/arch/sparc64/include sys/dev/acpi sys/dev/ic sys/dev/pci sys/dev/sdmmc sys/kern sys/netinet usr.bin/fstat usr.bin/ssh usr.bin/tmux == bin =============================================================== 01/07 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/bin ksh ~ sh.1 > line editing correction; from andras farkas (jmc@) ~ sh.1 > Correct the description of the != operator in arithmetic expansion; > from Andras Farkas <deepbluemistake at gmail dot com>. (schwarze@) == distrib =========================================================== 02/07 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/distrib special ~ ftp/Makefile > Kill #ifdef INET6 occurrences in userland. > Prompted by and ok millert@ > (tcpdump and libpcap left untouched, the #ifdef force is too strong with > those) (jca@) == lib =============================================================== 03/07 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib libc - regex/WHATSNEW > Remove old cruft. > okay millert@ (zhuk@) libkvm ~ kvm_file2.c > Make KERN_FILE_BYPID return ESRCH when PID not found, both in sysctl and > offline paths. More polishing to come. > Input and okay bluhm@ & kettenis@. (zhuk@) ~ kvm_getfiles.3 > Add ERRORS section (requested by bluhm@). While there, move start of > RETURN VALUES section upper, where it belongs more. (zhuk@) libssl ~ src/ssl/s3_pkt.c TAGGED OPENBSD_5_9 > this chunk was NOT supposed to be committed. spotted by jsg. (tedu@) ~ src/crypto/asn1/a_d2i_fp.c ~ src/crypto/asn1/a_type.c ~ src/crypto/asn1/tasn_dec.c ~ src/crypto/asn1/tasn_enc.c ~ src/crypto/evp/e_aes_cbc_hmac_sha1.c ~ src/crypto/evp/encode.c ~ src/crypto/evp/evp_enc.c TAGGED OPENBSD_5_9 > revert the big change from yesterday to prepare for smaller commits. > (tedu@) ~ src/crypto/asn1/a_d2i_fp.c TAGGED OPENBSD_5_9 > be careful about consuming excessive memory by reading in chunks. > CVE-2016-2109 from openssl. (tedu@) ~ src/crypto/asn1/a_type.c ~ src/crypto/asn1/tasn_dec.c ~ src/crypto/asn1/tasn_enc.c TAGGED OPENBSD_5_9 > internal only negative types should not be handled here. > CVE-2016-2108 from openssl. (tedu@) ~ src/crypto/evp/e_aes_cbc_hmac_sha1.c TAGGED OPENBSD_5_9 > fix a padding oracle in aesni cbc mac check. there must be enough data > for both the mac and padding bytes. > CVE-2016-2107 from openssl (tedu@) ~ src/crypto/evp/encode.c ~ src/crypto/evp/evp_enc.c TAGGED OPENBSD_5_9 > fix for integer overflow in encode and encrypt update functions. > additionally, in EncodeUpdate, if the amount written would overflow, > return 0 instead to prevent bugs in the caller. > CVE-2016-2105 and CVE-2016-2106 from openssl. (tedu@) == libexec =========================================================== 04/07 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/libexec ftpd ~ Makefile ~ ftpd.c > Kill #ifdef INET6 occurrences in userland. > Prompted by and ok millert@ > (tcpdump and libpcap left untouched, the #ifdef force is too strong with > those) (jca@) == sbin ============================================================== 05/07 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sbin sysctl ~ Makefile ~ sysctl.c > Kill #ifdef INET6 occurrences in userland. > Prompted by and ok millert@ > (tcpdump and libpcap left untouched, the #ifdef force is too strong with > those) (jca@) == sys =============================================================== 06/07 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys arch/alpha/pci ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/amd64/include ~ i82093var.h ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/amd64/pci ~ pci_machdep.c > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/arm/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/hppa/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/hppa64/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/i386/pci ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/landisk/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/loongson/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/macppc/dev ~ smu.c > Fall back to "safe-value" when "unmanage-value" is not evailable to > configure fan speeds. > from mglocker@, ok kettenis@ (mpi@) arch/macppc/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/octeon/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/sgi/pci ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/socppc/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) arch/sparc64/dev ~ iommu.c ~ iommuvar.h ~ viommu.c > Some hardware (such as the onboard dc(4) of the Netra X1) has a broken DMA > engine that might attempt to read beyond the end of the buffer that was > programmed. The IOMMU catches this "DMA overrun" and throws an > unrecoverable > error at us, at which point we have no choice but to panic. To avoid this > implement a BUS_DMA_OVERRUN flag that maps an additional scratch page at > the > end of the vdma address range. DMA requests will spill over into this > page, > which just returns zeroes. > Thanks to matthieu@ for giving me access to a machine with the problem. > ok deraadt@, beck@ (kettenis@) arch/sparc64/include ~ pci_machdep.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) ~ bus.h > Some hardware (such as the onboard dc(4) of the Netra X1) has a broken DMA > engine that might attempt to read beyond the end of the buffer that was > programmed. The IOMMU catches this "DMA overrun" and throws an > unrecoverable > error at us, at which point we have no choice but to panic. To avoid this > implement a BUS_DMA_OVERRUN flag that maps an additional scratch page at > the > end of the vdma address range. DMA requests will spill over into this > page, > which just returns zeroes. > Thanks to matthieu@ for giving me access to a machine with the problem. > ok deraadt@, beck@ (kettenis@) dev/acpi ~ bytgpio.c > Don't mask pins configured as direct IRQ. Those are tied directly to the > APIC > and don't generate a GPIO controller interrupt. Masking them menas devices > relying on those APIC interrupts will break. Unbreaks the keyboard on the > Asus x205ta, which got broken in rev 1.6. (kettenis@) dev/ic ~ dc.c > Use BUS_DMA_OVERRUN to cope with the broken DMA engine of the Davicom > DM9102 > found on some Sun sparc64 machines. This fixes the unrecoverable DMA > errors > people have been seeing ever since dlg@ made changes to the pool code that > changes the memory layout. (kettenis@) dev/pci ~ pcireg.h > Initial support for MSI-X. Only supported on amd64 for now. I have diffs > to > actually use this in em(4) and xhci(4), but I'm not committing those yet > because we almost certainly need to save and restore the MSI-X registers > during suspend/resume. However, this allows mpi@ to play with > multiple-vector > support in networking hardware. > Requested by mpi@ > ok mlarkin@, mikeb@ (kettenis@) dev/sdmmc ~ sdmmc.c ~ sdmmc_io.c ~ sdmmc_mem.c ~ sdmmcreg.h ~ sdmmcvar.h > Add high-speed support for SD cards. In theory this should double the > transfer rates to and from the card. In practice the improvement will be > smaller, but I am seeing serious improvement in the read speeds. > (kettenis@) ~ sdhc.c > Print SD host controller version. (kettenis@) kern ~ kern_sysctl.c > Make KERN_FILE_BYPID return ESRCH when PID not found, both in sysctl and > offline paths. More polishing to come. > Input and okay bluhm@ & kettenis@. (zhuk@) netinet ~ ip_output.c > Preserve DiffServ value when fragmenting an ipv4 packet. > Ok phessler@, henning@ (vgross@) == usr.bin =========================================================== 07/07 == http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin fstat ~ Makefile ~ fstat.c > Kill #ifdef INET6 occurrences in userland. > Prompted by and ok millert@ > (tcpdump and libpcap left untouched, the #ifdef force is too strong with > those) (jca@) ssh ~ PROTOCOL.agent > fix junk characters after quotes (djm@) ~ readconf.c ~ readconf.h ~ ssh.1 ~ ssh.c ~ ssh_config.5 > IdentityAgent for specifying specific agent sockets; ok djm@ (markus@) ~ servconf.c > Fix inverted logic for updating StreamLocalBindMask which would cause the > server to set an invalid mask. ok djm@ (dtucker@) ~ auth.h > missing const in prototypes (ssh1) (markus@) ~ auth-krb5.c ~ ssh1.h ~ ssh2.h ~ ssh_api.c ~ ttymodes.c > move SSH_MSG_NONE, so we don't have to include ssh1.h; ok deraadt@ > (markus@) ~ readconf.c ~ ssh.c ~ ssh_config.5 ~ sshd_config.5 > allow setting IdentityAgent to SSH_AUTH_SOCK; ok djm@ (markus@) ~ scp.1 ~ sftp.1 > add IdentityAgent; noticed & ok jmc@ (markus@) tmux ~ options-table.c ~ tmux.c > Fix up a couple of long lines. (nicm@) =============================================================================== _______________________________________________ odc mailing list [email protected] http://www.squish.net/mailman/listinfo/odc
