www/34.html - diff

Return to 34.html CVS log

Up to [local] / www

Diff for /www/34.html between version 1.56 and 1.57

version 1.56, 2016/03/21 05:46:19

version 1.57, 2016/03/22 10:54:42

Line 58

<ul>

<li>The i386 architecture has been switched to the

executable format.

Line 68

effort limit on code execution.

on ELF platforms now loads libraries in a random order for

greater resistance to attacks. The i386 architecture also maps libraries

into somewhat randomized addresses. Together with W^X and

Line 80

<li>A static bounds checker has been added to the compiler to perform basic

checks on functions which accept buffers and sizes. The checker aims to

find common mistakes in the use of library functions such as

<a href="http://man.openbsd.org?query=strlcpy">strlcpy(3)</a>

<a href="http://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>

or <a href="http://man.openbsd.org?query=sscanf">sscanf(3)</a>

or <a href="http://man.openbsd.org/?query=sscanf">sscanf(3)</a>

without emitting any false positives. Running it over the source and ports

trees revealed over a hundred real bugs, which were fixed and submitted back

to the original authors where possible.

<li>Privilege separation has been implemented for the

<a href="http://man.openbsd.org?query=syslogd">syslogd(8)</a>

<a href="http://man.openbsd.org/?query=syslogd">syslogd(8)</a>

daemon, making it much more robust against future errors. The child which

listens to network traffic now runs as a normal user and chroots itself,

while the parent process tracks the state of the child and performs

Line 98

<li>Many unsafe string functions have been removed from the kernel and userland

utilities. This audit is one of the most comprehensive OpenBSD has ever

done, with thousands of occurrences of

<a href="http://man.openbsd.org?query=strcpy">strcpy(3)</a>,

<a href="http://man.openbsd.org/?query=strcpy">strcpy(3)</a>,

<a href="http://man.openbsd.org?query=strcat">strcat(3)</a>,

<a href="http://man.openbsd.org/?query=strcat">strcat(3)</a>,

<a href="http://man.openbsd.org?query=sprintf">sprintf(3)</a>,

<a href="http://man.openbsd.org/?query=sprintf">sprintf(3)</a>,

and

<a href="http://man.openbsd.org?query=vsprintf">vsprintf(3)</a>

<a href="http://man.openbsd.org/?query=vsprintf">vsprintf(3)</a>

being replaced with safer, bounded alternatives such as

<a href="http://man.openbsd.org?query=strlcpy">strlcpy(3)</a>,

<a href="http://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>,

<a href="http://man.openbsd.org?query=strlcat">strlcat(3)</a>,

<a href="http://man.openbsd.org/?query=strlcat">strlcat(3)</a>,

<a href="http://man.openbsd.org?query=snprintf">snprintf(3)</a>,

<a href="http://man.openbsd.org/?query=snprintf">snprintf(3)</a>,

<a href="http://man.openbsd.org?query=vsnprintf">vsnprintf(3)</a>,

<a href="http://man.openbsd.org/?query=vsnprintf">vsnprintf(3)</a>,

and

<a href="http://man.openbsd.org?query=asprintf">asprintf(3)</a>.

<a href="http://man.openbsd.org/?query=asprintf">asprintf(3)</a>.

<li>Many improvements to and bugs fixed in the

Line 130

<li>Emulation support for binary compatibility is now controlled via

<a href="http://man.openbsd.org?query=sysctl&sektion=8">sysctl(8)</a>.

<a href="http://man.openbsd.org/?query=sysctl&sektion=8">sysctl(8)</a>.

Emulation is now disabled by default to limit exposure to malicious

binaries, and can be enabled in

sysctl.conf(5)</a>.

Line 141

<li>The ports tree now supports building programs under

systrace(1)</a>, preventing the possibility of applications harming the

system at compile-time via trojaned configuration scripts or otherwise.

<li>Symbol caching in

reduces the startup time of large applications.

Line 156

<li>Replacement of GNU

<a href="http://man.openbsd.org?query=diff">diff(1)</a>,

<a href="http://man.openbsd.org/?query=diff">diff(1)</a>,

<a href="http://man.openbsd.org?query=diff3">diff3(1)</a>,

<a href="http://man.openbsd.org/?query=diff3">diff3(1)</a>,

<a href="http://man.openbsd.org?query=grep">grep(1)</a>,

<a href="http://man.openbsd.org/?query=grep">grep(1)</a>,

<a href="http://man.openbsd.org?query=egrep">egrep(1)</a>,

<a href="http://man.openbsd.org/?query=egrep">egrep(1)</a>,

<a href="http://man.openbsd.org?query=fgrep">fgrep(1)</a>,

<a href="http://man.openbsd.org/?query=fgrep">fgrep(1)</a>,

<a href="http://man.openbsd.org?query=zgrep">zgrep(1)</a>,

<a href="http://man.openbsd.org/?query=zgrep">zgrep(1)</a>,

<a href="http://man.openbsd.org?query=zegrep">zegrep(1)</a>,

<a href="http://man.openbsd.org/?query=zegrep">zegrep(1)</a>,

<a href="http://man.openbsd.org?query=zfgrep">zfgrep(1)</a>,

<a href="http://man.openbsd.org/?query=zfgrep">zfgrep(1)</a>,

<a href="http://man.openbsd.org?query=gzip">gzip(1)</a>,

<a href="http://man.openbsd.org/?query=gzip">gzip(1)</a>,

<a href="http://man.openbsd.org?query=zcat">zcat(1)</a>,

<a href="http://man.openbsd.org/?query=zcat">zcat(1)</a>,

<a href="http://man.openbsd.org?query=gunzip">gunzip(1)</a>,

<a href="http://man.openbsd.org/?query=gunzip">gunzip(1)</a>,

<a href="http://man.openbsd.org?query=gzcat">gzcat(1)</a>,

<a href="http://man.openbsd.org/?query=gzcat">gzcat(1)</a>,

<a href="http://man.openbsd.org?query=zcmp">zcmp(1)</a>,

<a href="http://man.openbsd.org/?query=zcmp">zcmp(1)</a>,

<a href="http://man.openbsd.org?query=zmore">zmore(1)</a>,

<a href="http://man.openbsd.org/?query=zmore">zmore(1)</a>,

<a href="http://man.openbsd.org?query=zdiff">zdiff(1)</a>,

<a href="http://man.openbsd.org/?query=zdiff">zdiff(1)</a>,

<a href="http://man.openbsd.org?query=zforce">zforce(1)</a>,

<a href="http://man.openbsd.org/?query=zforce">zforce(1)</a>,

<a href="http://man.openbsd.org?query=gzexe">gzexe(1)</a>,

<a href="http://man.openbsd.org/?query=gzexe">gzexe(1)</a>,

and

commands with BSD licensed equivalents.

<li>Addition of read-only support for

file systems.

<li>Reliability improvements to layered file systems, enabling

<a href="http://man.openbsd.org?query=mount_null">NULLFS</a>

<a href="http://man.openbsd.org/?query=mount_null">NULLFS</a>

to work again.

<li>Import of

<a href="http://man.openbsd.org?query=growfs">growfs(8)</a>

<a href="http://man.openbsd.org/?query=growfs">growfs(8)</a>

utility, allowing expansion of existing file systems.

<li>Improvements to

<a href="http://man.openbsd.org?query=compat_linux">linux emulation</a>

<a href="http://man.openbsd.org/?query=compat_linux">linux emulation</a>

enabling more applications to run.

<li>Significant improvements to the

<a href="http://man.openbsd.org?query=pthreads">pthreads(3)</a>

<a href="http://man.openbsd.org/?query=pthreads">pthreads(3)</a>

library.

<li>Replace many static fd_set uses, to instead use

or dynamic allocation.

Line 219

<li>A large number of bug fixes, changes, and optimizations to our packet filter

including:

<ul>

<li>packet tagging (e.g. filter on tags added by bridge based on MAC address)

Line 233

<li>Improved hardware support, including:

<ul>

<li>Kauai ATA controllers (Apple ATA100 wdc)

kauaiata(4)</a> enabling support for Powerbook 12" and 17" models.

<li>Support for controlling LongRun registers on Transmeta CPUs.

<li>Many fixes to

<a href="http://man.openbsd.org?query=aac">aac(4)</a>,

<a href="http://man.openbsd.org/?query=aac">aac(4)</a>,

<a href="http://man.openbsd.org?query=ahc">ahc(4)</a>,

<a href="http://man.openbsd.org/?query=ahc">ahc(4)</a>,

<a href="http://man.openbsd.org?query=osiop">osiop(4)</a>,

<a href="http://man.openbsd.org/?query=osiop">osiop(4)</a>,

and <a href="http://man.openbsd.org?query=siop">siop(4)</a>

and <a href="http://man.openbsd.org/?query=siop">siop(4)</a>

SCSI drivers.

<li>New

<a href="http://man.openbsd.org?query=it">it(4)</a>,

<a href="http://man.openbsd.org/?query=it">it(4)</a>,

<a href="http://man.openbsd.org?query=lm">lm(4)</a>, and

<a href="http://man.openbsd.org/?query=lm">lm(4)</a>, and

<a href="http://man.openbsd.org?query=viaenv">viaenv(4)</a>

<a href="http://man.openbsd.org/?query=viaenv">viaenv(4)</a>

hardware monitor drivers.

<li>New

driver for SafeNet crypto accelerators.

<li>New

driver for Myson Technologies network cards.

<li>More ethernet cards supported by

<a href="http://man.openbsd.org?query=sk">sk(4)</a>,

<a href="http://man.openbsd.org/?query=sk">sk(4)</a>,

<a href="http://man.openbsd.org?query=wi">wi(4)</a>,

<a href="http://man.openbsd.org/?query=wi">wi(4)</a>,

<a href="http://man.openbsd.org?query=fxp">fxp(4)</a>,

<a href="http://man.openbsd.org/?query=fxp">fxp(4)</a>,

and <a href="http://man.openbsd.org?query=dc&sektion=4">dc(4)</a>.

and <a href="http://man.openbsd.org/?query=dc&sektion=4">dc(4)</a>.

<li>Massive overhaul and sync with NetBSD of the entire

support system.

<li>New and better support for various controllers in

<a href="http://man.openbsd.org?query=pciide">pciide(4)</a>,

<a href="http://man.openbsd.org/?query=pciide">pciide(4)</a>,

including experimental support for Serial ATA.

<li>New drivers to support

mgx(4)</a> and

pninek(4)</a> SPARC framebuffers. The

vigra(4)</a> driver also supports more models.

<li><a href="http://man.openbsd.org?query=pcmcia">pcmcia(4)</a>

<li><a href="http://man.openbsd.org/?query=pcmcia">pcmcia(4)</a>

support for Tadpole SPARCBooks and SPARCs with pcmcia-sbus bridges.

<li>Watchdog support for

<a href="http://man.openbsd.org?query=elansc&arch=i386">elansc(4)</a>

<a href="http://man.openbsd.org/?query=elansc&arch=i386">elansc(4)</a>

and

<a href="http://man.openbsd.org?query=geodesc&arch=i386">geodesc(4)</a>

<a href="http://man.openbsd.org/?query=geodesc&arch=i386">geodesc(4)</a>

as used on Soekris boards.

</ul>

Line 368

To make a boot floppy under MS-DOS, use the "rawrite" utility located

at CD:/3.4/tools/rawrite.exe. To make the boot floppy under a Unix OS,

use the <a href="http://man.openbsd.org?query=

use the <a href="http://man.openbsd.org/?query=

dd&sektion=1">dd(1)</a> utility. The following is an example usage of

<a href="http://man.openbsd.org?query=dd&sektion=1">dd(1)

<a href="http://man.openbsd.org/?query=dd&sektion=1">dd(1)

</a>, where the device could be "floppy", "rfd0c", or

"rfd0a".

Line 561

OpenBSD ports system.

The ports/ directory represents a CVS (see the manpage for

cvs(1)</a> if

you aren't familiar with CVS) checkout of our ports. As with our complete

source tree, our ports tree is available via anoncvs. So, in