We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to July 23.
-
+
+
- Move nasty SCSI utility code out of libutil and into scsi(8), the only place it's used. +
- When detaching an interface, remove from software interrupt queues any packets pointing to that interface. +
- Enable DMA on all but really old Promise pciide(4) controllers. +
- Add some fixups for LBA48 support on old Promise pciide(4) controllers. From NetBSD, fixes from FreeBSD. +
- In Linux emulation mode, don't pass (as yet) unimplemented vfat ioctls through. +
- Remove unused scanner stuff in src/usr.sbin/ssio. +
- Implement the sysinfo() system call under Linux emulation. +
- Remove AFS code from sshd(8). +
- Redo the 'invalid line number' fix for patch(1). +
- Update CGI(3p) to version 2.98 to fix a cross-site scripting bug. + +
- Use libc getopt_long(3) in patch(1) instead of a local version. +
- POSIX tweaks to patch(1). +
- Switch over to the new diff(1) and diff3(1) code, disabling GNU diff. sdiff is no more. +
- Remove obsolete KerberosIV and AFS code from ssh(1) and re-enable the -k option. +
- Implement diff(1) options -L and -T for GNU diff compatibility. + +
- getaddrinfo(3) and getaddrinfo(3) now share a mutex. +
- Check for invalid flags to mmap(2) and mprotect(2) and bomb out on errors. +
- A number of compatibility and POSIX compliance tweaks to diff(1)'s output. +
- Back out the patch(1) line number fix, it coredumped sometimes. +
- Add llabs(3) function for C99 compliance. +
- Add ftw(3) and nftw(3) functions, implemented using fts(3), for XPG compliance. +
- Dynamically grow diff(1)'s array of changes as required. +
- Fix a redraw bug in vi(1) that could cause endless recursion. +
- Compile modload(8) with the -Z option to ld(1) (disabling W^X.) +
- Fix a typo in md5(1) that created an array of ints instead of chars. + +
- Allow uhid(4) devices to be used as 'mice' for the X server. +
- In wd(4) only use LBA48 when absolutely necessary, to cut down on register-writing overhead. +
- Have ac(8) ignore entries that go back in time. +
- Fix a bug causing a segfault in grep(1) (PR#3358.) + +
- With MALLOC_EXTRA_SANITY defined, have malloc(3) just warn instead of dying on mmap(2)/brk(2) errors. +
- Updates to systrace(1): Bug fixes and new 'ask' action. +
- Fix sftp filename parsing for arguments with escaped quotes (OpenSSH bug #517.) + +
- Don't flip compress(1) into 'zcat' mode if the -o option is given. +
- Check that the mountpoint of the descriptor passed to fstatfs(2) is non-NULL. +
- Un-swap ld.so(1)'s display of (requested, available) library revisions when the available library is less than that requested. + +
- GNU diff compatibility and many other fixes and cleanups to diff(1). +
- Fix pf(4) scrub rule fragment reassembly after the netinet byte order changes. +
- Add ESP decryption support to tcpdump(8) (-E option.) + +
- Make diff(1)'s no-newline-at-end-of-file handling consistent with GNU diff, now that patch(1) is expecting this. +
- Fix a sizeof(wrongthing) bug in grep(1). +
- Teach patch(1) how to deal with "\ No newline at end of file" as produced by GNU diff (and soon OpenBSD diff(1) as well.) From NetBSD. +
- In newfs(8), remove the ffs default limit of 16 cylinders per group, and simply set to match other parameters. Change the default frag size to 2048, which bumps the block size to 16k. (From FreeBSD newfs.c late 2001.) +
- React rationally to bogus line numbers in input to patch(1). +
- Don't store Kerberos credentials in the privileged sshd(8) process. +
- Clear IUCLC flag (uppercase-to-lowercase translation) when setting raw tty mode in ssh(1). +
- Allow as many -d (sshd(8)) or -v (ssh(1)) options as the user cares to give. Max debug/verbose level is still 3. +
- Have mkdep(1) correctly handle '-o <file>' on the compiler command line. + +
- In xargs(1), don't call err(3) (which uses exit(3)) after doing vfork(2). +
- Fix line ranges for unified diff(1) output. +
- Unbreak pflog(4) after the recent netinet byte ordering changes. +
- Stop compress(1) from re-compressing a file with a suffix indicating it's already compressed. +
- Fix memory management in pfctl(8)'s table parsing code. + +
- Range-check numeric arguments to grep(1) against INT_MAX. +
- Un-swap the sec and usec uptime stats in an(4). +
- Fix file suffix handling code in compress(1). +
- Allow compress(1) to accept -t and an implied -c when we're taking piped input (normally -t and -c are mutually exclusive.) +
- Enable build of KerberosV libraries under lib/. +
- More manpage cleanup. +
- Remove undocumented sshd(8) option '-V'. +
- Remove error(1). + +
- Fix a couple of cases where malloc(3) fails due to lack of memory, but doesn't set ENOMEM. +
- Make fwohci (IEEE1394) cardbus code compile on big-endian systems. + +
- Add zdiff(1) script using our new improved compress(1). +
- Remove a couple of unnecessary htons() calls in the pf(4) routing code. + +
- Parsing improvements and better debugging/regression test support for tables in pfctl(8). +
- Make compress(1) magic number checking work when decompressing on a pipe. + +
- Make sure an unlock message gets sent when handing NFS receive errors. +
- Add a cast to 64 bits to prevent a statfs(2) overflow on large disks. +
- Fix grep(1)'s -v semantics (print if no match of any pattern.) +
- LBA48 support and compatibility tweaks for atactl(8). +
- Set the correct return code when grep(1) dies due to an error. +
- Fix parsing of -<num> (context) option to grep(1). +
- Bring in a diff3 from 32V UNIX, and start hacking it into shape. +
- Tweak the installer's ftp client operation so that sets are always fetched from the exact same place as the set list. +
- Prevent excessive rekeying in ssh(1) for ciphers with block size <= 128 bits by enforcing a fixed 1GB rekey limit for these ciphers. +
- Set all ulimit values to 'unlimited' in the installer, unbreaking fsck(8) for large filesystems. +
- Fix a couple of broken IPv6 packet length tests. +
- Unbreak merging of host lists in pfctl(8). +
- Stop spell(1) misinterpreting '+X' as option '-X'. +
- Tidy up a bunch of missing include files all over the place. + +
- Have the IPv6 normalizer detect short packets, since the 'exact length' match was just removed. +
- When normalizing IPv6 packets, don't check against length fields that are only set after filter processing. +
- In the netinet stack, don't cheat by NTOHS()'ing ip_len and ip_off (modifying the packet buffer directly). Instead, call ntohs() every time. +
- Make ld.so(1) compatible with newer binutils. +
- Stop pkg_add(1) dumping core when the package contains an invalid package name. +
- Fix a double free in ex(1). +
- Give gem(4) a performance boost on sparc64 and macppc. +
- Merge in libevent 0.7a. +
- New 'remove manpage' option -u to makewhatis(8). +
- Fix a dangling pointer when deleting multicast router virtual interfaces (option MROUTING required.) +
- Fix some PHY problems in sis(4). +
- Better temp file handling in diff(1). +
- diff(1)'s -l (paginate) option works again. + +
- Sync USB code with NetBSD, in preparation for USB 2.0 support. +
- Don't kill other users' states when logging in to authpf(8). When killing (the correct user's) states, make sure they're all zapped.
+ [Applied to stable] + - When using IPsec, fix a panic by not trying to forward truncated IP-in-IP encap packets. +
- Clear down multicast forwarding on IPv6 interface detach. +
- Make httpd(8)'s (normally not compiled) DBM SSL cache code build again. +
- Fix a double free in diff(1). +
- Try to avoid using an unnecessary temp file when diff(1)'ing against a regular file redirected to stdin. +
- If syslogd(8) is given (via -p) a UNIX socket name that's too long, fail instead of silently truncating the name. +
- Make sure compress(1) closes its open files properly. + +
- Fare thee well, rpc.pcnfsd(8). +
- Fix security(8)'s password expiry check. +
- Pass the right length to readlink(2) in rdistd(1). +
- When given a unix domain socket name that's too long, nc(1) gives a helpful error instead of silently truncating the name. +
- Implement the cpuid() function for generic i386, not just for longrun. +
- Print dump(8) times correctly (PR#3296.) + +
- raidctl(8) dies noisily instead of silently truncating overlong command line options. +
- mount_nfs(8) now gives a helpful message when the hostname is too long. +
- Major updates to BSD diff, implementing many more 'standard' options and tidying up somewhat. +
- Properly reset all fields of a deleted ext2fs inode, fixing a panic. From NetBSD.
+ [Applied to stable] + - Fix an off-by-one in kernel ext2fs filesystem code, the first ext2 inode is numbered one not zero.
+ [Applied to stable] + - Further strn*() -> strl*() fixes. + +
- Back out routing socket exact match fix after reports of problems. + +
- Remove -h functionality from BSD diff, but allow the option for compatibility like GNU diff. +
- Various cleanup in pkg_add(1) et al. +
- Add 'pass' pf(4) modifier for nat rules, allowing a translation rule to bypass the filter ruleset altogether. +
- Remove a redundant (and wrong) copy in pf(4) tcp test code. + +
- Better umask setting detection in security(8). +
- Use realpath(3) instead of roll-your-own code in mount_*(8) helpers. Fixes PR#1662. +
- String function cleanup in getNAME(8). +
- Table code and exit handling cleanup in pfctl(8). +
- Fix config file parsing of the ssh(1) AddressFamily option. +
- Make sendmail(8) use the system setreuid(2) instead of its own. +
- Add a 'real' mmap2() system call under Linux emulation, using the new MAP_TRYFIXED mmap(2) option so it works the way Linux does. + +
- In ssh(1) force the host key alias to lowercase before matching. +
- Add SOCKSv5 support to ssh(1) with the -D option, as well as SOCKSv4. +
- Better ld.so(1) versioned library search algorithm. +
- Bump mktemp(3) randomness in lots of places from 6 to 10 'X's. + +
- Allow newsyslog(8)'s -a option to archive across filesystems. +
- Add MAP_TRYFIXED option to mmap(2) to turn off heap address avoidance, which helps when emulating other OSes. +
- Remove the sys_omquery() compatibility system call. +
- Better umask safety check in security(8). +
- Stability fixes to siop(4). +
- Stop using mmap(2) in tail(1), fixes a variety of bugs and performance issues. +
- Fix a bad bounds check in the grep-without-regex part of grep(1).
- Under-the-hood improvements to speed up m4(1).
- Add some buffer management functions for pf(4) tables. *************** *** 118,124 ****
- Fix grep(1)'s -w option.
- Make grep(1)'s -E, -F and -G options override the program name, and mutually exclusive.
- Make fgrep functionality of grep(1) work. !
- Unbreak POSIX:: functions under Perl 5.8.0.
- Make pf(4)'s route-to option work for IPv6 link-local addresses.
- Reintroduce some routing socket code (lost in a previous update) that could cause less-specific routes to be updated by mistake.
- Lots of int -> u_int in ssh(1). --- 281,288 ----
- Fix grep(1)'s -w option.
- Make grep(1)'s -E, -F and -G options override the program name, and mutually exclusive.
- Make fgrep functionality of grep(1) work. !
- Unbreak POSIX:: functions under Perl 5.8.0.
! [Applied to stable] - Make pf(4)'s route-to option work for IPv6 link-local addresses.
- Reintroduce some routing socket code (lost in a previous update) that could cause less-specific routes to be updated by mistake.
- Lots of int -> u_int in ssh(1).
***************
*** 859,865 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.882 2003/08/03 18:55:07 deraadt Exp $