OpenBSD src changes summary for 2016-11-20 to 2016-11-27 inclusive
==================================================================

bin/stty                                distrib/amd64
distrib/i386                            distrib/miniroot
distrib/sets                            etc/Makefile
etc/etc.amd64/login.conf                gnu/usr.bin/binutils-2.17
gnu/usr.bin/clang                       lib/libcrypto
lib/libfuse                             lib/libpcap
lib/libssl                              regress/lib
regress/sbin                            regress/sys
regress/usr.bin                         sbin/bioctl
sbin/dhclient                           sbin/ldattach
sbin/pfctl                              share/man
share/zoneinfo                          sys/arch/armv7/sunxi
sys/arch/hppa/stand/boot                sys/arch/loongson/include
sys/arch/mips64/mips64                  sys/arch/octeon/dev
sys/arch/octeon/octeon                  sys/dev/pci
sys/dev/pv                              sys/dev/usb
sys/kern                                sys/lib/libsa
sys/net                                 sys/netinet
sys/netinet6                            sys/nfs
sys/sys                                 sys/ufs/ffs
usr.bin/cal                             usr.bin/ssh
usr.bin/tmux                            usr.sbin/lpr
usr.sbin/makefs                         usr.sbin/pstat
usr.sbin/relayd                         usr.sbin/smtpd
usr.sbin/switchctl                      usr.sbin/switchd
usr.sbin/syslogd                        usr.sbin/syspatch
usr.sbin/tcpdump                        usr.sbin/vmctl
usr.sbin/vmd                            

== bin =============================================================== 01/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/bin

stty

  ~ print.c                               

  > Remove leftovers of line disciplines that are no more.
  > ok mikeb@ (mpi@)

== distrib =========================================================== 02/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/distrib

amd64

  ~ ramdiskA/Makefile.inc                 ~ ramdisk_cd/Makefile.inc

  > Use makefs to build bsd.rd. amd64 and i386 are first; other platforms
  > will follow with some safety distance when I figured out all MD quirks.
  > makefs allows to build the ramdisk image as an unprivileged user. The
  > next step in the quest to reduce root during builds.
  > ok deraadt (natano@)

i386

  ~ common/Makefile.inc                   

  > Use makefs to build bsd.rd. amd64 and i386 are first; other platforms
  > will follow with some safety distance when I figured out all MD quirks.
  > makefs allows to build the ramdisk image as an unprivileged user. The
  > next step in the quest to reduce root during builds.
  > ok deraadt (natano@)

miniroot

  ~ install.sub                           

  > Don't manually add a route to an alias IP via 127.0.0.1. This is
  > now automatically handled by the kernel.
  > The same change was made to /etc/netstart in 5.5 with r1.139.
  > Should fix the (U)pgrade problem reported on bugs@ by Clint Pachl.
  > ok mpi@ (krw@)

  ~ group                                 ~ install.sub
  ~ master.passwd                         

  > The build systems now uses the user build and the group wobj.
  > Add them to bsd.rd and set the ownership and permissions of
  > /usr/obj and /usr/xobj accordingly.
  > feedback and OK tb@
  > Looks good deraadt@ (rpe@)

sets

  ~ makeetcset                            ~ maketars

  > Fix up some permissions in RELEASEDIR and /var/sysmerge.
  > help, testing & ok rpe (tb@)

  ~ lists/comp/mi                         

  > sync (sthen@)

  ~ lists/comp/mi                         

  > sync (tb@)

  ~ lists/base/mi                         

  > sync (deraadt@)

  ~ lists/base/mi                         

  > sync (deraadt@)

  ~ lists/base/mi                         

  > sync (deraadt@)

  ~ lists/comp/mi                         

  > sync (deraadt@)

== etc =============================================================== 03/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc

Makefile

  ~ Makefile                              

  > Fix up some permissions in RELEASEDIR and /var/sysmerge.
  > help, testing & ok rpe (tb@)

etc.amd64/login.conf

  ~ etc.amd64/login.conf                  

  > Increase default datasize limit from 512M to 768M on amd64.  This
  > allows to build xenocara with extra options in malloc.conf.
  > OK deraadt@ (bluhm@)

== gnu =============================================================== 04/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu

usr.bin/binutils-2.17

  ~ opcodes/mips-opc.c                    

  > Add Octeon coprocessor 2 instructions.
  > No objection from kettenis@ (visa@)

usr.bin/clang

  ~ Makefile.arch                         + include/llvm/AArch64/Makefile
  + libLLVMAArch64AsmParser/Makefile      + libLLVMAArch64AsmPrinter/Makefile
  + libLLVMAArch64CodeGen/Makefile        + libLLVMAArch64Desc/Makefile
  + libLLVMAArch64Disassembler/Makefile   + libLLVMAArch64Info/Makefile
  + libLLVMAArch64Utils/Makefile          

  > Add AArch64 backend build infrastructure.
  > ok pascal@ (patrick@)

== lib =============================================================== 05/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib

libcrypto

  ~ man/BIO_set_callback.3                

  > Add Copyright and license.
  > In the SYNOPSIS, provide prototypes rather than #define directives.
  > Name arguments consistently.
  > Remove lies about functions being macros. (schwarze@)

  ~ man/BIO_should_retry.3                

  > Add Copyright and license.
  > In the SYNOPSIS, show function prototypes, not #define directives.
  > (schwarze@)

  ~ man/BN_BLINDING_new.3                 

  > Add Copyright and license.
  > Mention that BN_BLINDING_free() accepts NULL.
  > Adjust AUTHORS section to OpenBSD conventions. (schwarze@)

  ~ man/BN_CTX_new.3                      

  > Add Copyright and license.
  > Mention that BN_CTX_free(3) accepts NULL.
  > Delete the useless statement that void functions return no value.
  > (schwarze@)

  ~ man/BN_CTX_start.3                    

  > Add Copyright and license.
  > Delete the useless statement that a void function returns no value.
  > (schwarze@)

  ~ man/BN_add.3                          

  > Add Copyright and license.
  > Merge a sentence from OpenSSL saying that BN_sub(3)
  > can do in-place manipulation. (schwarze@)

  ~ man/BN_add_word.3                     

  > Add Copyright and license.
  > Delete duplicate specification of the error return value of BN_mod_word(3).
  > Fix a markup error in the remaining copy of the same return value.
  > (schwarze@)

  ~ man/BN_bn2bin.3                       

  > Add Copyright and license.
  > More details about BN_hex2bn(3) lifted from the OpenSSL manual,
  > but worded less clumsily. (schwarze@)

  ~ man/BN_cmp.3                          

  > Copyright and license (schwarze@)

  ~ man/BN_copy.3                         

  > Add Copyright and license.
  > Merge documentation of BN_with_flags(3) from OpenSSL. (schwarze@)

  ~ man/BN_generate_prime.3               

  > Add Copyright and license.
  > In the SYNOPSIS, show prototypes rather than #define directives.
  > Clarify that BN_generate_prime_ex(3) takes the minimum length,
  > not the exact length. (schwarze@)

  ~ man/BN_mod_inverse.3                  

  > Copyright and license (schwarze@)

  ~ man/BN_mod_mul_montgomery.3           ~ man/BN_mod_mul_reciprocal.3
  ~ man/BN_new.3                          

  > Add Copyright and license.
  > Mention that some *_free(3) functions accept NULL.
  > Delete useless statements about void functions not retuning a value.
  > (schwarze@)

  ~ man/BN_num_bytes.3                    

  > Copyright and license (schwarze@)

  ~ man/BN_rand.3                         

  > Add Copyright and license.
  > Merge one additional sentence stating a restriction on arguments from
  > OpenSSL. (schwarze@)

  ~ man/BN_set_bit.3                      

  > Add Copyright and license.
  > Mention that shifting by negative numbers of bits is not allowed.
  > (schwarze@)

  ~ man/BN_swap.3                         ~ man/BN_zero.3

  > Copyright and license (schwarze@)

  ~ man/BUF_MEM_new.3                     

  > Add Copyright and license.
  > Merge documentatin of BUF_MEM_grow_clean(3) and BUF_reverse(3) from
  > OpenSSL.
  > Mention that BUF_MEM_free(3) accepts NULL. (schwarze@)

  ~ man/CONF_modules_free.3               

  > Add Copyright and license.
  > Drop the empty RETURN VALUES section. (schwarze@)

  ~ man/CONF_modules_load_file.3          

  > Add Copyright and license.
  > Merge some typo fixes, a paragraph documenting another flag,
  > and some additional explanations and EXAMPLES from OpenSSL. (schwarze@)

  ~ man/DES_set_key.3                     

  > Add the correct Copyright notices and licenses.
  > This is the first manual page i encounter that contains both parts
  > of text derived from the old SSLeay documentation, hence covered
  > by Tim Hudson's Copyright and available under Eric Young's original
  > SSLeay license, and parts changed or added later, hence covered by
  > the OpenSSL Copyright and license.  Both licenses have to be included.
  > (schwarze@)

  ~ man/BUF_MEM_new.3                     

  > grammar fix; (jmc@)

  ~ man/BN_generate_prime.3               ~ man/BN_rand.3
  ~ man/DES_set_key.3                     ~ man/DH_generate_key.3
  ~ man/DH_generate_parameters.3          ~ man/DSA_do_sign.3
  ~ man/DSA_generate_key.3                ~ man/DSA_generate_parameters.3
  ~ man/DSA_sign.3                        ~ man/EVP_BytesToKey.3
  ~ man/EVP_OpenInit.3                    ~ man/EVP_SealInit.3
  ~ man/PKCS5_PBKDF2_HMAC.3               ~ man/crypto.3

  > replace cross-references to the rand(3) manual that no longer exists
  > (schwarze@)

  ~ man/BIO_s_bio.3                       ~ man/BUF_MEM_new.3
  ~ man/lh_stats.3                        

  > fix references to bio(3) to point to BIO(3) instead (schwarze@)

  ~ man/Makefile                          + man/BN_get0_nist_prime_521.3

  > import DH_get_1024_160(3) from OpenSSL,
  > but do not include the functions we don't have (schwarze@)

  ~ man/DH_generate_key.3                 

  > Copyright and license (schwarze@)

  ~ man/DH_generate_parameters.3          

  > Add Copyright and license.
  > Improve description of DH_check(3) results using information from
  > OpenSSL manual and a look at the source code, leaving out the bits
  > we don't have. (schwarze@)

  ~ man/DH_new.3                          

  > Add Copyright and license.
  > Mention that DH_free(3) accepts NULL. (schwarze@)

  ~ man/DH_set_method.3                   

  > Add Copyright and license.
  > Do not talk about DH_set_default_openssl_method() and
  > DH_get_default_openssl_method().  They were short-lived
  > functions that only existed in OpenSSL 0.9.6.
  > Remove inclusion of a header that is not needed (from OpenSSL).
  > Remove one ugly custom section header. (schwarze@)

  ~ man/DH_size.3                         

  > Add Copyright and license, and minor improvements from OpenSSL:
  > Mention that DH_size(3) does not accept NULL.
  > Add two cross references. (schwarze@)

  ~ man/DSA_set_method.3                  

  > Add Copyright and license.
  > Do not talk about DSA_set_default_openssl_method(3) and
  > DSA_get_default_openssl_method(3).  They were short-lived
  > functions that only existed in OpenSSL 0.9.6.
  > Remove one ugly custom section header. (schwarze@)

  ~ man/DSA_SIG_new.3                     ~ man/DSA_new.3

  > Add Copyright and license.
  > Mention that DSA_SIG_free(3) and DSA_free(3) accept NULL. (schwarze@)

  ~ man/DSA_do_sign.3                     ~ man/DSA_dup_DH.3
  ~ man/DSA_generate_key.3                ~ man/DSA_generate_parameters.3
  ~ man/DSA_sign.3                        ~ man/DSA_size.3

  > Copyright and license (schwarze@)

  ~ man/ECDSA_SIG_new.3                   

  > Add Copyright and license.
  > Merge some additional information from OpenSSL. (schwarze@)

  ~ man/BN_get0_nist_prime_521.3          

  > tweak previous; (jmc@)

  ~ man/EC_GROUP_copy.3                   ~ man/EVP_AEAD_CTX_init.3
  ~ man/EVP_BytesToKey.3                  ~ man/EVP_DigestInit.3
  ~ man/EVP_EncryptInit.3                 ~ man/EVP_OpenInit.3
  ~ man/EVP_PKEY_CTX_ctrl.3               ~ man/EVP_PKEY_CTX_new.3
  ~ man/EVP_PKEY_cmp.3                    ~ man/EVP_PKEY_decrypt.3
  ~ man/EVP_PKEY_derive.3                 ~ man/EVP_PKEY_encrypt.3
  ~ man/EVP_PKEY_keygen.3                 ~ man/EVP_PKEY_print_private.3
  ~ man/EVP_PKEY_sign.3                   ~ man/EVP_PKEY_verify.3
  ~ man/EVP_PKEY_verify_recover.3         ~ man/EVP_SealInit.3
  ~ man/EVP_SignInit.3                    ~ man/EVP_VerifyInit.3
  ~ man/bn_dump.3                         ~ man/evp.3

  > various cleanup; (jmc@)

  ~ man/EC_KEY_new.3                      

  > Add Copyright and license.
  > Mention that EC_KEY_free(3) accepts NULL.
  > Merge some auxiliary explanations regarding the effects of EC_KEY
  > encoding flags, lifted from the separate page EC_KEY_get_enc_flags(3)
  > that OpenSSL split off from EC_KEY_new(3). (schwarze@)

  ~ man/EC_POINT_new.3                    

  > Add Copyright and license.
  > Mention that EC_POINT_free(3) and EC_POINT_clear_free(3) accept NULL.
  > Fix two evil typos (from OpenSSL). (schwarze@)

  ~ man/EC_GROUP_new.3                    

  > Add Copyright and license.
  > Mention that EC_GROUP_free(3) and EC_GROUP_clear_free(3) accept NULL.
  > (schwarze@)

  ~ man/EC_GFp_simple_method.3            ~ man/EC_GROUP_copy.3
  ~ man/EC_POINT_add.3                    

  > Copyright and license (schwarze@)

  - man/EVP_PKEY_get_default_digest.3     ~ man/Makefile
  + man/EVP_PKEY_get_default_digest_nid.3

  > rename _default_digest.3 to _default_digest_nid.3, since this page
  > describes only one function, _default_digest_nid();
  > ok schwarze, who informs me openssl already came to this conclusion
  > in june of this year; (jmc@)

  ~ man/engine.3                          

  > Add Copyright and license.
  > Pull in a small number of typo fixes from OpenSSL.
  > Drop speculations about future developments that OpenSSL deleted as well.
  > This page is a mess for at least three reasons: (1) it doesn't
  > actually document all functions listed in the SYNOPSIS, (2) it ought
  > to be split into functional groups of reasonable size, and (3) the
  > user interface is ill-designed to the point of absurdity.  In view
  > of item (3), i'm loath to tackle items (1) and (2), so i'm leaving
  > this in its present sorry state for now, refraining even from
  > renaming it to ENGINE_add(3) and expanding the NAME section as
  > OpenSSL did - because that would merely sweep all the turds under
  > the rug. (schwarze@)

  ~ man/BIO.3                             

  > Add Copyright and license and improve .Nd. (schwarze@)

  ~ man/HMAC.3                            ~ man/MD5.3
  ~ man/OBJ_nid2obj.3                     ~ man/OPENSSL_config.3
  ~ man/OPENSSL_load_builtin_modules.3    ~ man/OpenSSL_add_all_algorithms.3

  > various cleanup; (jmc@)

  ~ man/CRYPTO_set_ex_data.3              ~ man/CRYPTO_set_locking_callback.3
  ~ man/DH_get_ex_new_index.3             ~ man/DSA_get_ex_new_index.3

  > Copyright and license (schwarze@)

  ~ man/ERR.3                             ~ man/ERR_put_error.3

  > Add Copyright and license.
  > Like OpenSSL, move some text from ERR(3) to the fitting page
  > ERR_put_error(3).
  > Merge documentation of ERR_add_error_vdata(3) from OpenSSL.
  > Drop useless statement about void functions returning no values.
  > (schwarze@)

  ~ man/ERR_error_string.3                

  > Add Copyright and license.
  > Merge a correction and a clarification from OpenSSL. (schwarze@)

  ~ man/ERR_print_errors.3                

  > Add Copyright and license.
  > Merge documentation of ERR_print_errors_cb(3) from OpenSSL. (schwarze@)

  ~ man/ERR_clear_error.3                 

  > Add Copyright and license.
  > Garbage collect the empty RETURN VALUES section. (schwarze@)

  ~ man/ERR_GET_LIB.3                     ~ man/ERR_get_error.3
  ~ man/ERR_load_crypto_strings.3         ~ man/ERR_load_strings.3
  ~ man/ERR_remove_state.3                ~ man/ERR_set_mark.3

  > Copyright and license (schwarze@)

  ~ man/EVP_BytesToKey.3                  

  > Add Copyright and license.
  > Pull in some more information about RETURN VALUES from OpenSSL. (schwarze@)

  ~ man/PEM_read_bio_PrivateKey.3         ~ man/PEM_write_bio_PKCS7_stream.3
  ~ man/PKCS12_create.3                   ~ man/PKCS12_parse.3
  ~ man/PKCS7_decrypt.3                   ~ man/PKCS7_encrypt.3
  ~ man/PKCS7_sign.3                      ~ man/PKCS7_sign_add_signer.3
  ~ man/PKCS7_verify.3                    

  > various cleanup; leaving dangling PKCS7* Xr for now... (jmc@)

  ~ man/RAND_add.3                        ~ man/RAND_load_file.3
  ~ man/RC4.3                             ~ man/RIPEMD160.3

  > various minor cleanup; (jmc@)

  ~ man/EVP_DigestInit.3                  

  > Add Copyright and license.
  > In the SYNOPSIS, show prototypes rather than #defines. (schwarze@)

  ~ man/EVP_DigestSignInit.3              

  > Add Copyright and license.
  > Correct a parameter type for EVP_DigestSignUpdate(3), from OpenSSL.
  > (schwarze@)

  ~ man/EVP_DigestVerifyInit.3            

  > Add Copyright and license, and some fixes from OpenSSL:
  > Correct a parameter type for EVP_DigestVerifyUpdate(3).
  > Improve the description of RETURN VALUES for EVP_DigestVerifyFinal(3).
  > (schwarze@)

  ~ man/Makefile                          + man/EVP_EncodeInit.3

  > Import EVP_EncodeInit(3) manual from OpenSSL,
  > without those functions we don't have. (schwarze@)

  ~ man/EVP_EncodeInit.3                  

  > tweak previous; (jmc@)

  ~ man/EVP_EncryptInit.3                 

  > Add Copyright and license.
  > Merge from OpenSSL:
  > Document EVP_CIPHER_CTX_new(3), EVP_CIPHER_CTX_free(3), EVP_chacha20(3).
  > Drop duplicate .Nm EVP_idea_cbc.
  > Add some missing EVP_aes_*() function names in the NAME section.
  > In the SYNOPSIS, list prototypes, not #defines.
  > Some typo fixes, some additional information, some wording improvements.
  > In the CIPHER LISTING, drop the useless "void" arguments.
  > Document GCM and CCM.
  > Drop some prehistoric EXAMPLES that OpenSSL deleted as well.
  > While here, mention that EVP_CIPHER_CTX_free(3) accepts NULL.
  > Also move some text from RETURN VALUES to DESCRIPTION. (schwarze@)

  ~ man/EVP_OpenInit.3                    ~ man/EVP_SealInit.3
  ~ man/EVP_SignInit.3                    ~ man/EVP_VerifyInit.3

  > Copyright and license (schwarze@)

  ~ man/EVP_PKEY_CTX_new.3                

  > Add Copyright and license.
  > Mention that EVP_PKEY_CTX_free(3) accepts NULL.
  > Delete the useless statement that a void functions returns no value.
  > (schwarze@)

  ~ man/EVP_PKEY_cmp.3                    

  > Add Copyright and license.
  > Merge one clarifying sentence from OpenSSL. (schwarze@)

  ~ man/EVP_PKEY_encrypt.3                ~ man/EVP_PKEY_keygen.3

  > Add Copyright and license.
  > Merge improvements to EXAMPLES from OpenSSL. (schwarze@)

  ~ man/EVP_PKEY_new.3                    

  > EVP_PKEY_new.3
  > Add Copyright and license.
  > Mention that EVP_PKEY_free(3) accepts NULL.
  > Delete the useless statement that a void functions returns no value.
  > Merge HISTORY from OpenSSL. (schwarze@)

  ~ man/EVP_PKEY_set1_RSA.3               

  > Add Copyright and license.
  > Merge documentation of EVP_PKEY_id(3) and EVP_PKEY_base_id(3) from OpenSSL.
  > (schwarze@)

  ~ man/EVP_PKEY_sign.3                   

  > Add Copyright and license.
  > Merge some additional text and improvements to EXAMPLES from OpenSSL.
  > (schwarze@)

  ~ man/EVP_PKEY_CTX_ctrl.3               ~ man/EVP_PKEY_decrypt.3
  ~ man/EVP_PKEY_derive.3                 
  ~ man/EVP_PKEY_get_default_digest_nid.3
  ~ man/EVP_PKEY_print_private.3          ~ man/EVP_PKEY_verify.3
  ~ man/EVP_PKEY_verify_recover.3         

  > Copyright and license (schwarze@)

  ~ man/HMAC.3                            

  > Add Copyright and license.
  > Fix a typo in the NAME section.
  > Document HMAC_CTX_copy(3), HMAC_CTX_set_flags(3), HMAC_size(3), from
  > OpenSSL.
  > Drop the uselesss statement that void functions do not return values.
  > (schwarze@)

  ~ man/MD5.3                             

  > Copyright and license (schwarze@)

  ~ man/OBJ_nid2obj.3                     

  > Add Copyright and license.
  > Document i2t_ASN1_OBJECT(3), from OpenSSL.
  > Merge more info about what NIDs are from OpenSSL. (schwarze@)

  ~ man/Makefile                          + man/OCSP_REQUEST_new.3
  + man/OCSP_cert_to_id.3                 + man/OCSP_request_add1_nonce.3
  + man/OCSP_resp_find_status.3           + man/OCSP_response_status.3
  + man/OCSP_sendreq_new.3                

  > Import OCSP documentation from OpenSSL, leaving out some stuff
  > that we don't have, fixing some bugs and tweaking some parts for
  > readability.
  > P.S.
  > Why did some people write a HTTP client implementation and then
  > decide that the best place to publish it might be a crypto(3)
  > library?  Oh never mind, to go easy on my sanity, i should probably
  > stop asking such questions and just document what i find. (schwarze@)

libfuse

  ~ fuse_opt.c                            

  > Empty strings are invalid arguments.
  > Fix a regression introduced when merging the two options parsers.
  > ok stsp@ (mpi@)

libpcap

  ~ gencode.c                             

  > Extend the DLT_OPENFLOW header to include the switch datapath id.
  > OK rzalamena@ (reyk@)

libssl

  ~ man/Makefile                          + man/DTLSv1_listen.3

  > Import the DTLSv1_listen(3) manual from OpenSSL,
  > excluding interface changes that don't apply to LibreSSL,
  > except that i left the confusing discussion of RETURN VALUES
  > completely unchanged, to warn users that this is a mess:
  > OpenSSL first published this interface, then later changed
  > its syntax and semantics in multiple ways. (schwarze@)

== regress =========================================================== 06/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/regress

lib

  ~ libfuse/fuse-opt-add-arg.c            ~ libfuse/fuse-opt-add-opt-escaped.c
  ~ libfuse/fuse-opt-add-opt.c            ~ libfuse/fuse-opt-insert-arg.c
  ~ libfuse/fuse-opt-match.c              

  > Return different error number to know which test is failing. (mpi@)

sbin

  + pfctl/pfail57.in                      + pfctl/pfail57.ok

  > Test that af-to cannot be used together with route-to, reply-to, dup-to.
  > (bluhm@)

sys

  ~ net/rtable/srp_compat.h               

  > SRPL_FIRST() and SRPL_FOLLOW(). (mpi@)

  + netinet6/frag6/frag6_mf0atomic.py     + netinet6/frag6/frag6_mf0long.py
  + netinet6/frag6/frag6_mf0middle.py     + netinet6/frag6/frag6_mf0short.py
  + netinet6/frag6/frag6_mf1end.py        

  > Test that IPv6 framents with invalid length or more-fragment bit
  > drop the whole fragment cache. (bluhm@)

  ~ net/pf_state/Makefile                 ~ net/pf_state/challenge_ack.py

  > Print better error message if test fails. (bluhm@)

usr.bin

  ~ ssh/test-exec.sh                      

  > Fix typo in trace message; from portable. (dtucker@)

  ~ ssh/integrity.sh                      ~ ssh/sshd-log-wrapper.sh
  ~ ssh/test-exec.sh                      

  > Reverse args to sshd-log-wrapper.  Matches change in portable, where it
  > allows sshd do be optionally run under Valgrind. (dtucker@)

  ~ ssh/putty-ciphers.sh                  ~ ssh/putty-kex.sh
  ~ ssh/putty-transfer.sh                 ~ ssh/test-exec.sh

  > Allow PuTTY interop tests to run unattended.  bz#2639, patch from
  > cjwatson at debian.org. (dtucker@)

== sbin ============================================================== 07/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sbin

bioctl

  ~ bioctl.8                              

  > Document bioctl -d as a "detach" rather than a "delete" operation.
  > ok tb@ danj@ deraadt@ (stsp@)

dhclient

  ~ dhclient.c                            

  > Nuke the DHO_ROUTERS and DHO_STATIC_ROUTES options from the effective
  > lease when DHO_CLASSLESS_[MS_]STATIC_ROUTES are present. RFC 3442 says
  > the client must ignore the former if the latter is present.
  > The information was already ignored but was still written to the
  > 'effective' section of the pseudo-lease file created by the -L
  > option. This incorrectly implied that these options were 'effective'.
  > Problem noted by Ed Fochler. Thanks! (krw@)

ldattach

  ~ ldattach.c                            

  > Remove leftovers of line disciplines that are no more.
  > ok mikeb@ (mpi@)

pfctl

  ~ parse.y                               

  > Explicitly forbid to combine af-to with route-to in pfctl.  The
  > parser cannot handle that correctly and is is unclear wether the
  > kernel code would work.  Remove the feature until someone needs it
  > and properly implements and tests it.
  > OK mike@ sashan@ mpi@ (bluhm@)

== share ============================================================= 08/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share

man

  ~ man4/man4.loongson/htb.4              

  > Document a limitation on interrupt routing. (visa@)

  ~ man9/srpl_rc_init.9                   

  > Rename SRPL_ENTER() to SRPL_FIRST() and SRPL_NEXT() to SRPL_FOLLOW().
  > This allows us to introduce SRPL_NEXT() that can be used to start
  > iterating on an arbitrary member of an srp list, hence without calling
  > SRPL_ENTER().
  > ok dlg@, jmatthew@ (mpi@)

  ~ man9/Makefile                         ~ man9/srpl_rc_init.9
  + man9/SRPL_EMPTY_LOCKED.9              

  > Move LOCKED macros to teir own manual.
  > This will allow us to better document them and add examples.
  > Disccussed with dlg@ (mpi@)

  ~ man9/srpl_rc_init.9                   ~ man9/SRPL_EMPTY_LOCKED.9

  > tweak the pages based on feedback from jmc@
  > they could do with some examples too. (dlg@)

  ~ man9/SRPL_EMPTY_LOCKED.9              ~ man9/srpl_rc_init.9

  > jmc@ pointed out i forgot to fix the missing SRPL_LEAVE in the synopsis.
  > sprinkle some .Ft on the things that act like functions while here. (dlg@)

  ~ man4/umb.4                            

  > Add Ericsson N5321gw
  > OK jmc@ (feinerer@)

  ~ man8/release.8                        

  > Clean up some abuse of the .Va macro to achieve a visual effect: omit it or
  > replace it with more appropriate macros where possible or necessary.
  > input & ok schwarze (tb@)

  ~ man4/umb.4                            

  > add em7455; from brian vyhmeister (jmc@)

  ~ man4/umb.4                            

  > H531gw also works now (otto@)

  ~ man4/tty.4                            

  > Remove leftovers of line disciplines that are no more.
  > ok mikeb@ (mpi@)

  ~ man4/bio.4                            

  > belatedly add an entry for mfii(4); (jmc@)

  ~ man8/release.8                        

  > Tighten some sentences.
  > help & ok tj (tb@)

  ~ man8/release.8                        

  > Remove some more verbiage.
  > looks alright to tj (tb@)

zoneinfo

  ~ datfiles/africa                       ~ datfiles/antarctica
  ~ datfiles/asia                         ~ datfiles/australasia
  ~ datfiles/europe                       ~ datfiles/iso3166.tab
  ~ datfiles/zone.tab                     ~ datfiles/zone1970.tab

  > Update to tzdata2016j from ftp.iana.org (millert@)

  - datfiles/solar87                      - datfiles/solar88
  - datfiles/solar89                      ~ Makefile

  > Remove the solar files; they were removed from upstream in 2013.
  > OK deraadt@ (millert@)

== sys =============================================================== 09/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys

arch/armv7/sunxi

  ~ sxiccmu.c                             

  > Add support for "allwinner,sun9i-a80-usb-mod-clk" and
  > "allwinner,sun9i-a80-usb-phy-clk" compatile clocks.
  > Enable parent clock of clock gates. (kettenis@)

  ~ sxiehci.c                             

  > Add support for the sun9i USB PHYs and attach to the sun9i EHCI
  > controllers.
  > Doesn't work yet, but it is a step in the right direction. (kettenis@)

  ~ sximmc.c                              

  > Match on "allwinner,sun7i-a20-mmc".  In linux 4.9 the device trees for
  > a31/a20/a23/a33/h3 mmc devices set this compatible string to denote the
  > presence of sample clocks and no longer set "allwinner,sun5i-a13-mmc".
  > ok kettenis@ (jsg@)

arch/hppa/stand/boot

  ~ Makefile                              

  > ashldi3 is now needed (deraadt@)

arch/loongson/include

  ~ pmon.h                                

  > Fix CPU info struct. (visa@)

arch/mips64/mips64

  ~ pmap.c                                

  > Enabling Loongson 3A bits turned on a code path that uses a MIPS64r2
  > register on Loongson 2. This causes a boot failure on LS2 because
  > the CPU does not implement the register. Disable the code on LS2
  > similarly to mips64 pte.h.
  > Yeelong boot hang reported and fix tested by matthieu@ (visa@)

arch/octeon/dev

  ~ octeon_intr.c                         

  > Drop pointless type casts. (visa@)

  ~ cn30xxgmx.c                           

  > Remove unnecessary function cn30xxgmx_submatch and call config_found
  > instead of config_found_sm.
  > OK visa@ (martijn@)

arch/octeon/octeon

  ~ machdep.c                             

  > Start process_bootargs at 0 instead of 1.
  > When using endbootargs in U-Boot arguments start at position 0.
  > OK visa@ (martijn@)

  ~ autoconf.c                            

  > Allow rootdev to be specified without /dev/ prefix. The full path isn't
  > needed down the road anyway. Both forms are supported.
  > e.g. rootdev=/dev/sd0 and rootdev=sd0
  > OK visa@ (martijn@)

dev/pci

  ~ if_ix.c                               

  > Turn on the PHY power during attach
  > After a cold boot the PHY power might be disabled by another OS:
  > https://svnweb.freebsd.org/base?view=revision&revision=295093 (mikeb@)

  ~ if_ix.c                               

  > Correct the test for requiring a 64 bit mem bar.
  > ok mikeb@ who tested on 82599, x540 and x550. (jsg@)

  ~ ixgbe.c                               

  > Correctly set the default value for the FCRTH
  > X540 datasheet specifies that Flow Control Receive Threshold High
  > should be set to the Rx Buffer Size minus the delay value which is
  > different for different modes of operation, however the minimum is
  > 0x6000 (24576).
  > Mirrors the bc1fc64fd2d9093496e5b04c6d94d26bfa629c9c commit to the
  > Linux source code, but picked up from the 280182 commit to FreeBSD.
  > (mikeb@)

  ~ if_ix.c                               

  > Factor out RSS initialization into a separate function
  > No functional change. (mikeb@)

  ~ ixgbe.c                               

  > Fixup a PCIe transaction completion timeout issue
  > Mirrors the change 71bde60191a9fa44d33b582c5e3713ffe99b0fef in Linux;
  > taken as a part of the 280182 commit to FreeBSD. (mikeb@)

  ~ if_ix.c                               ~ if_ix.h

  > Add ability to change media type
  > Tested with a X540 interconnected with a X550 via a CAT6 twisted
  > pair cable, but is expected to work on multi-speed fiber modules
  > as well to select between 10GbaseLR and 1000baseLX or 10GbaseSR
  > and 1000baseSX, etc.
  > This is largely required because X550 doesn't provide support for
  > auto-negotiation and requires manual configuration.
  > Obtained from FreeBSD. (mikeb@)

  ~ if_ix.c                               

  > Fixup active media reporting for multi-speed fiber modules
  > A gigabit fiber connection was mistakenly reported as 1000baseT
  > when a mutli-speed 10GbaseSR/1000baseSX fiber optics module was
  > set to the gigabit mode.
  > Reported by and fix tested by Hrvoje Popovski <hrvoje at srce ! hr>,
  > HUGE thanks! (mikeb@)

  ~ files.pci                             ~ if_ix.c
  ~ ixgbe.c                               

  > Enable support for the X550 family of 10 Gigabit controllers
  > Code was obtained from FreeBSD.  Make release testing by tb@ on i386
  > and mikeb@ on amd64 and sparc64.  X552 SFP tested by Hrvoje Popovski,
  > HUGE thanks!  X550T tested by mikeb@ on amd64 and sparc64.
  > ok kettenis, deraadt (mikeb@)

  ~ pcidevs                               

  > Fixup product names for Intel X550 family of controllers
  > X550 moniker is used only for 10GbaseT chips, while what's known
  > internally as X550EM_X seems to be marketed under the X557 name.
  > The X552 series is an upcoming X550EM_A chip. However the Xeon-D
  > embedded model is called X552/X557. (mikeb@)

  ~ pcidevs.h                             ~ pcidevs_data.h

  > sync (mikeb@)

  ~ drm/drm.h                             ~ drm/drm_drv.c

  > Add a new DRM_IOCTL_GET_PCIINFO ioctl to have a non driver specific way
  > to get pci device ids from a drm fd as an ordinary user.
  > This will be used to provide non-sysfs implementations of functions in
  > libdrm.  These functions are required for Mesa >= 13.
  > The ioctl number used is the same as the DRM_IOCTL_ADD_MAP ioctl which
  > was removed when we removed DRI1 support.  This was chosen to not
  > collide with new ioctls from linux.
  > ok kettenis@ ok mpi@ on an earlier version (jsg@)

dev/pv

  ~ hyperv.c                              

  > Use CPUID flags to determine working components
  > This adds a few checks to make sure we're not trying to use features
  > that are not advertised with CPUID feature flags and avoid attaching
  > when Xen viridium emulation is turned on.
  > Prompted by a report from Kirill Miazine <km at krot ! org>, thanks!
  > Discussed with reyk@. (mikeb@)

  ~ hyperv.c                              ~ hypervvar.h
  ~ if_hvn.c                              

  > Disable debugging output (mikeb@)

  ~ hyperv.c                              

  > M_*WAIT* flags cannot be treated as boolean values (mikeb@)

  ~ hyperv.c                              ~ hypervvar.h

  > Move as much code out of a startup hook as possible
  > To be able to perform asynchronous operations early we need to
  > have a robust polling mechanism with flexible condition check
  > semantics.  A new hv_wait interface provides such facilities.
  > Right now hvn(4) submits NVS commands and sleeps waiting for a
  > interrupt to fire and run the completion code and it will take
  > some effort to convert this code to be able to poll instead of
  > tsleep.  But VMBus attachment, channel scanning, etc can done
  > at an earlier stage.  Lets see if this sticks. (mikeb@)

dev/usb

  ~ if_umb.c                              ~ if_umb.h
  ~ mbim.h                                

  > Some MBIM devices need a FCC Authentication before they're willing to
  > turn on the radio. This is done by encapsulating QMI requests inside
  > a MBIM message.
  > Based on prio work by sthen@, tested by Bryan Vyhmeister.
  > ok sthen@ (gerhard@)

  ~ if_umb.c                              ~ if_umb.h
  ~ mbim.h                                

  > The NCM encoding allows to aggregate multiple segments in one single
  > transfer. Using wMaxSegmentSize for bulk-in could break the rx-path
  > because xfer length can be smaller than the messages sent by the device.
  > And using some constant value for rx/tx size is also a bad idea, because
  > we might be sending messages to the device that are too big for it to
  > handle them. Therefore use the NCM GET_NTB_PARAMETERS request to query
  > the device's configuration.
  > Found, tested, and ok'ed by otto@ (gerhard@)

kern

  ~ subr_pool.c                           

  > let pool page allocators advertise what sizes they can provide.
  > to keep things concise i let the multi page allocators provide
  > multiple sizes of pages, but this feature was implicit inside
  > pool_init and only usable if the caller of pool_init did not specify
  > a page allocator.
  > callers of pool_init can now suplly a page allocator that provides
  > multiple page sizes. pool_init will try to fit 8 items onto a page
  > still, but will scale its page size down until it fits into what
  > the allocator provides.
  > supported page sizes are specified as a bit field in the pa_pagesz
  > member of a pool_allocator. setting the low bit in that word indicates
  > that the pages can be aligned to their size. (dlg@)

  ~ sys_socket.c                          ~ uipc_socket.c
  ~ uipc_syscalls.c                       

  > Enforce that pr_usrreq functions are called at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@, claudio@ (mpi@)

  ~ sys_socket.c                          

  > Kill rtioctl() stub, returning EOPNOTSUPP since tree import.
  > ok jsg@ (mpi@)

  ~ uipc_socket.c                         

  > Enforce that pr_ctloutput is called at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@ (mpi@)

  ~ uipc_domain.c                         

  > Enforce that pr_ctlinput, pr_slowtimo and pr_fasttimo are called
  > at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@ (mpi@)

  ~ sys_socket.c                          

  > Enforce that ifioctl() is called at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@ (mpi@)

  ~ uipc_socket.c                         

  > Some socket splicing tests on loopback hang with large mbufs and
  > reduced buffer size.  If the send buffer size is less than the size
  > of a single mbuf, it will never fit.  So if the send buffer is
  > empty, split the large mbuf and move only a part.
  > OK claudio@ (bluhm@)

lib/libsa

  ~ ufs.c                                 ~ ufs2.c

  > Fix signedness warnings with careful casts and replace a re-defined
  > variable.
  > OK krw@ (reyk@)

  ~ ufs2.c                                ~ memcmp.c

  > Add missing OpenBSD CVS tags (reyk@)

net

  ~ rtable.c                              

  > Rename SRPL_ENTER() to SRPL_FIRST() and SRPL_NEXT() to SRPL_FOLLOW().
  > This allows us to introduce SRPL_NEXT() that can be used to start
  > iterating on an arbitrary member of an srp list, hence without calling
  > SRPL_ENTER().
  > ok dlg@, jmatthew@ (mpi@)

  ~ rtable.c                              

  > Make rtable_iterate(9) mpsafe by using the new SRPL_NEXT(9).
  > ok dlg@, jmatthew@ (mpi@)

  ~ if_switch.c                           ~ if_switch.h
  ~ ofp.h                                 ~ switchofp.c

  > Extend the DLT_OPENFLOW header to include the switch datapath id.
  > OK rzalamena@ (reyk@)

  ~ if_bridge.c                           

  > bridge(4) does not distinguish between routing/forwarding ports, so
  > make "addlocal" an alias to "add" on bridge.  addlocal is handled
  > differently on switch(4).
  > OK yasuoka@ (reyk@)

  ~ switchofp.c                           

  > Include the OFP header of the message that caused the error on error
  > messages.
  > ok reyk@ (rzalamena@)

  ~ if.c                                  ~ raw_usrreq.c
  ~ rtsock.c                              

  > Enforce that pr_usrreq functions are called at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@, claudio@ (mpi@)

  ~ bpf.c                                 

  > Rename bpf_reset_d() to match bpf_{attach,reset}d(). (mpi@)

  ~ bpf.c                                 

  > Make sure bpf_wakeup() is called at most once when matching conditions
  > are fulfilled in bpf_catchpacket(). (mpi@)

  ~ route.c                               ~ route.h

  > Kill rtioctl() stub, returning EOPNOTSUPP since tree import.
  > ok jsg@ (mpi@)

  ~ pf.c                                  

  > In pf_route() and pf_route6() the !r->rt case was only used by
  > af-to.  pf_route6() called ip6_output() to do the work while
  > pf_route() had some custom implementation for that.  It is simpler
  > to call ip_output() or ip6_output() from pf_test() directly.
  > OK procter@ sashan@ (bluhm@)

  ~ pf_norm.c                             

  > Follow RFC 5722 more strictly when handling overlapping fragments
  > in pf.  Drop the whole fragment state if IPv6 fragments appear which
  > have invalid length or fragment-offset or more-fragment-bit.  In
  > IPv4 they are considered invalid and just dropped like before.
  > Found by Antonios Atlasis; OK sashan@ sthen@ (bluhm@)

  ~ switchofp.c                           

  > Simplify pad calculation for flow match on swofp_put_flow().
  > ok reyk@ (rzalamena@)

  ~ ofp.h                                 

  > Fix OFP spelling for version bitmap define in ofp header and tcpdump, also
  > change the truncation message in hello with the standard one.
  > ok reyk@ (rzalamena@)

  ~ if_pflog.c                            ~ if_pfsync.c
  ~ pf.c                                  ~ pf_norm.c
  ~ pf_osfp.c                             ~ pfvar.h
  ~ pfvar_priv.h                          

  > Fold union pf_headers buffer into struct pf_pdesc (enabled by
  > pfvar_priv.h).
  > Prevent pf_socket_lookup() reading uninitialised header buffers on
  > fragments.
  > OK blum@ sashan@ (procter@)

  ~ if_switch.c                           

  > Fix panic on detach hook when interfaces get destroyed.
  > ok reyk@ (rzalamena@)

  ~ pf.c                                  

  > Explicitly forbid to combine af-to with route-to in pfctl.  The
  > parser cannot handle that correctly and is is unclear wether the
  > kernel code would work.  Remove the feature until someone needs it
  > and properly implements and tests it.
  > OK mike@ sashan@ mpi@ (bluhm@)

netinet

  ~ ip_carp.c                             

  > Rename SRPL_ENTER() to SRPL_FIRST() and SRPL_NEXT() to SRPL_FOLLOW().
  > This allows us to introduce SRPL_NEXT() that can be used to start
  > iterating on an arbitrary member of an srp list, hence without calling
  > SRPL_ENTER().
  > ok dlg@, jmatthew@ (mpi@)

  ~ if_ether.c                            

  > Make rtable_iterate(9) mpsafe by using the new SRPL_NEXT(9).
  > ok dlg@, jmatthew@ (mpi@)

  ~ ip_divert.c                           ~ raw_ip.c
  ~ tcp_usrreq.c                          ~ udp_usrreq.c

  > Enforce that pr_usrreq functions are called at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@, claudio@ (mpi@)

  ~ ip_input.c                            

  > Keep checks for local delivery close to in_ouraddr().
  > ok claudio@ (mpi@)

netinet6

  ~ ip6_divert.c                          ~ raw_ip6.c

  > Enforce that pr_usrreq functions are called at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@, claudio@ (mpi@)

  ~ nd6_rtr.c                             

  > Assert that in6_ifadd() is always called at IPL_SOFTNET.
  > While here us __func__ in debug strings to reduce noise when grepping.
  > (mpi@)

  ~ nd6.h                                 ~ nd6_rtr.c

  > Assert that prelist_update() is always called at IPL_SOFTNET.
  > While here use __func__ in debug strings to reduce noise when grepping.
  > (mpi@)

  ~ nd6_rtr.c                             

  > Assert that defrtrlist_update() is always called at IPL_SOFTNET. (mpi@)

nfs

  ~ nfs_boot.c                            

  > Enforce that ifioctl() is called at IPL_SOFTNET.
  > This will allow us to keep locking simple as soon as we trade
  > splsoftnet() for a rwlock.
  > ok bluhm@ (mpi@)

sys

  ~ srp.h                                 

  > Rename SRPL_ENTER() to SRPL_FIRST() and SRPL_NEXT() to SRPL_FOLLOW().
  > This allows us to introduce SRPL_NEXT() that can be used to start
  > iterating on an arbitrary member of an srp list, hence without calling
  > SRPL_ENTER().
  > ok dlg@, jmatthew@ (mpi@)

  ~ pool.h                                

  > let pool page allocators advertise what sizes they can provide.
  > to keep things concise i let the multi page allocators provide
  > multiple sizes of pages, but this feature was implicit inside
  > pool_init and only usable if the caller of pool_init did not specify
  > a page allocator.
  > callers of pool_init can now suplly a page allocator that provides
  > multiple page sizes. pool_init will try to fit 8 items onto a page
  > still, but will scale its page size down until it fits into what
  > the allocator provides.
  > supported page sizes are specified as a bit field in the pa_pagesz
  > member of a pool_allocator. setting the low bit in that word indicates
  > that the pages can be aligned to their size. (dlg@)

  ~ exec.h                                

  > Add MID for arm64.
  > ok deraadt@ (patrick@)

ufs/ffs

  ~ fs.h                                  

  > Fix signedness warnings with careful casts and replace a re-defined
  > variable.
  > (Missed this chunk as part of previous commit to libsa/ufs.c)
  > OK krw@ (reyk@)

== usr.bin =========================================================== 10/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin

cal

  ~ cal.1                                 

  > remove an apostrophe on the advice of the oed:
  > "Do not use the apostrophe when creating plurals." (jmc@)

  ~ cal.1                                 

  > uppercase for "the Reformation"; (jmc@)

ssh

  ~ servconf.c                            ~ sshd_config.5

  > allow ClientAlive{Interval,CountMax} in Match; ok dtucker, djm (markus@)

  ~ sshbuf.c                              ~ sshbuf.h

  > split allocation out of sshbuf_reserve() into a separate
  > sshbuf_allocate() function; ok markus@ (djm@)

  ~ authfile.c                            

  > use sshbuf_allocate() to pre-allocate the buffer used for loading
  > keys. This avoids implicit realloc inside the buffer code, which
  > might theoretically leave fragments of the key on the heap. This
  > doesn't appear to happen in practice for normal sized keys, but
  > was observed for novelty oversize ones.
  > Pointed out by Jann Horn of Project Zero; ok markus@ (djm@)

tmux

  ~ key-string.c                          

  > Error on invalid modifier keys. (nicm@)

  ~ key-bindings.c                        ~ server-client.c
  ~ tmux.h                                

  > For mouse keys, use the mouse pane as the default current pane. (nicm@)

  ~ screen.c                              ~ tmux.1
  ~ tmux.h                                ~ window-copy.c

  > Make the selection able to exist independent of the cursor position, so
  > that it is not affected by scrolling. If MouseDragEnd1Pane is bound to
  > the new "stop-selection" command:
  > bind -Tcopy-mode MouseDragEnd1Pane stop-selection
  > A selection made with the mouse will stay as it is after button 1 is
  > released. (It also works bound to a key.)
  > From Artem Fokin. (nicm@)

  ~ key-bindings.c                        ~ server-client.c

  > Fix so that we work out the right pane from mouse events - we were doing
  > so too early, before the mouse event was necessarily valid, so could end
  > up using the pane from the previous mouse event, or the active pane.
  > It is important that we use the right pane now that different panes can
  > have different key tables (for copy mode).
  > Fixes problem reported by Greg Hurrell. (nicm@)

  ~ server-client.c                       

  > If in the middle of a drag, don't use an invalid key, just use
  > KEYC_MOUSE as a placeholder. Reported by Artem Fokin. (nicm@)

  ~ server-client.c                       ~ tmux.h

  > The mouse valid flag needs to be correct before we fire the dragging
  > callback, so move the callback outside of server_client_check_mouse and
  > use a new special key code to indicate it. (nicm@)

== usr.sbin ========================================================== 11/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin

lpr

  ~ lpd/printjob.c                        

  > Fix printf of NULL for the FILTERERR case when the tempfile is empty
  > or missing.  From Sebastien Marie. (millert@)

makefs

  ~ cd9660.c                              

  > Avoid NULL pointer dereference in cd9660.
  > from christos@NetBSD via mestre
  > Original Log Message:
  > PR/51652: Sevan Janiyan: makefs dies due to segmentation fault
  > Don't dereference NULL when running out of nodes during rename. (natano@)

pstat

  ~ pstat.8                               ~ pstat.c

  > Remove leftovers of line disciplines that are no more.
  > ok mikeb@ (mpi@)

relayd

  ~ config.c                              ~ proc.c
  ~ relayd.c                              ~ relayd.h

  > The new fork+exec mode used too many fds in the parent process on
  > startup, for a short time, so we needed a rlimit hack in relayd.c.
  > Sync the fix from httpd: rzalamena@ has fixed proc.c and I added the
  > proc_flush_imsg() mechanism that makes sure that each fd is
  > immediately closed after forwarding it to a child process instead of
  > queueing it up.
  > OK rzalamena@ jca@ benno@ (reyk@)

smtpd

  ~ bounce.c                              ~ filter.c
  ~ ioev.c                                ~ ioev.h
  ~ mda.c                                 ~ mta_session.c
  ~ smtp_session.c                        

  > add dedicated functions to set fd and callback on a struct io.
  > simplify io_init() prototype.
  > ok sunil@ gilles@ (eric@)

  ~ bounce.c                              ~ filter.c
  ~ mda.c                                 ~ mta_session.c
  ~ smtp_session.c                        

  > replace calls to iobuf_*() functions with the corresponding io_*()
  > wrappers.
  > ok sunil@ gilles@ (eric@)

  ~ bounce.c                              ~ filter.c
  ~ ioev.c                                ~ mta_session.c
  ~ smtp_session.c                        

  > Normalize the io input buffer internally when reinstalling the io event, so
  > the caller doesn't have to bother with this.
  > ok gilles@ sunil@ (eric@)

  ~ ioev.c                                ~ mta_session.c
  ~ smtp_session.c                        

  > reset the io event when data is queued.
  > remove all calls to io_reload() which are now unnecessary.
  > ok gilles@ sunil@ (eric@)

  ~ ioev.c                                ~ ioev.h
  ~ mda.c                                 ~ mta_session.c
  ~ smtp_session.c                        

  > add an io_error() accessor to avoid dereferencing the io struct directly.
  > ok gilles@ (eric@)

  ~ ioev.c                                ~ ioev.h
  ~ mta_session.c                         ~ smtp_session.c

  > add an io_ssl() accessor
  > ok gilles@ (eric@)

  ~ ioev.c                                ~ ioev.h
  ~ mta_session.c                         ~ smtp_session.c

  > add an io_fileno() accessor
  > ok gilles@ (eric@)

  ~ ioev.c                                ~ ioev.h
  ~ smtp_session.c                        

  > add an io_paused() function.
  > ok gilles@ (eric@)

  ~ parse.y                               ~ smtpd.h

  > assign an id to each rule in the ruleset, first step towards an MTA layer
  > and scheduler simplification
  > ok eric@ (gilles@)

  ~ mta_session.c                         

  > use a specific event to defer the mta connection instead of abusing
  > the io internal event.
  > ok gilles@ (eric@)

  ~ ioev.c                                

  > normalize iobuf before reading into it.
  > fix regression introduced in recent cleanup
  > ok gilles@ (eric@)

switchctl

  ~ ofpclient.c                           ~ parser.c
  ~ parser.h                              ~ switchctl.c

  > Add simple client to add flows from switchctl.  Not finished yet, but
  > it is better for rzalamena and me to work on it in the tree.
  > OK rzalamena@ (reyk@)

switchd

  ~ ofp13.c                               

  > Parse flow-status instructions in multipart replies, so we can see what
  > instructions are used by the flow. (rzalamena@)

  ~ ofp13.c                               

  > Implement better table features validation. With this we get free switchctl
  > display of table features.
  > ok reyk@ (rzalamena@)

  ~ ofp10.c                               ~ ofp13.c

  > Fix jumbo regress test for ofp10.c and use htonl() with
  > OFP_PKTOUT_NO_BUFFER
  > for consistency.
  > ok reyk@ (rzalamena@)

  ~ ofp13.c                               

  > Add truncation validation for packet-out and reuse the action validation
  > function instead of manually rolling the code again.
  > ok reyk@ (rzalamena@)

  ~ ofp13.c                               

  > Do more strict checks of OXM by looking at mask restrictions and add
  > missing OXM type (IP_PROTO).
  > ok reyk@ (rzalamena@)

  ~ ofp.c                                 ~ ofp10.c
  ~ ofp13.c                               ~ ofp_common.c
  ~ switchd.h                             

  > Implement support for version negotiation using hello messages. This
  > also prevents connections from switching the version in the middle of
  > the operation.
  > tweak from and ok reyk@ (rzalamena@)

  ~ ofp10.c                               

  > Add "features request" support and reply validation.
  > ok reyk@ (rzalamena@)

syslogd

  ~ syslogd.c                             

  > Check return value of tls_config_set_protocols(3) and log if it fails
  > OK bluhm@ (mestre@)

syspatch

  ~ syspatch.sh                           

  > Tweak comment. Reverse cmp logic while here. (ajacoutot@)

  ~ syspatch.sh                           

  > Use the same basename for the rollback tarball as the original patch.sig.
  > (ajacoutot@)

  ~ syspatch.sh                           

  > Allow passing an explicit return code to sp_err() in case we don't want to
  > exit
  > right away.
  > Factorise some common stuff.
  > Be consistent in variables subtitution. (ajacoutot@)

  ~ syspatch.sh                           

  > Make sure /var/syspatch/$OSREV is not on a read-only mount-point when doing
  > a rollback. (ajacoutot@)

  ~ syspatch.sh                           

  > Check args. (ajacoutot@)

  ~ syspatch.sh                           

  > Explicitely set umask. (ajacoutot@)

  ~ syspatch.sh                           

  > Remove the backup kernel in rollback_patch() instead of the cleanup
  > function.
  > Consistent use of install(1). (ajacoutot@)

tcpdump

  ~ print-ofp.c                           

  > Extend the DLT_OPENFLOW header to include the switch datapath id.
  > OK rzalamena@ (reyk@)

  ~ print-ofp.c                           

  > Fix OFP spelling for version bitmap define in ofp header and tcpdump, also
  > change the truncation message in hello with the standard one.
  > ok reyk@ (rzalamena@)

  ~ print-ofp.c                           

  > Fix some bad copy paste bits and simplify the ethernet printing function.
  > ok reyk@ (rzalamena@)

vmctl

  ~ vmctl.c                               

  > Insert disabled VMs into vmd(8)'s queues and allow vmctl(8) to display
  > them.
  > Tested by Jon Bernard and reyk@.
  > OK reyk@, no objections mlarkin@.
  > Thanks (edd@)

  ~ vmctl.c                               

  > Add support for booting the kernel from the disk image.
  > This make the kernel/-k argument optional and, if not specified, tries
  > to find the /bsd kernel in the primary hd0a partition of the first
  > disk image itself.  It doesn't support hd0a:/etc/boot.conf yet, and it
  > is no BIOS or full boot loader, but it makes booting and handling of
  > VMs a bit easier - booting an external kernel is still supported.
  > The UFS file system code ufs.c is directly from libsa which is also
  > used by the real boot loader.  The code compiles with a few signedness
  > warning which will be fixed separately.
  > OK mlarkin@ (reyk@)

  ~ main.c                                ~ vmctl.8
  ~ vmctl.c                               ~ vmctl.h

  > Add the vmctl start -n option to specify add a network interface to
  > the specified virtual switch from the command line.
  > OK mlarkin@ (reyk@)

  ~ vmctl.8                               

  > -add -n to the main summary; (jmc@)

  ~ vmctl.8                               ~ vmctl.c

  > If -m/memory is not specified, use 512M by default.
  > Default value picked with mlarkin - not too small and not too large.
  > OK mlarkin@ (reyk@)

vmd

  ~ i8259.c                               

  > Remove some old code that isn't needed anymore. (mlarkin@)

  ~ parse.y                               ~ vmd.c
  ~ vmd.h                                 

  > Insert disabled VMs into vmd(8)'s queues and allow vmctl(8) to display
  > them.
  > Tested by Jon Bernard and reyk@.
  > OK reyk@, no objections mlarkin@.
  > Thanks (edd@)

  ~ vmd.c                                 

  > There is no need for res when there is already ret. (reyk@)

  ~ log.c                                 

  > Restore previous errno after log_warn*() to make sure that it never
  > alters it.
  > OK mlarkin@ (reyk@)

  ~ config.c                              ~ vmd.c

  > Fix error path of config_setvm() and its callers.  This unbreaks
  > loading of invalid kernel files.
  > Reported by mlarkin@
  > OK mlarkin@ (reyk@)

  ~ vmm.c                                 

  > Don't attempt to call vm_remove() with a NULL vm: some functions like
  > config_getvm() already removed the vm on failure!
  > Found by mlarkin@ (reyk@)

  ~ Makefile                              ~ config.c
  ~ loadfile.h                            ~ loadfile_elf.c
  ~ vmd.c                                 ~ vmd.h
  ~ vmm.c                                 + ufs.c
  + vmboot.c                              + vmboot.h

  > Add support for booting the kernel from the disk image.
  > This make the kernel/-k argument optional and, if not specified, tries
  > to find the /bsd kernel in the primary hd0a partition of the first
  > disk image itself.  It doesn't support hd0a:/etc/boot.conf yet, and it
  > is no BIOS or full boot loader, but it makes booting and handling of
  > VMs a bit easier - booting an external kernel is still supported.
  > The UFS file system code ufs.c is directly from libsa which is also
  > used by the real boot loader.  The code compiles with a few signedness
  > warning which will be fixed separately.
  > OK mlarkin@ (reyk@)

  ~ ufs.c                                 

  > Fix a few signedness warnings in our copy of libsa's ufs.c. (reyk@)

  ~ ufs.c                                 

  > Better cast for consistency (reyk@)

  ~ log.c                                 

  > Restore the errno in vlog() as well to have the same "safe errno"
  > effect in log_debug(), log_warn*() and all the other logging
  > functions. (reyk@)

  ~ ufs.c                                 

  > sync with libsa/ufs.c (reyk@)

  ~ vmboot.c                              

  > Do not call ufs_close() if ufs_open() failed, fixes potential double-free.
  > (reyk@)

  ~ vmm.c                                 

  > Remove start_client_vmd.
  > It was nothing more than a wrapper around fork(2).
  > OK edd@ and mlarkin@ (martijn@)

  ~ virtio.c                              

  > virtio-net: Partially implement device reset
  > Implement some bits of the device reset and don't do DMA if the DRIVER_OK
  > bit
  > is not set. This is enough to avoid vio(4) panicking on if down/up.
  > Tested by rzalamena@ and mikeb@
  > OK reyk@ (sf@)

  ~ vm.conf.5                             ~ vmd.c
  ~ vmd.h                                 

  > If -m/memory is not specified, use 512M by default.
  > Default value picked with mlarkin - not too small and not too large.
  > OK mlarkin@ (reyk@)

  ~ Makefile                              ~ loadfile.h
  ~ loadfile_elf.c                        ~ vmboot.c
  ~ vmboot.h                              ~ vmd.c
  ~ vmd.h                                 ~ vmm.c
  + disklabel.c                           

  > Implement basic support for boot.conf(8) on the disk image.
  > Like the real boot loader, load and parse hd0a:/etc/boot.conf from the
  > first disk and fall back to /bsd.  Not all boot loader options are
  > supported, but it at least does set device, set image, and boot -acds
  > (eg. for booting single-user).
  > For example, it can now boot install60.fs that includes a boot.conf
  > with "set image /6.0/amd64/bsd.rd":
  > vmctl start install -c -d install60.fs -d OpenBSD.img
  > This pseudo-bootloader is only needed without BIOS and could
  > potentially be replaced in the future.
  > OK mlarkin@ (reyk@)

===============================================================================
_______________________________________________
owc mailing list
[email protected]
http://www.squish.net/mailman/listinfo/owc

Reply via email to