We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to February 21.
-
+
+
- Fix a locking-related crash when using a portal filesystem. +
- Have pkg_add(1) make a distinction between an unreadable or non-package, and an inaccessible package file. +
- Fix pciide(4) timeouts at the end of each cdrecord burn. +
- Build sparc64 with gcc3. Gulp. +
- Many USB device fixes from NetBSD. +
- Fix a race in scsi(4), now cdrecord can safely write at high speeds. + +
- Re-fix 'VT black text on black background' and other XFree86 bugs for ATI cards, lost in the recent merge. +
- Teach passwd(1) about the master.passwd.byname map so it can work in a secure (makedbm -s) environment. +
- Uncomment and fix code for old tip(1) variables cdelay and ldelay. +
- Have tcpdump(8)'s pfsync output show the interface being cleared if available. +
- Update pfsync(4) to cope with interface-specific state clearing with e.g. pfctl -i fxp0 -Fs'. +
- Add PKG_DESTDIR (-B option) support to pkg_add(1). +
- Improvements to the new auto-generated MAKEDEV(8) manual pages. +
- Allow pkg_add(1) etc. flavor names to contain dots and other special characters. +
- Set files that ypbind(8) creates to mode 0644 with fchmod(2), just in case they're created with a more restrictive umask(2). +
- New .Ex, .In and .Rv mdoc(7) macros. +
- Fix some double-free(3)s in isakmpd(8). + +
- Resurrect old-style fontconfig-config program, still needed by some ports. +
- Make sure that the guard page is also marked as MALLOC_FREE by free(3), to cut down on bleating #ifdef MALLOC_EXTRA_SANITY. +
- Basic filtering support for bgpd(8). +
- Add pfctl(8) -i support to -Fs, -ss, -sq and -w options. +
- New smartreadlog command for atactl(8) to, well, read SMART logs. +
- Fix SMART log-related panics in wdc(4). +
- Have mount(8) report the actual xfs device mounted, and not just 'arla.' +
- In isakmpd(8), handle SIGINT the same as SIGTERM when running with -d, and dump logs to syslog at LOG_INFO without -d. +
- Fix a memory leak in tftp(1). +
- Bring pf(4) queue id semantics into line with tag assignment, and remove last vestiges of userland qid code. + +
- Stop bc(1) modifying argv and optind while inside the getopt(3) loop. +
- In gcc3, add a few missing open(2) third options when used with O_CREAT. +
- Revoke procmap(1)'s privileges immediately after kvm_openfiles(3). +
- Make sure procmap(1) doesn't call strtoul(3) on non-numbers. +
- In procmap(1), print the names of missing symbols instead of '(null)'. + +
- Extra bzero(3) paranoia for data coming out of the scsi(4) xfer pool. +
- Memory and string cleanup in procmap(1). +
- Implement kevent(2) and kqueue(2) under FreeBSD emulation, using the native calls. +
- Fix mishandling of numeric options in sed(1) (PR#3677.) +
- Add -i option to pfctl(8), restricting operations to the given interface. Only -sI implemented for now. +
- sparc64 alignment fixes in gcc3 propolice. + +
- const'ify some more pthreads(3) prototypes for POSIX reasons. From FreeBSD libc_r. +
- In chmod(1), check that 'foo.bar' isn't an existing username before assuming it's old-style user.group and treating it like user:group. +
- Don't allocate a cluster in tcp_output() when the whole header fits into an mbuf(9). +
- Add -4 and -6 IP transport selectors to rdate(8). Oh yes. +
- Add an extra check for a null transport in isakmpd(8) exchanges. +
- Use off_t instead of long so that tail(1) can handle large offsets. +
- Remove more unnecessary checks for 8-bit values > 255, this time from libc/ethers.c. +
- Add a missing realloc(3) failure check in asn1_compile. +
- Generate the MAKEDEV(8) manpages automagically based on the same information as the MAKEDEV scripts themselves. +
- gcc(1) propolice fixes on i386. +
- First cut at procmap(1) from NetBSD (where it's called pmap.) Not yet built by default. + +
- New 'split' option in iostat(8) for the newly-separated disk read/write stats. +
- Check for TDB entries marked as invalid when looking up tcpmd5 connections. +
- Record separate disk statistics for read and write operations. Adapted from NetBSD. +
- In ifstated(8), don't bcopy(3) around a structure containing TAILQ pointers. +
- Better SIGHUP handling in ifstated(8). + +
- Refactor processor speed settings sysctl code (hw.cpuspeed, hw.setperf) for clarity. +
- Fix broken tcpdump(8) IKE output for certain vendors' phase 1 proposals. + +
- New driver, bce(4), for Broadcom 4401 10/100Mbps Ethernet devices. +
- Drop the osigaltstack() compatibility system call. +
- Import and merge XFree86-current of 2004/02/13, minus files with the new XFree86 License which contains text developed by The XFree86 Project, Inc (http://www.xfree86.org/) and its contributors. +
- Make sure all pf(4) anchors get updated after an anchor is removed. +
- Better signal handling and other cleanup in pflogd(8). +
- Print textual service and protocol names properly in tcpdump(8) even when -n is specified. +
- Some cleanup and an additional mode for acss(3). + +
- Disallow em(4) PHY resets when IP is enabled on an interface to prevent lockups when using GigE copper. +
- Use a hash table instead of a linked list to speed up 802.1q tag -> vlan(4) interface lookup. +
- New -p flag for pfctl(8), allowing the device to be something other than /dev/pf. +
- Logging cleanup in ifstated(8). +
- Revert some propolice breakage in gcc3. +
- 64-bit alignment fixes in ifstated(8). + +
- RELIABILITY FIX: Several buffer overflows exist in the code parsing font.aliases files in XFree86. Thanks to ProPolice, these cannot be exploited to gain privileges, but they can cause the X server to abort.
+ A source code patch is available.
+ [Applied to stable] + - Add missing volatile to a signal handler flag in dc(1). +
- in tcp_input(), stop an unsigned integer underflow from making the TCP MSS calculation return ridiculously large values when ifp==NULL. +
- Reduce makewhatis(8)'s newly-increased pickiness a little. +
- Fix another bug that allows a pf(4) antispoof rule on an interface with no IP addresses to result in all other interfaces blocking all IP packets. + +
- Install bgpd.conf(5) root:wheel, mode 0600 and make bgpd(8) insist it be so. +
- Reduce the default number of pty(4) devices from 64 to 16, now that additional ptys will be created on demand. +
- Fix an off-by-one when generating pty(4) device names (ptydevname().) +
- Make tcpdump(8)'s pfsync(4) output more consistent with other tcpdump output. +
- Plug an mbuf(9) leak by making ip_fragment() free the mbuf on errors instead of expecting the caller to do it. +
- Add a flag so that hardware sensors can be marked as invalid if, for example, they're disconnected. +
- Make picky mode in makewhatis(8) even pickier. +
- Fix an off-by-one in pf(4)'s interface management code. +
- Have ndp(8) flush stdout before sleeping in -A mode (KAME pr#584.) +
- In the new dhclient(8), don't send pointless DHCPDISCOVER messages on interfaces that are known to have an inactive link status. +
- Allow for the presence of tcpmd5 signatures in the TCP MSS calculation. +
- Have pfctl(8) display a filter uptime now that we keep track of when it was last enabled. +
- Make pfsync(4) work on 64-bit alignment-sensitive architectures when IP options are present. +
- Unbreak ypset(8)'s -h option. From FreeBSD. +
- Have sysctl(8) politely inform users that pstat(8) with -t is the tool of choice for viewing terminal information. +
- Support -$ option (disallow '$' in identifiers) and -notraditional in cpp(1) for gcc2. +
- New ptm device (see pty(4)) that allows non-privileged processes to allocate a properly-permissioned pty. No more setuid(root) xterm(1)! +
- Stop assuming that tty sysctl(3) variables are quads. Some are now ints. +
- Dynamically allocate kernel memory for ttys, controlled via sysctl(3)s kern.tty.{maxptys,nptys}. Adapted from NetBSD. +
- Teach boot(8) how to load read-only data segments for ELF architecture kernels. +
- If the i386 bootloader fails, enable interrupts before halting so ctrl-alt-del will work. + +
- Install the edit USD doc, reworked to be an ex(1) tutorial, under /usr/share/docs/usd/11.edit. +
- In the XF4 Makefile, fix -o operator precedence for the find(1) command when checking for incorrect file permissions. +
- Add missing MLINKS and do some .Nm macro cleanup to help makewhatis(8). +
- Don't flush pf(4) stats when using the -e or -d options to pfctl(8). Store the time at which the filter was last enabled. +
- Unbreak the pf.conf(5) 'set loginterface' command. +
- Have lex(1) declare errno for c++ users too. +
- Allow libstdc++ to build on architectures with no shared libraries. + +
- Fix a panic when cleaning up after an interface (e.g a PC Card wi(4)) has gone away (PR#3649.) +
- Unstick the -a option from ps(1) (PR#3676.) +
- Sync the installer network startup with changes in netstart(8). +
- Fix a memory allocation-related panic in pfsync(4) that can occur under very high loads. +
- Fix a buffer overflow in XFree font aliasing. From XFree86 CVS.
+ [Applied to stable] - Don't fully unroll kernel rijndael code to save some space.
- Some fixes to ahc(4), mostly from FreeBSD. *************** *** 80,90 ****
- Unbreak the ssh(1) progress meter ETA for files larger than 4GB (OpenSSH bugzilla #791.)
- Fix a memory leak in dhclient(8) (PR#3668.)
- If ssh(1) is in privsep mode, pass the SIGALRM from LoginGraceTime expiry through to the child process. !
- Apply the same strict RFC 2460 interpretation used for the IPv6 MTU to the tcp MSS calculation.
- New parser for ifstated(8), and more features. Still more to come.
- Fix grep(1)'s ^ and $ anchors that were broken by the recent -w fixes. !
- For programs that don't support long options, stop getopt(3) treating '--foo' the same way it treats '--', as per POSIX (PR#3666.)
- Let pfctl(8) deal gracefully with 'modulate state' on rules with protos to which it might not apply in the same way as 'keep state', e.g. 'pass proto {tcp udp} modulate state' is now acceptable.
- Don't use a valid user id as a flag value in ps(1).
- Remove the earlier fix for the IPv6 MTU crash bug now that the full fix is in place. --- 204,215 ----
- Unbreak the ssh(1) progress meter ETA for files larger than 4GB (OpenSSH bugzilla #791.)
- Fix a memory leak in dhclient(8) (PR#3668.)
- If ssh(1) is in privsep mode, pass the SIGALRM from LoginGraceTime expiry through to the child process. !
- Apply the same strict RFC 2460 interpretation used for the IPv6 MTU to the TCP MSS calculation.
- New parser for ifstated(8), and more features. Still more to come.
- Fix grep(1)'s ^ and $ anchors that were broken by the recent -w fixes. !
- For programs that don't support long options, stop getopt(3) treating '--foo' the same way it treats '--', as per POSIX (PR#3666.)
! [Applied to stable] - Let pfctl(8) deal gracefully with 'modulate state' on rules with protos to which it might not apply in the same way as 'keep state', e.g. 'pass proto {tcp udp} modulate state' is now acceptable.
- Don't use a valid user id as a flag value in ps(1).
- Remove the earlier fix for the IPv6 MTU crash bug now that the full fix is in place. *************** *** 138,144 ****
- On i386 systems with SSE2, halve the time taken to zero a page of memory. Based on FreeBSD.
- Switch the new sigaltstack(2) code back on again on alpha and sparc64.
- Make ddb(4)'s ps /n command show the correct state for a process. !
- Reset the tcp keepalive timer to tcp.keepidle (normally four hours) after the three-way handshake completes. (syncache sets it to tcp.keepinittime, normally 150 seconds.)
- Allow a single listen socket to be used for connections with and without tcpmd5.
- Avoid a long scsi(4) freeze when attaching live scsibus* devices.
- Support RFC 3390 'Increasing TCP's initial window' extension, enabled using sysctl(8) net.inet.tcp.rfc3390. --- 263,269 ----
- On i386 systems with SSE2, halve the time taken to zero a page of memory. Based on FreeBSD.
- Switch the new sigaltstack(2) code back on again on alpha and sparc64.
- Make ddb(4)'s ps /n command show the correct state for a process. !
- Reset the TCP keepalive timer to tcp.keepidle (normally four hours) after the three-way handshake completes. (syncache sets it to tcp.keepinittime, normally 150 seconds.)
- Allow a single listen socket to be used for connections with and without tcpmd5.
- Avoid a long scsi(4) freeze when attaching live scsibus* devices.
- Support RFC 3390 'Increasing TCP's initial window' extension, enabled using sysctl(8) net.inet.tcp.rfc3390.
***************
*** 1162,1168 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.904 2004/02/08 18:12:49 deraadt Exp $