We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to April 16.
-
+
+
- Have pf(4) block unconditionally when the input queue congestion flag is set, instead of doing CPU-intensive rule tests. +
- If an interface input queue becomes full, set a new congestion flag in the queue structure. Since a full queue usually indicates processing overload, this flag can be used to allow other subsystems to cooperate in easing the situation. + +
- Make netstat(1) show the number of mbuf clusters in use rather than the number of pages. +
- Fix a ufs directory-related panic (PR#3672). Fix from FreeBSD. +
- Have the cvs(1) server check for attempts by a client to walk up the directory tree illegally. +
- Perform some additional checks on the paths fed to the cvs(1) client by the remote server. +
- Some address family agnosticism in bgpd(8). +
- Let bgpctl(8) show IPv6 peer addresses in neighbour view. + +
- Now that dhcpd(8) doesn't need to continuously reopen the leases file for writing, have it chroot(2) to /var/empty and drop privileges after starting up. +
- Only open the dhcpd(8) leases file once instead of every time it needs to be written. +
- Set up new dhcpd(8)'s bpf(4) listen filter for the right port. +
- Have mopd(8) do a chroot(2) to /var/empty and drop its privileges. +
- Massive style(9) application to isakmpd(8). +
- Stop another instance of syslogd(8) from unlinking a socket that's in use. +
- TCP packets are now allowed to have IPv4 options. +
- Begin work of separating binary emulation type from the executable file format. + +
- New user and group _mopd, for some obscure reason related to mopd(8). +
- Enable all supported USB devices in the i386 GENERIC config. +
- Pass the jobname to lpd(8)'s input filter via the -j option, some filters need it. +
- When the syncache aborts a connection, don't set an ACK in the RST packet. +
- Add entries for all supported USB devices to the GENERIC config on sparc64. +
- In crypto(9), add cases for sha2 algorithms in swcr_authcompute(). +
- Fix systat(1) screen updates after resuming from a ^Z. +
- Make pf(4) antispoof rules work with dynamic interfaces. +
- Match on all characters of the interface name in the pfctl(8) parser. +
- Make sure privsep tcpdump(8) transitions into STATE_RUN even when writing to stdout with '-w -'. +
- Implement AI_NUMERICSERV (from RFC3493) in getaddrinfo(3). +
- Since the UDP checksum in mandatory in IPv6, drop any input packets where it's absent and make sure it's set even for error output. +
- dhcpd(8) cleanup:
+
-
+
- Use getopt(3). +
- Remove pidfile code. +
- Steal some already-sanitised code from dhclient(8). +
- Remove code to handle network access methods we don't care about, only bpf(4) is necessary here. +
- Break out dhcpd(8) into usr.sbin/dhcpd and begin The Process. +
- Have lpd(8) treat 'o' format files (PostScript) from MacOS 10.1 the same as 'l', not 'f', since PostScript can contain binary data. From FreeBSD. +
- Parse and handle RFC 2858 Multiprotocol Extensions in bgpd(8). +
- Allow restore(8) to recover files larger than 4GB by using size_t instead of long. +
- Have dhclient(8) retry up to ten times after a second's delay for interfaces showing no link. +
- More careful IKE payload parsing in tcpdump(8). +
- New _PATH_DEVFD and _PATH_VAREMPTY constants in <paths.h>. +
- Fix a null deref in syslogd(8). +
- Have new dhcrelay(8) do a chroot(2) to /var/empty and drop privileges. +
- In libpthread, update curthread immediately after a thread switch. +
- New _dhcp user and group for, funnily enough, the DHCP programs. + +
- Refactor the installer's network initialisation code into IPv4-specific sections in preparation for IPv6. +
- Start surgery on dhcrelay(8): + +
- Huge cleanup of mopd(8). +
- Implement a rate limit for TCP ACKs of 100pps, and use this more general mechanism for in-window SYN handling too. +
- Safely handle aborts in malloc(3) etc. without tripping the recursive call handler by mistake. +
- Fix reliability problems with bge(4) and gdt(4). +
- Fix an accidental busy-wait in sensorsd(8).
- Increase the maximum number of pty(4) devices to 992. See the Upgrading Mini-FAQ item 3.5.1 for upgrade instructions.
- Fix a typo in kern/tty_pty.c when generating pty(4) device filenames, soon to be exposed by changes to pty.
***************
*** 205,211 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.919 2004/04/12 16:48:27 deraadt Exp $