=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/62.html,v retrieving revision 1.93 retrieving revision 1.94 diff -c -r1.93 -r1.94 *** www/62.html 2019/06/01 22:54:16 1.93 --- www/62.html 2019/06/01 23:12:47 1.94 *************** *** 335,351 ****
  • Tighter pledge for at(1).
  • Fixed and simplified pledge logic for nc(1). !
  • More application of ! recallocarray(3) ! in userland, and tracked sizes to free(9) in the kernel.
  • Achieve higher levels of paranoia regarding structure packing, and clear many kernel objects before passing to userland. !
  • Disable some optimizations in clang(1) due to incompatibility with security. !
  • For instance, cope with ! clang(1)'s assumption that static or const objects placed in unknown sections (such as .openbsd.randomdata) are surely always 0, and therefore such memory accesses can be --- 335,351 ----
  • Tighter pledge for at(1).
  • Fixed and simplified pledge logic for nc(1). !
  • More application of ! recallocarray(3) ! in userland, and tracked sizes to free(9) in the kernel.
  • Achieve higher levels of paranoia regarding structure packing, and clear many kernel objects before passing to userland. !
  • Disable some optimizations in clang(1) due to incompatibility with security. !
  • For instance, cope with ! clang(1)'s assumption that static or const objects placed in unknown sections (such as .openbsd.randomdata) are surely always 0, and therefore such memory accesses can be *************** *** 371,377 **** dhcrelay(8) logging to stderr when it is started with the -d option. !
  • dhclient(8) improvements: !
  • dhclient(8) improvements: