=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/65.html,v retrieving revision 1.87 retrieving revision 1.88 diff -c -r1.87 -r1.88 *** www/65.html 2019/04/15 17:25:26 1.87 --- www/65.html 2019/04/15 17:56:55 1.88 *************** *** 194,200 ****
  • RETGUARD performance and security has been improved in clang(1) by keeping data on registers instead of on the stack when possible, ! and lengthing the epilogue trapsled on amd64 to consume the rest of the cache line before the return.
  • RETGUARD replaces the stack protector on amd64 and arm64, since RETGUARD instruments every function that returns and provides --- 194,200 ----
  • RETGUARD performance and security has been improved in clang(1) by keeping data on registers instead of on the stack when possible, ! and lengthening the epilogue trapsled on amd64 to consume the rest of the cache line before the return.
  • RETGUARD replaces the stack protector on amd64 and arm64, since RETGUARD instruments every function that returns and provides *************** *** 304,310 ****
  • tcpdump(8) already used privsep, pledge(2) and unveil(2) containment. ! Now also drop root privileges completely (switching to a reserved uid).
  • The multi-threaded performance of malloc(3) has been improved.
  • malloc(3) now uses --- 304,310 ----
  • tcpdump(8) already used privsep, pledge(2) and unveil(2) containment. ! It now also drops root privileges completely (switching to a reserved uid).
  • The multi-threaded performance of malloc(3) has been improved.
  • malloc(3) now uses *************** *** 608,614 ****
  • Ports and packages:

    --- 608,614 ----

  • Ports and packages: