OpenBSD src changes summary for 2017-03-01
==========================================

distrib/miniroot                        lib/libcrypto
lib/libssl                              regress/lib
regress/sys                             share/man
sys/arch/amd64/stand/efiboot            sys/arch/amd64/stand/libsa
sys/arch/arm64/conf                     sys/arch/armv7/conf
sys/arch/armv7/omap                     sys/net
sys/net80211                            usr.bin/units
usr.sbin/ldapd                          usr.sbin/ntpd
usr.sbin/pkg_add                        usr.sbin/vmctl
usr.sbin/vmd                            

== distrib =========================================================== 01/07 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/distrib

miniroot

  ~ install.sub                           

  > Comments ... (rpe@)

== lib =============================================================== 02/07 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib

libcrypto

  ~ evp/c_all.c                           

  > Include EVP_md5_sha1() via OpenSSL_add_all_digests(). (jsing@)

libssl

  ~ ssl_algs.c                            ~ ssl_clnt.c
  ~ ssl_srvr.c                            

  > Convert ssl3_{get,send}_server_key_exchange() to EVP_md5_sha1().
  > ok inoguchi@ (jsing@)

== regress =========================================================== 03/07 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/regress

lib

  ~ libcrypto/evp/evptests.txt            

  > Add EVP test for MD5-SHA1. (jsing@)

sys

  ~ netinet6/frag6/Makefile               ~ netinet6/frag6/frag6.py
  ~ netinet6/frag6/frag6_ext.py           ~ netinet6/frag6/frag6_hop.py
  ~ netinet6/frag6/frag6_mf0atomic.py     ~ netinet6/frag6/frag6_mf0long.py
  ~ netinet6/frag6/frag6_mf0middle.py     ~ netinet6/frag6/frag6_mf0short.py
  ~ netinet6/frag6/frag6_mf1end.py        ~ netinet6/frag6/frag6_opt.py
  ~ netinet6/frag6/frag6_overatomic.py    ~ netinet6/frag6/frag6_overdrop.py
  ~ netinet6/frag6/frag6_overhead.py      ~ netinet6/frag6/frag6_overhead0.py
  ~ netinet6/frag6/frag6_overtail.py      ~ netinet6/frag6/frag6_padding.py
  ~ netinet6/frag6/frag6_permute.py       ~ netinet6/frag6/frag6_refrag.py
  ~ netinet6/frag6/frag6_shortatomic.py   ~ netinet6/frag6/frag6_timeout.py
  ~ netinet6/frag6/frag6_udpatomic.py     ~ netinet6/frag6/frag6_udpheader.py
  ~ netinet6/frag6/frag6_udppayload.py    ~ netinet6/frag6/frag6_zerofirst.py
  ~ netinet6/frag6/frag6_zerosecond.py    ~ netinet6/nd6/Makefile
  ~ netinet6/nd6/nd6_ar.py                ~ netinet6/nd6/nd6_dad.py
  ~ netinet6/nd6/nd6_nud.py               ~ netinet6/nd6/nd6_una.py
  ~ netinet6/rh0/Makefile                 ~ netinet6/rh0/rh0_empty.py
  ~ netinet6/rh0/rh0_final.py             ~ netinet6/rh0/rh0_frag2.py
  ~ netinet6/rh0/rh0_frag_empty.py        ~ netinet6/rh0/rh0_frag_final.py
  ~ netinet6/rh0/rh0_frag_route.py        ~ netinet6/rh0/rh0_none.py
  ~ netinet6/rh0/rh0_route.py             + netinet6/nd6/LICENSE

  > Use consistent address schema with local and remote machine.  Fill
  > variables with example IPs from my daily test run. (bluhm@)

  ~ arch/hppa/Makefile                    ~ arch/m88k/Makefile
  ~ arch/sparc64/Makefile                 

  > Print SKIPPED if the architecture dependent regression tests are
  > executed on the wrong machine.  This allows to distinguish their
  > result from a passed test. (bluhm@)

  ~ netinet6/frag6/Makefile               ~ netinet6/rh0/Makefile

  > Avoid warnings from ssh -t, check remote SUDO at beginning. (bluhm@)

  ~ arch/hppa/Makefile                    ~ arch/m88k/Makefile
  ~ arch/sparc64/Makefile                 

  > Print message why tests are skipped. (bluhm@)

== share ============================================================= 04/07 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share

man

  ~ man4/pci.4                            

  > mention pciecam on arm64 (jsg@)

  ~ man4/man4.armv7/omap.4                ~ man4/man4.armv7/edma.4

  > edma attaches to fdt now (jsg@)

  ~ man5/bsd.port.mk.5                    

  > gc really old stuff that's not actually in use anymore (espie@)

  ~ man8/afterboot.8                      

  > xdm -> xenodm; from jan stary (jmc@)

== sys =============================================================== 05/07 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys

arch/amd64/stand/efiboot

  ~ efiboot.c                             

  > Fix the code which preserves the device path of the loaded image if
  > booting from a disk.  It had a typo.  Also tweak the code which finds
  > the blkio of the boot disk to show how it is matching the device path
  > nodes clearly.  found by and discussed with patrick@. (yasuoka@)

arch/amd64/stand/libsa

  ~ dev_i386.c                            

  > Don't try to access the com(4) hardware to set up the console speed
  > on efiboot(8), as it can crash the EFI application.
  > ok tom@ (patrick@)

arch/arm64/conf

  ~ GENERIC                               ~ RAMDISK

  > Remove SYSCALL_DEBUG arm64 has been multiuser for a while now.
  > ok patrick@ (jsg@)

arch/armv7/conf

  ~ GENERIC                               ~ RAMDISK

  > Dynamically attach edma(4) using the FDT.
  > From Ian Sutton. (jsg@)

arch/armv7/omap

  ~ edma.c                                ~ files.omap

  > Dynamically attach edma(4) using the FDT.
  > From Ian Sutton. (jsg@)

  ~ omap.c                                ~ am335x.c

  > remove remaining parts of the table driven approach to attaching edma
  > (jsg@)

  ~ am335x.c                              ~ omap3.c
  ~ omap4.c                               

  > Remove unused table driven omgpio bits. (jsg@)

net

  ~ switchofp.c                           

  > Remove a misleading comment asking if a timeout needs a LOCK, it doesn't.
  > ok goda@ (mpi@)

net80211

  ~ ieee80211_input.c                     ~ ieee80211_node.h
  ~ ieee80211_pae_input.c                 ~ ieee80211_pae_output.c
  ~ ieee80211_proto.c                     

  > Fix a bug allowing a man-in-the-middle attack against WPA wireless clients.
  > A malicious AP could trick clients into connecting to the malicious AP
  > instead of the desired AP. All frames would then be sent in the clear.
  > This problem was found and reported by Mathy Vanhoef who also provided
  > an initial patch which we improved together. (stsp@)

  ~ ieee80211_pae_input.c                 

  > Fix some DPRINTFs I just added to ieee80211_pae_input.c.
  > No fnuctional change. (stsp@)

  ~ ieee80211_input.c                     ~ ieee80211_node.h
  ~ ieee80211_pae_input.c                 ~ ieee80211_pae_output.c
  ~ ieee80211_proto.c                     

  TAGGED OPENBSD_5_9
  > MFC: Fix a bug allowing a man-in-the-middle attack against WPA wireless
  > clients.
  > A malicious AP could trick clients into connecting to the malicious AP
  > instead of the desired AP. All frames would then be sent in the clear.
  > This problem was found and reported by Mathy Vanhoef who also provided
  > an initial patch which we improved together.
  > (OpenBSD 6.0 errata 18, Mar 1, 2017)
  > by and ok stsp@ (benno@)

  ~ ieee80211_input.c                     ~ ieee80211_node.h
  ~ ieee80211_pae_input.c                 ~ ieee80211_pae_output.c
  ~ ieee80211_proto.c                     

  TAGGED OPENBSD_6_0
  > MFC: Fix a bug allowing a man-in-the-middle attack against WPA wireless
  > clients.
  > A malicious AP could trick clients into connecting to the malicious AP
  > instead of the desired AP. All frames would then be sent in the clear.
  > This problem was found and reported by Mathy Vanhoef who also provided
  > an initial patch which we improved together.
  > (OpenBSD 5.9 errata 35, Mar 1, 2017)
  > by and ok stsp@ (benno@)

== usr.bin =========================================================== 06/07 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin

units

  ~ units.lib                             

  > update currency exchange rates; (jmc@)

== usr.sbin ========================================================== 07/07 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin

ldapd

  ~ ldapd.c                               

  > move up getpid() and getpwnam(LDAP USER) checks
  > to fail earlier and also make them consistent with
  > other daemons.
  > while here:
  > - fix getpwnam(LDAPD_USER) errx()
  > - no need to skip_chroot
  > ok jmatthew@ (gsoares@)

  ~ imsgev.c                              ~ imsgev.h

  > add missing rcsid (gsoares@)

ntpd

  ~ util.c                                

  > *nargv[] holds an array of pointers, so it should be
  > terminated by a null pointer.
  > ok rzalamena@ reyk@ (gsoares@)

pkg_add

  ~ OpenBSD/AddDelete.pm                  ~ OpenBSD/PackageLocator.pm
  ~ OpenBSD/PkgSign.pm                    ~ OpenBSD/State.pm
  ~ OpenBSD/ProgressMeter/Term.pm         

  > scrape most of the config framework
  > okay aja@, rpe@ (espie@)

  ~ OpenBSD/Paths.pm                      

  > Remove pkg.conf leftover.
  > OK espie@ (rpe@)

vmctl

  ~ main.c                                ~ vmctl.c

  > Add "owner" option to set a user/group ownership for pre-configured VMs
  > This allows matching users to start or stop VMs that they "own" and to
  > access the console accordingly.
  > OK mlarkin@ (reyk@)

  ~ main.c                                ~ vmctl.c
  ~ vmctl.h                               

  > unbreak vmctl build by renaming a function that now conflicts with
  > something from vmd.h . Temporary fix until the original committer can
  > fix it the way he desires. (mlarkin@)

  ~ main.c                                ~ vmctl.c
  ~ vmctl.h                               

  > Rename start_vm_complete to vm_start_complete for consistency. (reyk@)

vmd

  ~ config.c                              ~ control.c
  ~ parse.y                               ~ vm.conf.5
  ~ vmd.c                                 ~ vmd.h

  > Add "owner" option to set a user/group ownership for pre-configured VMs
  > This allows matching users to start or stop VMs that they "own" and to
  > access the console accordingly.
  > OK mlarkin@ (reyk@)

  ~ vm.conf.5                             

  > tweak previous; ok reyk (jmc@)

  ~ Makefile                              ~ vmd.h
  ~ vmm.c                                 + vm.c

  > Split vmm.c into two files: vm.c for the VM child, vmm.c for the parent
  > As discussed with mlarkin@, it makes it easier to maintain the file.
  > OK mlarkin@ (reyk@)

===============================================================================
_______________________________________________
odc mailing list
[email protected]
http://www.squish.net/mailman/listinfo/odc

Reply via email to