version 1.20, 2023/10/11 13:39:03 |
version 1.21, 2023/10/11 15:00:50 |
|
|
|
|
<li>Various kernel improvements: |
<li>Various kernel improvements: |
<ul> |
<ul> |
<li>On amd64, identify IBT capability in cpu(4) dmesg lines. |
<li>On amd64, identify IBT capability in |
<li>On arm64, show BT and SBSS features in dmesg(8). |
<a href="https://man.openbsd.org/amd64/cpu.4">cpu(4)</a> dmesg lines. |
<li>Map device tree read/write to unbreak root on softraid(4). |
<li>On arm64, show BT and SBSS features in |
|
<a href="https://man.openbsd.org/dmesg.8">dmesg(8)</a>. |
|
<li>Map device tree read/write to unbreak root on |
|
<a href="https://man.openbsd.org/softraid.4">softraid(4)</a>. |
</ul> |
</ul> |
|
|
<li>SMP Improvements |
<li>SMP Improvements |
|
|
|
|
<li>VMM/VMD improvements |
<li>VMM/VMD improvements |
<ul> |
<ul> |
<li>Avoid use of uninitialised memory in vmd(8). |
<li>Avoid use of uninitialised memory in |
|
<a href="https://man.openbsd.org/vmd.8">vmd(8)</a>. |
<li>Migrate vmd_vm.vm_ttyname to char array allowing a vmd_vm |
<li>Migrate vmd_vm.vm_ttyname to char array allowing a vmd_vm |
object to be transmitted over an ipc channel. |
object to be transmitted over an ipc channel. |
</ul> |
</ul> |
|
|
|
|
<li>Various bugfixes and tweaks in userland: |
<li>Various bugfixes and tweaks in userland: |
<ul> |
<ul> |
<li>Refactoring and documenting of fdisk(8) code, to make the code |
<li>Refactoring and documenting of |
easier to maintain. |
<a href="https://man.openbsd.org/fdisk.8">fdisk(8)</a> code, |
<li>In clang, allow out-of-class defaulting of comparison operators, |
to make it easier to maintain. |
|
<li>In <a href="https://man.openbsd.org/clang.1">clang(1)</a>, |
|
allow out-of-class defaulting of comparison operators, |
by ways of backporting an upstream commit. |
by ways of backporting an upstream commit. |
<li>Improve the code of aucat(1) and fix spelling mistakes. |
<li>Improve the code of |
|
<a href="https://man.openbsd.org/aucat.1">aucat(1)</a> |
|
and fix spelling mistakes. |
<li>Improve the code quality of find(1). |
<li>Improve the code quality of find(1). |
<li>Many changes in mg(1): |
<li>Many changes in <a href="https://man.openbsd.org/mg.1">mg(1)</a>: |
<ul> |
<ul> |
<li>Improve the readability of the code of mg(1). |
<li>Improve the readability of the code. |
<li>In mg(1), fall back to /bin/sh if $SHELL is undefined. |
<li>Fall back to /bin/sh if $SHELL is undefined. |
<li>Fix parsing of tag files with duplicate entries in mg (1). |
<li>Fix parsing of tag files with duplicate entries. |
Instead of erroring out ignore duplicates. Fixes using |
Instead of erroring out ignore duplicates. Fixes using |
/var/db/libc.tags again. |
/var/db/libc.tags again. |
<li>In mg(1), change tagvisit (aka visit-tag-table) to immediately |
<li>Change tagvisit (aka visit-tag-table) to immediately |
load the tag file, and drop the lazy mechanics. |
load the tag file, and drop the lazy mechanics. |
<li>Remove useless global variable in mg(1). |
<li>Remove useless global variable. |
<li>Plug memory leak in mg(1). |
<li>Plug memory leak. |
<li>Replace strncpy() with strlcpy() in mg(1). |
<li>Replace strncpy() with strlcpy(). |
<li>Skip checking permissions of conffile with access(2). |
<li>Skip checking permissions of conffile with access(2). |
</ul> |
</ul> |
<li>On aarch64 architectures improve how BTI control flow integrity |
<li>On aarch64 architectures improve how BTI control flow integrity |
|
|
ports, make them discoverable via the new <code>hw.ucomnames</code> |
ports, make them discoverable via the new <code>hw.ucomnames</code> |
<a href="https://man.openbsd.org/sysctl.2#HW_UCOMNAMES~2">sysctl(2)</a>, |
<a href="https://man.openbsd.org/sysctl.2#HW_UCOMNAMES~2">sysctl(2)</a>, |
and support them in <a href="https://man.openbsd.org/cu.1">cu(1)</a>. |
and support them in <a href="https://man.openbsd.org/cu.1">cu(1)</a>. |
<li>Add support for the RK3568 32k RTC clock in rkclock(4) |
<li>Add support for the RK3568 32k RTC in |
<li>In dwpcie(4) attach Baikal-M PCIe. |
<a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>. |
|
<li>In <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a>, |
|
attach Baikal-M PCIe. |
<li>In openfirmware, implement regulator notifiers which get called |
<li>In openfirmware, implement regulator notifiers which get called |
when the voltage/current for a regulator is changed or when the |
when the voltage/current for a regulator is changed or when the |
regulator gets initialized when it attaches for the first time. The |
regulator gets initialized when it attaches for the first time. The |
latter makes it possible to register a notifier for a regulator that |
latter makes it possible to register a notifier for a regulator that |
hasn't attached yet. |
hasn't attached yet. |
<li>Add rkiovd(4), a driver for the IO voltage domains on Rockchip SoCs. |
<li>Add <a href="https://man.openbsd.org/rkiovd.4">rkiovd(4)</a>, |
<li>Add support for TEMPerGold 3.4 temperature sensor to ugold(4). |
a driver for the I/O voltage domains on Rockchip SoCs. |
|
<li>Add support for TEMPerGold 3.4 temperature sensor to |
|
<a href="https://man.openbsd.org/ugold.4">ugold(4)</a>. |
<li>Ignore duplicate ACPI lid transitions as they can happen on Dell |
<li>Ignore duplicate ACPI lid transitions as they can happen on Dell |
Precision 5510 systems. |
Precision 5510 systems. |
<li>Make RK3568 PCIe controllers run at the maximum possible speed |
<li>Make RK3568 PCIe controllers run at the maximum possible speed |
by using dwpcie_link_config() when initializing. |
by using dwpcie_link_config() when initializing. |
<li>In the Universal Flash Storage Host Controller Interface |
<li>In the Universal Flash Storage Host Controller Interface |
(ufshci(4)) enable Force Unit Access (FUA) for write commands. |
(<a href="https://man.openbsd.org/ufshci.4">ufshci(4)</a>), |
|
enable Force Unit Access (FUA) for write commands. |
|
|
</ul> |
</ul> |
|
|
<li>New or improved network hardware support: |
<li>New or improved network hardware support: |
<ul> |
<ul> |
<li>Fix dwqe(4) on several boards that use rgephy(4) by configuring |
<li>Fix <a href="https://man.openbsd.org/dwqe.4">dwqe(4)</a> |
|
on several boards that use |
|
<a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a> by configuring |
the RGMII interface before taking the PHY out of reset. |
the RGMII interface before taking the PHY out of reset. |
<li>Document that Intel i226 adapters are supported by igc(4). |
<li>Document that Intel i226 adapters are supported by |
<li>Add ngbe(4), a driver for WangXun WX1860 PCI Express 10/100/1Gb Ethernet devices. |
<a href="https://man.openbsd.org/igc.4">igc(4)</a>. |
<li>Add rkusbphy(4), a driver for the usb2phy on Rockchip SoCs. |
<li>Add <a href="https://man.openbsd.org/ngbe.4">ngbe(4)</a>, |
<li>Add support for the RTL8211F-VD PHY in rgephy(4). |
a driver for WangXun WX1860 PCI Express 10/100/1Gb Ethernet devices. |
<li>Enable rkusbphy(4) on arm64. |
Also support it on amd64 install media. |
|
<li>Add <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>, |
|
a driver for the usb2phy on Rockchip SoCs, and enable it on arm64. |
|
<li>Add support for the RTL8211F-VD PHY in |
|
<a href="https://man.openbsd.org/rgephy.4">rgephy(4)</a>. |
<li>In openfirmware, add glue for network interfaces to be found by |
<li>In openfirmware, add glue for network interfaces to be found by |
fdt/ofw node or phandle in order to support "switch chips" like the |
fdt/ofw node or phandle in order to support "switch chips" like the |
marvell link street. |
marvell link street. |
|
|
|
|
<li>Added or improved wireless network drivers: |
<li>Added or improved wireless network drivers: |
<ul> |
<ul> |
<li>Improve how Quectel LTE&5G devices attach to umb(4). |
<li>Improve how Quectel LTE&5G devices attach to |
|
<a href="https://man.openbsd.org/umb.4">umb(4)</a>. |
</ul> |
</ul> |
|
|
<li>IEEE 802.11 wireless stack improvements and bugfixes: |
<li>IEEE 802.11 wireless stack improvements and bugfixes: |
|
|
<ul> |
<ul> |
<li>In the arm64 ramdisk, simplify apple firmware copying to make it |
<li>In the arm64 ramdisk, simplify apple firmware copying to make it |
easier to add new firmware. |
easier to add new firmware. |
<li>On armv7 and arm64, silence informational messages from dd(1) |
<li>On armv7 and arm64, silence informational messages from |
|
<a href="https://man.openbsd.org/dd.1">dd(1)</a> |
when zeroing a disk's first 1MB. Use character not block devices with |
when zeroing a disk's first 1MB. Use character not block devices with |
dd(1) like on other architectures. |
dd(1) like on other architectures. |
<li>Refactor the code of md_installboot() on armv7 and arm64 to be |
<li>Refactor the code of md_installboot() on armv7 and arm64 to be |
more in line with other architectures. |
more in line with other architectures. |
<li>Improve the dialogue of the installer without affecting |
<li>Improve the dialogue of the installer without affecting |
autoinstall(8) files. |
<a href="https://man.openbsd.org/autoinstall.8">autoinstall(8)</a> |
<li>Enable ufshci(4) on arm64 install media. |
files. |
<li>Enable ngbe(4) on amd64 install media. |
<li>Enable <a href="https://man.openbsd.org/ufshci.4">ufshci(4)</a> |
|
on arm64 install media. |
<li>On arm64 pine64 boards, stop writing pine64 firmware to disk. |
<li>On arm64 pine64 boards, stop writing pine64 firmware to disk. |
<li>Make root on softraid(4) installations boot out of the box on |
<li>Make root on |
Raspberry Pis (arm64). |
<a href="https://man.openbsd.org/softraid.4">softraid(4)</a> |
<li>Support installations with root on softraid on arm64, tested on |
installations boot out of the box on Raspberry Pis (arm64). |
Pinebook Pro, Raspberry Pi 4b, and SolidRun CEX7. |
<li>Support installations with root on |
|
<a href="https://man.openbsd.org/softraid.4">softraid(4)</a> |
|
on arm64, tested on Pinebook Pro, Raspberry Pi 4b, and SolidRun CEX7. |
|
|
</ul> |
</ul> |
|
|
<li>Security improvements: |
<li>Security improvements: |
<ul> |
<ul> |
<li>Change malloc(3) chunk sizes to be fine grained. [needs better explanation] |
<li>Change <a href="https://man.openbsd.org/malloc.3">malloc(3)</a> |
<li>In malloc(3), check all chunks in the delayed free list for write-after-free. |
chunk sizes to be fine grained. [needs better explanation] |
|
<li>In <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>, |
|
check all chunks in the delayed free list for write-after-free. |
</ul> |
</ul> |
|
|
<li>Changes in the network stack: |
<li>Changes in the network stack: |
<ul> |
<ul> |
<li>In pf(4), when redirecting locally generated IP packets to |
<li>In <a href="https://man.openbsd.org/pf.4">pf(4)</a>, |
|
when redirecting locally generated IP packets to |
userland with divert-packet rules, the packets may have no checksum |
userland with divert-packet rules, the packets may have no checksum |
due to hardware offloading. Calculate the checksum in that case. |
due to hardware offloading. Calculate the checksum in that case. |
<li>Sync the use of getuptime(9) in the Neighbour Discovery (ND) code with ARP. |
<li>Sync the use of |
<li>In the IPv6 forwarding code, call getuptime(9) once for |
<a href="https://man.openbsd.org/getuptime.9">getuptime(9)</a> |
consistency with IPv4. |
in the Neighbour Discovery (ND) code with ARP. |
|
<li>In the IPv6 forwarding code, call |
|
<a href="https://man.openbsd.org/getuptime.9">getuptime(9)</a> |
|
once for consistency with IPv4. |
|
|
</ul> |
</ul> |
|
|
|
|
<ul> |
<ul> |
<li>IPsec support was improved: |
<li>IPsec support was improved: |
<ul> |
<ul> |
<li>In isakmpd(8), avoid a double free in ec_init() when using the OpenSSL API. |
<li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, |
<li>In iked(8), do not treat the return value of i2d_ECDSA_SIG() as |
avoid a double free in ec_init() when using the OpenSSL API. |
length as it can be negative. |
<li>In <a href="https://man.openbsd.org/iked.8">iked(8)</a>, |
<li>Prepare isakmpd(8) for a libcrypto library that is lacking binary field |
do not treat the return value of |
support. |
<a href="https://man.openbsd.org/i2d_ECDSA_SIG.3" |
<li>In isakmpd(8), avoid a potential crash by adding a missing NULL check. |
>i2d_ECDSA_SIG(3)</a> as a length as it can be negative. |
|
<li>Prepare <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> |
|
for a libcrypto library that is lacking binary field support. |
|
<li>In <a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a>, |
|
avoid a potential crash by adding a missing NULL check. |
|
|
</ul> |
</ul> |
<li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, |
<li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, |
|
|
<li>... |
<li>... |
</ul> |
</ul> |
|
|
<li>Make dig(1) use less deprecated LibreSSL API. |
<li>Make <a href="https://man.openbsd.org/dig.1">dig(1)</a> |
<li>In ypldap(8), reduce memory usage when updating larger directories. |
use less deprecated LibreSSL API. |
<li>Remove stylistic differences between arp(8) and ndp(8) delete() |
<li>In <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>, |
|
reduce memory usage when updating larger directories. |
|
<li>Remove stylistic differences between |
|
<a href="https://man.openbsd.org/arp.8">arp(8)</a> and |
|
<a href="https://man.openbsd.org/ndp.8">ndp(8)</a> delete() |
function. This makes it easier to spot real changes in behavior. |
function. This makes it easier to spot real changes in behavior. |
<li>Make ndp(8) not remove cloning routes when no neighbor entry is |
<li>Make <a href="https://man.openbsd.org/ndp.8">ndp(8)</a> |
|
not remove cloning routes when no neighbor entry is |
found with <code>ndp -d</code>. |
found with <code>ndp -d</code>. |
</ul> |
</ul> |
|
|