OpenBSD src changes summary for 2017-04-23 to 2017-04-30 inclusive
==================================================================

bin/ed                                  bin/md5
bin/stty                                distrib/miniroot
distrib/notes                           distrib/sets
etc/mtree/4.4BSD.dist                   etc/netstart
gnu                                     gnu/usr.bin/clang
lib/libc                                lib/libcrypto
lib/libkeynote                          lib/libpcap
lib/libssl                              lib/libtls
libexec/ftpd                            libexec/login_radius
libexec/rpc.rusersd                     regress/lib
regress/sys                             regress/usr.bin
regress/usr.sbin                        sbin/iked
sbin/pfctl                              sbin/sysctl
share/man                               share/misc
share/mk                                sys/arch/alpha/alpha
sys/arch/alpha/dev                      sys/arch/alpha/tc
sys/arch/amd64/amd64                    sys/arch/amd64/conf
sys/arch/amd64/include                  sys/arch/arm/arm
sys/arch/arm/armv7                      sys/arch/arm/conf
sys/arch/arm/cortex                     sys/arch/arm/include
sys/arch/arm/mainbus                    sys/arch/arm/simplebus
sys/arch/arm64/arm64                    sys/arch/arm64/conf
sys/arch/arm64/dev                      sys/arch/arm64/include
sys/arch/armv7/armv7                    sys/arch/armv7/broadcom
sys/arch/armv7/dev                      sys/arch/armv7/exynos
sys/arch/armv7/imx                      sys/arch/armv7/include
sys/arch/armv7/omap                     sys/arch/hppa/hppa
sys/arch/i386/conf                      sys/arch/i386/i386
sys/arch/i386/include                   sys/arch/landisk/dev
sys/arch/landisk/landisk                sys/arch/loongson/dev
sys/arch/loongson/loongson              sys/arch/luna88k/dev
sys/arch/luna88k/luna88k                sys/arch/m88k/m88k
sys/arch/macppc/dev                     sys/arch/macppc/macppc
sys/arch/mips64/mips64                  sys/arch/octeon/conf
sys/arch/octeon/dev                     sys/arch/octeon/octeon
sys/arch/powerpc/ddb                    sys/arch/powerpc/powerpc
sys/arch/sgi/hpc                        sys/arch/sgi/sgi
sys/arch/sh/dev                         sys/arch/sh/sh
sys/arch/socppc/socppc                  sys/arch/sparc64/dev
sys/arch/sparc64/sparc64                sys/conf
sys/crypto                              sys/ddb
sys/dev                                 sys/dev/acpi
sys/dev/fdt                             sys/dev/ic
sys/dev/isa                             sys/dev/pci
sys/dev/usb                             sys/dev/wscons
sys/kern                                sys/net
sys/net80211                            sys/sys
sys/uvm                                 usr.bin/aucat
usr.bin/kdump                           usr.bin/lex
usr.bin/libtool                         usr.bin/mandoc
usr.bin/midiplay                        usr.bin/ssh
usr.bin/systat                          usr.bin/tmux
usr.bin/vi                              usr.sbin/config
usr.sbin/dhcpd                          usr.sbin/eeprom
usr.sbin/rebound                        usr.sbin/smtpd
usr.sbin/syslogd                        usr.sbin/syspatch
usr.sbin/tcpdump                        usr.sbin/vmd

== bin =============================================================== 01/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/bin

ed

  ~ glbl.c                                ~ io.c
  ~ main.c                                

  > silence clang warnings: add an extra pair of parentheses and stop
  > passing empty format strings to printf-family functions; ok millert@
  > (naddy@)

md5

  ~ md5.c                                 

  > In -C mode, process all checksums that match the specified file(s),
  > not just the first one that matches.  OK deraadt@ (millert@)

stty

  ~ print.c                               

  > Quiet a clang warning from -Wstring-plus-int.  OK naddy@ (millert@)

== distrib =========================================================== 02/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/distrib

miniroot

  ~ install.sub                           

  > Introduce a new function parse_hn_line() that replaces the existing
  > hostname.if(5) parsing code in ifstart().
  > - change v6_config()
  > - replace rtsol with autoconf in "IPv6 addres for <if>" question
  > - write 'inet6 autoconf" to hostname.if file instead of rtsol
  > - add parse_hn_line() function with installer specific changes
  > - skip shell command and bridge config lines
  > - skip inet6 config (incl. dest lines) if there's no inet6 support
  > - skip dhcp config if there's no dhclient
  > - change ifstart() to use parse_hn_line()
  > Discussed with and positive feedback from many
  > 'commit' deraadt@
  > conditional OK sthen@ (untested) (rpe@)

  ~ install.sub                           

  > Unbreak multiple interface configurations like trunk or carp. Ensure
  > that the noglob option is disabled at the end of parse_hn_line()
  > and ifstart(). (rpe@)

notes

  ~ m4.common                             

  > Replace 'rtsol' with 'autoconf' to reflect the change in the installer.
  > (rpe@)

sets

  ~ lists/base/mi                         ~ lists/man/mi

  > Install arm64 manpages: eeprom(8), MAKEDEV(8).  ok phessler kettenis
  > (sthen@)

  ~ lists/comp/md.amd64                   ~ lists/comp/mi

  > sync (deraadt@)

  ~ lists/comp/clang.amd64                ~ lists/comp/clang.i386
  ~ lists/comp/md.amd64                   

  > put clang headers into clang sets
  > ok deraadt@ (jsg@)

  ~ lists/base/mi                         ~ lists/comp/mi

  > sync (deraadt@)

  ~ lists/comp/mi                         

  > sync (deraadt@)

  ~ lists/comp/mi                         ~ lists/man/mi

  > sync (deraadt@)

== etc =============================================================== 03/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc

mtree/4.4BSD.dist

  ~ mtree/4.4BSD.dist                     

  > Install arm64 manpages: eeprom(8), MAKEDEV(8).  ok phessler kettenis
  > (sthen@)

netstart

  ~ netstart                              

  > Introduce a new function parse_hn_line() that replaces the existing
  > hostname.if(5) parsing code in ifstart().
  > Add a -n option to netstart to only print the interface configuration
  > commands instead of executing them.
  > Add a HN_DIR variable, that points to the directory of the hostname.if
  > files (default /etc) that allows for future regression tests.
  > - add new parse_hn_line() function
  > - change ifstart()
  > - rename $if to $_if
  > - don't ifconfig or ifconfig create if -n option is used
  > - replace hostname.if(5) parsing code with new parse_hn_line()
  > - just print configuration commands if -n option is used
  > - autoconf now happens in ifstart(), remove ifv6autoconf()
  > - introduce HN_DIR variable for the hostname.if file location
  > - add handling of the -n option to only print config commands
  > - ensure -n is only used if interfaces are specified as parameters
  > Discussed with and positive feedback from many
  > 'commit' deraadt@
  > OK sthen@ (rpe@)

  ~ netstart                              

  > Unbreak netstart for multiple inteface configurations like trunk
  > or carp. Ensure that the noglob option is disabled at the end of
  > parse_hn_line() and ifstart().
  > Reported by Christer Solskogen and Stefan Wollny, thanks! (rpe@)

  ~ netstart                              

  > Do not try to delete a default route before adding it.
  > Now that route are automatically G/C with the address they are attached
  > to there's no reason to duplicate the kernel's job.
  > Fix a regression introduced with multipath default routes.
  > ok deraadt@ (mpi@)

== gnu =============================================================== 04/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu

gnu

  ~ gcc/gcc/dwarf2.h                      ~ gcc/gcc/dwarf2out.c
  ~ gcc/gcc/config/i386/i386.c            ~ gcc/gcc/config/i386/i386.opt
  ~ gcc/gcc/doc/invoke.texi               

  > add support for -msave-args in gcc on amd64
  > i got sick of not having arguments in ddb stack traces on amd64,
  > which is because amd64 passes arguments in registers, and it's
  > impossible to figure out where they go without dwarf info, and when
  > you have dwarf info it is complicated.
  > solaris has a simple solution for this. they tweaked their compilers
  > to accept an -msave-args option which makes functions store their
  > arguments on the stack, while maintaining compatability with the
  > System V AMD64 ABI. tools (eg, ddb) can then look at the stack to
  > get access to function arguments in traces.
  > this ports their changes to gcc 3 to our gcc.
  > ok deraadt@ (dlg@)

usr.bin/clang

  ~ include/clang/intrin/Makefile         

  > Install a few more x86 intrinsics header files.
  > spotted by espie@ (kettenis@)

== lib =============================================================== 05/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib

libc

  ~ stdlib/malloc.3                       

  > Rearrange text a bit to make it clear what "discarded" means; ok jmc@
  > deraadt@ (otto@)

  ~ net/ip6opt.c                          

  > Remove "len < 0" check; len is socklen_t (uint32_t) so can't be
  > negative.  Quiets a warning from clang.  OK bluhm@ (millert@)

  ~ nls/catopen.c                         

  > ntohl() returns uint32_t so it cannot be < 0.  Since we're storing
  > the result in an int check for > INT_MAX instead.  OK bluhm@ (millert@)

  + sys/futex.2                           

  > Document futex(2) with a lot of inputs from schwarze@ (mpi@)

  ~ sys/futex.2                           

  > errant space; (jmc@)

  ~ sys/futex.2                           

  > Reference the "Futexes Are Tricky" paper.
  > With schwarze@ (mpi@)

  ~ Symbols.list                          ~ shlib_version
  ~ sys/Makefile.inc                      

  > Add futex(2) shim, bump minor.
  > Inputs from guenther@, ok kettenis@, visa@ (mpi@)

libcrypto

  ~ malloc-wrapper.c                      ~ rsa/rsa_eay.c
  ~ rsa/rsa_saos.c                        ~ rsa/rsa_sign.c
  ~ x509/x509_vfy.c                       

  >  (beck@)

  ~ malloc-wrapper.c                      ~ rsa/rsa_eay.c
  ~ rsa/rsa_saos.c                        ~ rsa/rsa_sign.c
  ~ x509/x509_vfy.c                       

  > revert previous accidental commit (beck@)

  ~ x509/x509_vfy.c                       

  > Revert previous change that forced consistency between return value and
  > error code, since this breaks the documented API. Under certain
  > circumstances
  > this will result in incorrect successful certiticate verification (where
  > a user supplied callback always returns 1, and later code checks the error
  > code to potentially abort post verification) (beck@)

  ~ x509/x509_vfy.c                       

  TAGGED OPENBSD_6_1
  > MFC: Revert previous change that forced consistency between return value
  > and
  > error code, since this breaks the documented API. Under certain
  > circumstances
  > this will result in incorrect successful certiticate verification (where
  > a user supplied callback always returns 1, and later code checks the error
  > code to potentially abort post verification) (beck@)

  ~ arc4random/getentropy_linux.c         

  TAGGED OPENBSD_6_1
  > Switch Linux getrandom() usage to non-blocking mode, continuing to
  > use fallback mechanims if unsuccessful.
  > The design of Linux getrandom is broken.  It has an
  > uninitialized phase coupled with blocking behaviour, which
  > is unacceptable from within a library at boot time without
  > possible recovery.
  > ok deraadt@ jsing@ (beck@)

  ~ arc4random/getentropy_linux.c         

  TAGGED OPENBSD_6_1
  > MFC: Switch Linux getrandom() usage to non-blocking mode, continuing to
  > use fallback mechanims if unsuccessful.
  > The design of Linux getrandom is broken.  It has an
  > uninitialized phase coupled with blocking behaviour, which
  > is unacceptable from within a library at boot time without
  > possible recovery.
  > ok deraadt@ jsing@ (beck@)

  ~ opensslv.h                            

  TAGGED OPENBSD_6_1
  > bump to 2.5.4 (bcook@)

  ~ crypto.h                              ~ cryptlib.c
  ~ evp/names.c                           

  TAGGED OPENBSD_6_1
  > Stop calling OPENSSL_init() internally, since it is a no-op. Also place
  > it under #ifndef LIBRESSL_INTERNAL.
  > ok beck@ (jsing@)

  ~ bio/b_sock.c                          

  TAGGED OPENBSD_6_1
  > Microsoft Windows hates BIO_get_accept_socket in portable. Fix it to
  > not be awful or have any claims on supporting ipv6 when it does so
  > very badly
  > ok jsing@ (beck@)

  ~ Makefile                              

  TAGGED OPENBSD_6_1
  > Only enable -Werror on libcrypto/libssl/libtls if we are building with
  > gcc4. This should avoid failed builds while transitioning compilers.
  > While here also make the CFLAGS blocks consistent across makefiles.
  > Discussed with deraadt@, ok beck@ (jsing@)

  ~ bio/b_sock.c                          

  TAGGED OPENBSD_6_1
  > Rework BIO_accept to be more like modern code.
  > ok jsing@ (beck@)

  ~ bio/b_sock.c                          

  TAGGED OPENBSD_6_1
  > Make BIO_get_host_ip just yet another getaddrinfo wrapper (beck@)

  ~ bio/b_sock.c                          

  TAGGED OPENBSD_6_1
  > No original OpenSSL code remains in this file. Relicense (beck@)

libkeynote

  ~ keynote.y                             

  > Remove useless check for ks_env_table being NULL.  Since ks_env_table
  > is an array embedded in struct keynote_session it can never be NULL.
  > Quiets a clang warning. (millert@)

libpcap

  ~ gencode.h                             

  > Remove the "volatile" attribute from bpf_error().  The "volatile"
  > attribute is an obsolete way of saying "noreturn".  clang doesn't
  > recognize it and the function is already marked __dead so it is
  > superfluous anyway. (millert@)

libssl

  ~ ssl_algs.c                            

  > Make it safe to call SSL_library_init more than once.
  > We are basically admitting that pthread is everywhere, and
  > we will be using it for other things too.
  > ok jsing@ (beck@)

  ~ Makefile                              

  > We now require you to have a working libpthread (beck@)

  ~ Makefile                              ~ ssl_algs.c

  > Revert previous - we still want to do this, but I forgot about the
  > installer
  > and want to avoid the wrath of theo when he arrives home in a couple
  > of hours :) (beck@)

  ~ ssl_srvr.c                            

  > Fix a bug caused by the return value being set early to signal successful
  > DTLS cookie validation. This can mask a later failure and result in a
  > positive return value being returned from ssl3_get_client_hello(), when
  > it should return a negative value to propagate the error.
  > Ironically this was introduced in OpenSSL 2e9802b7a7b with the commit
  > message "Fix DTLS cookie management bugs".
  > Fix based on OpenSSL.
  > Issue reported by Nicolas Bouliane <nbouliane at jive dot com>.
  > ok beck@ (jsing@)

  ~ ssl_srvr.c                            

  TAGGED OPENBSD_6_1
  > MFC.
  > Fix a bug caused by the return value being set early to signal successful
  > DTLS cookie validation. This can mask a later failure and result in a
  > positive return value being returned from ssl3_get_client_hello(), when
  > it should return a negative value to propagate the error.
  > ok beck@ (jsing@)

  ~ src/ssl/s3_srvr.c                     

  TAGGED OPENBSD_6_0
  > MFC.
  > Fix a bug caused by the return value being set early to signal successful
  > DTLS cookie validation. This can mask a later failure and result in a
  > positive return value being returned from ssl3_get_client_hello(), when
  > it should return a negative value to propagate the error.
  > ok beck@ (jsing@)

  ~ ssl_asn1.c                            

  TAGGED OPENBSD_6_0
  > Switch back to freezero() and explicitly initialise data_len to zero. The
  > previous code was safe since data would always be NULL if data_len was
  > uninitialised, however compilers cannot know this. (jsing@)

  ~ Makefile                              

  TAGGED OPENBSD_6_0
  > Only enable -Werror on libcrypto/libssl/libtls if we are building with
  > gcc4. This should avoid failed builds while transitioning compilers.
  > While here also make the CFLAGS blocks consistent across makefiles.
  > Discussed with deraadt@, ok beck@ (jsing@)

libtls

  ~ man/tls_client.3                      ~ man/tls_init.3

  > tls_free(3) and tls_config_free(3) accept NULL;
  > patch from Matthew Martin <phy1729 at gmail dot com>,
  > slightly tweaked by me (schwarze@)

  ~ tls_config.c                          

  > Add a tls_keypair_clear_key() function that uses freezero() to make key
  > material inaccessible, then call it from the appropriate places.
  > ok beck@ (jsing@)

  ~ Makefile                              

  > Only enable -Werror on libcrypto/libssl/libtls if we are building with
  > gcc4. This should avoid failed builds while transitioning compilers.
  > While here also make the CFLAGS blocks consistent across makefiles.
  > Discussed with deraadt@, ok beck@ (jsing@)

== libexec =========================================================== 06/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/libexec

ftpd

  ~ ftpcmd.y                              

  > Don't send multiple error messages in response to a single command
  > While a few commands (such as HELP and NOOP) are allowed in between
  > USER and PASS, most of the others are not.  However if such command
  > is issued, ftpd should abort the command evaluation early and reply
  > with "530 Please login with USER and PASS."
  > From form@, with input from deraadt@ and OK millert@ (mikeb@)

login_radius

  ~ login_radius.c                        

  > challenge is an array, not a pointer, therefore cannot be NULL.
  > Quiets a clang warning. (millert@)

rpc.rusersd

  ~ rusers_proc.c                         

  > Change len arg of getidle() from size_t to int since it is used as
  > a length parameter to a "%.*s" printf format.  Quiets a compiler
  > warning (both gcc and clang). (millert@)

== regress =========================================================== 07/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/regress

lib

  ~ libtls/verify/verifytest.c            

  > Add missing tls_init() and tls_free() calls. (jsing@)

  ~ libcrypto/bio/biotest.c               

  > whitespace (beck@)

sys

  ~ kern/Makefile                         + kern/futex/Makefile
  + kern/futex/futex.c                    + kern/futex/futex.h

  > Regression tests for futex(2). (mpi@)

  ~ kern/futex/futex.c                    

  > Check that unsupported operation returns ENOSYS. (mpi@)

  ~ crypto/aes/aestest.c                  

  > Switch AES testcase to the new implementation
  > OK djm@ (mikeb@)

usr.bin

  ~ mdoclint/mdoclint                     

  > Detect links to self by parsing .Nm in SYNOPSIS.
  > Functionality suggested and patch OK'ed by jmc@.
  > Patch also accepted upstream in pkgsrc by wiz@. (schwarze@)

  ~ mdoclint/mdoclint                     

  > Merge trivial patches from pkgsrc to get rid of gratuitious differences;
  > no functional change on OpenBSD: rev.s 1.50, 1.52, 1.62, 1.63
  > Of course, keep intentional differences. (schwarze@)

  ~ ssh/integrity.sh                      

  > Pull back some shell portability fixes from -portable to make future syncs
  > easier.  Note that this also changes the number of bytes skipped on "Bad
  > Packet" errors from 2 to 3 because the worst case is changing the high byte
  > of the length field in which case skipping 3 bytes is needed.  ok djm@
  > (dtucker@)

  ~ ssh/integrity.sh                      

  > Merge missing bits from Colin Watson's patch in bz#2658 which make
  > integrity
  > tests more robust against timeouts.  ok djm@ (dtucker@)

  ~ mdoclint/mdoclint                     ~ mdoclint/mdoclint.1

  > Start deleting redundant features that are already covered
  > by mandoc(1) -Tlint, as suggested by the upstream author
  > and maintainer Thomas Klausner <wiz @ NetBSD>.
  > The ultimate goal is to get rid of mdoclint and integrate
  > all its functionality into mandoc, but that will still take
  > some time, so simplify mdoclint for the time being.
  > jmc@ "go ahead", OK wiz@, also committed upstream
  > This first patch removes the AUTHORS check that mandoc does, too.
  > (schwarze@)

  ~ mandoc/mdoc/Sh/Makefile               + mandoc/mdoc/Sh/first.out_ascii
  + mandoc/mdoc/Sh/parbefore.in           + mandoc/mdoc/Sh/parbefore.out_ascii
  + mandoc/mdoc/Sh/parbefore.out_lint     
  + mandoc/mdoc/Sh/parbefore.out_markdown
  + mandoc/mdoc/Sh/parborder.in           + mandoc/mdoc/Sh/parborder.out_ascii
  + mandoc/mdoc/Sh/parborder.out_lint     
  + mandoc/mdoc/Sh/parborder.out_markdown

  > Delete .Pp right before the first .Sh and right before any .Ss,
  > and warn about it; mdoclint(1) does so, and it makes sense. (schwarze@)

  ~ ssh/unittests/Makefile.inc            
  ~ ssh/unittests/hostkeys/mktestdata.sh
  ~ ssh/unittests/hostkeys/test_iterate.c
  ~ ssh/unittests/hostkeys/testdata/known_hosts
  ~ ssh/unittests/sshkey/mktestdata.sh    ~ ssh/unittests/sshkey/test_file.c
  ~ ssh/unittests/sshkey/test_fuzz.c      ~ ssh/unittests/sshkey/test_sshkey.c

  > remove SSHv1 support from unit tests (djm@)

  ~ ssh/agent-pkcs11.sh                   ~ ssh/agent.sh
  ~ ssh/banner.sh                         ~ ssh/broken-pipe.sh
  ~ ssh/brokenkeys.sh                     ~ ssh/cert-file.sh
  ~ ssh/cert-hostkey.sh                   ~ ssh/cert-userkey.sh
  ~ ssh/cfgmatch.sh                       ~ ssh/cipher-speed.sh
  ~ ssh/connect-privsep.sh                ~ ssh/connect.sh
  ~ ssh/dynamic-forward.sh                ~ ssh/exit-status.sh
  ~ ssh/forcecommand.sh                   ~ ssh/forward-control.sh
  ~ ssh/forwarding.sh                     ~ ssh/host-expand.sh
  ~ ssh/hostkey-agent.sh                  ~ ssh/integrity.sh
  ~ ssh/key-options.sh                    ~ ssh/keygen-change.sh
  ~ ssh/keyscan.sh                        ~ ssh/localcommand.sh
  ~ ssh/multiplex.sh                      ~ ssh/principals-command.sh
  ~ ssh/proto-mismatch.sh                 ~ ssh/proto-version.sh
  ~ ssh/proxy-connect.sh                  ~ ssh/putty-transfer.sh
  ~ ssh/reconfigure.sh                    ~ ssh/reexec.sh
  ~ ssh/stderr-after-eof.sh               ~ ssh/stderr-data.sh
  ~ ssh/test-exec.sh                      ~ ssh/transfer.sh
  ~ ssh/try-ciphers.sh                    ~ ssh/yes-head.sh
  ~ ssh/misc/kexfuzz/kexfuzz.c            

  > eliminate explicit specification of protocol in tests and loops over
  > protocol. We only support SSHv2 now. (djm@)

usr.sbin

  ~ syslogd/args-client-multilisten.pl    

  > Test listening on multiple syslog over TLS sockets. (bluhm@)

  ~ syslogd/args-fdexhaustion-config.pl   ~ syslogd/args-fdexhaustion-tcp.pl
  ~ syslogd/args-maxhostlen.pl            ~ syslogd/args-maxloghostlen.pl
  ~ syslogd/args-maxportlen.pl            ~ syslogd/args-proto-invalid.pl
  ~ syslogd/args-proto-udp4-host6.pl      ~ syslogd/args-proto-udp4-only6.pl
  ~ syslogd/args-proto-udp6-host4.pl      ~ syslogd/args-proto-udp6-only4.pl
  ~ syslogd/args-tls-cafile-noexist.pl    + syslogd/args-nofile-sighup.pl
  + syslogd/args-nofile.pl                

  > Check that non existing log files in syslog.conf are reported to
  > /dev/console during startup and restart.  Startup warnings contain
  > the pid now.  Console logging creates additional errors if the file
  > descriptor limit is exhausted. (bluhm@)

  + syslogd/args-secure-udp.pl            

  > Test that suslogd's UDP sockets bound to *.514 do not receive packets
  > if the -u insecure mode is not selected. (bluhm@)

== sbin ============================================================== 08/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sbin

iked

  ~ parse.y                               

  > Fix configuration of ASN1_DN IDs.
  > Public key authentication uses public key files that are stored in the
  > /etc/iked/pubkeys/ directory where the IKE IDs are encoded as filenames.
  > This does not simply work with ASN1_DNs where the IDs include slashes
  > and other special characters. Instead of breaking and failing when an
  > ASN1_DN is configured, simply skip the public key lookup but allow
  > to use it with certificates or PSKs.
  > Reported and fix tested by Igor V. Gubenko - Thanks. (reyk@)

  ~ iked.h                                ~ ikev2.c
  ~ ikev2_msg.c                           

  > cope with IP address changes. before, we were trying to resend the msg
  > with the no-longer-available address over and over and over, requiring
  > iked to be restarted eventually. instead, on EADDRNOTAVAIL, schedule
  > SA deletion so a new one is set up shortly thereafter. ok reyk mikeb
  > (henning@)

pfctl

  ~ pfctl.8                               

  > trim the documentation for -k: make it more consistent,
  > and do not try to do all the documenting in SYNOPSIS/usage();
  > ok deraadt (jmc@)

  ~ pfctl.c                               

  > oops, this was meant to be committed with the pfctl.8 change:
  > sync usage() with SYNOPSIS; (jmc@)

  ~ pfctl.c                               ~ pfctl_queue.c

  > Perform H-FSC root queue allocation in the kernel
  > Since only leaf queues can have packets assigned to them,
  > H-FSC requires the user specified root queue to have a
  > parent.  To simplify userland tools and the configuration
  > interface, the kernel can be leveraged to set it up.
  > ok henning (mikeb@)

  ~ parse.y                               

  > Remove double assignments (mikeb@)

sysctl

  ~ sysctl.c                              

  > Use strtonum instead of strto{,u}ll for simpler and better overflow
  > checking, make somaxconn and sominconn unsigned.
  > Issue reported by orge on freenode, thanks!
  > Input, patient explanations and ok deraadt, millert. (tb@)

== share ============================================================= 09/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share

man

  ~ man4/iwm.4                            

  > Document monitor mode support in iwm(4). (stsp@)

  ~ man4/iwm.4                            

  > Document support for 3168 and 8265 devices in iwm(4). (stsp@)

  ~ man3/intro.3                          

  > update for the llvm libs; help/ok kettenis (jmc@)

  ~ man5/myname.5                         

  > 'rtsol' has been removed from hostname.if(5) recently.
  > OK jmc@ (rpe@)

  ~ man4/inet6.4                          

  > some ip6 setup notes; help/ok bluhm (jmc@)

  ~ man9/VOP_LOOKUP.9                     

  > We are men of action. Lies do not become us. (beck@)

  ~ man9/VOP_LOOKUP.9                     

  > tweak previous; (jmc@)

  ~ man8/Makefile                         + man8/man8.arm64/Makefile

  > Install arm64 manpages: eeprom(8), MAKEDEV(8).  ok phessler kettenis
  > (sthen@)

  ~ man1/gcc-local.1                      

  > add support for -msave-args in gcc on amd64
  > i got sick of not having arguments in ddb stack traces on amd64,
  > which is because amd64 passes arguments in registers, and it's
  > impossible to figure out where they go without dwarf info, and when
  > you have dwarf info it is complicated.
  > solaris has a simple solution for this. they tweaked their compilers
  > to accept an -msave-args option which makes functions store their
  > arguments on the stack, while maintaining compatability with the
  > System V AMD64 ABI. tools (eg, ddb) can then look at the stack to
  > get access to function arguments in traces.
  > this ports their changes to gcc 3 to our gcc.
  > ok deraadt@ (dlg@)

  ~ man4/iwm.4                            

  > iwm(4) monitor mode support was backed out for now. (stsp@)

  ~ man1/gcc-local.1                      

  > spelling; (jmc@)

  ~ man7/mandoc_char.7                    

  > Mention that escaping "^" as "\(ha" in source code samples improves
  > portability, in particular when rendering to formats such as PDF
  > with real typesetters such as groff.
  > While here, make it even more explicit that the rendering of raw
  > ASCII accents ( ` ' ~ ^ ) found in the input is kind of a mess and
  > varies among implementations, software versions, macro sets, and
  > output devices.
  > Issue noticed when reading the groff_char(7) manual, and confirmed
  > by testing with current groff.
  > OK bentley@, "certainly no objection" jmc@
  > N.B.: Nobody will get scolded for ignoring this subtlety. (schwarze@)

  - man7/kgdb.7                           ~ man4/options.4
  ~ man7/Makefile                         ~ man9/uvm.9

  > Remove KGDB references. (mpi@)

misc

  ~ airport                               

  > add City of Derry Airport
  > ok "i have been there"@ (benno@)

mk

  ~ bsd.lib.mk                            

  > syspatch needs to create shared libs with the same object sequence instead
  > of randomizing the order so let's read the libs on the system and link the
  > same way in case a syspatch is being built (robert@)

== sys =============================================================== 10/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys

arch/alpha/alpha

  ~ machdep.c                             

  > Unifdef KADB.
  > ok deraadt@ (mpi@)

  ~ machdep.c                             ~ dec_kn300.c
  ~ dec_1000a.c                           

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ db_interface.c                        ~ lock_machdep.c
  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/alpha/dev

  ~ sgmap_typedep.c                       

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/alpha/tc

  ~ scc.c                                 

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/amd64/amd64

  ~ vmm.c                                 

  > Convert some hardcoded function names in printfs into %s / __func__.
  > Some of these pointed out by Michael W. Bombardieri, I went through
  > the file and fixed the rest.
  > No functional change. (mlarkin@)

  ~ fpu.c                                 ~ vmm.c
  ~ vmm_support.S                         

  > vmm(4): proper save/restore of FPU context during entry/exit.
  > tested by reyk, dcoppa, and a few others.
  > ok kettenis@ on the fpu bits
  > ok deraadt@ on the vmm bits (mlarkin@)

  ~ vmm.c                                 

  > use a more descriptive value from the VEI_DIR_xxx enum instead of a
  > hardcoded number. no functional change (mlarkin@)

  ~ vmm.c                                 

  > vmm: don't use invvpid if we didn't detect vpid capability during
  > vcpu setup (mlarkin@)

  ~ vmm.c                                 

  > add some comments. no functional change (mlarkin@)

  - kgdb_machdep.c                        ~ trap.c
  ~ machdep.c                             ~ db_memrw.c

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ cpu.c                                 ~ db_interface.c
  ~ lock_machdep.c                        ~ machdep.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/amd64/conf

  ~ files.amd64                           

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ GENERIC                               

  > Remove some KGDB leftovers.
  > From Amit Kulkarni. (mpi@)

arch/amd64/include

  ~ pcb.h                                 

  > Fix a typo relating to savefpu alignment
  > ok kettenis (mlarkin@)

  ~ cpufunc.h                             ~ fpu.h
  ~ vmmvar.h                              

  > vmm(4): proper save/restore of FPU context during entry/exit.
  > tested by reyk, dcoppa, and a few others.
  > ok kettenis@ on the fpu bits
  > ok deraadt@ on the vmm bits (mlarkin@)

  ~ vmmvar.h                              

  > rename a struct that was denoted as "VMX only" to make it more clear
  > that it can be used in SVM and VMX.
  > no functional change (mlarkin@)

  ~ vmmvar.h                              

  > vmm: don't use invvpid if we didn't detect vpid capability during
  > vcpu setup (mlarkin@)

  ~ db_machdep.h                          ~ cpufunc.h

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

arch/arm/arm

  ~ cpu.c                                 ~ cpufunc.c

  > Add support for Cortex-A12.  Even though ARM rebranded these as Cortex-A17
  > they have a different ID from "real" Cortex-A17 cores.
  > ok phessler@, patrick@ (kettenis@)

  ~ cpu.c                                 

  > Bring over the changes to mainbus(4) and simplebus(4) from arm64.
  > (kettenis@)

  ~ undefined.c                           ~ fault.c

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ db_interface.c                        ~ undefined.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/arm/armv7

  ~ armv7_a4x_io.S                        

  > Use (32-bit) word-sized access in the a4x bus space routine even if only
  > a byte or a half-word is needed.  Certain implementations of the Synopsis
  > Designware copy-and-paste logic blocks don't respond to transactions that
  > are smaller than a word.
  > Fixes the serial console on boards with a Rockchip RK3288. (kettenis@)

arch/arm/conf

  ~ files.arm                             

  > Bring over the changes to mainbus(4) and simplebus(4) from arm64.
  > (kettenis@)

  ~ files.arm                             

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

arch/arm/cortex

  ~ ampintc.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/arm/include

  ~ armreg.h                              

  > Add support for Cortex-A12.  Even though ARM rebranded these as Cortex-A17
  > they have a different ID from "real" Cortex-A17 cores.
  > ok phessler@, patrick@ (kettenis@)

  ~ armreg.h                              ~ cpu.h

  > Bring over the changes to mainbus(4) and simplebus(4) from arm64.
  > (kettenis@)

arch/arm/mainbus

  - cpu_mainbus.c                         ~ mainbus.c

  > Bring over the changes to mainbus(4) and simplebus(4) from arm64.
  > (kettenis@)

  ~ mainbus.c                             

  > Make early attrbute work here as well.  Remove unreachable panic while
  > there.
  > ok visa@, patrick@, drahn@ (kettenis@)

arch/arm/simplebus

  ~ simplebus.c                           

  > Bring over the changes to mainbus(4) and simplebus(4) from arm64.
  > (kettenis@)

arch/arm64/arm64

  ~ trap.c                                

  > Stop dumping registers on "normal" segmentation faults.  Do print the
  > contents
  > of the esr_el1 register for unhandled userland exceptions (and continue to
  > dump the registers in that case).
  > Handle breakpoint traps and make sure we call refreshcreds() on userland
  > traps.
  > ok jsg@ (kettenis@)

  + cpu.c                                 

  > Add code to identify the CPUs on arm64 systems.  The primary CPU is
  > attached
  > and identified early on.  For the secondary CPUs this happens late, such
  > that
  > the drivers we need to spin up CPUs, such as psci(4), will be available.
  > This also fixes some code in simplebus(4) where the return value of
  > OF_getprop() was not properly checked.
  > Heavily based on an earlier diff from drahn@.
  > ok drahn@, jsg@ (kettenis@)

  ~ machdep.c                             ~ cpu.c

  > store cpu model information in the buffer used by the hw.model sysctl
  > ok kettenis@ (jsg@)

  ~ ast.c                                 

  > Call refreshcreds() in ast() since we may get there without going through
  > do_el0_sync() or mi_syscall(). (kettenis@)

  ~ trap.c                                

  > Move the userret() call out of data_abort() and simply call it just before
  > we
  > return from do_el0_sync().  Prevents future mistakes. (kettenis@)

  ~ arm64_mutex.c                         ~ db_interface.c
  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/arm64/conf

  ~ GENERIC                               ~ RAMDISK
  ~ files.arm64                           

  > Add code to identify the CPUs on arm64 systems.  The primary CPU is
  > attached
  > and identified early on.  For the secondary CPUs this happens late, such
  > that
  > the drivers we need to spin up CPUs, such as psci(4), will be available.
  > This also fixes some code in simplebus(4) where the return value of
  > OF_getprop() was not properly checked.
  > Heavily based on an earlier diff from drahn@.
  > ok drahn@, jsg@ (kettenis@)

  ~ GENERIC                               ~ RAMDISK
  ~ files.arm64                           

  > Add agintc(4), a driver for interrupt controllers conforming to ARM's
  > generic interrupt controller architecture specification v3/4.
  > The hard work was done by drahn@, I just cleaned it up a bit and fixed
  > a couple of bugs.
  > ok patrick@, drahn@ (kettenis@)

  ~ GENERIC                               ~ RAMDISK
  ~ files.arm64                           

  > Add rkgrf(4), a driver that makes the "generic register file" of the
  > Rockchip
  > RK3399 available to other drivers through the regmap interface. (kettenis@)

  ~ GENERIC                               ~ RAMDISK

  > Add xhci@fdt, and move ehci(4) from the sunxi block to the generic block.
  > (kettenis@)

  ~ GENERIC                               ~ RAMDISK

  > Add rkclock(4), a driver for the Rockchip RK3399 clocks. (kettenis@)

arch/arm64/dev

  ~ mainbus.c                             ~ mainbus.h
  ~ simplebus.c                           

  > Add code to identify the CPUs on arm64 systems.  The primary CPU is
  > attached
  > and identified early on.  For the secondary CPUs this happens late, such
  > that
  > the drivers we need to spin up CPUs, such as psci(4), will be available.
  > This also fixes some code in simplebus(4) where the return value of
  > OF_getprop() was not properly checked.
  > Heavily based on an earlier diff from drahn@.
  > ok drahn@, jsg@ (kettenis@)

  ~ arm64_bus_space.c                     

  > Use (32-bit) word-sized access in the a4x bus space routine even if only
  > a byte or a half-word is needed.  Certain implementations of the Synopsis
  > Designware copy-and-paste logic blocks don't respond to transactions that
  > are smaller than a word.
  > Fixes the serial console on boards with a Rockchip RK3288. (kettenis@)

  + agintc.c                              

  > Add agintc(4), a driver for interrupt controllers conforming to ARM's
  > generic interrupt controller architecture specification v3/4.
  > The hard work was done by drahn@, I just cleaned it up a bit and fixed
  > a couple of bugs.
  > ok patrick@, drahn@ (kettenis@)

  ~ agintc.c                              

  > Decrement ci_idepth on all returns from agintc_irq_handler(). (kettenis@)

  ~ pluart.c                              

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ mainbus.c                             

  > Make early attrbute work here as well.  Remove unreachable panic while
  > there.
  > ok visa@ (kettenis@)

  ~ ampintc.c                             ~ pluart.c
  ~ bcm2836_intr.c                        ~ agintc.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

  ~ agintc.c                              

  > Fix priority handling.  The interrupt priority registers expose the full
  > range
  > of priorities available in secure mode (minimally 32).  For non-secure
  > interrupts we need to make sure the top bit is set and shift our interrupt
  > priority level into the remaining bits.  The priority mask register on the
  > other hand only exposes the priority levels available to the mode from
  > which
  > it is accessed.  So when accessed from non-secure mode, we need to shift
  > our
  > interrupt priority level by a different amount.
  > Also set the binary point register to zero to make sure the maximum number
  > of
  > available bits are used for the priority group and priority masking
  > actually
  > works as expected.
  > This makes the FireFly-RK3399 boot multi-user with the root filesystem on
  > USB.
  > ok drahn@ (kettenis@)

arch/arm64/include

  ~ armreg.h                              

  > Add code to identify the CPUs on arm64 systems.  The primary CPU is
  > attached
  > and identified early on.  For the secondary CPUs this happens late, such
  > that
  > the drivers we need to spin up CPUs, such as psci(4), will be available.
  > This also fixes some code in simplebus(4) where the return value of
  > OF_getprop() was not properly checked.
  > Heavily based on an earlier diff from drahn@.
  > ok drahn@, jsg@ (kettenis@)

  ~ machine_reg.h                         

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

arch/armv7/armv7

  ~ armv7_machdep.c                       

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/armv7/broadcom

  ~ bcm2836_intr.c                        

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/armv7/dev

  ~ pluart.c                              

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ pluart.c                              

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/armv7/exynos

  ~ exuart.c                              

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

arch/armv7/imx

  ~ imxuart.c                             

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

arch/armv7/include

  ~ machine_reg.h                         

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

arch/armv7/omap

  ~ if_cpsw.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/hppa/hppa

  ~ db_interface.c                        ~ lock_machdep.c
  ~ locore.S                              ~ pmap.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/i386/conf

  ~ files.i386                            

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ GENERIC                               

  > Remove some KGDB leftovers.
  > From Amit Kulkarni. (mpi@)

arch/i386/i386

  ~ vmm.c                                 

  > Convert some hardcoded function names in printfs into %s / __func__.
  > Some of these pointed out by Michael W. Bombardieri, I went through
  > the file and fixed the rest.
  > No functional change. (mlarkin@)

  - kgdb_machdep.c                        ~ trap.c
  ~ machdep.c                             ~ db_memrw.c

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ cpu.c                                 ~ db_interface.c
  ~ db_mp.c                               ~ lock_machdep.c
  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/i386/include

  ~ db_machdep.h                          ~ cpufunc.h

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

arch/landisk/dev

  ~ power.c                               

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/landisk/landisk

  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/loongson/dev

  ~ bonito.c                              

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/loongson/loongson

  ~ generic2e_machdep.c                   ~ machdep.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/luna88k/dev

  ~ mb89352.c                             ~ mb89352var.h
  ~ siotty.c                              

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/luna88k/luna88k

  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/m88k/m88k

  ~ db_interface.c                        ~ mplock.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/macppc/dev

  ~ macintr.c                             ~ openpic.c
  ~ pgs.c                                 ~ sysbutton.c
  ~ zs.c                                  

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/macppc/macppc

  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/mips64/mips64

  ~ ipifuncs.c                            ~ lcore_ddb.S
  ~ lock_machdep.c                        ~ mutex.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/octeon/conf

  ~ files.octeon                          

  > Add an fdt blob for octeon systems whose firmware does not provide
  > a device-tree. It will be needed later when more device drivers
  > are attached using fdt.
  > OK kettenis@ (visa@)

arch/octeon/dev

  ~ octeon_iobus.c                        

  > Process fdt before iobus devices. Needed later when interrupt and
  > MDIO controller drivers are attached using fdt. (visa@)

  ~ cn30xxpow.c                           ~ cn30xxpowvar.h

  > Remove unused POW status functions. Makes clang happier. (visa@)

arch/octeon/octeon

  ~ machdep.c                             + cn3xxx.dts
  + cn3xxx_dts.S                          

  > Add an fdt blob for octeon systems whose firmware does not provide
  > a device-tree. It will be needed later when more device drivers
  > are attached using fdt.
  > OK kettenis@ (visa@)

  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/powerpc/ddb

  ~ db_interface.c                        

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/powerpc/powerpc

  ~ lock_machdep.c                        ~ mutex.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/sgi/hpc

  ~ zs.c                                  

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ zs.c                                  

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/sgi/sgi

  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/sh/dev

  ~ scif.c                                

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/sh/sh

  ~ db_interface.c                        

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/socppc/socppc

  ~ machdep.c                             

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/sparc64/dev

  ~ zs.c                                  ~ cons.h

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ consinit.c                            ~ fd.c
  ~ iommu.c                               ~ pcons.c
  ~ sab.c                                 ~ sbbc.c
  ~ vcons.c                               ~ viommu.c
  ~ zs.c                                  

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

arch/sparc64/sparc64

  ~ autoconf.c                            ~ clock.c
  ~ db_interface.c                        ~ intr.c
  ~ lock_machdep.c                        ~ locore.s
  ~ pmap.c                                ~ vm_machdep.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

conf

  ~ files                                 

  > Add futex(2) syscall based on a sane subset of its Linux equivalent.
  > The syscall is marked NOLOCK and only FUTEX_WAIT grabs the KERNEL_LOCK()
  > because of PCATCH and the signal nightmare.
  > Serialization of threads is currently done with a global & exclusive
  > rwlock.
  > Note that the current implementation still use copyin(9) which is not
  > guaranteed to be atomic.  Committing now such that remaining issues can
  > be addressed in-tree.
  > With inputs from guenther@, kettenis@ and visa@.
  > ok deraadt@, visa@ (mpi@)

  ~ files                                 

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ files                                 

  > Constant time AES implementation
  > This introduces a 32-bit constant time AES implementation from
  > Thomas Pornin originally for BearSSL and then adjusted by Thomas
  > and myself to fit OpenBSD kernel. One of the additional features
  > is an API for encryption and decryption subkey expansion in the
  > format specified by NIST in FIPS 197.
  > Tested by myself and naddy@, ok djm@ (mikeb@)

crypto

  + aes.c                                 + aes.h

  > Constant time AES implementation
  > This introduces a 32-bit constant time AES implementation from
  > Thomas Pornin originally for BearSSL and then adjusted by Thomas
  > and myself to fit OpenBSD kernel. One of the additional features
  > is an API for encryption and decryption subkey expansion in the
  > format specified by NIST in FIPS 197.
  > Tested by myself and naddy@, ok djm@ (mikeb@)

ddb

  ~ db_run.c                              

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ db_usrreq.c                           

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

dev

  ~ softraid_concat.c                     

  > Restore calculation of volume size. Accidentally removed in
  > r1.25. Fixes creation of concat volumes.
  > Noticed by and diff from Thordur I. Bjornsson via tech@
  > ok jsing@ (krw@)

dev/acpi

  ~ acpicpu.c                             

  > track size of pss allocation, so that length can be passed to free(9)
  > ok mlarkin (deraadt@)

dev/fdt

  - sxiehci.c                             ~ files.fdt
  + ehci_fdt.c                            

  > Replace sxiehci.c with more generic glue in ehci_fdt.c that is similiar in
  > spirit to the xhci_fdt.c glue.  The new code sets up any attached USB PHYs
  > based on their "compatible" property.  All the hardware supported by
  > sxiehci.c
  > should be supported by this new code.  In addition to that this adds
  > support
  > for the EHCI controllers found on various Rockchip hardware such as the
  > RK3288 and RK3399 SoCs.
  > ok patrick@ (kettenis@)

  ~ files.fdt                             + rkgrf.c

  > Add rkgrf(4), a driver that makes the "generic register file" of the
  > Rockchip
  > RK3399 available to other drivers through the regmap interface. (kettenis@)

  ~ files.fdt                             + rkclock.c
  + rkclock_clocks.h                      

  > Add rkclock(4), a driver for the Rockchip RK3399 clocks. (kettenis@)

dev/ic

  ~ ar5008.c                              

  > Tell MiRA about the actual number of retries instead of pretending that
  > a frame which was retried N times was retried just once.
  > This punishes retry-heavy data rates even more and should reduce latency.
  > It does not seem to have a noticable effect on net throughput in my
  > testing.
  > If this change causes throughput problems for anyone, let me know.
  > ok tb@ mlarkin@ (stsp@)

  ~ z8530tty.c                            ~ z8530sc.h
  ~ comvar.h                              ~ com.c

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ aic6250.c                             ~ aic6250var.h
  ~ aic6360var.h                          ~ aic6360.c
  ~ com.c                                 ~ ncr5380sbc.c
  ~ wd33c93.c                             ~ osiop.c

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

dev/isa

  ~ com_isapnp.c                          ~ com_isa.c
  ~ com_commulti.c                        

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

dev/pci

  ~ if_iwm.c                              ~ if_iwmreg.h

  > Implement support for multiple packets per receive DMA buffer in iwm(4).
  > We can now clear SINGLE_FRAME_MSK in the receive configuration register.
  > Linux has not set this bit in years, and Dragonfly stopped setting it
  > in commit b5eb43f0280bbcfd26af51cf5a4b8e8ff3590b67.
  > This is a prerequisite for monitor mode since the firmware seems to ignore
  > the SINGLE_FRAME_MSK bit while running in monitor mode and sends us
  > garbage.
  > Tested on 7260, 7265, and 8260 devices. (stsp@)

  ~ if_iwm.c                              

  > Implement monitor mode support for iwm(4).
  > The magic commands to capture raw 802.11 frames on e.g. channel 1 are:
  > ifconfig iwm0 mediaopt monitor chan 1
  > tcpdump -n -i iwm0 -y IEEE802_11_RADIO -s 4096 -w /tmp/iwm.pcap
  > ifconfig iwm0 -mediaopt monitor -chan (stsp@)

  ~ if_ix.c                               

  > Since rev 1.1 ix has attempted to require a 64 bit BAR, the test for
  > this was wrong and was corrected at the end of last year in rev 1.140.
  > Before then a 64 bit BAR was not enforced as the test was wrong.
  > It turns out there exist 82598 parts which have a 32 bit BAR so change
  > the test to only require a memory BAR and not a 64 bit memory BAR.
  > Problem reported by Robert Blacquiere. ok mikeb@ (jsg@)

  ~ if_iwm.c                              ~ if_iwn.c

  > Tell MiRA about the actual number of retries instead of pretending that
  > a frame which was retried N times was retried just once.
  > This punishes retry-heavy data rates even more and should reduce latency.
  > It does not seem to have a noticable effect on net throughput in my
  > testing.
  > If this change causes throughput problems for anyone, let me know.
  > ok tb@ mlarkin@ (stsp@)

  ~ if_iwm.c                              

  > Remove the size argument of iwm_rx_addbuf() and use a constant internally.
  > All callers were passing the same constant IWM_RBUF_SIZE, which is derived
  > from the smallest RX buffer the hardware supports (4k). Smaller sizes don't
  > make sense anyway and larger sizes are not on our horizon for now. (stsp@)

  ~ if_iwm.c                              

  > Get rid of convoluted macros in iwm's receive code path.
  > Since we now sync the entire Rx DMA buffer the SYNC_RESP_STRUCT() macro
  > which
  > was used to sync just parts of the buffer can be replaced by assignments.
  > The SYNC_RESP_PTR() macro was already unused so just remove it.
  > The ADVANCE_RXQ() macro was used just once so expand it in place. (stsp@)

  ~ if_iwm.c                              

  > Revert if_iwm.c to the state of r1.170 because ETOOMANYDRAGONSATONCE.
  > Performance regression reported by deraadt@ and uvm_fault reported by
  > fcambus@.
  > I will be poking further at this out of tree. (stsp@)

  ~ if_iwm.c                              

  > Restore if_iwm.c r1.173 (mira retry change) which got incarcerated by
  > the backout police even though it wasn't responsible for anything.
  > pointed out by tb@ (stsp@)

dev/usb

  ~ dwc2/dwc2.c                           

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

dev/wscons

  ~ wskbd.c                               

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

kern

  ~ subr_prf.c                            

  > Unifdef KADB.
  > ok deraadt@ (mpi@)

  ~ kern_sysctl.c                         

  > Enforce that sysctl kern.somaxconn and sominconn can only be set
  > to valid values.  The so_qlimit is type short.
  > report Dillon Jay Pena; OK deraadt@ (bluhm@)

  ~ init_main.c                           ~ kern_pledge.c
  ~ syscalls.master                       + sys_futex.c

  > Add futex(2) syscall based on a sane subset of its Linux equivalent.
  > The syscall is marked NOLOCK and only FUTEX_WAIT grabs the KERNEL_LOCK()
  > because of PCATCH and the signal nightmare.
  > Serialization of threads is currently done with a global & exclusive
  > rwlock.
  > Note that the current implementation still use copyin(9) which is not
  > guaranteed to be atomic.  Committing now such that remaining issues can
  > be addressed in-tree.
  > With inputs from guenther@, kettenis@ and visa@.
  > ok deraadt@, visa@ (mpi@)

  ~ init_sysent.c                         ~ syscalls.c

  > regen (mpi@)

  ~ kern_pledge.c                         

  > Mark futex(2) as PLEDGE_STDIO like all other thread-related syscalls.
  > From semarie@, ok deraadt@ (mpi@)

  ~ sys_futex.c                           

  > Return ENOSYS for unsupported operation. (mpi@)

  - kgdb_stub.c                           ~ subr_prf.c

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ subr_prf.c                            ~ subr_userconf.c
  ~ subr_witness.c                        

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

net

  ~ pf_lb.c                               ~ pf_norm.c
  ~ pf_osfp.c                             

  > Some of the LOG_NOTICE messages from PF were seen in normal operations
  > with certain rulesets and excessively noisy; move them to LOG_INFO (which
  > was
  > previously unused).  ok benno@ (sthen@)

  ~ hfsc.c                                ~ hfsc.h

  > Perform H-FSC root queue allocation in the kernel
  > Since only leaf queues can have packets assigned to them,
  > H-FSC requires the user specified root queue to have a
  > parent.  To simplify userland tools and the configuration
  > interface, the kernel can be leveraged to set it up.
  > ok henning (mikeb@)

net80211

  ~ ieee80211.h                           ~ ieee80211_mira.c

  > Handle unequal numbers of Tx and Rx streams in MiRA.
  > Problem reported by Colton Lewis on misc@
  > ok tb@ (stsp@)

sys

  ~ proc.h                                + futex.h

  > Add futex(2) syscall based on a sane subset of its Linux equivalent.
  > The syscall is marked NOLOCK and only FUTEX_WAIT grabs the KERNEL_LOCK()
  > because of PCATCH and the signal nightmare.
  > Serialization of threads is currently done with a global & exclusive
  > rwlock.
  > Note that the current implementation still use copyin(9) which is not
  > guaranteed to be atomic.  Committing now such that remaining issues can
  > be addressed in-tree.
  > With inputs from guenther@, kettenis@ and visa@.
  > ok deraadt@, visa@ (mpi@)

  ~ syscall.h                             ~ syscallargs.h

  > regen (mpi@)

  - kgdb.h                                ~ systm.h

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

  ~ systm.h                               

  > Rename Debugger() into db_enter().
  > Using a name with the 'db_' prefix makes it invisible from the dynamic
  > profiler.
  > ok deraadt@, kettenis@, visa@ (mpi@)

uvm

  ~ uvm_glue.c                            ~ uvm_extern.h

  > Unifdef KGDB.
  > It doesn't compile und hasn't been working during the last decade.
  > ok kettenis@, deraadt@ (mpi@)

== usr.bin =========================================================== 11/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin

aucat

  ~ aucat.1                               

  > Fix typos. From Michael W. Bombardieri <mb at ii.net>. Thanks! (ratchov@)

kdump

  ~ kdump.c                               ~ kdump_subr.h
  ~ mksubr                                

  > Display futex(2) operations and arguments. (mpi@)

lex

  ~ Makefile                              

  > Move FlexLexer.h from /usr/include/g++ to /usr/include.  It is not
  > a g++-specific header and this matches most other systems.  Needed
  > to use flex++ with clang.  OK espie@ kettenis@ (millert@)

libtool

  ~ LT/Mode/Link.pm                       

  > Have libtool ignore 'static-libtool-libs'. Previously it was unsupported
  > and
  > passed straight through to the compiler, which gcc doesn't mind, but clang
  > is
  > unhappy about.  Suggestion/ok aja@ (sthen@)

mandoc

  ~ libman.h                              ~ libmdoc.h
  ~ man.c                                 ~ man.h
  ~ man_hash.c                            ~ man_html.c
  ~ man_macro.c                           ~ man_term.c
  ~ man_validate.c                        ~ mandocdb.c
  ~ mdoc.c                                ~ mdoc.h
  ~ mdoc_argv.c                           ~ mdoc_hash.c
  ~ mdoc_html.c                           ~ mdoc_macro.c
  ~ mdoc_man.c                            ~ mdoc_markdown.c
  ~ mdoc_state.c                          ~ mdoc_term.c
  ~ mdoc_validate.c                       ~ roff.c
  ~ roff.h                                ~ tree.c

  > Continue parser unification:
  > * Make enum rofft an internal interface as enum roff_tok in "roff.h".
  > * Represent mdoc and man macros in enum roff_tok.
  > * Make TOKEN_NONE a proper enum value and use it throughout.
  > * Put the prologue macros first in the macro tables.
  > * Unify mdoc_macroname[] and man_macroname[] into roff_name[]. (schwarze@)

  ~ mdoc_validate.c                       

  > Delete .Pp right before the first .Sh and right before any .Ss,
  > and warn about it; mdoclint(1) does so, and it makes sense. (schwarze@)

  - man_hash.c                            - mdoc_hash.c
  ~ Makefile                              ~ libman.h
  ~ libmandoc.h                           ~ libmdoc.h
  ~ man.c                                 ~ mdoc.c
  ~ mdoc_macro.c                          ~ mdoc_validate.c
  ~ read.c                                ~ roff.c
  ~ roff.h                                

  > Parser unification: use nice ohashes for all three request and macro
  > tables;
  > no functional change, minus two source files, minus 200 lines of code.
  > (schwarze@)

midiplay

  ~ midiplay.c                            

  > Print usage on stderr as do other programs. From Michael
  > Bombardieri <mb at ii.net>, thanks. (ratchov@)

ssh

  ~ scp.c                                 

  > Avoid potential signed int overflow when parsing the file size.
  > Use strtoul() instead of parsing manually.  OK djm@ (millert@)

  ~ servconf.c                            

  > remove a static array unused since rev 1.306 spotted by clang
  > ok djm@ (jsg@)

  ~ readconf.c                            ~ readconf.h
  ~ ssh.c                                 ~ ssh_config.5

  > Add SyslogFacility option to ssh(1) matching the equivalent option in
  > sshd(8).  bz#2705, patch from erahn at arista.com, ok djm@ (dtucker@)

  ~ scp.c                                 

  > Avoid relying on implementation-specific behavior when detecting
  > whether the timestamp or file size overflowed.  If time_t and
  > off_t are not either 32-bit or 64-bit scp will exit with an error.
  > OK djm@ (millert@)

  ~ sshconnect2.c                         

  > include key fingerprint in "Offering public key" debug message (djm@)

  ~ ssh_config.5                          

  > sort; (jmc@)

  ~ ssh-keygen.1                          ~ ssh-keygen.c

  > allow ssh-keygen to include arbitrary string or flag certificate
  > extensions and critical options. ok markus@ dtucker@ (djm@)

  ~ ssh-keygen.1                          

  > tweak previous; (jmc@)

  ~ Makefile.inc                          ~ authfd.c
  ~ authfile.c                            ~ cipher.c
  ~ compat.c                              ~ hostfile.c
  ~ kex.c                                 ~ opacket.c
  ~ packet.c                              ~ readconf.c
  ~ ssh-add.c                             ~ ssh-agent.c
  ~ ssh-keygen.c                          ~ ssh-keyscan.c
  ~ ssh.c                                 ~ sshconnect.c
  ~ sshkey.c                              

  > unifdef WITH_SSH1
  > ok markus@ (djm@)

  ~ compat.c                              ~ readconf.c
  ~ readconf.h                            ~ ssh.c
  ~ sshconnect.c                          

  > remove options.protocol and client Protocol configuration knob
  > ok markus@ (djm@)

  ~ channels.c                            ~ channels.h
  ~ clientloop.c                          ~ compat.c
  ~ compat.h                              ~ dispatch.c
  ~ nchan.c                               ~ packet.c
  ~ packet.h                              ~ ssh-keyscan.c
  ~ ssh.c                                 ~ ssh_api.c
  ~ sshconnect.c                          ~ sshd.c
  ~ ttymodes.c                            

  > remove compat20/compat13/compat15 variables
  > ok markus@ (djm@)

  - cipher-3des1.c                        - cipher-bf1.c
  ~ cipher.c                              ~ cipher.h
  ~ readconf.c                            ~ readconf.h
  ~ ssh.c                                 ~ sshkey.c

  > remove SSHv1 ciphers; ok markus@ (djm@)

  ~ Makefile.inc                          ~ lib/Makefile
  ~ ssh/Makefile                          

  > remove SSH1 make flag and associated files
  > ok markus@ (djm@)

  ~ readconf.c                            ~ readconf.h
  ~ ssh.1                                 ~ ssh_config
  ~ ssh_config.5                          

  > remove SSHv1 configuration options and man pages bits
  > ok markus@ (djm@)

  ~ clientloop.c                          ~ hostfile.c
  ~ ssh-agent.c                           ~ ssh-keygen.1
  ~ ssh-keygen.c                          ~ ssh-keyscan.1
  ~ ssh-keyscan.c                         ~ ssh.c
  ~ ssh.h                                 ~ sshconnect.c
  ~ sshconnect2.c                         ~ sshd.c
  ~ sshkey.c                              ~ sshkey.h

  > remove KEY_RSA1
  > ok markus@ (djm@)

  ~ clientloop.c                          

  > remove SSHv1-related buffers from client code (djm@)

  ~ bufbn.c                               ~ buffer.h
  ~ packet.c                              ~ packet.h

  > remove SSHv1 support from packet and buffer APIs
  > ok markus@ (djm@)

  ~ Makefile.inc                          

  > undo some local debugging stuff that I committed by accident (djm@)

  ~ LICENCE                               ~ deattack.c
  ~ deattack.h                            ~ packet.c
  ~ lib/Makefile                          

  > remove the (in)famous SSHv1 CRC compensation attack detector.
  > Despite your cameo in The Matrix movies, you will not be missed.
  > ok markus (djm@)

  ~ ttymodes.c                            ~ ttymodes.h

  > purge the last traces of SSHv1 from the TTY modes handling code
  > ok markus (djm@)

  ~ scp.1                                 ~ scp.c
  ~ ssh.h                                 

  > exterminate the -1 flag from scp
  > ok markus@ (djm@)

  ~ channels.c                            ~ channels.h
  ~ clientloop.c                          ~ dispatch.c
  ~ nchan.c                               ~ packet.c
  ~ ssh-keyscan.c                         ~ ssh.c
  ~ ssh1.h                                

  > obliterate ssh1.h and some dead code that used it
  > ok markus@ (djm@)

  ~ ssh-agent.c                           

  > flense SSHv1 support from ssh-agent, considerably simplifying it
  > ok markus (djm@)

systat

  ~ pftop.c                               

  > Perform H-FSC root queue allocation in the kernel
  > Since only leaf queues can have packets assigned to them,
  > H-FSC requires the user specified root queue to have a
  > parent.  To simplify userland tools and the configuration
  > interface, the kernel can be leveraged to set it up.
  > ok henning (mikeb@)

tmux

  ~ tty.c                                 

  > Only use ED for clear screen if at the bottom, same as earlier fix to
  > clear end of screen. (nicm@)

  ~ cmd-if-shell.c                        

  > if-shell doesn't need to queue its error message into a callback, and in
  > fact it can't do so because the item it was working with will have been
  > freed. Reported by Daniel Hahler. (nicm@)

  ~ cfg.c                                 

  > Block the initial client if there is one until the configuration file
  > has finished loading. (nicm@)

  ~ cmd-respawn-pane.c                    ~ cmd-respawn-window.c
  ~ cmd-split-window.c                    ~ environ.c
  ~ job.c                                 ~ session.c
  ~ tmux.h                                

  > Do not update TERM into config file parsing has finished. (nicm@)

  ~ grid.c                                ~ tmux.h

  > When we write out the grid including escape sequences, an SGR 0 needs to
  > cause the colours to be written again. Also treat colours separately
  > from attributes so that RGB colours will work. (nicm@)

  ~ screen-write.c                        ~ tmux.h
  ~ tty.c                                 

  > Make full width panes try to play more nicely with terminal copy and
  > paste by avoiding explicit line wraps if we think the terminal will wrap
  > anyway. (nicm@)

  ~ tmux.1                                

  > Default for xterm-keys was wrong, stop documenting it. (nicm@)

  ~ tty.c                                 

  > Konsole incorrectly ignores SU (CSI S) if the parameter is bigger than
  > the scroll region, so clamp it. Reported by Moritz Bunkus. (nicm@)

  ~ alerts.c                              

  > Do not put the window on the alerts queue and add a reference unless the
  > alert is enabled and we are actually going to add the alerts event. (nicm@)

  ~ window.c                              

  > Remove a reference from the right window when removing from a winlink's
  > list. (nicm@)

  ~ alerts.c                              ~ notify.c
  ~ session.c                             ~ tmux.h
  ~ window-choose.c                       ~ window.c

  > Log what is happening with window and session reference counts much more
  > obviously. (nicm@)

  ~ screen-write.c                        

  > Fix UTF-8 combining characters in column 0, based on a diff from Keith
  > Winstein. (nicm@)

vi

  ~ common/exf.c                          

  > Remove extraneous ", NULL" in the assignment of msgstr which was
  > leftover from when msg_cat() was removed.  From Anton Lindqvist (millert@)

== usr.sbin ========================================================== 12/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin

config

  ~ config.8                              

  > Remove KGDB references. (mpi@)

dhcpd

  ~ conflex.c                             ~ confpars.c
  ~ dhcp.c                                ~ dhcpd.conf.5
  ~ dhcpd.h                               ~ dhctoken.h

  > Add 'echo-client-id' statment, so that RFC 6842 behaviour can be
  > turned off for those clients and networks that find it impossible to
  > move past RFC 2131. Modelled on the same statement in recent ISC
  > versions, though we default to 'on' (a.k.a. RFC 6842) rather that
  > 'off' (a.k.a. RFC 2131).
  > Problems reported by Bastien Durel (Xerox Phaser 6022 printer) and
  > Bryan Vyhmeister (Hon Hai Precision router) via misc@. Thanks! (krw@)

  ~ dhcpd.conf.5                          

  > a little more consistent text for previous; ok krw (jmc@)

  ~ dhcpd.conf.5                          

  > remove some repetitive text chunks; ok krw (jmc@)

eeprom

  ~ Makefile                              

  > Install arm64 manpages: eeprom(8), MAKEDEV(8).  ok phessler kettenis
  > (sthen@)

rebound

  ~ rebound.c                             

  > clang warns about some of the strlcpy arguments here, which aren't the
  > typical idiom because there's invisible size dependencies. rewrite some
  > of it to use memcpy, which makes clear the lengths are the same. (tedu@)

smtpd

  ~ mail.file.c                           

  > fix argument check, this should never trigger because it is a libexec
  > called by
  > smtpd, but for the sake of correctness
  > from Edgar Pettijohn
  > ok gilles@ (jung@)

syslogd

  ~ syslogd.8                             ~ syslogd.c

  > Allow syslogd(8) to listen on multiple addresses for incomming TLS
  > connections.  This expands the feature from UDP and TCP to syslog
  > over TLS.
  > input jmc@; OK millert@ (bluhm@)

  ~ log.c                                 ~ log.h
  ~ syslogd.c                             

  > When syslogd(8) failed to open a logfile, the error message could
  > get lost.  Remove log_setdebug() as it adds too much abstraction,
  > use the global variable Started instead.  Set the Started value
  > before the init() function.  Then errors during config file processing
  > will be logged to the console as Initialize is still 0.  This is
  > better than stderr as the latter may be redirected to /dev/null.
  > Print the timestamp and hostname also for direct messages to console,
  > so that they look like all others.
  > bug report jung@; OK benno@ (bluhm@)

syspatch

  ~ syspatch.sh                           

  > Tweak error message when running on an unsupported release. (ajacoutot@)

tcpdump

  ~ print-bgp.c                           

  > Print bgp administrative shutdown messages (draft-ietf-idr-shutdown)
  > From Job Snijders <job -AT instituut -DOT- net>, thanks!
  > ok canacar@, deraadt@ (benno@)

vmd

  ~ dhcp.c                                

  > Don't overflow the allocated DHCP response buffer.
  > When copying the DHCP/BOOTP response into the allocated buffer, use
  > the calculated response length instead of the maximum size of a DHCP
  > packet.  The response length was verified correctly but the very last
  > step missed to use it.
  > Found by Caspar Schutijser and malloc.conf(5) "S"
  > OK deraadt@ (reyk@)

  ~ vm.c                                  

  > spacing (reyk@)

  ~ virtio.c                              ~ vmd.c

  > Generate randomized MAC addresses earlier to keep them across reboots.
  > OK deraadt@ (reyk@)

  ~ i8253.c                               ~ i8253.h

  > rename i8253 "counter" to "channel", a better name for what we are
  > emulating (mlarkin@)

===============================================================================
_______________________________________________
owc mailing list
[email protected]
http://www.squish.net/mailman/listinfo/owc

Reply via email to