version 1.31, 2017/03/11 05:43:44 |
version 1.32, 2017/03/11 06:17:15 |
|
|
<li>Security improvements: |
<li>Security improvements: |
<ul> |
<ul> |
<li>Enforcement of userland W^X on OCTEON Plus and later. |
<li>Enforcement of userland W^X on OCTEON Plus and later. |
<li>All shared libraries and all dynamic and static-PIE executables use |
<li>All shared libraries, all dynamic and static-PIE executables, and |
|
<a href="http://man.openbsd.org/ld.so.1">ld.so(1)</a> itself use |
the RELRO ("read-only after relocation") design such that |
the RELRO ("read-only after relocation") design such that |
more of the initial data can be protected as read-only. |
more of the initial data is protected as read-only. |
<li>The size of user virtual address space has been increased |
<li>The size of user virtual address space has been increased |
from 2GB to 1TB on mips64. |
from 2GB to 1TB on mips64. |
<li>PIE and -static -pie on arm (XXX someone please explain this better). |
<li>PIE and -static -pie on arm (XXX someone please explain this better). |
|
|
<li><a href="http://man.openbsd.org/printf.3">printf(3)</a> family |
<li><a href="http://man.openbsd.org/printf.3">printf(3)</a> family |
of formatting functions now report to syslog when the %s |
of formatting functions now report to syslog when the %s |
format is used with a NULL pointer. |
format is used with a NULL pointer. |
|
<li>The performance and concurrency of the |
|
<a href="http://man.openbsd.org/malloc.3">malloc(3)</a> family |
|
in multi-threaded processes has been improved. |
<li>... |
<li>... |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li>An NMI sends the amd64 kernel into |
<li>An NMI sends the amd64 kernel into |
<a href="http://man.openbsd.org/ddb.4">ddb(4)</a> |
<a href="http://man.openbsd.org/ddb.4">ddb(4)</a> |
more reliably. |
more reliably. |
|
<li><a href="http://man.openbsd.org/ld.so.1">ld.so(1)</a> now |
|
supports the DT_PREINITARRAY, DT_INITARRAY, DT_FINIARRAY, DT_FLAGS, |
|
and DT_RUNPATH dynamic tags. |
<li>... |
<li>... |
</ul> |
</ul> |
<p> |
<p> |