OpenBSD 5.5 Changelog

This selection is intended to include all important and all user-visible changes. For a complete record of all changes, please see the "source-changes" mailing list, called "OpenBSD CVS" in the archives, or use CVS.

Note: Problems for which patches exist are marked in red.

For changes in other releases, click below:
2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6,
3.7, 3.8, 3.9, 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 5.0, 5.1, 5.2, 5.3,
5.4, 5.6, 5.7, 5.8, 5.9, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0, 7.1,
7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, current.

Changes made between OpenBSD 5.4 and 5.5

Made ssh(1) ignore environmental variables with embedded '=' or '\0' characters.
Added -C checksum mode to signify(1), to make using sha256 files safer and easier.
If a smtpd(8) peer advertises DSN and we don't want to use it, don't send trailing spaces (not all MTAs can cope).
fdisk(8) -l option added, to force LBA mode.
Fixed miniroot so it can get sets from a msdos partition.
Allow pfctl(8) to use a "*" wildcard on the command line for anchors that were not initially specified with a "*".
Stopped smtpd(8) missing F_BACKUP when dumping envelope (could break backup MX).
Fixes backported from openssl-1.0.1f (CVE-2013-4353, CVE-2013-6449 and CVE-2013-6450).
Made it possible to run X(7) with machdep.allowaperture=0 on hardware supported by radeondrm(4) on macppc too.
Use a larger read buffer, to speed up ftp(1).
Made ssh(1) cache OIDs of supported GSSAPI mechanisms before privsep sandboxing (bz#2107).
Stopped ssh(1) assuming that a socks4 username is \0 terminated.
Avoid early hostname lookups by ssh(1) unless canonicalisation is enabled (bz#2205).
Fix armv7 install script to allow it to work on both sd(4) and eMMC.
Support for ed25519 keys added to xdm(1) and xinit(1).
Made azalia(4) wait until the RIRB DMA engine is ready, so audio device integrated in the Vortex86EX SoC will work.
Abort/close all interrupt pipes when detaching HID devices (drivers attaching to uhidev(4) do not always do this).
radeon(4) workaround for broken BIOS that don't assign an address to the ROM BAR.
Revert r1.348 in sys/dev/pci/if_bge.c, to disable IPv6 TCP checksum offload for now.
Bring back ehci(4) code suspending root hub's ports before reseting the controller (saves power when suspended).
Fixed off by one leading to invalid host stats tree in smtpd(8).
Added "-p <path>" switch to fw_update(1), to specifying the location of firmware packages.
Allow ssh_config(5) to cope with configurations that always refer to canonical hostnames.
Made fw_update(1) print out the path to the firmware packages when in verbose mode.
Give drm(4) a console locator, to make sure /dev/drm0 always matches the primary display.
On mips64, increased _STACKALIGNBYTES, so long doubles on the stack are correctly aligned.
Fixed crash in tmux(1) caused by uninitialised lastwp member of layout_cell.
Basic i210/i211 support added to em(4).
tmux(1) fixed for "-fg/-bg/-style" with 256 colour terminals.
rc(8) now ignores blank characters at the end of ${pkg_scripts}, and will not execute /etc/rc.d/ in that case.
/etc/random.seed support added to alpha, mvme88k and vax.
Improved installer logic to find a filesystem to store the prefetched sets.
Made pax(1) map negative mtimes to zero instead of skipping the affected files.
Many fixes to drm(4) for i915.
Check to see if an i386/amd64 CPU supports tsc, avoid illegal instruction trap when it does not.
Stopped dhclient(8) creating default dhcp-client-identifier if an empty string has been configured as the value.
Fixed tmux(1) memory leaks with paste_replace.
Made it possible to build an i386 kernel with binutils-2.17 again.
Allow mouse down and mouse wheel for any pane with tmux(1) mouse-select-pane (not just in copy mode).
Fixed "p->p_wchan == NULL" panics seen with usb ethernet adapters.
Call control_init() before daemon() so that iscsid(8) and iscsictl(8) reloads work.
Stopped tmux(1) crashing when given an invalid colour.
Added iked(8) "config address" syntax, to list a range of addresses to use in a specified flow.
Basic iked(8) OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"'.
New smtpctl(8) "show status" command, to show if mta/mda/smtp are currently running or paused.
Stopped smtpd(8) looking up pki based on hostname if one was specified for the listener.
Fixed bcrypt(3) to avoid wraparound at 256 characters ("b" revision designation denotes fixed version).
Added initial em(4) support for i354 MAC and M88E1543 PHY.
Unbroke ld.so(1) with ssp-strong/all on sparc64 and powerpc.
Avoid spurious "getsockname failed: Bad file descriptor" errors in ssh(1) -W (bz#2200).
Preliminary nep(4) driver for the Sun Neptune 10/100/1000/10G Ethernet chip.
In radeon(4) drm code, fixed surface sync in fence on cayman (v2).
Allow X(7) to run with machdep.allowaperture=0 on inteldrm(4) and radeondrm(4).
Implemented the roff(7) ".as" request (append to user-defined string).
Let roff(7) handle some read-only number registers (e.g. .H and .V).
Re-added audio devices to the zaurus.
Updated to xterm(1) version 301.
Updated to xf86-video-intel 2.99.910 (aka 3.0RC10).
When terminfo(5) has colors#256, tmux(1) will now use setaf and setab for the 256 colour set.
Made C-j the same as C-m with tmux(1) mode keys.
In qle(4), added firmware for isp25xx; added isp25xx support.
Removed isp24xx-related code. Broken, and superceded by qle(4).
Fixed strptime(3) logic bug, as tm_yday can only be inferred if both tm_mday and tm_mon are set.
On i386/amd64, allow "disabling" of pagefaults, needed for some inteldrm(4) "fast" path code.
Fixed drm(4) bug which only copied out 32 bits of a 64-bit value.
Octeon now partially supports the D-Link DSR-500.
When sending neighbour advertisements, use the carp(4) mac address as target lladdr.
Allow larger totals to be displayed by iostat(8).
Show in dmesg(8) when an attached sd(4) is readonly, makes it clearer why write operations fail.
Introduced the qle(4) driver for QLogic ISP24xx fibre channel HBAs.
Made iked(8) set the msg_responded flag on the original message.
New dd(1) operands "status=noxfer" and "status=none", to suppress status lines printed to stderr.
Support for Intel Centrino Wireless-N 2200/105/135 added to iwn(4).
Stopped systat(1)'s pftop leaking memory at every queue refresh.
Build isp2xxx firmware into separate object files, to only include one when both isp(4) and qla(4) are enabled.
On sgi, block all interrupts that can grab the kernel lock.
Intel Centrino Wireless-N 2230 support added to iwn(4).
Fixed tmux(1) xterm-keys change where some keys (e.g. \033OA) were wrongly treated as partial matches.
Run the serving and privileged ntpd(8) processes at high priority, to lower latency.
Fixed MAC address format to let ospf work on myx(4) even without PROMISC enabled on a network interface.
Fixed drm(4) ttm: to handle in-memory region copies; ttm_bo_move_memcpy; memory type compatibility checks.
arc4random_uniform(3) returns a value strictly less than its argument; fixed arithmetic so that PID_MAX can be reached when the kernel is forking.
Many drm(4) on radeon(4) fixes, including: dac handling improvements; endian bugs; LCD record parsing; handling of variable sized arrays for router objects; panel scaling with eDP and LVDS bridges.
Added support in binutils for i386 XSAVE family of instructions: xgetbv, xsetbv, xsave, xrstor, and xsaveopt.
Fixed pmap(9) on vax when processes are using more than 512KB of stack.
Fixed failure of dhclient(8) to write resolv.conf(5) when -L is used; made add_address() and add_route() also wait until imsg is in pipe.
Stopped pkg_add(1) taking crypto sigs into account for "always-update" comparisons (the sig will always differ).
Stopped malformed IMSG_HUP messages causing the privileged dhclient(8) process to exit.
Fixed memory leak introduced in r1.96 of sys/dev/usb/usb_subr.c.
Fixed system hang issue when using radeon(4) KMS with older cards; fixed drm(4) card_posted check for newer asics; fixed endian issues with DP (v3) handling.
Rectified lock order reversal problem to stop panics seen in multi-threaded programs when using gdb(1).
When running sysmerge(8), only create DBDIR if it does not exist.
Made bus_dmamap_load(9) and bus_dmamap_unload(9) "mpsafe" on hppa.
Create dhclient(8) lease files and dhcpd(8) lease files with permissions 0640, rather than 0000 and 0664 respectively.
Be less verbose for pkg_delete(1) -X.
Stop disabling/enabling interrupts in the interrupt handler for "chip type D" (Marvell 9580).
Copy the correct number of channels in sndiod(8) join/expand.
Use the proper integer width when sndiod(8) calls AMSG_ISSET().
Macppc G5 systems with >2GB RAM now report correct amount of memory (kernel still only uses the lower 2GB).
Changed pkg_add(1) default to requiring signed packages.
Limit the number of currently opened pkg_add(1) packages, to limit memory usage.
Fixed booting of socppc n1200 with a usb disk plugged in.
Allow 64-bit page table entries on mips64 and sgi, making physical memory beyond 16GB addressable by pmap(9).
Stopped attempting to initialise the time from an uninitialised variable on socppc.
In the installer, make sure a free bpf(4) exists before dhclient(8) is run.
Fixed remote printing by lpd(8) which was broken in r1.50 of printjob.c.
Made carp(4) send IPv6 neighbour advertisements with the "router" flag when acting as router. Stops clients losing default routes during carp(4) failover.
Updated to sendmail(1) version 8.14.8.
Made dhclient(8) create "-L" leases files with the same 0000 permissions as regular leases.IF files.
Log when dhclient(8) fails to fchmod(2) or fchown(2) the file written in priv_write_file().
Fixed inet6_opt_init(3) to only check extlen when extbuff is not NULL (as per RFC 3542).
Fixed regression in ssh(1) for UsePrivilegedPort=yes.
Only set the cwm(1) urgency flag if the client is not active.
Fixed a MP race in the alpha's fpu context saving code.
Stopped tcpdump(8) segfaulting on IPv6 NFS traffic.
Made pax(1) cope with a stripped down format list (e.g. when compiled with -DNOCPIO).
Fixed spurious SIGSEGVs in inteldrm(4) with xf86-video-intel version 2.99.909.
Fixed myx(4) race, which prevented the driver from transmitting packets.
Always reset the signature when fdisk(8) is writing an MBR to disk, to ensure MBR is readable by disklabel(8).
kvm(3) crash dump parsing fixes: correct paddr in process info and pids in file info.
Made syslogd(8) ignore ENETUNREACH, so remote logging is not stuck after a "network unreachable" error.
Added smtpd(8) support for DSN and Enhanced Status Code.
Allow the smtpd(8) admin to pause relaying to a specific domain.
Socketmap table backend added to smtpd(8).
In smtpd(8), extend the allowed charset for email address; escape potentially dangerous ones.
Fixed smtpd(8) dump function which occurred with some flag combinations.
Reverted broken part of sys/dev/pci/if_bge.c r1.329 (link state handling for the BCM5700 B2).
Delayed lowercasing of hostname until right before hostname canonicalisation, to unbreak case-sensitive matching of ssh_config(5).
Fixed dpb issue with E=x11/qt3.
Fix ssh(1) memory leak in ECDSA_SIG_new().
Stopped ucom(4) trying to cleanup if it is being detached when returning from tsleep(9). Fixes a panic.
Fixed a null dereference introduced when uftdi(4) was converted to use usbd_is_dying().
On alpha, make sure sched_init_cpu() on the secondary processors is invoked with the kernel lock held.
Stopped pkg_add(1) mixing up the list of manpages to be deleted with those to be added.
Store a compact form of manpages when running pkg_add(1).
Updated to xf86-video-intel 2.99.909.
Properly clean up after sysmerge(8) is run.
Build bsd.mp on the alpha platform.
Allow use of "*************" as password in the installer response file for accounts with password logins disabled but login (e.g. with ssh-keys) still possible.
Simplified how "kept" packages are handled by pkg_add(1).
Rearrange interrupt register processing for 2200s. Makes onboard FC controllers in Sun systems work better.
Converted memset(3) of potentially-private ssh(1) and sshd(8) data to explicit_bzero().
Improved cut(1) POSIX compliance: continue to process the remaining file operands even after not finding an input file.
On alpha, manage a per-cpu pmap(9) free entries queue, in addition to the in-use queue to avoid corrupting memory; simplified try_lock(), to avoid one forward branch in the common case.
Take bwidth into account for the cwm(1) menu's position and size.
Fixed pkg_add(1) kept packages bug (they have to be completed somewhere).
When pkg_add(1) is stopped by ^C^C, try to exit only when the database is in a safe state.
drm(4) i915 now invalidates TLBs for the rings after a reset.
On amd64, removed some of the excessive cache and TLB flushing going on during hibernate unpack.
Allow the cwm(1) config parser continue parsing even after encountering an error.
Replaced most usages of bzero(3) with explicit_bzero in ssh(1) and lib/libutil/bcrypt_pbkdf.c and pkcs5_pbkdf2.c.
Fixed partial matches in tmux(4) with xterm-keys on.
Add \033[18t window operations to tmux(1).
Set IFCAP_VLAN_MTU on tl(4) to allow for VLAN sized frames.
If a scsi(4) device doesn't have device ids or serial numbers, try using node_wwn to generate a devid.
Fixed VCPU reset sequence bug on bge(4) BCM5906.
Simplified adjtime(2) by keeping track of the adjustment in a 64-bit integer. Stops ntpd(8) losing sync.
Stopped umodem(4) matching control interfaces if data interface is missing or already claimed. Fixes Ericsson F3507g.
Made sure partial installs of a package are handled properly by pkg_add(1).
Added an MI api for atomic ops (e.g atomic_add_int(9)) in the kernel.
Added a -d flag to fw_update(1), to remove the specified firmware packages.
Added fuse(4) support for IO_APPEND.
Check command name/path for truncation and provide user feedback during cwm(1) config parse .
Fixed ftp(1) progress meter, broken after the introduction of the '-D' flag
Allow replacing separate foo-{fg,bg,attr} tmux(1) options with a single foo-style option (e.g. "set -g status-style fg=yellow,bg=red,blink").
Remember the last active tmux(1) pane in the top-bottom or left-right cell so that it can be restored when using selectp -L/-R/etc.
Enable IPv6 TCP checksum offload for bge(4).
Check cwm(1) "ignore windowname" for truncation and provide user feedback during config parse.
Error out on an unacceptable worm(6) length argument; start with the cursor on the worm's head.
nginx.conf default changed to stop sending nginx(8) version number in error pages and "Server" header.
cwm(1) now follows the EWMH spec: if the cardinal returned is 0xFFFFFFFF (-1) then the window should appear on all desktops.
Added CoreChip RD9700 support to udav(4).
Dropped FETCH_CMD from sysmerge(8), now always use ftp(1).
Fixes/workarounds for bge(4) BCM5719/BCM5720/BCM57765/BCM57766 chipsets; added support for the new BCM5762 ASIC (BCM5725/BCM5727/BCM57767); added all of the newer PCI ids.
Replaced ssl(3) HMAC and MD5 with implementations based on native sshd(8) ssh_digest_*.
Removed the no-op flags -L and -V from compress(1); removed -g flag from gzip(1) (non-standard, only makes sense in compress(1)).
Enhance sysmerge(8) errors output and display what is going on.
Enabled IPv6 checksum offload in jmw(4).
Attempt to make user changes of keyboard layout configs more "sticky" on wsmux(4).
Work in progress code added for SMP on the alpha architecture.
Installer fixes to: extend logic for finding a location to place prefetched sets; complain loudly on errors and give users a chance to react; improve detection of ftp(1) fails while fetching sets; be more cautious while removing temporary directories.
tcpdump(8) now correctly shows that checksums of zero are invalid when listening to UDP over IPv6 traffic.
Stopped ufs_setattr() assuming atime/mtime/ctime flag bits needing to be updated weren't already set.
Stopped pkg_add(1) allowing file permissions to be adjusted without an explicit @mode annotation.
Changed the default pf.conf(5) block policy to "block return".
Reverted counter size changes in netinet, as it broke netstat(1).
Added a special case to ssh(1) for the DH group size for 3des-cbc, which has an effective strength much lower than the key size.
Corrected parsing of dhclient.conf(5) statements "fixed-address" and "next-server".
Ditched kernel high and low water marks for vfs(9) pages and replaced with a single target, to minimise use of biglock.
Disable lapic when halting CPUs on i386, for improved suspend.
Implemented the traceroute6(8) "-c", "-D" and "-S" flags (from traceroute(8)).
Improved formatting of broken blocks in mandoc(1) -Tman.
When a disklabel(5) is read from a MBR partitioned disk, preserve any changes the user makes with disklabel(8) "-b".
Made iked(8) re-lookup the policy as soon as we have the ID of the peer (destid).
Enabled format-string checks for log_*() in iked(8).
Made sure iked(8) sa_lookup() can actually find the SAs.
Stopped iked(8) leaking prv RSA key for each signature.
Avoid wdc(4) panics where free_xfer is called after scsi_done calls xfer_put.
In bgpd(8), corrected the matching for filter rules of "prefixlen = XX".
Fixed VRAM size calculation for VRAM >= 4GB, and many other fixes for radeon(4).
Fixed a use-after-free when GPU acceleration disabled; many more drm(4) fixes.
Killed (inaccurate) hardware checksummed packet counters and use software counters instead; switched netstat(1) to use them.
Allow the special bgpd(8) case of making a route valid before setting the blackhole flag on it.
Support multi-stream archives in pkg_sign(1), storing packing-list as a separate stream for efficiency.
Made cwm(1) supply a more useful title for windows launched via the ssh(1) command menu ("[ssh] <hostname>").
Switched radeon(4) drm to MSI on the cards that support it.
Added -D shorttitle support to ftp(1).
Added initial softraid(4) support for rebuilding a RAID5 volume.
Fixed resume on some radeon(4) rs4xx(v2) boards.
Support paste key in tmux(1) copy mode input (for search etc); clamp length to screen width.
Properly release X(7) resources during cwm(1) teardown.
Streamlined cwm(1) event loop/restart/quit handling.
Implemented the "\:" (optional line break) escape sequence in mandoc(1).
Do not permit periods in tmux(1) session names.
Only exit tmux(1) copy mode at the bottom if no selection is in progress.
bus_dmamap_load(9) and bus_dmamap_unload(9) made mpsafe on sparc64.
sysmerge(8) cleans up work directory better; improved handling and comparisons of symlinks; simplified signature handling.
Removed genmask support from route(8).
Fixed problems installing from atapiscsi(4) cdrom devices.
Added CoreChip RD9700 support to udav(4).
Fixed a bug where stale bgpd(8) routes were not properly flushed on sessions announcing the graceful restart capability.
Made sure the disklabel(5) is written to the correct spot on devices with non-512-byte sectors.
Improved isakmpd(8) randomisation.
Introduced fine grained locking to myx(4) (only from the interrupt side).
Fixed a double free caused by a relayd.conf(5) config with two "listen on" statements in a relay.
Allow pflow(4) to determine the src IP address based on the route table if flowsrc is not set.
Added a virtio(4) random driver.
Enabled mpsafe interrupts on pyro(4/sparc64).
Do not clean the multicast records of an interface when it is destroyed (as pcb multicast options might keep a pointer to them).
Disabled lapic when halting amd64 CPUs. Fixes suspend on some machines.
Enabled signature checking by default to sysmerge(8), with new option -S to skip.
Allow dhclient.conf(5) to specify "fixed-address", "next-serve", "filename" and "server-name".
When creating the effective lease, dhclient.conf(5) can now override anything in an offer or saved lease.
Fixed softraid(4) RAID5 write functionality: changed parity calculation algorithm to avoid volume scrubs; allow writes to function correctly even when a chunk is lost.
Allow pf(4) to match "any" interface (excluding loopback).
Added sdmmc(4) support to i386/amd64 install media.
Fixed lpd(8) race condition during symlink check.
Added ubcmtp driver for Broadcom multitouch trackpads (on some MacBooks) enabling multi-finger gestures with synaptics(4).
Convert the softraid(4) work unit workqs to taskqs.
Added strong stack protector mode for propolice in gcc(1) version 3.
Support added to pfctl(8) for "!received-on <interface>".
Allow the Alix APU to reboot by changing the acpi(4) checks.
Added newqueue support to systat(1) for the queue view.
Allow vio(4) to recover after running out of mbuf(9)s.
Allow userland to pass RTF_MPATH flag. Unbreaks multipath routes.
Set initial pf(4) ruleset to explicitly allow dhcp / bootp and dhcpv6. Lease renewals blocked without this change.
Introduced fine grained locking around the lists of packet handlers myx(4) maintains.
Reworked parsing of numbers by dhclient(8) to improve the error messages.
Introduced qla(4), a new driver for Qlogic fibre channel HBAs (only ISP23xx so far).
Count dropped icmp(4) errors when the rate limit is exceeded. netstat(1) will report this now.
When installboot(8) is copying files, do it in 512 byte blocks to appease install media.
Merged mesa 9.2.5.
Reworked installboot(8) to use a single directory with a single makefile.
Call random_start() immediately after cpu_startup.
Support a second -v on mandocdb(8), to show keys while they are being added.
Unlink an associated pf(4) divert state when a socket connection gets destroyed.
Made mos(4) pass received broadcast frames explicitly if not in promiscuous mode. Fixes a problem with initiating connections.
Stopped xterm(1) "-hold" from chewing CPU cycles.
Remove the RAID 4 discipline from softraid(4). RAID 5 should be used instead.
Updated the radeon(4) drm headers based on libdrm 2.4.51; updated libdrm to 2.4.51.
Added installboot(8) "-r", to allows the mount point of the root filesystem to be specified.
Stopped dhclient(8) following symlinks for -l and -L arguments.
Made dhclient(8) parse_X return -1 when it encounters a parsing error. Enables recognition of zero length value vs parsing error.
Fixed off-by-one on specially crafted /etc/shells file.
Optimisations to mandocdb: db build time goes down by 10% (now 1.9x of makewhatis(8)); db size goes down by 4% (now 11x of makewhatis(8)); db build time with -Q goes down by 15% (now at 0.28x of makewhatis(8)); db size with -Q goes down by 3% (now 3.35x of makewhatis(8)).
Avoid size_t overflows while dhclient(8) is reading /etc/resolv.conf.tail, and in file(1) apprentice_map.
Added support for mknod(8) in fuse(4); removed an infinite loop in fuse_device_cleanup().
Incorrect cast to size_t removed from sftp(1), which broke resume of large downloads.
Added more luna88k-specific initialisation in xf86-video-wsfb.
Re-open the default pipe with updated values when attaching a new ohci(4) or ehci(4) device, so the device will be recognised.
Added support for the DS1337 TOD octrtc(4/octeon) clocks.
Added md5(1) -C option (to only do checksum comparison for specified files).
Initialise _res.nsaddr_list in res_init(), fixing some programs which depend on bind resolver internals.
Reset the top(1) cursor position each time there is a resize event.
Added new option "-fstack-protector-strong" for gcc(1) version 4.
Added the "next" keyword as an alias for "+ 1" for relative times with at(1); support "months" and "years" relative time units (all per POSIX).
When parsing dhclient.conf(5) or dhclient.leases(5) and encountering a "}" or a ";", always continue reading rest of file.
Enabled gcc(1) -Wbounded by default.
New signify(1) options: -m message and -x signature.
Reverted to pkg_add(1) PackageRepository.pm r1.97, as there is a memory leak when using internal GZip.
Updated to freetype 2.5.2.
Added -DNOCPIO option to pax(1), for use by distrib/special
Let tcpdump(8) detect bad ICMP/ICMPv6 checksums with the -v flag.
While the hibernated image is being unpacked, acpi(4) now demotes APs to real mode, place them in HLT loop. Fixes some spurious reboots on resume.
Added MSI support to jme(4).
Corrected sigpending(2) argument handling, to stop it writing to the wrong memory on hppa and hppa64.
When md5(1) is using a checklist, print MISSING for non-existent files.
Fixed ping6(8) bug where binary built with stack-protector-strong would fail to set the routing table id.
Made ddb(4) "show mbuf" print all mbuf(9) fields in a consistent way.
Don't let ssh(1) or sshd(8) connect to clients/servers that suffer from SSH_BUG_DERIVEKEY. These are too vulnerable to KEX attacks.
Option "-e" for embedded signatures added to signify(1).
Allow tmux(1) "attach-session -t" to accept a window and pane to select them on attach; made "switch-client -t" accept a window and pane.
tmux(1) changes: check for truncation when copying path; don't use a temporary buffer in screen_set_title; include strerror in output when connecting to server fails.
Fixed the radeon(4) burner method, ensuring cookie is a pointer to rasops_info. Fixes hangs on shutdown.
When sftp(1) is formating the time, show dates in the future with the year; fixed incorrect date calculations.
Updated pax(1) -v format to match ls(1) -l: display the year for dates in the future; eliminate bogus handling of LC_TIME environment variable.
Per POSIX, times in the future are now reported by ls(1) with the year.
Added support for -h hashfile to cksum(1), md5(1), sha1(1) and sha256(1).
Updated to libXfont 1.4.7 (includes fix for CVE-2013-6462).
5.3 and 5.4 SECURITY FIX: CVE-2013-6462: unlimited "sscanf" can overflow the Xserver(1) libXfont stack buffer.
A source code patch is available for 5.3 and 5.4.
Restrict what characters can be in a pkg_add(1) signer, to make certain it's not possible to go ../ from /etc/signify.
Propagate an rdomain number to the icmp6(4) nd6_lookup independently from the ifp pointer. Prevents a crash.
Follow-up fixes for IFID collision handling in IPv6CP; properly change the link-local address.
Made pkg_add(1) verify all checksums, including special files (e.g. prevents people from tampering with DESC).
Sped up mandocdb(8) -Q by another 3% (now at 39.5% of makewhatis(8)).
Delay checking vnode(9) locking of the target vnodes in tmpfs_rename() until we've confirmed they're on the same filesystem as the source.
Allow pkg_add(1) processing of package lists in parallel, a large speedup when re-gzipping a signed package.
Enable memory beyond 1.5GB on sgi octane, to test if kernel panics seen on some MP systems have been fixed.
More speedups for mandocdb(8) -Q mode, found with gprof(1).
Fixed sparc64 kernel profiling.
On sgi, let 2048-byte sector media use a volume header using fake 512-byte sectors, yet still allow reading the native label from it.
Fixed mandocdb(8) -d and -u (broken by recent optimisations).
Make sure in6_ifdetach() removes the ff01::1 route for the detaching interface, too.
make(1) "target: prereq" solving now done after parsing, not during command execution.
Added option -Q (quick) to mandoc(1), for accelerated generation of reduced-size databases.
On i386/amd64, don't use the first 64KB memory for anything (including tramps and uvm). Avoids possible corruption by buggy BIOS SMM code.
Hooked installboot(8) into the build.
No longer have "unreachable manuals", removed the code from mandoc(1).
/dev/random added to the install media, providing additional usable entropy for bsd.rd and first boot.
Fixed vgafb(4) on macppc to bring back textmode cursor.
Updated to x11proto 7.0.25 and xauth 1.0.8.
When rebooting from single user mode, stopped init(8) raising securelevel(7) at rc.shutdown(8).
Ensure we close the socket to the whois(1) server before returning, to avoid a loop.
Made pf(4) queues properly disappear when interfaces are destroyed.
Updated to: xf86-input-elographics 1.4.1, xf86-input-joystick 1.6.2, xf86-input-vmmouse 13.0.0, libpciacces 0.13.2 and glproto 1.4.17.
Calculate proper cwm(1) menu width/height on the first Expose event.
Allowed cwm(1) to accept _NET_WM_DESKTOP and _NET_CURRENT_DESKTOP ClientMessage.
Don't allow cwm(1) to resize to 0x0 during mouse resize.
Added primary support for luna88k 4bpp/8bpp frame buffer, with colour support on the luna wscons(4).
Updated to xterm(1) to version 300.
Temporarily disabled ahci(4) MSI for Samsung XP941.
Tweaked azalia(4) to enable beep and CD controls on ALC282, ALC221 and ALC269.
Fixed mkuboot(8) "make bsd.umg"; allow it to handle PT_LOAD, fail on any others.
Fixed deadlocks when sndiod(8) device slot uses the SIO_SYNC mode.
Fixed ztsscale(8/zaurus) after struct wscons_event size change.
Don't consider ld.so(1) to be successfully built unless a test program using it works.
Experimental feature to let apropos(1) show different keys than .Nd.
Added signify(1), a tool to sign and verify signatures.
First steps to replacing the Berkeley-DB based mandocdb with an sqlite3(1) version.
ssh(1) and sshd(8) now refuse keys from clients/servers using obsolete RSA+MD5 signature scheme.
Reverted rgephy(4) to pre r1.25 behaviour: fetch link and media status when attached to re(4).
Enabled azalia(4) snooping on Lynx Point-LP HD Audio. Fixes Acer Aspire E1 572G audio.
Support .St -p1003.1-2013, "IEEE Std 1003.1-2008/Cor 1-2013" in mdoc(7).
Corrected initialisation of the Bt458 in the luna 8bpp frame buffer.
Stopped mandoc(1) triggering end-of-sentence spacing (near period) at partial implicit macros.
When showing ssh(1) hostkeys, show ed25519 keys as well.
Stopped ssh(1) refusing to load ed25519 certificates.
Allow deletion of ed25519 keys from the ssh(1) agent.
Allow ssh(1) ed25519 keys to appear as certificate authorities.
Call PHY_RESET upon attaching eephy(4) to trigger PHY initialisation (to match behaviour before r1.52).
i386 now uses PIE.
Update to Xserver(1) version 1.14.5 (mac68k and mvmeppc are no longer supported).
Added installboot support for vax, hp300, hppa64, sparc64 and landisk.
arc4random(3) accessible by init(8), leading to random pids for anything besides 0 and 1.
Create a seed file for the bootloader in /etc/random.seed, for random data very early in the boot process.
Free(bbp) in newfs_ext2fs(8) error paths (coverity CID 274748).
"/stand" directory removed (has not been used in decades).
Provide a bootstrap implementation for use with architectures like hppa, landisk and vax.
Initial version of a unified installboot(8). For now only for i386/hppa/amd64.
rc(8) will now report absence of pkg_scripts.
Properly remap mandoc(1) \B, \H, \h, \L, and \l to ESCAPE_IGNORE.
Parse and ignore the roff(7) escape sequences \d (move half line down) and \u (move half line up).
Implemented .Fo/.Fa/.Fc indentation and break handling for mandoc(1) -Tman.
Probe for a keyboard on all iockbc(4/sgi) ports, attach to the first one found.
Fixed pkg_add(1) autoloading of quirks; avoid loading the old quirks file; always report if quirks should be there if it can't be loaded.
In the SYNOPSIS, implemented hanging indentation for .Fo and avoid mandoc(1) outputting line breaks inside .Fa arguments.
Added mdoc(7) support for .St -xsh4.2, the System Interfaces part of the original Single UNIX Specification.
Final circleq to tailq fix for netstat(1), tcpbench(1) and systat(1).
Stopped mandoc(1) breaking output lines in .Fn function arguments in SYNOPSIS mode.
Rearranged/corrected bpf(4) timeout conditionals. Fixes negative timeout panics.
Implemented SYNOPSIS .Fn indentation for mandoc(1) -Tman.
Stopped mandoc(1) outputting line breaks after block macros spanning more than one input line when encountering a ".Bk".
Added ftp(1) support for SSL/TLS server certificate validation (enabled by default); allow setting preferred ciphers.
Fixed mg(1) bugs: dotline off by one when adding newline at EOF; align and sync dotlines when displaying the same buffer in two windows.
Allow pkg_add(1) to cope with the change in ftp(1) warning messages.
The xbase set requires the comp set. When installing, include comp automatically if xbase is selected.
Fixed IPv6 functionality in tftp-proxy(8); implemented "-a" option to make it work on a NAT gateway; generate pass rules instead of erroring out when no address for the current AF was specified.
Revert previous acpi(4) commit, which made resume hang on some GENERIC.MP systems.
Made ld.so(1) pass its cleanup handler, stopped it calling atexit(4) directly on i386, sparc64, alpha, powerpc, amd64 and hppa.
In mandoc(1), implemented hanging indentation for .Fn in SYNOPSIS mode.
radeon(4) now tries to keep the framebuffer console layout set up by the firmware on sparc64.
On alpha, set the primary CPU's PAL revision correctly, to properly spin up secondary processors.
Implemented mandoc(1) end-of-sentence spacing at the end of man(7) macro lines.
Fixed dhclient(8) "string constant too long" errors when reading back a lease with filename or servername attributes containing escaped characters.
Save and restore acpihpet(4) configuration on suspend/resume.
Fixed locking in the drm(4) i915 page fault handler.
Allow kdump(1) to recognise itimer and ktrace facility names to {get,set}itimer() and ktrace().
Add support for truncate in fuse(4).
Added vioscsi(4) driver, work-in-progress but functional enough to work with both Google Compute Engine and RHEVM.
Made mg(1) set the correct line number after successfully searching with re-search-{backward,forward}.
Fixed ksh(1) crash when trying to access ${12345678901234567890}.
When ftp(1) is writing a file, break out when we get a write(2) error, not just an EPIPE.
Switched netstat(1), systat(1) and tcpbench(1) from CIRCLEQ to TAILQ and purged last renants of CIRCLEQ in the base.
Reliability fix for ssl(8) SHA384 SSL/TLS ciphers, to avoid application crash on strict alignment architectures.
5.3 and 5.4 RELIABILITY FIX: avoid application crash while using ssl(8) SHA384 SSL/TLS ciphers.
A source code patch is available for 5.3 and 5.4.
Initialise each cpu's mttr properly (for PAT) at boot and after suspend/resume on i386/amd64.
Made mg(1) "dired-unmark-backward" behave the same as emacs.
Plugged memory leak in tftp-proxy(8).
Recognise octeon2 cpus, like those found in the lanner mr326.
Stopped ssh-agent(1) from crashing (NULL deref) when deleting PKCS#11 keys from an agent that has a mix of normal and PKCS#11 keys (bz#2186).
Fixed multiple remote forwardings with dynamically assigned listen ports, so ssh(1) client can discriminate between them (bz#2147).
Avoid potential integer overflow in ssh(1) client_alive_interval timeout (bz#2170).
Made ssh-add(1) skip requesting smartcard PIN when removing keys from agent (bz#2187).
Provide a random stackgap on pthread frames.
Removed artificial limit on the ksh(1) max array index.
Reverted the other part of bpf.c's r1.84. May finally fix "timeout_add: to_ticks (-1) < 0".
Changed install password prompts; added autoinstall(8) question for root ssh(1) pubkey; make pubkey prompts appear in log.
Correctly read strings containing non-printable characters in dhclient(8) lease file; allow embedded NUL characters rather than skipping them.
Cleanup in ksh(1) code for ctypes, and re-auditing of this area.
Added tcgetsid(3) function, as it is now in POSIX base.
Back-port code from binutils 2.16, so weak undefined references work on alpha.
Run spamd-setup from within /etc/rc.d/spamd; made the rc.d(8) script take $spamd_black into consideration.
Bugfix by switching generic drm(4) modesetting code to give negative errno return values.
Made acpi(4) restore sysctl(8) hw.setperf upon resume like we do for apm(4) on i386.
Implemented cwm(1) support for _NET_WM_STATE_FULLSCREEN hint, with keybinding changes: CM-f "fullscreen", CM-m "maximize".
Changed subject of install/upgrade log to better match periodic maintenance emails.
Allow double quotes to be quoted (by doubling them) in mdoc(7), to match roff(7) and man(7).
Prevented drm(4) causing a kernel panic if an unsupported frame buffer configuration is requested.
Made ssh-add(1) also add .ssh/id_ed25519, to match the manual page.
Removed popa3d(8) from base (no plaintext-password-only daemons allowed anymore).
Fixed ubt(4) compilation after last commit to sys/dev/usb/ubt.c; fixed bthub compilation.
Overhauled intel(4) i915 pread/pwrite code, to fix cache coherency issues and reduce screen artifacts.
Avoid timeouts of ULONG_MAX milliseconds. Stops the Xserver(1) from crashing with "select returned EINVAL" messages.
In dhclient(8), update timestamps in "effective" lease prior to printing the lease.
Enabled tmpfs so it gets tested some more.
Instead of using the work area, use the Xinerama area for cwm(1) snap calculations.
Initial version of autoinstall(8) manpage, for unattended installs/upgrades.
Save-set when cwm(1) is re-exec'ing so as to not lose State on our hidden clients.
Added cwmrc(5) support for XUrgency and matching _NET_WM_STATE_DEMANDS_ATTENTION ewmh hint, with configurable urgencyborder.
Rewritten receive filter handling and ioctl bits in aue(4).
Have df(1) in the daily(8) output show used/free inode levels.
Make sure cwm(1) really takes the work area gap into account with snap calculations.
Track the last event timestamp and pass it on for cwm(1) WM_TAKE_FOCUS ClientMessage. Solves focus order issue.
Fixed static linking of libpthread.
Better bus error diagnostics on sgi (only affects IP28).
Revert change to sha256 in sys/dev/rnd.c, so ramdisk will build again.
Use u_int32_t to store the magic number sent by sppp(4). Fixes a bug on big-endian LP64 archs.
Use a correct pexp to unbreak identd(8) stop/reload (old pexp in /var/run/rc.d/identd has to be manually removed).
Revert to return EPERM for sem_init(3) pshared until it works properly.
Support XA_WM_HINTS in cwm(1) PropertyNotify events.
In sys/dev/rnd.c, replace use of md5(1) with sha256(1).
Prevent gcc(1) from inlining the unsafe functions (and hiding warnings for) sprintf(3), vsprintf(3), stpcpy(3), strcat(3) and strcpy(3).
Redraw cwm(1) client border when unhiding.
Dropped the f0, f1, f2 gettytab(5) capabilities ("modern" replacement is the set of i#, o#, c#, l# to poke magic numbers into termios(4)).
Added infrastructure to create un-biglocked task queues.
Stopped fuse(4) attempt to free a non-heap object.
At resume, do not move flushing characters in from the com(4) chip, as there shouldn't be any.
Remove MD intagp(4) code that is unused now that inteldrm(4) manages the GTT all by itself.
Re-factor processing of classless static routes option (121) in dhclient(8); added more data validation.
Fixed crash on urndis(4) detach.
Stopped iked(8) dropping messages if we are usually the initiator and the peer initiates rekeying first.
Allow uvm(9) aobj to shrink and grow, for mount_tmpfs(8) support.
In sgi architecture, fixed boot block installation on IP28.
Fix cwm(1) client group shortcut in menu lists when clients aren't assigned to a group, to fix a crash.
Updated to Xserver(1) version 1.14.4.
Enabled rum(4) for armv7.
Fixed pcn(4), to allow bringing interface out of all-multicast mode once a range of multicast addresses has been found.
Corrected the sudo(8) check for whether a user may change the login class.
Enabled fast path for relocations and enabled cpu relocations on intel(4) i915.
If the ring was full, make jme(4) put the packet back on the queue so it can be transmitted.
Fixed jme(4) error handling for DMA.
Made intel(4) clflush() flush the correct cache line on i386/amd64. Fixes gnome screen corruption and hangs.
Stopped intel(4) i915 from panicking if an object is truncated while still mapped.
Fixed smtpctl(8) resume route.
ssh(1) now supports ed25519 hostkeys and user identities (see http://ed25519.cr.yp.to/software.html).
New ssh(1) private key format, with bcrypt as the default KDF.
Fixed memory leak in sftp(1) error path in do_readdir().
Warn when smtpd(8) fails to parse a field.
When a relay fails, let the smtpd(8) scheduler update all envelopes in the holdq as if they tempfailed.
Libcompat (for compatability with 4.3BSD) is purged.
Corrected spin timeout detection in __mp_lock debug code.
Fixed ssh(1) AuthorizedKeysCommand inside a Match block (bz#2161).
When dhclient(8) receives a /32 IP address assignment, mimic ISC DHCP by adding a direct route(8) for the default gateway.
Fixed the installer's parsing of nwids containing blanks.
Protect calls to bio_getitall with the sc_lock, so mfi(4) doesn't panic.
Don't leak local_fd on sftp(1) error (bz#2171).
Allow sgi IP27 to be able to boot off cdrom via the "Install System Software" menu.
Fixed iwi(4) to cope with fatal firmware errors: reset chip, reload firmware and bring the interface back up.
Fixed an out-of-bounds-memcpy in iked(8) pfkey_process().
smtpd(8) scheduler_ramqueue is now in O(log n).
Stopped fuse(4) appending a NUL character to buf in readlink(2); more checks for malloc(3) return values.
Allow fuse(4) to free the representation of the vnode(9) in userspace.
Unmount the fuse(4) filesystem if communication ends with the fuse device.
Added missing fuse(4) checks that the communication channel with libfuse is still open before sending fusebufs.
Stopped smtpd(8) sending all delivery notifications to the queue in one go.
Warn when smtpd(8) fails to enqueue an internal bounce.
Fixed dc(4) so it can bring the interface out of all multicast mode once a range of multicast addresses; fixed multicast range checking.
When cwm(1) receives a NotionNotify event, don't redraw the top menu selection.
Always highlight the first menu item in the cwm(1) menu.
Prepend the group shortcut in the cwm(1) client search menu; prepend shortcut in unhide menu.
Stopped ntfs subsystem trying to put an off_t into an int, which resulted in a 2GB limit.
Avoid truncating ntfs 64-bit attribute values to 32-bits. Otherwise an attribute's data length value wraps at 4GB.
If not hidden during an UnmapNotify event, cwm(1) will now un-manage the client.
Corrected ssh(1) bzero of chacha20+poly1305 key context (bz#2177).
Made ssh(1) key_to_blob() return a NULL blob on failure (part of bz#2175).
Fixed use-after-free in ssh(1) ssh-pkcs11-helper.c (bz#2175).
Switched mvme68k to the MI zs(4/mvme68k) driver.
More robust parsing of the DHCP lease file for autoinstall.
Updated to pixman 0.32.4.
Fixed intel(4) write-read race with multiple rings.
Brightness quirk for Acer Aspire 4736Z added to intel(4)
Prevent "bogus xmit rate %d setup" panics in wireless IBSS mode.
Made ifconfig(8) scan show the nwid, channel, and bssid for IBSS networks (not just access points).
Allow the autoinstaller to pass a public ssh(1) key for inclusion in the user's .ssh/authorized_keys.
Fixed nsd(8) bug#534: IXFR query loop over UDP for zones that are unchanged, to stop query flood from the slave.
Use arc4random(3) instead of srand(3) and rand(3) in kerberos(8).
Restore radeon(4) frame buffer upon last close; makes sure we we have a usable console after exiting X(7).
Do not send the smtpd(8) holdq release message if no envelope was held for a relay.
Do not hard-code smtpd(8) scheduler batch size; reduced default limit to avoid hammering effects.
Reverted sys/net/bpf.c back to r1.85, as panics are still being reported.
For pthread_main_np(3), use a new flag, THREAD_ORIGINAL, to indicate the original thread for this process. Fixes some ConsoleKit failures.
Made the installer's ask_which bail out on a missing response in the autoinstall case rather than looping endlessly.
Re-enabled radeon(4) RADEON_INFO_VA_START and RADEON_INFO_IB_VM_MAX_SIZE.
Mark replaced iked(8) flows as "not loaded".
Don't let iked(8) leak duplicate flows.
iked(8) now drops duplicate requests, to avoid corrupt child-SA tables.
Made iked(8) discard & free duplicate IKESAs; made sure new SAs are not created that cannot be inserted in the SA tree.
Include hexdump in iked(8) debug output only for -vvv.
Support raw pubkey authentication w/o X.509 certificates in iked(8).
When wpi(4) has a fatal firmware error, reset the chip, reload the firmware and bring the interface up again.
Limit the number of envelopes to recall in the smtpd(8) hoststat cache.
Removed some double frees in fuse(4).
Fixed smtpd(8) loading of passphrase-protected keys.
Allow subdomain matching in smtpd(8) mailaddr table(5).
Changed the way multicast(4) addresses are linked to an interface.
Now the auto installer supports both install and upgrade, use "non-interactive mode" instead of installation.
Fixed a more(1) read loop, subtly broken on big-endian machines for some time.
Like "gap", made cwm(1) "snapdist" per-screen.
Let cwm(1) deal with clients that don't have WM_NORMAL_HINTS.
Removed cwmrc(5) option to bind a key by keycode with brackets, which never worked. Users should be using keysym names not keycodes.
Made timeout_add(9) return whether the timeout(9) was scheduled in this call (by returning 1), or a previous call (by returning 0).
Grow nfsd(8) request cache for the server side from 64 to 2048 entries. Avoids "file already exists" errors.
Fixed a possible double-free/NULL dereference in vi(1) msg_print.
Updated nsd(8) to version 4.0.0; use nsd-control to signal; generate keys for nsd-control if they don't exist.
Copy some entries from Apache's httpd(8) mime.types file to the one used by nginx(8).
Only set the IFF_ALLMULTI flag if there is at least one real multicast(4) address.
Added some logic to the autoinstaller, to select an interface for the initial dhcp request.
Allow autoinstall/upgrade even when not netbooted.
Reworked install.sub _autorespond(): better line parsing; treat empty/missing/multiple answers as an error and exit; ensure $RESPONSEFILE exists.
Vax can now compress/decompress .xz files.
Many utilities adjusted to use u_char for buffers in "yylex for ctype" calls.
Stopped netstat(1) -Ar leaking kernel pointers to unprivileged users.
Disable %n in printf(9), to avoid making any format-string vulnerabilities exploitable.
Reworked pmap(9) on vax to allow the kernel to use much less memory for page tables.
Increase NMBCLUSTERS in vax (using kernel memory saved by recent pmap(9) changes).
In uvm(9), replaced the swapdev CIRCLEQ with a TAILQ; replaced list traversals with LIST_FOREACH.
I2C driver for am335x added to armv7 (not enabled yet).
Prevent some race conditions in make(1) by just chdir()'ing into the right objdir.
Merged mesa 9.2.3.
In install.sub, use a flag file to recognise a successful autoinstaller run; provide the autoinstaller logfile as mail to root.
With tmux(1) -k, only kill the window after using it to work out -c path.
Made tmux(1) handle empty current directory more gracefully.
kdump(1) now understands USB, VIDIOC and generic DRM ioctl(2).
Taught fsck_ext2fs(8) about MAXPARTITIONS, to let it operate on partitions "i" through "p".
Guard against a compiler optimising away a comparison against NULL-1 in fsck_ext2fs(8) and fsck_ffs(8).
Made isakmpd(8) keep the flow until last ipsec(4) SA is deleted, if the flow is shared by multiple SAs via NAT-T.
Fixed memory leaks in fuse(4).
Initial support in em(4) for integrated Lynx Point ethernet with external i217 and i218 PHYs.
Bring back check of driver freeing uninitialised structures to urndis(4).
Security update to nginx(8) version 1.4.4, which fixes CVE-2013-4547 (see http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html).
5.3 and 5.4 SECURITY FIX FOR nginx(8) CVE-2013-4547. A source code patch is available for 5.3 and 5.4.
Updated to libdrm 2.4.47 for drm(4).
Changed /dev/drm* permissions to 0600.
Correctly set verify flag on the smtpd(8) listener.
Fail if smtpd(8)'s lka can't load the certificate file.
Added newer ssh(1) protocol 2 transport cipher "chacha20-poly1305@openssh.com",
Removed disksort from the kernel, now that all the direct users have been removed.
rthread shared semaphore fixes: sem_init(3) shared semaphores now work; in sem_open(3), initialise the spinlock if we created the semaphore.
Added gpio(4/armv7) support for omap3/4 and am335x; added omgpio(4) manpage.
Reworked smtpd(8) mda and scheduler to limit the number of pending deliveries to the same user.
Delay closure of sshd(8) in/out fds until after "Bad protocol version identification..." message, as get_remote_ipaddr/get_remote_port require them open.
Added the autoinstall configuration to the list of files stirring the random(4) pool at install.
Moved the GTT management into the intel(4) drm driver.
Backed out intel(4) DRM_IOCTL_I915_GEM_WAIT commit (which left X(7) unusable on resume on some machines).
In install.sub, try to fetch a host-specific responsefile, fallback to a generic one otherwise.
Allow "*" in the user part of mail addresses in smtpd.conf(5).
Impose a limit on the number of inflight envelopes on smtpd(8).
Enabled MSI on the remaining re(4) chipsets.
While autoinstalling, decide whether to install or upgrade from DHCP attribute "filename".
Give /dev/drm0 to the user logged on the console and/or xdm(1), to allow running of OpenGL applications.
Bugfix for pf(4) so a "prio" value of a match rule is not overridden by a later pass rule.
Fixed xf86-video-nv shadow framebuffer implementation for nv(4).
When smtpd(8) is looking up an MX, parse the address if the domain is a "[ipaddr]" string.
Converted trunk(4) to use a detachhook.
Added ugl(4), a driver for Genesys Logic GL620USB-A USB host-to-host link cable. Derived from upl(4).
Unhooked radeonold from the build.
Merged in libdrm 2.4.47 for radeon(4).
Removed unused /dev/X0 entries.
On luna88k, map the bitmap planes of the frame buffer used by the driver. 10% speedup under X(7).
On luna88k, allow ddb(4) to be entered from the keyboard, when there is a glass console and ddb.console=1, with ctrl-alt/zenmen-esc.
Enabled 802.11a support in wpi(4) such as Intel PRO/Wireless 3945ABG rev 0x02.
Reverted r1.858 of sys/net/pf.c, as it caused panics.
Added ugl(4), a driver for Genesys Logic GL620USB-A USB host-to-host link cable. Driver is derived from upl(4).
Bring back stack scanning/dropping of IPv6 type 0 routing headers, but only engage this code when pf(4) is disabled.
Don't fail when an em(4) has no MAC address, and move on to the logic that addresses this.
Fixed setups with ipsec(4) and ifbound, so all local IPSec packets (tunnel->tunnel) match state in pf(4).
Kill the activate routine in ucom(4) and adapt the parent process to no longer call it.
HID cleanups in uhid(4), uhidev(4), ukbd(4), ums(4) and utpms(4), including cleanup match/attach multi-casting.
Made athn(4) tick calculation work as intended. Should fix excessive timeouts and "Michael mic" errors.
Cope with the EAGAIN API change for msgbuf_write(3) in various daemons.
Improvements for sppp(4) address assignment and related issues in IPv6CP; deal with IFID collisions instead of ignoring them; use arc4random(3) during IFID generation; assign destination address to /128 point-to-point links.
Fixed isakmpd(8) parameter types for X.509 routines.
Be more specific in ksh(1) ulimit error messages.
Fixed ^C handling in miniroot.
Setup pfkey timer before use in iked(8). Ignore messages meant for other daemons, like isakmpd(8) does.
Fixed automatic retry in msgbuf_write(3) on EAGAIN (which resulted in spinning).
Ignore empty lines and empty answers in install.conf.
Fixed usbd_dopoll() to take the device as argument (polling is done per controller not per interface).
bgpd.conf(5) knob added, to set priority of routes bgpd(8) inserts into the kernel routing table.
Disabled smtpd(8) forward(5) lookup if sticky bit is set on homedir.
Fixed case-folding issue with smtpd(8) pki names (they are case-insensitive). Check that a pki entry exists when used in a listen or relay rule.
Don't set the TENTATIVE flag on an IPv6 address that is marked as NODAD (otherwise address is rendered unusable).
Ensure that install.conf is non-empty and is re-fetched on every restart of the autoinstaller.
Improved on cwm(1) fix in r1.35 of event.c. If UnmapNotify event is synthetic, set the state to Withdrawn or Iconic ("hidden").
Implemented sd(4) card detection in armv7. Fixes "sdmmc0: can't enable card" on beaglebone black when there is no card.
Fixed bootloader random hangs while counting down on LUNA-88K2; applied same logic to luna88k/dev/timekeeper.c.
5.3 and 5.4 RELIABILITY FIX: fixed vnode(9) locking so an unprivileged cannot hang the system.
A source code patch is available for 5.3 and 5.4.
bpf(4) bpf.c r1.84 returns, this time without panic(9).
Disabled kerberos(8) support in cvs(1) (only used by the strongly-discouraged pserver).
Set "to" address to INADDR_BROADCAST (not "from" address) when dhclient(8) is trying to send broadcast request to server.
Updated to xf86-input-keyboard 1.8.0.
Reverted recent bpf(4) changes to stop "panic: timeout_add: to_ticks (-1)".
Follow RFC 2131: when dhclient(8) is renewing a lease begin by using unicast, fall back to broadcast.
Put back the border draw call in cwm(1) client_resize (needed for redrawing maximised clients).
Cleaned up the activate routines from the uoaklux(4), uoakrh(4) and uoakv(4) drivers.
Re-enabled hardware acceleration on intel(4) Haswells.
Fixed calculations using ticks in bpf(4), athn(4), and radeon(4) to cope with the tick value wrapping.
Bugfixes to drm(4) i915 code to avoid possible Haswell system hangs and GPU locks.
In drm(4) i915, fixed context sizes on HSW (Haswell graphics).
When the mandoc(1) parser is closing an explicit block that is not open, also close below-subsection implicit scopes.
In the mandoc(1) formatter, make sure indentation is reset when leaving a scope, not only when entering the next one.
Fixed mandoc(1) blank lines rendering right after .SH and .SS.
Added mandoc_char(7) support for Unicode characters alternative syntax \C'uXXXX'.
Many font packages updated.
Added fcu(4/macppc) to RAMDISK ,to avoid playing a fan symphony when installing/upgrading some PowerMac G5s.
Stopped growfs(8) assuming the disk sector size is 512-bytes and using p_size as the full partition size.
Corrected the netstat(1) printout of socket buffer counts.
Abort autoinstaller if no sets are found in install_files(), or in case of an invalid answer to a yes/no question.
In azalia(4), enabled snooping on Intel 8 Series HD Audio, and now recognise Realtek ALC221.
Merged in mesa version 9.2.2.
Support tmux(1) case insensitive searching in the same manner as emacs (any uppercase means case sensitive).
Make quota(1) work with DUIDs.
5.3 and 5.4 RELIABILITY FIX: avoid crash occurring on pflow(4) interface destruction.
A source code patch is available for 5.3 and 5.4.
Correctly redraw the top two lines in tmux(1) copy mode when they are selected.
Made sure vlan(4) detach hooks are executed in reverse order they were added.
5.3 and 5.4 SECURITY FIX: fixed memory corruption vulnerability in the post-authentication sshd(8) process with aes128-gcm@openssh.com or aes256-gcm@openssh.com keys.
A source code patch is available for 5.3 and 5.4.
Fixed regression in r1.101 of sys/dev/usb/uhci.c to avoid dereferencing an uninitialised variable when a uhci(4) transfer times out.
Made ssh(1) output the effective values of Ciphers, MACs and KexAlgorithms when the default has not been overridden.
Do not leak the detach hook when the parent interface of a vlan(4) is destroyed/removed.
Stopped autoconf(9) processing transfers when a uhci(4) controller is deactivated.
Backport remainder of the use_loginclass fix from sudo(8) version 1.7.9.
Search the userland buffer of dirent structures before falling back to getdents(2), for considerable speedup.
Fixed ssh(1) rekeying for AES-GCM modes.
Added support for the RTS5229 card reader to rtsx(4).
Added support for "Power Resources" for Dx states to acpi(4), so usb(4) is detected after resume on thinkpads.
Fixed assertion that could lead to orphaned messages left in the smtpd(8) queue after all envelopes are gone.
Format changes and expanded options in smtpd.conf(5).
Stopped mpii(4) running out of command slots when large numbers of devices are detached.
Fixed ifconfig(8) with IPv6 tunnel addresses (broken by recent vxlan(4) commit).
Removed iop(4).
Use DL_SETPSIZE() on i386 to set partition size. Fixes tree breakage.
Make sure seekdir(3) works even when dirp->dd_buf still contains some pending entries.
Fixed softraid(4) levels 0, 4, 5, and 6 to use all available space with partitions larger than 2TB.
Temporary cwm(1) keyboard focus fix for clients that neither populate wmhints nor wmprotocols (e.g. rdesktop).
Enabled locking of fields using the acpi(4) global lock when required.
Let fuse_opt_insert_arg() take an empty string as argument, to unbreak ntfs-3g.
Reserve the last page of the uvm(9) primary swap space, in case we need to place a hibernate signature there.
Hooked up nginx.conf(5) to the build.
The radeon(4) code that sets the DPMS mode may sleep, so do not run from a timeout, hand it off to a taskq.
Fixed ssh(1) rekeying for KEX_C25519_SHA256.
Enabled TX checksum offload in jme(4).
Removed unnecessary spinlock that slowed down pthread_getspecific(3).
Use curve25519 for default sshd(8) key exchange (curve25519-sha256@libssh.org).
Let ssh(1) support pkcs#11 tokens that only provide X.509 certificates instead of raw pubkeys (fixes bz#1908).
Replaced rc4 with ChaCha20 in crypto(9).
Made sure login_yubikey(8) does not log passwords, even if they are wrong.
Bring back spnego support into kerberos(8) gssapi as it used to be before the update to 1.5.2.
Push the pf(4) queues every 1/HZ using timeout(9); use a timeout for each HFSC-enabled interface.
Removed ray(4) from i386/amd64.
Hooked up sunxi bits for miniroot and ramdisk (tested on pcduino).
Use m_copydata() instead of mtod(), so routing messages compatibility code will work on strict alignment architectures.
Added missing bitfields to fuse(4) that are needed by gnome virtual filesystem.
Fixed mkuboot(8) endianess for big endian architecture.
Made sure we send pflow(4) packets via the correct rdomain.
Re-added cwm(1) support for WM_TAKE_FOCUS. Solves keyboard input focus loss for java apps.
Enabled fuse(4).
Update UK dialling codes from ofcom information, and added 970 (Palestine), to share/misc/inter.phone.
Better defaults for the wsdisplay(4) screen burner settings: all unblank actions enabled (burning still disabled by default).
Removed a.out(5) support from compat_linux(8).
Installed fuse(4) headers in "make includes", to unbreak ports(7) builds.
Converted the route expire timestamp in kernel and routing message to 64 bit.
Switched the crypto(9) work queue to the task_add(9) api.
Re-enable compat_linux(8) on i386, now it is working with post-32bit-time.
Added a header for various hardware implementation dependent register (HID) definitions to macppc.
Make sure bioctl(8) -v output is properly aligned with the normal output.
Added smtpctl(8) "show relays" and "show hosts" commands.
Enabled native builds of the luna88k boot block and install it into /usr/mdec; copy boot blocks into /boot on the root disk in md_installboot().
Fixed some jagged diagonal lines when using ws(4).
Treat another OMRON UPS, BY35S, as ugen(4). Allows sysutils/nut to work on this device.
Allow kernels to compile without INET6.
Unbreak glxsb(4/i386) by properly allocating its key schedule.
Fixed potential file descriptor overlap by making sure that file descriptors zero to two are always open when starting slowcgi(8).
Added missing "heloname" field for smtpd(8) relayhost; differentiate relays with different helotable/heloname.
Emit an extra "config" convenience target that allows one to rerun config(8) without changing directories.
Use "/etc/mail/mailname" instead of "/etc/mailname" in smtpd(8).
Report smtpd(8) mta sessions errors on the route (not the MX). If a route has too many such errors, disable it for a while.
sshd_config(5) PermitTTY options to disallow TTY allocation, mirroring the no-pty authorized_keys option (bz#2070).
Moved most of the uses of workqs in drm(4) to the new taskq api. Fixes hangs on radeon(4).
Let vmwpvs(4) get hotplug events from the hypervisor, so you can add and remove disks at runtime.
Introduced tasks and taskqs (e.g. task_add(9)). Ongoing replacement of workq_add_task(9) and posse.
Unlock the vnode(9) while calling a device's d_close routine, to ensure the device close routine doesn't block indefinitely.
First steps of a native luna88k bootloader, able to boot elf(5) kernels with symbols from disk or network.
On armv7, enabled blocksize > 512.
Allow smtpd(8) to accept credentials formated as "<user> <passwd>", and empty alias files.
Report the ssl certificate verification status in the smtpd(8) mail header; log ssl certificate validation errors; fixed several ssl-related leaks.
Use the correct value for the Interframe Gap Time 0 bit in the usb(4) transmit configuration register.
Revamped armv7 ramdisk and miniroot creation process; installer can recognise the SoC and makes decision based on it.
Added -A (-ax) support to ps(1)
Removed fddi(4) support and the three flavours of the driver, fpa(4), fea(4) and fta(4).
Make prcm(4/armv7) aware of the GPIO modules on armv7 machines.
Made smtpd(8) handle the case where the filter string is quoted.
Fixed a potential race when several smtpd(8) relays share a single domain (resulted in temporary delays/failures).
Make sure that the kernel symbols area isn't marked as free space on armv7.
bzero(3) some smtpd(8) structures before using them, to be safe.
Improved elf(5) handling, so mkuboot(8) will create valid images running on 64-bit systems.
Support added for unattended OpenBSD installations, using DHCP and a response file.
Added support for AUTH LOGIN in smtpd(8) mta.
Fixed smtpd(8) parsing of inet6(4) addresses when prefixed with "IPv6:"
Allow smtpd(8) mta to "hold" envelopes in the scheduler when it has too many tasks for a given relay.
Fixed the timer on sunxi A20 boards.
Abort early if another smtpd(8) instance is running.
Fixed makefile, to make sure we build the manual pages of all architectures on macppc.
Enabled gpioctl(8) for armv7, and added associated devices on armv7/sunxi.
Fixed traceroute6(8), nc(1) and telnet(1) when the -V flag is not given.
For sunxi boards where u-boot doesn't set MAC address (e.g. pcduino), generate address based on the Security ID (SID).
Updated xkeyboard-config(7) to version 2.10.1.
Fixed ssh(1) crash caused by previous commit which occurs when using ProxyCommand.
Fixed/re-enable re(4) RX checksum offload for 8168C/8168CP. Flag was accidently removed with rev 1.140 of sys/dev/ic/re.c.
Let smtpd(8) local enqueuer cope with the output of a long running program; use sendmail(8)-like exit status.
Allocate smtpd(8) key storage dynamically, instead of using a fixed size buffer.
Made sure cwm(1) client_delete does not try to destroy clients that are already gone (and generate spurious errors).
Don't let smtpd(8) ignore "remove" requests for an envelope which is inflight.
Improve reporting in smtpctl(8): when sending a request to the scheduler, wait for the success/failure report; report the total number of affected envelopes for schedule, pause, resume and remove envelope operations.
Stopped falsely assuming that the icmp(4) checksum field is always in the first mbuf(9) of an mbuf chain.
X11 clients added to the aviion architecture.
Fixed off-by-one when mpii(4) is calculating the length of an sgl segment.
Fixed regression that made the pandaboard panic when it tried to enable PRCM_MMC0 on the omap4.
Added support for xbox 360 controller as a uhid(4).
Added support for the hardware random number generator on octeons, octrng(4).
Understand node contexts when smtpd(8) is building the expansion tree (e.g. same delivery for different users, or as a different destination address).
Fixed USERINFO and CREDENTIALS lookups in the (experimental) smtpd(8) sqlite backend.
Plugged smtpd(8) memory leaks on update.
nm(1) output on archives on mips now displays correctly.
Fixed sendmail(1) to cope with filesystems with large f_bavail values.
Do not rely on u-boot to enable mmc clocks on armv7.
Do not fatal() smtpd(8) immediately on write error. Fixes bug where the server would stop if smtpctl(8) exited early.
Don't try to resolve hostnames when a ssh(1) ProxyCommand is set unless the user has forced canonicalisation.
Disallow empty Match statements in sshd_config(5), and add "Match all", which matches everything.
Periodically print progress and, if possible, expected time to completion when screening moduli(5) for DH groups.
Include local address and port in sshd(8) "Connection from ..." message (only shown at loglevel>=verbose).
Enabled TX checksum offload in bnx(4) and bg(4).
Allow traceroute6(8) to operate across a nat64 gateway.
Made slowcgi(8) loop around waitpid to catch all exited children, as there is no guarantee of one signal per child.
Added support for displaying the cache write policy of RAID volumes to bioctl(8); make mfi(4) pass up the necessary information.
Added key to tmux(1), to swap to other end of selection (bound to o with vi keys)
Overwrite icmp(4) type-specific nextptr field only when pf(4) changed it, to fix icmp(4) to icmp6(4) translation regression.
In pthread_kill(3)/pthread_cancel(3), make sure the thread ID won't be reused until the kill(2) is complete.
Allow uppercase "K/M/G" specification in "machine memory" boot(8) command on i386/amd64.
Relative-specified ssh-keygen(1) certificate expiry time should be relative to current time and not the validity start time.
Hostname may have %h sequences, these should be expanded prior to ssh(1) Match evaluation.
Made roff(7) parse and ignore .hw (hyphenation points in words).
Save "next-server" (a.k.a. siaddr) info into the dhclient.leases(5) file.
Added SMC_CAPS_SINGLE_ONLY capability to sdmmc(4), to force the sdmmc stack to only issue single blocks transfers.
Resolved an issue where icmp(4) traffic with pf(4) nat-to failed due to incorrect checksums.
Added support for allwinner-based devices (A1x/A20) such as the cubieboard to armv7.
Removed arc4random_stir() and arc4random_addrandom(), which should not be called directly.
Unbreak mg(1) make-directory by stripping trailing "/".
Stopped slowcgi(8) leak fds in the fork(2) error path.
Added support for sdhc(4) to detect GPIO pins on the i.MX6 wandboard.
Added a pmtu delay sysctl(8) BUTTON for netinet6.
Enabled vxlan(4).
Made dhcpd(8) use provided netmask in "subnet" statements, allowing later comparisons with interface addresses to work properly.
Added load_font and list_font accessops to all rasops(9) wsdisplay(4) drivers, e.g. tga(4) and gpx(4/vax).
Fixed pf(4) icmpid bug (only affected icmp(4) echos via nat, when the nat doesn't change the address).
Allow a user to switch telnet(1) to rdomain zero.
Made nc(1) set the requested rdomain on the socket instead of only on the IPv4 part; allow switching to rdomain zero.
Added rdomain support to IPv6 configuration tools ndp(8), rtsold(8), ping6(8) and traceroute6(8).
With disklabel(8) -A, take 10% for swap, setting a maximum based on physmem.
Introduced the "display.font" parameter, which requests the wsdisplay(4) driver to change the display font.
Enabled support for vmware paravirtual SCSI via vmwpvs(4) on i386/amd64.
Built-in kernel fonts will now appear in the list of font usable by wsdisplay(4), vga(4), rasops(9) and wsfontload(8).
Eliminate global limit on the number of fonts able to be loaded by wsdisplay(4).
In hibernate for i386/amd64, temporarily reverted "Realmode park" mode.
Do not run any command from the client which starts the tmux(1) server until after the configuration file completes loading.
Let wsfontload(8) report i/o errors on stdin as occurring on "stdin" not "(null)".
Added i386/amd64 boot(9) support for keydisk-based softraid crypto volumes.
If a font is not a file, wsfontload(8) now computes the numbers of characters it contains from its size, instead of assuming 256; default to 12x22 glyph instead of 8x16 if the display is a raster frame buffer.
Updated to xf86-video-dummy 0.3.7 and xf86-video-vesa 2.3.3.
WSDISPLAYIO_GTYPE ioctl support added to radeon(4) and intel(4) KMS drivers.
Fixed resume time stream corruption seen on x230 with large (16GB) unhibernation.
Allow hibernate to work on Ivy Bridge and later CPUs.
Don't turn on ModifyOtherKeys by default, as when tmux(1) is killed and it's left stuck on.
slowcgi(8) now properly reserves file descriptors for incoming connections.
Fixed some spurious failure-to-hibernate errors.
Removed the noct(4) driver.
In the ssh_config(5) "Match" section, renamed the "command" sub-clause to "exec".
Parse the argument the -r option with atoll(3) to support dates past 2038
Reverted r1.138 of pp/cwm/client.c (WM_TAKE_FOCUS) for now.
ip6_input() adjusted to remove double scanning for routing header type 0 in the IPv6 stack, as pf(4) handles this anyway.
No longer make cwm(1) redraw unnecessarily on every unhide, resize, and mouse move/resize "Expose" event.
Improved address and linkstate hooks, added additional detach hook to track changes on the parent multicast interface in vxlan(4).
Support the hibernate key (Fn-F12) on thinkpads.
Enabled TX checksum offload on em(4).
In crontab(5), added a random sleep of up to half an hour to distribute the server load from spamd-setup(8).
Merged bgpd.conf(5) prefix and prefixlen filter components into one filter, so rules are grouped by prefixes last.
slowcgi(8) now keeps better track of fds, to only close those still open. Avoids closing random fds from other connections.
Fix receipt of OID varbinds when snmpd(8) is sending traps.
When we attach a network interface, do not reuse the last index. Avoids some race conditions.
Simplified pipex(4) checksum handling.
Stop pre-computing the pseudo header checksum and incrementally updating it in the tcp(4) and udp(4) stacks.
Fixed some 512-byte block vs disk sector confusion on hppa and sgi.
For cwm(1) clients that support WM_TAKE_FOCUS in their WM_PROTOCOLS property, send a ClientMessage event.
Don't silence stderr from pkg_add(1) when running fw_update(1) in verbose mode.
UTF-8 support for wsdisplay(4) emulation modes, so vt100 and sun emulation recognise xterm-compatible escape sequences ESC % G and ESC % @.
When rasops(9) can't find a proper glyph for a requested character, use a question mark instead of a space.
Bugfix update to nginx(8) version 1.4.3.
Disable global page mappings before we start to unpack on i386/amd64 using acpi(4), for more robust hibernate.
Use openlog(3) in slowcgi(8) to log to syslog(3).
Made slowcgi(8) set FD_CLOEXEC; fixed some pointer calculations.
Adjusted the disklabel(8) editor to allow more space for swap on large disks (e.g. useful for hibernation).
Allow hibernate to run the radeon(4) suspend code before mountroot.
Prepared the route(8) command for printing 64 bit route expire time; fixed conversion between relative and absolute expire time.
Include remote port in ssh(1) bad banner message (bz#2162).
pf.conf(5) cannot have queue definitions inside anchors, don't let pfctl(8) attempt to load them, error out if we run into one.
Updated snmpd(8) to use the proc.c privsep style from iked(8) and relayd(8).
Remove support for a.out(5) and ecoff on all platforms (we only do elf(5) now).
"fsync@" protocol extension for sftp-server(8). Client support for calling fsync(2) for faster transfers (bz#1798).
snmpd(8) -r option removed.
Support added for oaic in the aviion boot blocks.
Moved creation of "restricted" communication sockets into snmpd.conf(5); added ability to specify an alternate "control" socket location; allow for the creation of multiple "restricted" sockets.
Prefer acpi(4) over apm(4/i386) on i386.
Implemented ssh(1) client-side hostname canonicalisation. Avoids need for host certificates to list unqualified alongside fully-qualified names.
Stopped ldpd(8) binding a label for the default route.
avoid ldpd(8) segfaults by passing the ldpd_conf structure as an argument.
The disklabel(8) variables aflag and dflag are boolean, so use logical instead of binary operators for comparison.
Improved ldpd(8) parsing of LDP messages; proper notification messages on error conditions.
ldpd(8) now ignores messages that have Unknown flag set.
Added support for ERL ethernet on octeon (which can now be booted over NFS).
Driver added for the oaic(4/aviion) AIC-6250 SCSI controller found on aviion models 100, 200, 300, 400 and 4300.
Fixed tmux(1) detach -a, by skipping clients where the session is NULL.
Added a "Match" keyword to ssh_config(5) that allows matching on hostname, user or result of arbitrary commands.
Made logging of ssh(1) session starts a more useful format.
Check for invalid values in the routing message, to stop root crashing kernel from userland.
Fixed hangs seen when unplugging a USB keyboard which was attached to an uhci(4).
Added 7.5kbit Diffie-Hellman groups to moduli(5).
Count number of lines in moduli input file and pass to the testing ssh-keygen(1) process, to provide completion time estimate.
Made roff(7) parse/ignore the .fam (font family) request. Fixes irunner(1) and uim-xim(1) ports.
Use crunchgen(8) DIST_LIB/DIST_OBJS hooks to make it possible to link crunched binaries against libraries compiled with smaller objects.
Fixed regression introduced when macppc pci(4) started parsing device tree to enumerate devices, so ht(4/macppc) controllers work.
Added libefi to mandoc(1), and simplified some names.
Set the default vxlan(4) MTU to full 1500 bytes.
Imported vxlan(4), the virtual extensible local area network tunnel interface.
Standalone hfsc implementation added to pf(4), for the new bandwidth shaping subsystem (altq stays during migration phase).
Let systat(1) adapt to recent queueing changes.
Add initial RTL8106E and RTL8168G/8111G support to re(4).
Fixed hang-on-close problem seen with ssh(1) and xterm(1) when a closed pty(4) is poll(2)'ed.
Changed pf(4) to prevent non-data packets from being dropped.
Stopped tmux(1) leaking file descriptors in the rare MSG_VERSION case.
Updated to freetype 2.5.0.1.
Added support for am335x edma3 controller to armv7.
When tmux(1) is respawning, pass -1 for cwd now (not NULL).
Show session name in tmux(1) detached message.
Alter how tmux(1) handles the working directory: -c flag to new, neww, splitw allows the working directory to be overridden; -c flag to attach let's the session working directory be changed; default-path option has been removed.
Make tilde expansion in tmux(1) command strings work even if it isn't terminated by /.
Instead of fixed size buffers for some tmux(1) messages, send only the string length; similarly for MSG_COMMAND - allow full imsg limit (not arbitrary 2048).
When mouse button is pressed within a tmux(1) pane, no longer resize the pane if edge of the border is later hit.
Support tmux(1) -c for new-session.
Upon mouse click, stopped tmux(1) selecting panes which aren't visible.
Restored missing tmux(1) key binding for %.
Ensure the tmux(1) check on the permissions of TMUX_TMPDIR is performed on directories only (not files).
Clear tmux(1) WINLINK_ALERTFLAGS properly, otherwise sessions may still see flags for winlinks which have been cleared.
When tmux(1) choose-tree expands/collapses items, ensure the item is visible at the bottom of the screen.
Made tmux(1) assign mouse x/y coords before checking them. Fixes off-by-one when the statusbar is at the top of the screen.
Allow tmux(1) to accept multiple parameters to SM/RM/DECSET/DECRST.
Only include actual trailing spaces (not unused cells) with tmux(1) capturep -J.
Allow tmux(1) nested format expansion.
Allow the file descriptor received from the tmux(1) client to be -1.
Extended tmux(1) to handle input mouse positions greater than 33.
Make tmux(1) recalculate_sizes() handle an empty window with no active pane. This can happen when a window is in two sessions.
Stopped tmux(1) leaking formats if they are added multiple times, and leaking grouped sessions on destroy.
Fixed potential tmux(1) crash when a command in a command client can't be parsed.
Stopped tmux(1) adding client formats when they are NULL.
Fixed sshd(8) re-exec fallback, by ensuring that startup_pipe is correctly updated (bz#2139).
Added ability to whitelist and/or blacklist sftp protocol requests by name to sftp-server(8).
Changed "physical address" to "tunnel:" in ifconfig(8)'s tunnel address output.
Merged binutils 2.15 einfo() buffering change to binutils-2.17.
Enabled oosiop(4) synch negotiation.
Various fixes to make kiic(4/macppc) work on some G5s.
Fixed Powerbooks regression, where one of the two kiic(4/macppc) would timeout when trying to configure the audio chip.
Made syslogd(8) trim leading white space from the message before trying to extract the program name.
Include the "state of health" field in the mfi(4) "bbu ok" (battery capacity) sensor value.
Stopped pf(4) leaking ruleitems from match rules when hitting a per-rule max state limit.
Allow bgpctl(8) to bulk add/delete routes with the same attributes. Really useful for distributing IP lists.
Fixed dixfonts from upstream for CVE-2013-4396 (use after free in Xserver handling of ImageText requests).
When available, use monitor/mwait to idle on i386/amd64.
Early stages of a working disk bootloader for OpenBSD/aviion. Currently limited to oosiop(4) controllers
Increased the size of the Diffie-Hellman groups requested for a each ssh(1) symmetric key. New values taken from NIST 800-57, upper limit from RFC4419.
Added vmwpvs(4), a driver for VMware Paravirtual SCSI in vmware guests.
Use CLOCK_UPTIME, so that vmstat(8) uptime averages/rates are over the actual time-running-not-suspended.
Fixed a segfault in ndp(8) -A to properly free the buffer when not in repeat mode.
Show number of sectors, not the number of 512-byte blocks, when newfs(8) is saying "n sectors of m bytes".
Allow snmpctl(8) to specify the "oid" option multiple times (e.g. "snmpctl walk 127.0.0.1 oid system oid ifName").
Added axen(4) device driver, for ASIX AX88178a and AX88179 Ethernet interfaces.
getdirentries(2) is dead; long live getdents(2).
Fixed mandoc(1) to allow breaking the line at hyphens in macro arguments (e.g. .Nd and most of the .%? citation macros).
Stopped mandoc(1) throwing a fatal error and dying if there is anything inside a .Bl block body before the first .It.
Added quirk to azalia(4) for ALC260 (found on Acer Extensa 6700).
Added CLOCK_UPTIME, a clock which measures time-running-not-suspended, used in clock_gettime(2) and other places.
Backed out POLLHUP change until a problem with xterm(1) hanging on close is fixed.
Support for the i.MX6-based Wandboard Quad added to the armv7 architecture.
Disabled interrupts in the re(4) interrupt handler. Fixes the occasional watchdog timeout when using MSI.
Removed Adaptec 2940 SCSI controllers from i386 RAMDISK kernels to make other things fit.
Use monitor/mwait to idle amd64 CPUs when available.
Change the default for the "default-path" option to ~ in tmux(1).
Updated to mesa 9.2.1.
In tmux(1), use open(".")/fchdir(2) to save and restore current directory rather than getcwd(3)/chdir(2).
Fix boot device matching in the presence of mpath(4) on hppa/hppa64.
poll(2) on a closed tty(4) now returns POLLIN|POLLHUP in revents when events is set to POLLIN, and POLLHUP when events is set to POLLOUT.
Added ntpctl(8), which allows us to query the locally running ntpd(8) process.
Fix tuner ioctl TVTUNER_SETFREQ in bktr(4) (broken after rev 1.30).
In mandoc(1), support roff(7) simple numerical conditions.
Support mandoc(1) setting and printing out arbitrary roff(7) number registers, preserving support for the ".nr nS" SYNOPSIS state register.
Fixed drm(4) incoherence with fence updates on Sandybridge and higher CPUs.
Kernel adjusted to print many daddr_t variables with %lld, and u_int64_t variables with %llu in many places.
Made it possible to correctly set up and label a vnd image with a boot area on aviion.
Emulate 64-bit drm(4) atomic operations on 32-bit architectures by using a mutex.
Replaced rc4 with ChaCha20 in arc4random(3).
Added initial SNMP client utility to snmpctl(8). For example, "snmpctl snmp walk 127.0.0.1".
In ld(1), make stderr buffered in einfo(), to speed up display of error messages on slower platforms.
Use PATH_MAX, NAME_MAX and LOGIN_NAME_MAX (not MAXPATHNAMELEN, MAXNAMLEN or MAXLOGNAME) in the C library.
Stopped drm(4)'s drmclose unreferencing objects while a mutex is locked.
Ensure the OpenBSD area of the disk does not enclose the boot area on the aviion architecture; added installboot(8/aviion).
On aviion, test whether the WHOAMI register exists before using it.
Two new libX11 locale(1) added: km_KH.UTF-8 and sr_CS.UTF-8.
Enabled mpath, rdac, and sym in GENERIC kernels to find bugs.
Ensure stack is 1:1 mapped before attempting to give control back to the PROM at halt/reboot time, so aviion can reboot.
Updated to: xserver 1.14.3; makedepend 1.0.5; xman 1.1.3; libX11 1.6.2; libXaw 1.0.12; libXmu 1.1.2; libXpm 3.5.11; libXrandr 1.4.2 and libXv 1.0.10.
poll(2) on a socket now sets POLLHUP on EOF, so socketpair(2) matches pipe(2) behaviour when the other end is closed.
Refined gio(4/sgi) frame buffer probe, to correctly detect a newport frame buffer on Indy if a HPC SCSI board is attached.
Correctly probe for the Ethernet chip on hpc(4/sgi) v1.5 expansion boards. Gets rid of "sq not configured" in dmesg(8).
In boot(9), do not iterate over alldevs if it is empty (e.g. halting from ddb(4) with ddb entered early with boot -d).
With even number of offsets, choose middle offset with lowest delay. Resolves uncertainty in the ntpd(8) REFID assignment.
Stopped the message that uthum(4)'s calibration offset is incorrect, when the offset is less than 1 degree C.
Stopped wd(4) incrementing the address the next i/o will start at by an incorrect amount.
IPv6 atomic fragments must not go into the pf(4) reassembly queue, but be processed immediately.
Use the cpuid vendor string (not model string) when enabling VIA specific amd64 code so the code works with Eden X2 processors.
Take into account that the iked(8) ike message header might no longer point to the same memory after buffer manipulations.
Make sure drm(4) vblank_time_lock blocks interrupts; made most atomic operations really atomic; removed all 64-bit atomic operations on 32-bit architectures. Potentially fixes some races/panics.
Sync most machine independent LANCE code (le(4/vax)); added ILACC (79900) support.
Stop traffic for a given usb(4) endpoint when a transfer reports an I/O error. Fixes ehci(4) looping with "ehci_idone:" messages.
Try to release the console if pckbc(4) fails to send the initial command byte, giving USB keyboards a better chance of attaching.
On hp300: Removed SLOWSCSI; increased scsi(4) target selection timeout. Booting kernel from disk now much faster.
Keep sudo(8) default env_keep to minimum required for pkg_add(1); env_keep for building src and ports moved to "wsrc" group.
Report each m88k cmmu on its own line in dmesg(8); fixed multiprocessor writeback logic.
Fixed luna88k installer, to add bsd.mp to the default sets if > 1 processor.
Stopped merging the per-thread and per-process flags when reporting them via sysctl(8) KERN_PROC.
Updated to: util-macros 1.17.1 and videoproto 2.3.2.
Merge unbound 1.4.21 and ldns 1.6.16.
Fixed tmpfs' uio_offset, to stop it skipping one entry for each block.
Fix an ino_t inconsistency to unbreak the build of fuse(4)'s libfuse.
Made aviion understand ELF files well enough to netboot kernels on AV530.
Switch to machine independent dart(4) driver on aviion.
Set top(1) a higher MAX_COLS, more reasonable for modern widescreen displays.
Fixed occasional SIGSEGV in privsep'd binaries (eg syslogd(8) and pflogd(8)) on sparc/sparc64 running on sun4/4c/4e.
Added support for root on NFSv3.
Configure pms(4) absolute mode for elantech v2. Synaptics driver now attaches to elantech v2 touchpads. Print the firmware version at attach time for reference in future bug reports.
Fixed panic in pipex(4) seen if pipex deleted a session via idle-timer when npppd(8) was frozen, causing use-after-free.
Don't assume the length of npppd(8) chap challenges.
Added length check for Proxy LCP and Authentication AVPs in npppd(8); also in 5.2, 5.3 and 5.4 stable branches.
Do no try to clear the uhidev(4) endpoint (as it if has stalled) if the USB transfer reported an I/O error.
Made ssh(1) BindAddress work with UsePrivilegedPort=yes (bz#1211).
Tell the client when their preferred ssh(1) listen address has been overridden by the server's GatewayPorts (bz#1297).
Store the initial file offset so the progress meter doesn't freak out when resuming sftp(1) transfers (bz#2137).
Get ethernet working on the edgerouter lite; added atphy(4) to RAMDISK and GENERIC.
Increased default number of ugen(4) device files: two are too few for modern standards.
Removed gssapi config parts from ssh_config(5).
Fixed mandoc(1) horizontal spacing for input lines beginning like ".Oc Ns".
Fixed mandoc(1) horizontal spacing where "Ns" macro follows a block-closing macro and the corresponding block-opening macro is not on the same line.
Reverted ksh(1), so commands executed via `foo` or $( bar ) inherit "set -e" status (as POSIX requires).
Updated to: twm(1) version 1.0.8; xclipboard(1) version 1.1.3; xclock(1) version 1.0.7; xinit(1) version 1.3.3; xkill(1) version 1.0.4; xlsclients(1) version 1.1.3; xmodmap(1) version 1.0.8; xrdb(1) version 1.1.0 and libSM version 1.2.2.
Bar pflow(4) if flowsrc is not set.
Fixed sign of returned error code for drm(4) i915.
Prevent hardclock(9) trying to schedule a softclock interrupt before its cookie has been allocated (this caused panics on macppc).
Added SM_PATH to the default env_keep in sudoers(5).
Added basic support for eMMC memory and enable it on the BeagleBone Black.
Revert previous sys/net/if.c diff to always increment the if(4) interface index (tun_switch() depends on this feature).
Avoid leaking mbufs in cpsw(4/armv7) failure paths.
Fixed ssh(1) connection crash when sending break (~B) on a ControlPersist'd session.
Switched to using arc4random in sqlite3(1).
Allow for 0-length "octet strings" in SNMP traps, so snmpd(8) conforms with ITU X.690 (ASN.1 definition document).
Correctly NUL-terminate the systat(1) cpu view array. Fixes a segfault on powerpc and probably others.
Fixed user(8) bug where owner/mode is not set on the user's homedir if the specified skeldir does not exist.
Added support for SM_PATH environment variable. sysmerge(8) can search this path for etcXX.tgz and/or xetcXX.tgz.
Disabled intel(4) blit acceleration on haswell (for now).
Allow BOOTP lease times and the options dhcp-lease-time, dhcp-rebinding-time, and dhcp-renewal-time to be controlled via dhclient.conf(5).
Added relayd.conf(5) support for ECDHE (Elliptic Curve Diffie-Hellman) to enable TLS/SSL Perfect Forward Secrecy (PFS).
Import nl(1) from NetBSD, with local changes (inc. "-" syntax for stdin, multibyte delimiter support from FreeBSD, code simplifications).
Fixed some omissions and flag errors for radeon(4) pci match tables, removed the duplicate table for i915.
Monochrome Xserver(1) now available on luna88k.
Fixed scsi(4) mpath "next path" selection. If the current path is NULL the machine will no longer panic.
Enabled vmx(4) on i386 and amd64.
Added a new systat(1) screen "cpu" listing the usage of each CPU core; new -B command line flag, similar to -b.
Changed default relayd(8) and ldapd(8) ciphers to HIGH:!aNULL.
Plugged a snmpd(8) memory leak when walking the pfTblAddrTable in PF-MIB.
Sync PF-MIB and snmpd(8) with the pf(4) table byte/packet counters for "match" rules.
Support added to arm for FreeScale's i.MX6 SoC.
Taught id(1) about the whoami(1) and groups(1) run modes (removes shell wrappers).
When slowcgi(8) is dumping FastCGI protocol headers during debug, also dump the "request begin" and "request end" protocol entries.
Made slowcgi(8) use the correct buffer size for memory allocation and reads.
Added ugold(4), a driver for PCsensor's USB gold TEMPer temperature measurement device.
Merged mesa version 9.2.0 into xenocara.
Set relayd(8) "toread" to 0 if we don't expect a body. Fixes handling of HTTP requests with a body (e.g. POST).
Add a proper suspend ksh(1) builtin that saves/restores the tty and pgrp as needed instead of using an alias (login shells may be suspended if they are not running in an orphan process group).
The beagle architecture has been replaced by the more generic armv7.
time_t and other random fixes from upstream merged into base nsd(8).
Added libtxc_dxtn 1.0.1, a DXTn/S3 texture compression library.
When a partition is changing to UNUSED, save kernel-set values on all partitions, not just open ones and keep the new partition type. Allows changing the RAW_PART partition (a.k.a. "c") to UNUSED.
Rewritten ARMv7 cpu cache discovery code (to remove false assumptions); fixed log2(3) on arm.
After resume, make the pms(4) driver wait longer when /dev/wsmouse is opened. Allows mouse to work after resume on x130e.
Updated to nsd(8) version 3.2.16.
Only free the per-protocol descriptor if a pms(4) touchpad cannot be correctly identified during attach.
Removed unnecessary calls to arc4random_stir(3) in ssh-keygen(1) and sshd(8). Increases available entropy.
Use arc4random(9) as the preferred random number source in fontconfig.
Properly pass daemon_flags to amd(8).
Update line buffer allocation on radeon(4). Fixes blank screen problems on dce4.1, dce5 and dce6 asics (see https://bugs.freedesktop.org/show_bug.cgi?id=64850).
Updated GLU to version 9.0.0. GLU was previously part of Mesa but is now separate.
Made sftp(1) "^w" delete the previous word, instead of the entire line. Matches ksh(1) behaviour.
Lock the audio mutex before invoking the audio(4) call-back. Fixes panics on zaurus.
Turn on mass storage interface for mfii(4).
If a slowcgi(8) script dies due to receipt of signal, pass that back to the HTTP frontend as the "application return status".
Use PCIe capability version 2 when displaying link speeds with pcidump(8).
Fixed handling of getdents() against UDF filesystems.
Use arc4random_buf(3) in iceauth(1).
Added iwn(4) support for advanced btcoex.
Allow setlocale(3) (LC_MESSAGES, ...); to succeed. Stops some ports (e.g. gnome) from freaking out.
Quieten ssh-keygen(1) batch processing; exit with non-zero if asked to find a non-existent hostname in the known_hosts file.
When we attach an inet(4) interface, avoid races by not reusing the last index.
Enabled RS400/RS480/RS690 in radeon(4).
Non-integrated radeon(4) >= r600 parts will now try to enable PCIe 2.0/3.0 speeds if the PCIe root port advertises those speeds.
Made mpath(4) path driver "match routes" return 8, so they will definitely be higher than the real device drivers.
Assume roundrobin path scheduler type within a group of mpath(4) paths now (sym(4) devices work around this by putting every path in its own group).
When pmap(9) flushes page from all caches, writeback on all CPUs. Fixes spurious m88k segmentation faults.
Updated xterm(1) to version 296 (with sixel graphics disabled for now), DejaVu Fonts to 2.34 and libX11 to 1.6.1.
Simplified xvctl(1), a utility to get or set Xv(3) extension values.
Replaced rand(3)/random(3) calls with secure arc4random(9) in npppd(8)'s radius authentication, make(1) and route6d(8).
Implemented handling of group failover in mpath(4).
New slowcgi(8) option to specify an alternate FastCGI socket on which to listen.
Introduced the idea of groups of paths to mpath(4). Only paths on the first group in the list will handle io now.
Adjust startup sequence so mpath(4) attaches before other hardware.
Make ommmc interrupts show up in vmstat(8) -i, systat(1), etc on beagle.
Updated to pixman 0.30.2.
Allocate and deallocate memory for encryption contexts within cryptosoft. Removes the need for zerokey functions.
Make disklabel(8) partitions from "i" to "p" functional on luna88k.
Initialise loongson pcimap earlier, to make sure its value is not tested before initialisation (only affects 2e systems).
Fixed usage of fork(2) in programs linked against libpthread on m88k 88100 processors, where the parent thread would spin.
Updated to Xserver(1) version 1.14.2.
Replaced random(3) with arc4random(9) in libevent.
Fixed minor discrepancies with ix(4) link state handling.
Stopped oce(4) and ix(4) calling if_link_state_change if link state is not changed.
Fix memory initialisation for octeons that have less than 256MB.
Stir PRNG after sshd(8) runs post-accept fork. The child gets a different PRNG state anyway via rexec and explicit privsep reseeds, but it's good to be sure.
Do not let netstart(8) create a route to alias addresses via 127.0.0.1 (the stack is able to tell if the address is local or not).
Correct format string mismatches in various code turned up by gcc(1) -Wformat=2.
Added acpi(4) indicator sensor to acpibtnX, to reflect lid status when available. Useful for people not using machdep.lidsuspend.
With wsdisplay(4), use the console locator to make sure wsdisplay0 is always the glass console on i386/amd64.
Use int64_t in the spamdb(8) greylist db file, with backwards compatibility for records with 32-bit times.
Fixed build of ix(4) without vlan.
Added urtwn(4) to the sgi kernels where it makes sense.
Added nc(1) -F flag to enabled fd-pass mode: establish connection and pass connected socket to stdout.
Remove uscanner(4). Disabled in GENERIC long ago (when libusb became the preferred solution for USB scanners).
Enabled mpii(4) on sparc64.
Added ssh_config(5) ProxyUseFDPass option, to establish a connection and then pass file descriptor back to ssh(1).
Make pf(4) "match quick" abort ruleset evaluation with the current block/pass state, rather than continuing on.
Fixed kernel profiling on powerpc architectures (broken since the buffers were made per-cpu).
Fixed prototypes of do_load_half() and do_load_byte() on m88k to stop obscure bugs in awk(1) and elsewhere.
Disable appleagp(4). It doesn't really work yet, and hurts certain iBook G3 models (PowerMac4,3).
Fixed xf86-video-ati shadowfb on big-endian machines.
Updated to: xload 1.1.2, xprop 1.2.2, xset 1.2.3, libXfont 1.4.6 and xwd 1.0.6.
Stop dhclient(8) creating a route to the bound address via 127.0.0.1, as the stack should be able to correctly short-circuit packet routing to local addresses without this.
Make the vgafb(4) console correctly restore when exiting X(7).
Stopped macppc pretending to support non-console devices, because vgafb(4) only matches the framebuffer device setup by the firmware.
Use %lld and cast to long long when passwd(1) is printing time_t values, and atoll(3) when parsing them.
For ikectl(8), snmpctl(8) and rdate(8) use %lld and cast to long long when printing time_t values.
Enabled radeondrm(4) on macppc.
Use mapiodev to do the initial mapping of vgafb(4). Allows radeondrm(4) to bus_space_map(9) it without panicking.
Updated to xf86-video-ati 7.2.0. Fixes endianess problem with kms.
Avoid integer overflow in sector calculation reading UDF DVDs, which broke reads past 2GB.
On luna88k, check number of planes (1, 4, or 8bpp) in framebuffer by ourselves (PROM gives false values). Lets monochrome X(7) server work correctly with a 4bpp framebuffer.
Enabled radeondrm(4) on sparc64.
Align stack yp(8) buffers to 64-bit boundaries now, for they might contain a struct passwd(5).
Blast uhts(4), as the code was merged into ums(4) last week.
Stop defining SIOC{S,G}ETVLAN as SIOC{S,G}IFGENERIC. Lets vlan(4) handle pppoe(4)-specific ioctls and vice versa without smashing the stack of the caller.
Make sure "drm.h" gets generated on all architectures that support pci(4), making alpha and loongson compile again.
Set bgpd.conf(5) to filter the IPv6 Discard-Only prefix, because it should not be globally routable (see RFC6666).
Rewrite the internals of the bgpd(8) RDE reload logic. First step to make reload non-blocking. Speeds up the reload time, should also fix a few edge cases on reloads.
Enforce that the ls_id and the adv_rtr field in a type 1 router LSA are the same. This will drop updates trying to attack the ospfd(8) LSDB.
Only skip dhclient(8) address deleting/adding and route deleting/adding on identical lease when we are in state S_RENEWING. Makes sure we end up with an IP address on the interface.
Don't depend on a list of archs to determine endianess, unbreaks X(7) gallium build on sparc64.
Let fw_update(1) handle firmware for radeondrm(4).
Allow the user to specify which firmware to install with fw_update(1), or to install all of them using the -a switch.
Updated iceauth to 1.0.6 and xfwp to 1.0.3.
Let the Xserver(1) handle more /dev/drmN devices.
Improved pci(4)'s VGA arbiter support now the kernel can give us information about the resources required by a particular device.
Moved ray(4) to the attic.
When handling puts from a client, tftpd(8) will now close the file once downloaded, instead of waiting until after we clean up the client .
Remove bogus refcounting of usb(4) pipes, to avoid memory leaks and potentially aborting a pipe when requests are still pending.
Made the tree compile again on architectures without drm(4).
Switch time_t, ino_t, clock_t, and struct kevent's ident and data members to 64bit types; build perl(1) with -DBIG_TIME.
Add the tcp(4) socket option TCP_NOPUSH to delay sending the stream. Useful to aggregate data in the kernel from multiple sources, avoids sending small packets.
ps(1) flags are split between thread and process but it is useful for ddb(4) to show both. Show both in ps overview, list them explicitly for the specific thread.
Match macppc framebuffer device against its OpenFirmware node, to enable sharing of console detection logic with sparc64 in radeondrm(4).
Build mesa radeon(4) drivers on sparc64; switch to gallium drivers for r300 and r600.
Enabled xf86-video-ati kernel modesetting support.
Added TTM and radeon(4) DRM code. Includes kernel modesetting, framebuffer console and support for newer hardware.
Fixes for as(1) on mvme88k: provide 88110 syntactic sugar for the control register names; correctly handle -m options; allow the register prefix to correctly be recognised in front of the condition codes.
Cancel timeouts on pflow(4) interface destruction.
Plugged file descriptor and memory leak in fuse(4)'s fuse_open() error path.
Fixed a potential race on luna88k, where a secondary cpu incorrectly resets variables on the primary cpu.
Merged uhts(1) into ums(1).
Added rc.d(8) scripts for ipropd-master and ipropd-slave.
Added urtwn(4) for upgrades to macppc ramdisk.
Enabled ctrl-left-arrow and ctrl-right-arrow to move forward/back a word in ssh(1); matching ksh(1)'s recent change.
Do getopt parsing for all sftp(1) commands, to ensure consistent behaviour.
Implemented the roff(7) font-escape sequence \f(BI "bold+italic".
Made it possible for graphics drivers to opt-out of VGA arbitration.
Neither the flow control diff nor the RX checksum offload diff is responsible for gem(4) hangs, so put them back.
Bugfix update to nginx(8) version 1.4.2.
Build libdrm_radeon on sparc64.
Create drm(4) device nodes on sparc64 and create additional entries on amd64/i386/macppc for running with multiple cards.
Fixed sftp(1) regression: symlinking a file would incorrectly canonicalise the target path (bz#2129).
Disabled libexec/identd and enable usr.sbin/identd(8).
After a panic(9), do not fill up the dmesg(8) with splassert messages. They scroll away the important information.
Another major overhaul of the inteldrm(4) GEM code.
Make sure states learnt via pfsync(4) from a peer with the same ruleset checksum get properly assigned to rules.
Stopped gcc(1) warning on missing newline at EOF. Matches the behaviour of gcc >= 4.3 and clang.
Moved check in mktemp(1) for template length, so error message is also shown in the -t case instead of EINVAL.
Make user(8) write UIDs/GIDs as unsigned in the passwd file and error messages. Matches what pw_scan(3) expects.
Switched vax to gcc(1) version 3.3.6; removed gcc(1) version 2.95 from the tree.
Fixed mandoc(1) bug by reverting r1.10 of term.c: after a leading blank on an output line, don't generate a premature line break.
Updated ix(4) to the Intel/FreeBSD current version. Brings support for the flow control and additional (untested) bits for 1G fibre versions.
Enabled MSI on re(4) RT810xE.
Unbreak PMTU-discovery for ipsec(4) AES-GCM.
Don't flush the cache on page inflate for hibernate on amd64 for faster resume on some machines.
Fixed corner cases in the implementation of pow(3) to make it compatible with C99.
Implement if_nametoindex(3) and if_indextoname(3) for pfctl(8). 20x speedup factor with some complex rulesets.
Create more inodes on the sparc64 installation ramdisk. Prevents problems during install/upgrade when files or nodes need to be added.
Added ral(4) support for the Ralink RT3060, which uses the RT3572 MAC/BBP.
Remove the sysmerge(8) glue from the installer (it has never been used and is being replaced).

��Yes, sir. I felt sure you understood that. She said she had told you.�� "Why, eh,--I--I don't know that my movements need have anything to do with his. Yours, of course,--" "Ah, but if it saved your life!" "No, I'm not," grumbled the Doctor, "I've had enough of this wild-goose chase. And besides, it's nearly dinner time." "I am coming to that," Lawrence said, lighting a fresh cigarette. "As soon as Bruce was in trouble and the plot began to reel off I saw that it was mine. Of course there were large varyings in the details, but the scheme was mine. It was even laid on the same spot as my skeleton story. When I grasped that, I knew quite well that somebody must have stolen my plot." Judy In a coach-house, through which we passed on our way to see the prince's favourite horses with the state carriages��quite commonplace and comfortable, and made at Palitana��was a chigram,[Pg 68] off which its silk cover was lifted; it was painted bright red and spangled with twinkling copper nails. This carriage, which is hermetically closed when the Ranee goes out in it, was lined with cloth-of-gold patterned with Gohel Sheri's initials within a horseshoe: a little hand-glass on one of the cushions, two boxes of chased silver, the curtains and hangings redolent of otto of roses. "Are you certain of it? You have seen so very little of him, and you may be mistaken." "And your wife?" "I drawed on my man's bundle o' wood," said Gid, "and then dropped a little, so's to git him where he was biggest and make sure o' him." HoME ��Ұ��Ƶ ENTER NUMBET 0016gthmjs.com.cn
hbstkjyxgs.com.cn
lzcad.com.cn
khzrgz.com.cn
etxyse.net.cn
jlfydj.org.cn
hnmjcx.com.cn
www.wheatrip.com.cn
usmpbo.com.cn
xdchain.com.cn