OpenBSD src changes summary for 2016-07-24 to 2016-07-31 inclusive
==================================================================

bin/ksh                                 bin/md5
distrib/notes                           distrib/sets
etc/examples/pkg.conf                   etc/signify/openbsd-58-base.pub
etc/signify/openbsd-58-fw.pub           etc/signify/openbsd-58-pkg.pub
gnu/usr.bin/binutils-2.17               gnu/usr.bin/perl
lib/libc                                lib/libexpat
lib/libssl                              regress/usr.bin
regress/usr.sbin                        sbin/dhclient
sbin/newfs                              sbin/restore
sbin/sysctl                             share/man
sys/arch/alpha/stand/boot               sys/arch/alpha/stand/bootxx
sys/arch/alpha/stand/netboot            sys/arch/amd64/amd64
sys/arch/amd64/conf                     sys/arch/amd64/include
sys/arch/amd64/stand/biosboot           sys/arch/amd64/stand/boot
sys/arch/amd64/stand/cdboot             sys/arch/amd64/stand/cdbr
sys/arch/amd64/stand/mbr                sys/arch/amd64/stand/pxeboot
sys/arch/arm/arm                        sys/arch/arm/armv7
sys/arch/arm/include                    sys/arch/arm/simplebus
sys/arch/armish/stand                   sys/arch/armv7/armv7
sys/arch/armv7/conf                     sys/arch/armv7/exynos
sys/arch/armv7/imx                      sys/arch/armv7/omap
sys/arch/armv7/sunxi                    sys/arch/armv7/vexpress
sys/arch/hppa/stand/boot                sys/arch/hppa/stand/cdboot
sys/arch/i386/i386                      sys/arch/i386/include
sys/arch/i386/stand/biosboot            sys/arch/i386/stand/boot
sys/arch/i386/stand/cdboot              sys/arch/i386/stand/cdbr
sys/arch/i386/stand/mbr                 sys/arch/i386/stand/pxeboot
sys/arch/landisk/stand/boot             sys/arch/landisk/stand/mbr
sys/arch/landisk/stand/xxboot           sys/arch/loongson/stand/boot
sys/arch/luna88k/stand/boot             sys/arch/macppc/dev
sys/arch/macppc/stand/boot.mac          sys/arch/macppc/stand/ofwboot
sys/arch/octeon/dev                     sys/arch/octeon/stand/boot
sys/arch/sgi/stand/boot                 sys/arch/socppc/stand/boot
sys/arch/socppc/stand/mbr               sys/arch/sparc/sparc
sys/arch/sparc/stand/boot               sys/arch/sparc/stand/bootxx
sys/arch/sparc64/sparc64                sys/arch/sparc64/stand/ofwboot
sys/arch/zaurus/stand/zboot             sys/arch/zaurus/stand/zbsdmod
sys/conf                                sys/dev/acpi
sys/dev/ic                              sys/dev/ofw
sys/dev/pci                             sys/dev/pv
sys/dev/usb                             sys/kern
sys/net                                 sys/netinet
sys/sys                                 sys/uvm
usr.bin/ftp                             usr.bin/mail
usr.bin/mandoc                          usr.bin/mg
usr.bin/nc                              usr.bin/openssl
usr.bin/printf                          usr.bin/ssh
usr.bin/top                             usr.bin/vmstat
usr.bin/yacc                            usr.sbin/bgpd
usr.sbin/hotplugd                       usr.sbin/httpd
usr.sbin/ndp                            usr.sbin/pkg_add
usr.sbin/rarpd                          usr.sbin/rcctl
usr.sbin/relayd                         usr.sbin/smtpd
usr.sbin/sysmerge                       usr.sbin/tcpdump
usr.sbin/vmd                            

== bin =============================================================== 01/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/bin

ksh

  ~ sh.1                                  

  > remove note about command substitution and double quotes: it is probable
  > that i misunderstood something when i wrote it;
  > found by guenther and naddy (jmc@)

md5

  ~ md5.c                                 

  > all of the update functions take a size_t. correct type and casts.
  > ok deraadt millert (tedu@)

== distrib =========================================================== 02/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/distrib

notes

  ~ m4.common                             

  > Typo in the installation notes, from Roman Yakovlev.
  > Too bad this highly critical bugfix will miss release.
  > okay deraadt@ (zhuk@)

sets

  ~ lists/man/mi                          

  > sync (deraadt@)

  ~ lists/base/mi                         

  > sync (sthen@)

  ~ lists/man/mi                          

  > sync (jsg@)

== etc =============================================================== 03/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc

examples/pkg.conf

  ~ examples/pkg.conf                     

  > add new mirror in Lithuania to examples/pkg.conf, ok deraadt (sthen@)

signify/openbsd-58-base.pub

  - signify/openbsd-58-base.pub           

  > old keys no longer needed (deraadt@)

signify/openbsd-58-fw.pub

  - signify/openbsd-58-fw.pub             

  > old keys no longer needed (deraadt@)

signify/openbsd-58-pkg.pub

  - signify/openbsd-58-pkg.pub            

  > old keys no longer needed (deraadt@)

== gnu =============================================================== 04/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu

usr.bin/binutils-2.17

  ~ bfd/elf.c                             

  > Make sure there's space for the PT_OPENBSD_WXNEEDED segment, if requested
  > problem noted by Juan Francisco Cantero Hurtado (iam (at) juanfra.info)
  > ok deraadt@ (guenther@)

usr.bin/perl

  ~ patchlevel.h                          ~ cpan/Archive-Tar/bin/ptar
  ~ cpan/Archive-Tar/bin/ptardiff         ~ cpan/Archive-Tar/bin/ptargrep
  ~ cpan/Archive-Tar/lib/Archive/Tar.pm   
  ~ cpan/Archive-Tar/lib/Archive/Tar/Constant.pm
  ~ cpan/Archive-Tar/lib/Archive/Tar/File.pm
  ~ cpan/CPAN/lib/CPAN.pm                 ~ cpan/CPAN/lib/App/Cpan.pm
  ~ cpan/CPAN/lib/CPAN/Author.pm          ~ cpan/CPAN/lib/CPAN/Bundle.pm
  ~ cpan/CPAN/lib/CPAN/CacheMgr.pm        ~ cpan/CPAN/lib/CPAN/Complete.pm
  ~ cpan/CPAN/lib/CPAN/Debug.pm           ~ cpan/CPAN/lib/CPAN/DeferredCode.pm
  ~ cpan/CPAN/lib/CPAN/Distribution.pm    ~ cpan/CPAN/lib/CPAN/Distroprefs.pm
  ~ cpan/CPAN/lib/CPAN/Distrostatus.pm    ~ cpan/CPAN/lib/CPAN/FTP.pm
  ~ cpan/CPAN/lib/CPAN/FirstTime.pm       ~ cpan/CPAN/lib/CPAN/HandleConfig.pm
  ~ cpan/CPAN/lib/CPAN/Index.pm           ~ cpan/CPAN/lib/CPAN/InfoObj.pm
  ~ cpan/CPAN/lib/CPAN/Kwalify.pm         ~ cpan/CPAN/lib/CPAN/Mirrors.pm
  ~ cpan/CPAN/lib/CPAN/Module.pm          ~ cpan/CPAN/lib/CPAN/Nox.pm
  ~ cpan/CPAN/lib/CPAN/Prompt.pm          ~ cpan/CPAN/lib/CPAN/Queue.pm
  ~ cpan/CPAN/lib/CPAN/Shell.pm           ~ cpan/CPAN/lib/CPAN/Tarzip.pm
  ~ cpan/CPAN/lib/CPAN/URL.pm             ~ cpan/CPAN/lib/CPAN/Version.pm
  ~ cpan/CPAN/lib/CPAN/RecursiveDependency.pm
  ~ cpan/CPAN/lib/CPAN/blocked_urllist.pm
  ~ cpan/CPAN/lib/CPAN/yaml_not_installed.pm
  ~ cpan/CPAN/lib/CPAN/yaml_process_error.pm
  ~ cpan/CPAN/lib/CPAN/FTP/netrc.pm       ~ cpan/CPAN/lib/CPAN/HTTP/Client.pm
  ~ cpan/CPAN/lib/CPAN/HTTP/Credentials.pm
  ~ cpan/CPAN/lib/CPAN/LWP/UserAgent.pm   ~ cpan/CPAN/scripts/cpan
  ~ cpan/Digest/Digest.pm                 ~ cpan/Digest/Digest/base.pm
  ~ cpan/Digest/Digest/file.pm            ~ cpan/Digest-SHA/shasum
  ~ cpan/Digest-SHA/lib/Digest/SHA.pm     ~ cpan/Encode/Encode.pm
  ~ cpan/Encode/Encode/_PM.e2x            ~ cpan/Encode/bin/enc2xs
  ~ cpan/Encode/bin/piconv                ~ cpan/Encode/bin/ucmlint
  ~ cpan/Encode/bin/unidump               
  ~ cpan/ExtUtils-MakeMaker/bin/instmodsh
  ~ cpan/ExtUtils-MakeMaker/bin/Liblist.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM.pm     
  ~ cpan/ExtUtils-MakeMaker/bin/MM_AIX.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_Any.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_BeOS.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_Cygwin.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_DOS.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_Darwin.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_MacOS.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_NW5.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_OS2.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_QNX.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_UWIN.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_Unix.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_VMS.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_VOS.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_Win32.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM_Win95.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MY.pm     
  ~ cpan/ExtUtils-MakeMaker/bin/MakeMaker.pm
  ~ cpan/ExtUtils-MakeMaker/bin/Mkbootstrap.pm
  ~ cpan/ExtUtils-MakeMaker/bin/Mksymlists.pm
  ~ cpan/ExtUtils-MakeMaker/bin/testlib.pm
  ~ cpan/ExtUtils-MakeMaker/bin/MM.pm     ~ cpan/ExtUtils-MakeMaker/bin/Kid.pm
  ~ cpan/ExtUtils-MakeMaker/bin/Config.pm
  ~ cpan/ExtUtils-MakeMaker/bin/FAQ.pod   
  ~ cpan/ExtUtils-MakeMaker/bin/Tutorial.pod
  ~ cpan/File-Fetch/lib/File/Fetch.pm     ~ cpan/HTTP-Tiny/lib/HTTP/Tiny.pm
  ~ cpan/IO-Compress/bin/zipdetails       
  ~ cpan/IO-Compress/lib/Compress/Zlib.pm
  ~ cpan/IO-Compress/lib/File/GlobMapper.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Base.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Bzip2.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Deflate.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Gzip.pm
  ~ cpan/IO-Compress/lib/IO/Compress/RawDeflate.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Zip.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Bzip2.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Deflate.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Identity.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Common.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Constants.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Constants.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Constants.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Extra.pm
  ~ cpan/IO-Compress/lib/IO/Compress/AnyInflate.pm
  ~ cpan/IO-Compress/lib/IO/Compress/AnyUncompress.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Base.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Bunzip2.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Gunzip.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Inflate.pm
  ~ cpan/IO-Compress/lib/IO/Compress/RawInflate.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Unzip.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Bunzip2.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Identity.pm
  ~ cpan/IO-Compress/lib/IO/Compress/Inflate.pm
  ~ cpan/IO-Compress/private/MakeUtil.pm
  ~ cpan/IPC-Cmd/lib/IPC/Cmd.pm           ~ cpan/JSON-PP/bin/json_pp
  ~ cpan/JSON-PP/lib/JSON/PP.pm           ~ cpan/JSON-PP/lib/JSON/Simple.pm
  ~ cpan/Memoize/Memoize.pm               ~ cpan/Memoize/Memoize/AnyDBM_File.pm
  ~ cpan/Memoize/Memoize/Expire.pm        ~ cpan/Memoize/Memoize/ExpireFile.pm
  ~ cpan/Memoize/Memoize/ExpireTest.pm    ~ cpan/Memoize/Memoize/NDBM_File.pm
  ~ cpan/Memoize/Memoize/SDBM_File.pm     ~ cpan/Memoize/Memoize/Storable.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc.pm   
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/BaseTo.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/GetOptsOO.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToANSI.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToChecker.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToMan.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToNroff.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToPod.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToRtf.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToTerm.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToText.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToTk.pm
  ~ cpan/Pod-Perldoc/lib/Pod/Perldoc/ToXml.pm
  ~ cpan/Sys-Syslog/Syslog.pm             ~ cpan/Test/lib/Test.pm
  ~ cpan/Test-Harness/bin/prove           ~ cpan/Test-Harness/lib/App/Prove.pm
  ~ cpan/Test-Harness/lib/App/Prove/State.pm
  ~ cpan/Test-Harness/lib/App/Prove/Result.pm
  ~ cpan/Test-Harness/lib/App/Prove/Test.pm
  ~ cpan/Test-Harness/lib/TAP/Base.pm     
  ~ cpan/Test-Harness/lib/TAP/Harness.pm
  ~ cpan/Test-Harness/lib/TAP/Object.pm   ~ cpan/Test-Harness/lib/TAP/Parser.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/Base.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/Color.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/Console.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/File.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/Session.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/ParallelSession.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/Session.pm
  ~ cpan/Test-Harness/lib/TAP/Formatter/Session.pm
  ~ cpan/Test-Harness/lib/TAP/Harness/Env.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Aggregator.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Grammar.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Iterator.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/IteratorFactory.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Multiplexer.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Result.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/ResultFactory.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Scheduler.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Source.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/SourceHandler.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Array.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Process.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Stream.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Bailout.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Comment.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Plan.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Pragma.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Test.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Unknown.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Version.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/YAML.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Job.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Spinner.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Executable.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/File.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Handle.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Perl.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/RawTAP.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Reader.pm
  ~ cpan/Test-Harness/lib/TAP/Parser/Writer.pm
  ~ cpan/Test-Harness/lib/Test/Harness.pm
  ~ cpan/libnet/Net/Cmd.pm                ~ cpan/libnet/Net/Config.pm
  ~ cpan/libnet/Net/Domain.pm             ~ cpan/libnet/Net/FTP.pm
  ~ cpan/libnet/Net/NNTP.pm               ~ cpan/libnet/Net/Netrc.pm
  ~ cpan/libnet/Net/POP3.pm               ~ cpan/libnet/Net/SMTP.pm
  ~ cpan/libnet/Net/Time.pm               ~ cpan/libnet/Net/FTP/A.pm
  ~ cpan/libnet/Net/FTP/E.pm              ~ cpan/libnet/Net/FTP/I.pm
  ~ cpan/libnet/Net/FTP/L.pm              ~ cpan/libnet/Net/FTP/dataconn.pm
  ~ dist/ExtUtils-Command/lib/ExtUtils/Command.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/ParseXS.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/Typemaps.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/Constants.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/CountLines.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/Eval.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/Utilities.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/Cmd.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/InputMap.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/OutputMap.pm
  ~ dist/ExtUtils-ParseXS/lib/ExtUtils/Type.pm
  ~ dist/I18N-LangTags/lib/I18N/LangTags.pm
  ~ dist/I18N-LangTags/lib/I18N/LangTags/Detect.pm
  ~ dist/I18N-LangTags/lib/I18N/LangTags/List.pm
  ~ dist/IO/IO.pm                         ~ dist/IO/lib/IO/Dir.pm
  ~ dist/IO/lib/IO/File.pm                ~ dist/IO/lib/IO/Handle.pm
  ~ dist/IO/lib/IO/Pipe.pm                ~ dist/IO/lib/IO/Poll.pm
  ~ dist/IO/lib/IO/Seekable.pm            ~ dist/IO/lib/IO/Select.pm
  ~ dist/IO/lib/IO/Socket.pm              ~ dist/IO/lib/IO/Socket/INET.pm
  ~ dist/IO/lib/IO/Socket/UNIX.pm         
  ~ dist/Locale-Maketext/lib/Locale/Maketext.pm
  ~ dist/Locale-Maketext/lib/Locale/Guts.pm
  ~ dist/Locale-Maketext/lib/Locale/GutsLoader.pm
  ~ dist/Module-CoreList/corelist         
  ~ dist/Module-CoreList/lib/Module/CoreList.pm
  ~ dist/Module-CoreList/lib/Module/TieHashDelta.pm
  ~ dist/Module-CoreList/lib/Module/Utils.pm
  ~ dist/Net-Ping/lib/Net/Ping.pm         ~ dist/PathTools/Cwd.pm
  ~ dist/PathTools/lib/File/Spec.pm       
  ~ dist/PathTools/lib/File/Spec/Cygwin.pm
  ~ dist/PathTools/lib/File/Spec/Epoc.pm
  ~ dist/PathTools/lib/File/Spec/Functions.pm
  ~ dist/PathTools/lib/File/Spec/Mac.pm   ~ dist/PathTools/lib/File/Spec/OS2.pm
  ~ dist/PathTools/lib/File/Spec/Unix.pm
  ~ dist/PathTools/lib/File/Spec/VMS.pm   
  ~ dist/PathTools/lib/File/Spec/Win32.pm
  ~ dist/Storable/Storable.pm             ~ dist/base/lib/base.pm
  ~ dist/base/lib/fields.pm               ~ dist/bignum/lib/bigint.pm
  ~ dist/bignum/lib/bignum.pm             ~ dist/bignum/lib/bigrat.pm
  ~ dist/bignum/lib/Math/BigFloat/Trace.pm
  ~ dist/bignum/lib/Math/BigInt/Trace.pm
  ~ ext/Pod-Html/bin/pod2html             ~ ext/Pod-Html/lib/Pod/Html.pm
  ~ lib/perl5db.pl                        ~ t/porting/customized.dat
  ~ utils/c2ph.PL                         ~ utils/h2ph.PL
  ~ utils/h2xs.PL                         ~ utils/libnetcfg.PL
  ~ utils/perlbug.PL                      ~ utils/perldoc.PL
  ~ utils/perlivp.PL                      ~ utils/splain.PL
  ~ x2p/find2perl.PL                      ~ x2p/s2p.PL

  > Patch perl CVE-2016-1238
  > The problem relates to Perl 5 ("perl") loading modules from the
  > includes directory array ("@INC") in which the last element is the
  > current directory (".").  That means that, when "perl" wants to
  > load a module (during first compilation or during lazy loading of
  > a module in run-time), perl will look for the module in the current
  > directory at the end, since '.' is the last include directory in
  > its array of include directories to seek. The issue is with requiring
  > libraries that are in "." but are not otherwise installed.
  > The major problem with this behavior is that it unexpectedly puts
  > a user at risk whenever they execute any Perl scripts from a directory
  > that is writable by other accounts on the system. For instance, if
  > a user is logged in as root and changes directory into /tmp or an
  > account's home directory, it is possible to now run any shell
  > commands that are written in C, Python or Ruby without fear.
  > The same isn't true for any shell commands that are written in Perl,
  > since a significant proportion of Perl scripts will execute code
  > in the current working directory whenever they are run. For example,
  > if a user on a shared system creates the file /tmp/Pod/Perldoc/Toterm.pm,
  > and then I log in as root, change directory to /tmp, and run "perldoc
  > perlrun", it will execute the code they have placed in the file.
  > ok deraadt@ (afresh1@)

  ~ dist/IO/lib/IO/Dir.pm                 ~ dist/IO/lib/IO/File.pm
  ~ dist/IO/lib/IO/Handle.pm              ~ dist/IO/lib/IO/Pipe.pm
  ~ dist/IO/lib/IO/Poll.pm                ~ dist/IO/lib/IO/Seekable.pm
  ~ dist/IO/lib/IO/Select.pm              ~ dist/IO/lib/IO/Socket.pm
  ~ dist/IO/lib/IO/Socket/INET.pm         ~ dist/IO/lib/IO/Socket/UNIX.pm

  > Revert unneeded version bump for perl modules
  > OK sthen@ (afresh1@)

== lib =============================================================== 05/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib

libc

  ~ arch/powerpc/gen/flt_rounds.c         ~ arch/powerpc/gen/fpgetround.c
  ~ arch/sh/gen/flt_rounds.c              ~ arch/sh/gen/fpgetround.c
  ~ arch/alpha/gen/fpgetround.c           ~ arch/hppa/gen/fpgetround.c
  ~ arch/m88k/gen/fpgetround.c            ~ arch/mips64/gen/fpgetround.c
  ~ arch/sparc/gen/fpgetround.c           ~ arch/sparc64/gen/fpgetround.c
  ~ softfloat/fpgetround.c                + hidden/ieeefp.h

  > Wrap fpgetround() so internal calls to it (seen on arm, powerpc, and sh)
  > go direct instead of through the PLT.
  > ok millert@ kettenis@ (guenther@)

  ~ hash/rmd160.3                         

  > RMD160Update actually takes size_t length (tedu@)

libexpat

  ~ lib/xmlparse.c                        

  > Fix regression introduced by patch to CVE-2016-0718: Tag names were cut off
  > in some cases. (rpointel@)

libssl

  ~ src/crypto/opensslv.h                 

  > bump for LibreSSL 2.5.x (bcook@)

== regress =========================================================== 06/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/regress

usr.bin

  + mandoc/db/Makefile                    + mandoc/db/binedit/Makefile
  + mandoc/db/binedit/binedit.1           + mandoc/db/binedit/binedit.c
  + mandoc/db/dbm_dump/Makefile           + mandoc/db/dbm_dump/dbm_dump.1
  + mandoc/db/dbm_dump/dbm_dump.c         + mandoc/db/makeinodes/Makefile
  + mandoc/db/makeinodes/makeinodes.1     + mandoc/db/makeinodes/makeinodes.c
  + mandoc/db/man/empty.1                 + mandoc/db/man/fn.3
  + mandoc/db/man/in.3                    + mandoc/db/man/sh.1
  + mandoc/db/man/sortnames.1             + mandoc/db/man/va.3
  + mandoc/db/man/xr.1                    + mandoc/db/out/all.derr
  + mandoc/db/out/all.mout                + mandoc/db/out/empty.dout
  + mandoc/db/out/empty.merr              + mandoc/db/out/fn.dout
  + mandoc/db/out/in.dout                 + mandoc/db/out/onepage.dout
  + mandoc/db/out/padfentry.dout          + mandoc/db/out/padfmagic.dout
  + mandoc/db/out/padfpage.dout           + mandoc/db/out/padientry.dout
  + mandoc/db/out/padimacro.dout          + mandoc/db/out/padipage.dout
  + mandoc/db/out/padmacros.dout          + mandoc/db/out/padmentry.dout
  + mandoc/db/out/padmmacro.dout          + mandoc/db/out/padmpage.dout
  + mandoc/db/out/sh.dout                 + mandoc/db/out/so.dout
  + mandoc/db/out/so_rev.dout             + mandoc/db/out/sortnames.dout
  + mandoc/db/out/sortpages.dout          + mandoc/db/out/sortpages_rev.dout
  + mandoc/db/out/threemacros.dout        + mandoc/db/out/threepages.dout
  + mandoc/db/out/twoarch.dout            + mandoc/db/out/twopages.dout
  + mandoc/db/out/twosect.dout            + mandoc/db/out/va.dout
  + mandoc/db/out/xr.dout                 + mandoc/db/run/Makefile

  > test suite for the new mandoc.db(5) format;
  > will be enabled after committing in src/usr.bin/mandoc (schwarze@)

  + jot/Makefile                          + jot/regress.ascii.out
  + jot/regress.block.out                 + jot/regress.dddd.out
  + jot/regress.dddh.out                  + jot/regress.ddhd.out
  + jot/regress.ddhd2.out                 + jot/regress.ddhh.out
  + jot/regress.ddhh2.out                 + jot/regress.dhdd.out
  + jot/regress.dhdh.out                  + jot/regress.dhhd.out
  + jot/regress.dhhd2.out                 + jot/regress.dhhh.out
  + jot/regress.dhhh2.out                 + jot/regress.ed.out
  + jot/regress.grep.out                  + jot/regress.hddd.out
  + jot/regress.hddd2.out                 + jot/regress.hddh.out
  + jot/regress.hddh2.out                 + jot/regress.hdhd.out
  + jot/regress.hdhd2.out                 + jot/regress.hdhh.out
  + jot/regress.hdhh2.out                 + jot/regress.hhdd.out
  + jot/regress.hhdd2.out                 + jot/regress.hhdh.out
  + jot/regress.hhdh2.out                 + jot/regress.hhhd.out
  + jot/regress.hhhd2.out                 + jot/regress.hhhh.out
  + jot/regress.hhhh2.out                 + jot/regress.m4
  + jot/regress.man1.out                  + jot/regress.man10.out
  + jot/regress.man2.out                  + jot/regress.man3.out
  + jot/regress.man4.out                  + jot/regress.man5.out
  + jot/regress.man6.out                  + jot/regress.man7.out
  + jot/regress.man8.out                  + jot/regress.man9.out
  + jot/regress.n21.out                   + jot/regress.rand1.out
  + jot/regress.rand2.out                 + jot/regress.sh
  + jot/regress.stutter.out               + jot/regress.stutter2.out
  + jot/regress.tabs.out                  + jot/regress.wX1.out
  + jot/regress.wXl.out                   + jot/regress.wc.out
  + jot/regress.wdl.out                   + jot/regress.wdn.out
  + jot/regress.we.out                    + jot/regress.wf.out
  + jot/regress.wg.out                    + jot/regress.wgd.out
  + jot/regress.wo.out                    + jot/regress.wp1.out
  + jot/regress.wp2.out                   + jot/regress.wp3.out
  + jot/regress.wp4.out                   + jot/regress.wp5.out
  + jot/regress.wp6.out                   + jot/regress.wu.out
  + jot/regress.wwe.out                   + jot/regress.wx.out
  + jot/regress.wxn.out                   + jot/regress.x.out
  + jot/regress.xaa.out                   + jot/regress.yes.out

  > Add regression tests for jot(1).
  > Adapted from FreeBSD's test suite by attila () stalphonsos ! com.
  > Minor tweaks:
  > * make tests work properly with 'make obj' and setting VERBOSE
  > * add 10 tests checking some examples in our man page
  > * disable the dddd test for now since it loops forever
  > Besides dddd, the following five tests fail: dhhd dhhd2 wp3 wp4 wp5
  > Suggested fixes for these are on tech@
  > Many thanks to attila for doing the hard work! (tb@)

  ~ Makefile                              

  > hook up regression tests for jot(1) (tb@)

usr.sbin

  + relayd/args-http-host.pl              + relayd/args-http-host2.pl
  + relayd/args-http-host3.pl             + relayd/args-http-host4.pl

  > Improve parsing of the Host by following RFC 7230 Section 5.4 more
  > strictly:
  > - Respond with a 400 (Bad Request) if there is more than one Host:
  > header to prevent ambiguities.
  > - Make sure that the host in the optional absolute form of
  > request-target (eg. GET http://www.target.com/ HTTP/1.1) matches the
  > Host: value.  Proxies are supposed to ignore the Host: value if the
  > request-target exists, but relayd used to ignore the absolute
  > request-target form instead.  In HTTP terminology, relayd is a gateway
  > and not a proxy, but it has to make sure that the host is validated
  > consistently.
  > OK benno@ bluhm@ (reyk@)

== sbin ============================================================== 07/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sbin

dhclient

  ~ clparse.c                             

  > Ask for DHO_BOOTFILE_NAME and DHO_TFTP_SERVER by default. May prove
  > useful to autoinstall in the future and in the meantime can provide
  > information on what the dhcp server has done with the desired server
  > name and file name info.
  > Original diff from Patrik Lundin via tech@ (krw@)

newfs

  ~ newfs.c                               

  > Revert change to density calculation. David Vasek points out this
  > is a more complicated problem than it appears.
  > ok deraadt@ (krw@)

restore

  ~ main.c                                

  > after getenv, check for empty string too. ok millert (tedu@)

sysctl

  ~ sysctl.c                              

  > increase the size of forkstat fields to accomodate large values (tedu@)

  ~ sysctl.8                              

  > correct syntax for baddynamic example. from Holger Mikolon (tedu@)

== share ============================================================= 08/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share

man

  ~ man4/Makefile                         

  > add chvgpio.4 overlooked when the file was added
  > ok deraadt@ (jsg@)

  ~ man9/srp_enter.9                      

  > Missing word ("no"). (jca@)

  ~ man9/socreate.9                       

  > document the so_upcall option to socreate (phessler@)

  ~ man5/resolv.conf.5                    

  > max name servers is currently 5, not 3, apparently;
  > from remi locherer (jmc@)

  ~ man4/dwiic.4                          ~ man4/ihidev.4
  ~ man4/ims.4                            ~ man4/imt.4

  > add an authors section for some drivers i authored (jcs@)

  ~ man4/acpi.4                           + man4/acpials.4

  > add acpials(4), an acpi driver for ambient light sensors
  > hw.sensors.acpials0.illuminance0=11.00 lx (ambient light sensor) (jcs@)

  ~ man4/Makefile                         

  > install acpials.4 (jsg@)

== sys =============================================================== 09/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys

arch/alpha/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/alpha/stand/bootxx

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/alpha/stand/netboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/amd64/amd64

  ~ mem.c                                 

  > improve comments a bit. ok mlarkin tom (tedu@)

  ~ cpu.c                                 ~ mainbus.c
  ~ mpbios.c                              

  > Store the acpi processor ID/UID in struct cpu_info, and use it to attach
  > acpicpu(4) drivers to the right cpu(4).
  > ok mlarkin@, guenther@ (kettenis@)

arch/amd64/conf

  ~ GENERIC                               

  > add acpials(4), an acpi driver for ambient light sensors
  > hw.sensors.acpials0.illuminance0=11.00 lx (ambient light sensor) (jcs@)

arch/amd64/include

  ~ cpu.h                                 ~ cpuvar.h

  > Store the acpi processor ID/UID in struct cpu_info, and use it to attach
  > acpicpu(4) drivers to the right cpu(4).
  > ok mlarkin@, guenther@ (kettenis@)

arch/amd64/stand/biosboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/amd64/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/amd64/stand/cdboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/amd64/stand/cdbr

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/amd64/stand/mbr

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/amd64/stand/pxeboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/arm/arm

  ~ pmap7.c                               

  > When pmap_page_remove() is called by UVM, a physical page is to be
  > removed from pmaps it currently is in.  To check if a virtual address
  > pointing to that physical page has been mapped, the code uses
  > the l2pte_valid() function.  Unfortunately there is a difference
  > between being valid and the PTE being zero.  If a page is mapped
  > but has never been accessed, it will be non-zero but invalid.
  > In that case the PTE for that virtual address will not be zeroed
  > and the virtual address will be removed from the vm page struct.
  > The next time someone tries to map a page to that virtual address,
  > other pmap code will consider the virtual address to be already
  > mapped, even though that assumption is completely wrong.
  > To make sure this does not happen, check the PTE for zero.  This way
  > the PTE will be zeroed correctly.  The check for zero is how other
  > ARM pmap code also handles this issue.
  > ok kettenis@ tom@ (patrick@)

  ~ pmap7.c                               

  > Only flush the virtual page if it was actually mapped.  Otherwise
  > we will run into translation faults.
  > ok tom@ (patrick@)

  ~ cpufunc.c                             

  > Instead of testing MIDR values for every model of Cortex processor check
  > MMFR0 for an ARMv7 VMSA MMU that can handle short descriptors when
  > setting ARMv7 function pointers.  ARMv8 in AArch32 mode is documented to
  > set the same bits.
  > ok patrick@ (jsg@)

  ~ cpu.c                                 

  > Recognise Cortex A35 and Cortex A73. (jsg@)

  ~ conf.c                                ~ vm_machdep.c

  > Use ansi style function declarations.  No binary change.
  > From Robert Tate. (jsg@)

  ~ pmap7.c                               

  > According to te armv7 ARM TLB entries that caused a Permission fault might
  > be held in the TLB.  On top of that valid page table entries might be
  > speculatively loaded into the TLB.  As a result we need to flush TLB
  > entries
  > even when the page in question has not been referenced.
  > Fixes pmap_fault_fixup messages on Cortex-A53, and presumably also on
  > Cortex-A7.
  > ok patrick@, guenther@ (kettenis@)

  ~ pmap7.c                               

  > Remove devmap stuff which is unused on armv7.
  > ok patrick@ (kettenis@)

arch/arm/armv7

  ~ armv7_space.c                         

  > Remove a feature to re-use existing early bootstrap mappings. This
  > allowed you to pass a virtual address, which you received from an
  > early bootstrap mapping, as physical address to bus_space_map(9).
  > It breaks bus_space_map(9) for peripherals that are after 0xC0000000,
  > as it assumes that everything after that address cannot be a real
  > peripheral.  But that's wrong.  It does not make sense to pass a
  > virtual address to bus_space_map(9) anyway, so just get rid of this
  > whole "feature".
  > ok kettenis@ (patrick@)

arch/arm/include

  ~ fdt.h                                 

  > Instead of passing the raw reg property to simplebus nodes,
  > pass a pre-processed array of fdt_reg structs.  This means
  > that the drivers don't have to understand the cell properties
  > themselves but can rely on the 64-bit addr/size pairs.
  > ok kettenis@ (patrick@)

  ~ armreg.h                              

  > Instead of testing MIDR values for every model of Cortex processor check
  > MMFR0 for an ARMv7 VMSA MMU that can handle short descriptors when
  > setting ARMv7 function pointers.  ARMv8 in AArch32 mode is documented to
  > set the same bits.
  > ok patrick@ (jsg@)

  ~ armreg.h                              

  > Recognise Cortex A35 and Cortex A73. (jsg@)

arch/arm/simplebus

  ~ simplebus.c                           

  > Instead of passing the raw reg property to simplebus nodes,
  > pass a pre-processed array of fdt_reg structs.  This means
  > that the drivers don't have to understand the cell properties
  > themselves but can rely on the 64-bit addr/size pairs.
  > ok kettenis@ (patrick@)

arch/armish/stand

  ~ Makefile.inc                          

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/armv7/armv7

  ~ armv7_machdep.c                       ~ armv7_start.S

  > Remove the restriction that the kernel needs to be loaded at the bottom of
  > physical memory.  This makes it possible to boot OpenBSD on platforms that
  > have physical memory start at address 0x00000000 as the EFI bootloader will
  > only attempt to load kernels at address 0x10000000 and above to work around
  > a bug in the u-boot EFI API layer.
  > ok patrick@ (kettenis@)

  ~ armv7_machdep.c                       

  > Rename struct fdt_memory to fdt_reg to match the member name
  > used in the fdt attach args and the device tree.
  > ok kettenis@ (patrick@)

  - uboot_tags.c                          ~ armv7_machdep.c

  > Stop pretending we can still boot without an FDT.  Remove the code paths
  > handling ATAGS and cleanup the early boot code.
  > ok patrick@, tom@, jsg@ (kettenis@)

arch/armv7/conf

  ~ files.armv7                           

  > Stop pretending we can still boot without an FDT.  Remove the code paths
  > handling ATAGS and cleanup the early boot code.
  > ok patrick@, tom@, jsg@ (kettenis@)

arch/armv7/exynos

  ~ exclock.c                             ~ exdisplay.c
  ~ exdog.c                               ~ exehci.c
  ~ exesdhc.c                             ~ exgpio.c
  ~ exiic.c                               ~ exmct.c
  ~ expower.c                             ~ exsysreg.c
  ~ exuart.c                              

  > Rename struct fdt_memory to fdt_reg to match the member name
  > used in the fdt attach args and the device tree.
  > ok kettenis@ (patrick@)

arch/armv7/imx

  ~ imxuart.c                             

  > Rename struct fdt_memory to fdt_reg to match the member name
  > used in the fdt attach args and the device tree.
  > ok kettenis@ (patrick@)

  ~ if_fec.c                              ~ imxahci.c
  ~ imxdog.c                              ~ imxehci.c
  ~ imxesdhc.c                            ~ imxgpio.c
  ~ imxiic.c                              ~ imxuart.c

  > Instead of passing the raw reg property to simplebus nodes,
  > pass a pre-processed array of fdt_reg structs.  This means
  > that the drivers don't have to understand the cell properties
  > themselves but can rely on the 64-bit addr/size pairs.
  > ok kettenis@ (patrick@)

arch/armv7/omap

  ~ omap_com.c                            

  > Rename struct fdt_memory to fdt_reg to match the member name
  > used in the fdt attach args and the device tree.
  > ok kettenis@ (patrick@)

  ~ if_cpsw.c                             ~ omap_com.c
  ~ omdog.c                               ~ ommmc.c
  ~ ti_iic.c                              

  > Instead of passing the raw reg property to simplebus nodes,
  > pass a pre-processed array of fdt_reg structs.  This means
  > that the drivers don't have to understand the cell properties
  > themselves but can rely on the 64-bit addr/size pairs.
  > ok kettenis@ (patrick@)

arch/armv7/sunxi

  ~ sxiuart.c                             

  > Rename struct fdt_memory to fdt_reg to match the member name
  > used in the fdt attach args and the device tree.
  > ok kettenis@ (patrick@)

  ~ sxie.c                                ~ sxiuart.c

  > Instead of passing the raw reg property to simplebus nodes,
  > pass a pre-processed array of fdt_reg structs.  This means
  > that the drivers don't have to understand the cell properties
  > themselves but can rely on the 64-bit addr/size pairs.
  > ok kettenis@ (patrick@)

  ~ sunxi.c                               

  > Get interrupts going for the Allwinner-R8 chip.
  > ok kettenis@, patrick@ (mglocker@)

arch/armv7/vexpress

  ~ pl011.c                               ~ virtio_mmio.c

  > Rename struct fdt_memory to fdt_reg to match the member name
  > used in the fdt attach args and the device tree.
  > ok kettenis@ (patrick@)

arch/hppa/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/hppa/stand/cdboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/i386/i386

  ~ mem.c                                 

  > replace hand rolled physlock with real rwlock. ok mlarkin (tedu@)

  ~ cpu.c                                 ~ mainbus.c
  ~ mpbios.c                              

  > Store the acpi processor ID/UID in struct cpu_info, and use it to attach
  > acpicpu(4) drivers to the right cpu(4).
  > ok mlarkin@, guenther@ (kettenis@)

arch/i386/include

  ~ cpu.h                                 ~ cpuvar.h

  > Store the acpi processor ID/UID in struct cpu_info, and use it to attach
  > acpicpu(4) drivers to the right cpu(4).
  > ok mlarkin@, guenther@ (kettenis@)

arch/i386/stand/biosboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/i386/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/i386/stand/cdboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/i386/stand/cdbr

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/i386/stand/mbr

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/i386/stand/pxeboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/landisk/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/landisk/stand/mbr

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/landisk/stand/xxboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/loongson/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/luna88k/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/macppc/dev

  ~ thermal.c                             

  > Reorder code to avoid a divide by zero when there are no sensors.
  > Tested by and ok mglocker@ (jsg@)

arch/macppc/stand/boot.mac

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/macppc/stand/ofwboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/octeon/dev

  ~ octeon_uartbus.c                      

  > Remove unnecessary remapping of registers.
  > ok jasper@ (visa@)

  ~ if_cnmac.c                            

  > Drop a redundant parameter of octeon_eth_buf_free_work(). (visa@)

  ~ if_cnmac.c                            ~ if_cnmacvar.h

  > Remove disabled jumbo frame checks. They will not be needed
  > for jumbo frame support. (visa@)

arch/octeon/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/sgi/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/socppc/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/socppc/stand/mbr

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/sparc/sparc

  ~ mem.c                                 

  > ansify mem.c to the latest fashion. with a fix from mike burns. ok deraadt
  > (tedu@)

arch/sparc/stand/boot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/sparc/stand/bootxx

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/sparc64/sparc64

  ~ mem.c                                 

  > ansify mem.c to the latest fashion. with a fix from mike burns. ok deraadt
  > (tedu@)

arch/sparc64/stand/ofwboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/zaurus/stand/zboot

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

arch/zaurus/stand/zbsdmod

  ~ Makefile                              

  > Prep for relro: make sure it's off for any non-PIE stand/ program
  > ok millert@ kettenis@ (guenther@)

conf

  ~ GENERIC                               

  > disable tmpfs because it receives zero maintainance. (deraadt@)

  ~ newvers.sh                            

  > Welcome to 6.0-current.
  > ok deraadt@ (kettenis@)

  ~ GENERIC                               

  > pool debug dance, part deux (tedu@)

dev/acpi

  ~ acpicbkbd.c                           

  > after system resume, re-write backlight level (jcs@)

  ~ acpi.c                                ~ acpicpu.c
  ~ acpimadt.c                            ~ acpivar.h

  > Store the acpi processor ID/UID in struct cpu_info, and use it to attach
  > acpicpu(4) drivers to the right cpu(4).
  > ok mlarkin@, guenther@ (kettenis@)

  ~ files.acpi                            + acpials.c

  > add acpials(4), an acpi driver for ambient light sensors
  > hw.sensors.acpials0.illuminance0=11.00 lx (ambient light sensor) (jcs@)

dev/ic

  ~ rtwn.c                                

  > Fix byteswap errors in rtwn(4) and urtwn(4) introduced by me on June 17.
  > Repairs urtwn(4) on macppc. Problem reported by juanfra@.
  > ok millert@ deraadt@ (stsp@)

dev/ofw

  ~ fdt.c                                 ~ fdt.h

  > Rename struct fdt_memory to fdt_reg to match the member name
  > used in the fdt attach args and the device tree.
  > ok kettenis@ (patrick@)

  ~ ofw_gpio.c                            ~ ofw_gpio.h

  > Add interface to facilitate iterating over gpios.
  > ok patrick@ (kettenis@)

dev/pci

  ~ if_rtwn.c                             

  > Fix byteswap errors in rtwn(4) and urtwn(4) introduced by me on June 17.
  > Repairs urtwn(4) on macppc. Problem reported by juanfra@.
  > ok millert@ deraadt@ (stsp@)

  ~ pcidevs                               

  > Add Xeon E3-1200 v5 host bridge and some more Sunrise Point H PCH ids.
  > (jsg@)

  ~ pcidevs.h                             ~ pcidevs_data.h

  > regen (jsg@)

dev/pv

  ~ if_hvn.c                              

  > zero sizeof a struct not sizeof the pointer to it
  > ok mikeb@ (jsg@)

  ~ hyperv.c                              ~ if_xnf.c

  > Convert ifq_deq_{begin,rollback,commit} dance to a single ifq_dequeue
  > (mikeb@)

  ~ hyperv.c                              

  > Revert previous commit (mikeb@)

  ~ if_xnf.c                              

  > Remove top level ring processing loops as too ambiguous (mikeb@)

  ~ if_xnf.c                              

  > Reduce the amount of sent TX producer notifications; from FreeBSD (mikeb@)

  ~ if_xnf.c                              

  > Reduce the amount of sent RX producer notifications; from FreeBSD (mikeb@)

  ~ if_xnf.c                              

  > Update TX completion event index when putting a packet on the ring (mikeb@)

  ~ xenstore.c                            

  > Loop until we've read all available responses (mikeb@)

  ~ xen.c                                 ~ xenvar.h

  > Move xen interrupt handlers to dedicated task queues
  > Handling receive and transmit for multiple networking interfaces
  > in a "shared interrupt" within normal interrupt vector code path
  > introduces too much delay from the hypervisor POV which prevents
  > it from injecting further completion event interrupts for Rx and
  > Tx queues.
  > Additionally, Netfront backend driver includes a mechanism to
  > detect Rx ring stalls and "turn the carrier off" when the guest
  > is not replenishing the ring (e.g. due to missing completion
  > interrupts) that relies on guest waking up periodically and making
  > sure that the Rx ring completion handling is progressing.
  > Having tried both task queue + timeout and interrupts + timeout
  > approaches, it appears that using  the task queue is more flexible
  > and provides superior performance under heavy network load. (mikeb@)

  ~ if_xnf.c                              

  > Disable receive ring slot accounting
  > In the Netfront case it appears that by having scheduler decide when
  > to run the workload we don't need to involve additional mechanisms
  > to artificially limit resource availability to achieve better
  > performance under heavy load.  On the contrary, by performing a
  > single pass through Rx and Tx completion rings and having scheduler
  > decide when to run the next attempt, we limit the amount of time
  > spent in the packet processing and achieve system responsiveness. (mikeb@)

  ~ if_xnf.c                              

  > Add a periodic timer to workaround missing completion events (mikeb@)

dev/usb

  ~ if_rsu.c                              

  > Unbreak rsu(4) which was broken since r1.32. Reported by Jake Swensen.
  > ok deraadt@ (stsp@)

  ~ if_rsu.c                              

  > In rsu(4), put code that twiddles HT data in the ic under #ifdef notyet.
  > Some code paths in this driver peek at ic_htcaps and act upon it, so let's
  > play it safe until this driver gets its 11n support enabled on purpose.
  > Spotted while investigating the bug fixed in r1.35. (stsp@)

  ~ if_smsc.c                             

  > Use m_devget(9).
  > ok claudio@ (kettenis@)

kern

  ~ kern_pledge.c                         

  > Convert ifq_deq_{begin,rollback,commit} dance to a single ifq_dequeue
  > (mikeb@)

  ~ kern_pledge.c                         

  > Revert previous commit (mikeb@)

  ~ vfs_subr.c                            

  TAGGED OPENBSD_5_8
  > backport 1.249 null pointer check:
  > Prevent NULL-pointer call for filesystems that don't provide vfs_sysctl
  > in their vfsops.
  > Issue reported by Tim Newsham. (tedu@)

  ~ vfs_subr.c                            

  TAGGED OPENBSD_5_9
  > backport 1.249 null pointer check:
  > Prevent NULL-pointer call for filesystems that don't provide vfs_sysctl
  > in their vfsops.
  > Issue reported by Tim Newsham. (tedu@)

net

  ~ bpf.c                                 

  > Make sure closed bpf devices are removed from bpf_d_list to free the
  > minor number for reuse by the device cloning code. This fixes a panic
  > reported by bluhm@.
  > initial diff from tedu
  > ok deraadt (natano@)

netinet

  ~ ip_carp.c                             

  > fix revision 1.290 of sys/netinet/ip_carp.c.
  > diff from jsg@
  > ok deraadt@, benno@ (benno@)

sys

  ~ vmmeter.h                             

  > increase the size of forkstat fields to accomodate large values (tedu@)

uvm

  ~ uvm_amap.c                            

  > check flags with mask instead of equality, in case we decide to mix
  > another flag in at some point. ok stefan (tedu@)

  ~ uvm_map.c                             

  > add a check that the arguments to isavail don't overflow.
  > callers should probably check too, but checking here won't hurt.
  > possible panic reported by tim newsham.
  > ok kettenis (tedu@)

  ~ uvm_addr.c                            

  > Add a few checks for potential integer overflow and underflow related to
  > the
  > size of an address range.
  > ok deraadt@, tedu@ (kettenis@)

  ~ uvm_map.c                             

  > Check for wraparound before the "commit" phase of uvm_map() and
  > uvm_mapanon(),
  > to prevent hitting assertions and/or corrupting data structures during that
  > phase.
  > ok deraadt@, tedu@ (kettenis@)

== usr.bin =========================================================== 10/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin

ftp

  ~ ftp.1                                 ~ util.c

  > these programs probably do not need to use TMPDIR. ok florian (tedu@)

mail

  ~ mail.1                                ~ temp.c

  > these programs probably do not need to use TMPDIR. ok florian (tedu@)

mandoc

  ~ cgi.c                                 

  > Some base system pages, for example perl(1), contain non-ASCII
  > characters in their source code, so switch on charset autodetection
  > in the same way as in man(1) itself.
  > Issue reported by Pavan Maddamsetti at gmail dot com on bugs@. (schwarze@)

mg

  ~ fileio.c                              ~ mg.1

  > these programs probably do not need to use TMPDIR. ok florian (tedu@)

  ~ fileio.c                              

  > strncmp is a more reasonable way to check the beginning of a string.
  > (tedu@)

nc

  ~ netcat.c                              

  > use the style from the man page examples for getaddrinfo, which makes a
  > bit more sense
  > ok jung@ deraadt@ (halex@)

openssl

  ~ openssl.1                             

  > some text cutting, after feedback from jsing; (jmc@)

  ~ openssl.1                             

  > remove HISTORY: it was a nonsense; (jmc@)

printf

  ~ printf.c                              

  > fix signed char extension bugs. from [email protected]. ok guenther.
  > As a personal remark, I'll add that it's not necessary to cast a value
  > to a function's return type. The compiler is happy to do that for you.
  > But such casts can hide warnings and bugs. (tedu@)

ssh

  ~ version.h                             

  > openssh-7.3 (djm@)

  ~ atomicio.c                            

  > better bounds check on iovcnt (we only ever use fixed, positive values)
  > (djm@)

top

  ~ machine.c                             

  > rework realloc loop. there's no need to shrink the allocation between
  > calls. if we need a big space once, we'll likely need a big space again.
  > (tedu@)

vmstat

  ~ vmstat.c                              

  > increase the size of forkstat fields to accomodate large values (tedu@)

yacc

  ~ main.c                                ~ yacc.1

  > it should not be necessary for yacc to use TMPDIR, /tmp is good enough.
  > ok beck deraadt guenther (tedu@)

== usr.sbin ========================================================== 11/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin

bgpd

  ~ session.c                             

  > Initialize the log subsytem in the SE like it is done in the RDE. Without
  > this all logging is going via stderr to /dev/null which is not helpful.
  > OK deraadt@ phessler@ (claudio@)

hotplugd

  ~ hotplugd.c                            

  > Close /dev/hotplug on exec(). Otherwise a restart of the daemon may
  > fail, because the device is occupied by a child process.
  > from Alexey Vatchenko
  > ok jca (natano@)

httpd

  ~ server_http.c                         

  > According to RFC 7231 4.3.7, OPTIONS may have body. "Although this
  > specification does not define any use for such a payload, future
  > extensions to HTTP might use the OPTIONS body to make more detailed
  > queries about the target resource." The future has arrived.
  > Found and tested by Michael Lechtermann
  > OK benno@ (reyk@)

ndp

  ~ ndp.c                                 

  > Duplicated decls (jca@)

  ~ ndp.c                                 

  > Turn two global variables into variables local to main. (jca@)

  ~ ndp.c                                 

  > Rename the route socket to a more useful name.
  > Avoid a bunch of "warning: declaration of 's' shadows a global
  > declaration" while here. (jca@)

pkg_add

  ~ OpenBSD/PackageRepository.pm          

  > hunting around for some sporadic error message. Removing the hash entry
  > entirely is slightly better.
  > noticed by sthen@ (espie@)

  ~ pkg_info.1                            ~ OpenBSD/PkgInfo.pm

  > don't include firmwares in the fuzzy auto-reinstall list (espie@)

  ~ OpenBSD/PackingList.pm                

  > checking for firmware works better if I pass thru all options (espie@)

  ~ pkg_info.1                            

  > firmware is the plural; (jmc@)

rarpd

  ~ arptab.c                              

  > Fix rarpd hang. The receive buffer of a route socket can become full
  > while rarpd process is idle. To avoid getting stuck in rtmsg(),
  > the process has to clear the buffer and retry.
  > ok benno@ deraadt@ millert@ (visa@)

rcctl

  ~ rcctl.sh                              

  > This is effectively a ksh(1) script. (ajacoutot@)

relayd

  ~ relay_http.c                          ~ relayd.c
  ~ relayd.h                              

  > Improve parsing of the Host by following RFC 7230 Section 5.4 more
  > strictly:
  > - Respond with a 400 (Bad Request) if there is more than one Host:
  > header to prevent ambiguities.
  > - Make sure that the host in the optional absolute form of
  > request-target (eg. GET http://www.target.com/ HTTP/1.1) matches the
  > Host: value.  Proxies are supposed to ignore the Host: value if the
  > request-target exists, but relayd used to ignore the absolute
  > request-target form instead.  In HTTP terminology, relayd is a gateway
  > and not a proxy, but it has to make sure that the host is validated
  > consistently.
  > OK benno@ bluhm@ (reyk@)

  ~ relay_http.c                          

  > According to RFC 7231 4.3.7, OPTIONS may have body. "Although this
  > specification does not define any use for such a payload, future
  > extensions to HTTP might use the OPTIONS body to make more detailed
  > queries about the target resource." The future has arrived.
  > Found and tested by Michael Lechtermann
  > OK benno@ (reyk@)

  ~ http.h                                ~ relay_http.c
  ~ relayd.conf.5                         

  > Add support for common WebDAV methods;  from httpd.
  > Found and tested by Michael Lechtermann
  > OK benno@ (reyk@)

  ~ relay_http.c                          ~ relayd.c
  ~ relayd.conf.5                         ~ relayd.h

  > Bump copyright in files that I touched last.
  > (btw. hostated-hoststated-relayd's 10th birthday is on Dec 16.) (reyk@)

smtpd

  ~ smtpd.h                               

  > bump version
  > ok deraadt@ (gilles@)

  ~ smtp_session.c                        

  > log ip addresses as well in authentication phase
  > ok gilles@ (giovanni@)

sysmerge

  ~ sysmerge.sh                           

  > Remove compat code. (ajacoutot@)

tcpdump

  ~ privsep.c                             

  > Split the root vs not-root cases better with regards to chroot setup.
  > ok kettenis benno tedu canacar (deraadt@)

  ~ privsep.c                             

  > err() instead of errx(); noted by tim (deraadt@)

  ~ print-icmp6.c                         

  > Use long labs(3) for pointer arithmetic.
  > Found by David Hill with clang. (bluhm@)

vmd

  ~ config.c                              ~ vmd.c
  ~ vmd.h                                 ~ vmm.c

  > Allow starting a VM again after it was terminated
  > If a VM exits, terminate it and remove it from the list of
  > available VMs. That allows a VM with name `foo' to be restarted
  > after it has exited.
  > This changes structures shared between vmd and vmctl. You need to
  > rebuild vmctl also.
  > ok mlarkin@ (stefan@)

===============================================================================
_______________________________________________
owc mailing list
[email protected]
http://www.squish.net/mailman/listinfo/owc

Reply via email to