www/75.html - diff

Return to 75.html CVS log

Up to [local] / www

Diff for /www/75.html between version 1.38 and 1.39

version 1.38, 2024/03/31 23:14:27

version 1.39, 2024/03/31 23:35:06

Line 120

<li>Disallow <a

href="https://man.openbsd.org/madvise.2">madvise(2)</a> and <a

href="https://man.openbsd.org/msync.2">msync(2)</a> memory/mapping

destructive operations on immutable memory regions. Innstead return EPERM.

destructive operations on immutable memory regions. Instead return EPERM.

<li>Added new amd64-only sysctl machdep.retpoline which says whether

the cpu requires the retpoline branch target injection mitigation.

<li>Added new accounting flag ABTCFI to <a

Line 206

href="https://man.openbsd.org/tar.1">tar(1)</a>.

<li>Extended <a href="https://man.openbsd.org/imsg_init.3">imsg</a>

and the <a href="https://man.openbsd.org/ibuf_add.3">ibuf</a> buffer

manipulation API with useful getter methods. Unified file descriptior

manipulation API with useful getter methods. Unified file descriptor

passing in all imsg using programs with the use of the imsg_get_fd()

function.

<li>Added <a

Line 274

libc version requested by an executable itself is the one loaded.

<li>Significantly (for small programs) reduce the size of statically

linked binaries by splitting several libc internal functions into

seperate compilation and thus linkage units. Specifically <a

separate compilation and thus linkage units. Specifically <a

href="https://man.openbsd.org/getpwnam.3">getpwnam(3)</a> does not

need the full YP socket setup and does not use all possible <a

href="https://man.openbsd.org/dbopen.3">dbopen(3)</a> databease

href="https://man.openbsd.org/dbopen.3">dbopen(3)</a> database

backends.

<li>Added <a href="https://man.openbsd.org/vi.1">vi(1)</a>

showfilename set option to display the file name in the lower left

Line 437

system calls.<br>

Together with <a

href="https://man.openbsd.org/pinsyscalls.2">pinsyscalls(2)</a> this

change makes it ipmpossible to perform system call through any other

change makes it impossible to perform system call through any other

way than the libc system cann wrapper functions.<br>

way than the libc system call wrapper functions.<br>

Users of syscall(2), such as Perl and the Go programming

languange were converted to use the libc functions.

language were converted to use the libc functions.

<li>Added <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>

stdio before parsing pfkey messages to <a

href="https://man.openbsd.org/ipsecctl.8">ipsecctl(8)</a> -m and -s.

Line 525

trigger retransmission only for fragment 1/x to prevent each received

fragment triggering retransmission of the full fragment queue.

<li>Prevent routing loops by droping already encrypted packets that are going through <a

<li>Prevent routing loops by dropping already encrypted packets that are going through <a

href="https://man.openbsd.org/sec.4">sec(4)</a> again.

</ul>