version 1.30, 2003/09/08 03:51:41 |
version 1.31, 2003/09/08 04:12:05 |
|
|
greater resistance to attacks. The i386 architecture also maps libraries |
greater resistance to attacks. The i386 architecture also maps libraries |
into somewhat randomized addresses. Together with W^X and |
into somewhat randomized addresses. Together with W^X and |
<a href="http://www.research.ibm.com/trl/projects/security/ssp/">ProPolice</a>, |
<a href="http://www.research.ibm.com/trl/projects/security/ssp/">ProPolice</a>, |
these changes increase the difficulty of successfully exploiting an application |
these changes increase the difficulty of successfully exploiting an |
error, such as a buffer overflow. |
application error, such as a buffer overflow. |
<p> |
<p> |
|
|
<li>A static bounds checker has been added to the compiler to perform basic |
<li>A static bounds checker has been added to the compiler to perform basic |
|
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf">asprintf(3)</a>. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf">asprintf(3)</a>. |
<p> |
<p> |
|
|
|
<li>Many improvements to and bugs fixed in the |
|
<a href="http://www.research.ibm.com/trl/projects/security/ssp/"> |
|
ProPolice</a> stack protecter. Several other code generation bugs |
|
for RISC architectures fixed. |
|
<p> |
|
|
<li><a href="http://www.research.ibm.com/trl/projects/security/ssp/"> |
<li><a href="http://www.research.ibm.com/trl/projects/security/ssp/"> |
ProPolice</a> stack protection has been enabled in the kernel as well. |
ProPolice</a> stack protection has been enabled in the kernel as well. |
<p> |
<p> |
|
|
to work again. |
to work again. |
<p> |
<p> |
|
|
|
<li>Import of |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=growfs">growfs(8)</a> |
|
utility, allowing expansion of existing file systems. |
|
<p> |
|
|
<li>Improvements to |
<li>Improvements to |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux">linux emulation</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux">linux emulation</a> |
enabling more applications to run. |
enabling more applications to run. |
|
|
or dynamic allocation. |
or dynamic allocation. |
<p> |
<p> |
|
|
|
<li>ANSIfication and stricter prototypes for a large portion of the source tree. |
|
<p> |
|
|
<li>Legacy KerberosIV support has been removed, and the remaining KerberosV |
<li>Legacy KerberosIV support has been removed, and the remaining KerberosV |
codebase has been restructured for easier management. |
codebase has been restructured for easier management. |
<p> |
<p> |
|
|
|
|
<li>Improved hardware support, including: |
<li>Improved hardware support, including: |
<ul> |
<ul> |
<li>Kauai ATA controllers (Apple ATA100 wdc) enabling support for |
<li>Kauai ATA controllers (Apple ATA100 wdc) |
Powerbook 12" and 17" models. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kauaiata&arch=macppc"> |
|
kauaiata(4)</a> enabling support for Powerbook 12" and 17" models. |
<li>Support for controlling LongRun registers on Transmeta CPUs. |
<li>Support for controlling LongRun registers on Transmeta CPUs. |
<li>Many fixes to |
<li>Many fixes to |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aac">aac(4)</a>, |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aac">aac(4)</a>, |
|
|
SCSI drivers. |
SCSI drivers. |
<li>New |
<li>New |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=it">it(4)</a>, |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=it">it(4)</a>, |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lm">lm(4)</a>, |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lm">lm(4)</a>, and |
and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=viaenv">viaenv(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=viaenv">viaenv(4)</a> |
hardware monitor drivers. |
hardware monitor drivers. |
<li>New |
<li>New |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=safe">safe(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=safe">safe(4)</a> |
|
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtd">mtd(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtd">mtd(4)</a> |
driver for Myson Technologies network cards. |
driver for Myson Technologies network cards. |
<li>More ethernet cards supported by |
<li>More ethernet cards supported by |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp">fxp(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk">sk(4)</a>, |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi">wi(4)</a>, |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp">fxp(4)</a>, |
and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>. |
and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>. |
<li>Massive overhaul and sync with NetBSD of the entire |
<li>Massive overhaul and sync with NetBSD of the entire |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a> |
|
|
<li>New and better support for various controllers in |
<li>New and better support for various controllers in |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide">pciide(4)</a>, |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide">pciide(4)</a>, |
including experimental support for Serial ATA. |
including experimental support for Serial ATA. |
|
<li>New drivers to support |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mgx&arch=sparc"> |
|
mgx</a> and |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pninek&arch=sparc"> |
|
pninek</a> SPARC framebuffers. The |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vigra&arch=sparc"> |
|
vigra</a> driver also supports more models. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia">pcmcia(4)</a> |
|
support for Tadpole SPARCBooks and SPARCs with pcmcia-sbus bridges. |
</ul> |
</ul> |
<p> |
<p> |
|
|