We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to July 31.
-
+
+
- Kill GATEWAY and IPFORWARDING config(8) options, since their functionality has long been available from sysctl(8). +
- Have httpd(8) correctly use port information supplied by the client (if available) when UseCanonicalName is off. + +
- New bgpd.conf(5) announce type "default-route", which will only announce the default route to a specified neighbour. +
- Drain hotplug(4)'s event queue on close, fixing a hang on shutdown (PR#3874). +
- Fix siop(4) probe problems on hppa. +
- Call /bin/ksh instead of /bin/sh in the installer scripts, since the ksh(1) mannerisms will be disabled when invoked as sh(1) soon. + +
- Fix a missing initialisation when processing an RDE update in bgpd(8). +
- Helpfully, don't truncate the lease file to zero length on dhcpd(8) startup. +
- Keep a unique ID for each server ntpd(8) talks to. +
- Display IKE Dead Peer Detection notifications in tcpdump(8). +
- Fix the conditions under which pool_put(9) frees a page. +
- Fix NAT-T Aggressive Mode by putting NAT-D checks in the right place. +
- Don't set the output filename in compress(1) when in -t mode, avoiding an error which the input filename doesn't end in '.gz'. +
- Drop ip6.int query support for IPv6 reverse lookups with gethostbyaddr(3). + +
- Use SHA1Pad(3) in libskey, instead of relying on undocumented behaviour from SHA1Final(3). +
- Add new timekeeping code, MI-only for now and not yet enabled anywhere. +
- In bgpd(8), prefer the path with the lowest MED value, not the highest. +
- Have bgpd(8) retry failed DNS lookups from the config file every sixty seconds. +
- Set the default localpreference in bgpd(8) to 100 instead of 0. +
- Fix a leak when passing a file descriptor between processes. +
- Support lists-within-lists for the AS and prefix in bgpd.conf(5). +
- Support list expansion for the AS in bgpd.conf(5). +
- In tcpdump(8), only print TCP sequence numbers for SYN, FIN or RST packets if -vv is in effect. +
- Use pool(9)s instead of R_Malloc() for rtentry and rttimer structs. Adapted from NetBSD. +
- Have inetd(8) set the user and group on UNIX domain sockets. +
- Add -ttttt option (timestamp difference since the first packet) to tcpdump(8). +
- In ssh(1), call setsid(2) before doing re-exec. + +
- Support pf-style macro expansion for the peer spec and prefix in bgpd.conf(5). + +
- Backport from Apache 2.0 a fix for a mod_usertrack coredump in httpd(8). + +
- Some atw(4) fixes from NetBSD. + +
- Fix IP header alignment in an(4). + +
- Fix a use-after-free(3) in gprof(1). + +
- Add in a missing NULL check in DIOCCHANGERULE, preventing a rare crash.
+ [Applied to stable] + - Use 'directory/' instead of '@dir directory' in packing lists. +
- Ignore utime(3) failure in cron(8) poke_daemon(), it doesn't matter any more since tickling the socket is enough. +
- Use mutex instead of SIMPLELOCK around the kernel's deadproc list. +
- Don't allow m_dup1() to return an mbuf chain when it should return a single mbuf. +
- Start work on removing the size limit from the mg(1) minibuffer. + +
- Fix a problem with X on 64-bit architectures that was causing some wsmouse(4) input events to be lost. +
- Don't clobber an existing /etc/fonts/local.conf in XF4 make install. +
- kqueue(2) support for NFS, adapted from NetBSD. +
- Use fseek(3) instead of fseeko(3) in hexdump(1), since the argument being used is an off_t. +
- Don't mess up the internal state of a pipe(2) when pipelock() fails, just return with an error. +
- Fix an unnecessary fatal() in sshd(8) when the remote dies quickly. +
- Don't display invalid usernames using setproctitle(3) in ssh(1) (OpenSSH bugzilla #899). +
- Fix a multiple-free in ntpd(8). +
- More umass(4) fixes from NetBSD. +
- Fix CPU speed-related sound slowdown in auich(4) (PR#3814). +
- More pointless inline removal in the kernel. +
- Implement outgoing interrupt pipes (part of the USB 1.1 spec) in usb(4). From FreeBSD. + +
- Disable the XFree86 module loader on powerpc, ahead of upcoming malloc() changes. +
- Strip the strcpy() and strcat() builtins from GCC 3 (as was done for GCC 2) to make them easier to spot and eradicate. +
- New cdce(4) driver supporting USB CDC Ethernet devices. +
- Use mutexes in a few places where SIMPLELOCK was used before. +
- Add i386 and AMD machine-dependent mutex implementations. +
- Introduce mutex support to the kernel. Not optimally efficient, and not MP-safe. +
- New @info keywork to pkg_add(1) etc., supporting GNU info documents. +
- Reintroduce standalone popa3d(8) after fixes and more testing. +
- Stop wicontrol(8) displaying garbage when run against a nonexistent interface. +
- Make gprof(1) work properly on 64-bit architectures where the text is above 4GB. + +
- Display correct labels in the output from pfctl(8) -st. +
- Fix an atw(4) panic on detach. +
- Correct mg(1)'s error checks for strtonum(3). +
- Start work on a tutorial for the make(1) we have, not PMake. +
- strtonum(3)ify id(1). +
- Fix a signal race in make(1). + +
- Fix a leak in getrrsetbyname(3). +
- Don't let xterm(1) crash when selecting text. +
- React more rationally in ntpd(8) to (possibly) transient network errors from recvfrom(2). +
- More improvements to ntpd(8)'s query interval scaling. +
- Return EINVAL if a negative offset is passed to ftruncate(2). +
- Don't check for the non-existent md5 of an '@link' in pkg_delete(1). +
- Add bsd.rd to the list of filesets installed by default. +
- For NFS and URL installs, assume the network is already set up the way the user wants it. + +
- Back out standalone support from popa3d(8). +
- Remove K&R support from libc/sys/makelintstub.sh. +
- Fix a use-after-free(3) in amd(8)'s AFS code. +
- Fix missing ssh(1) lastlog messages under certain circumstances (OpenSSH bugzilla #463). +
- Add an stty command to the boot.conf(8/i386) to set the serial console speed. +
- Deal gracefully with a null sub-timezone in the installer. +
- Unbreak the pf(4) normaliser's use of the timestamp as an extension to the sequence number. + +
- Add a ruleset optimiser to pfctl(8) (new -o and -oo options). +
- In strtonum(3), add a test of the lower bound when the upper bound is greater than LLONG_MAX. +
- Updates to the san(4) driver. +
- Kill ksh(1) history functions on non-interactive shells. Based on NetBSD. +
- Back out a TCP change that left the ends of a newly-ESTABLISHED connection with asymmetric congestion windows. + +
- Unbreak antenna diversity setting in ancontrol(8). +
- Stop pkill(1) whining when a process that it expects to be running has died, e.g. a privsep child that got reaped right away by the parent. +
- Fix core dumps from wicontrol(8) when fetching values a card doesn't support. +
- New -D option to nc(1) switching on SO_DEBUG. +
- In pkill(1), skip the pkill process itself and any processes marked P_SYSTEM every time. +
- The netiso code was removed from the tree. Noone cared. +
- Many fixes and improvements to atw(4) from NetBSD and the reference driver via NetBSD. + +
- Add compat versions of msgctl(2), semctl(2) and shmctl(2) with 16-bit mode_t. +
- Add new versions of the msgctl(2), semctl(2) and shmctl(2) functions to deal with the changes to mode_t (included in struct ipc_perm). +
- Refactor SysV shared memory functions, allowing them to automagically handle conversions between new and old structures in compatibility mode. +
- Back out last vestiges of IPv6 fragment reassembly using pf(4) scrub. +
- Drop the stratum calculation from ntpd(8). +
- Ignore clock synchronisation status returned to rdate(8) -n clients. +
- Zero out the NFS generation number in struct stat in OpenBSD 3.5 and 4.3BSD compatibility modes. +
- Only retransmit relevant NFS requests on nfs_reconnect(). +
- Rework pkg_add(1)/pkg_create(1)'s @dirrm directive, and add @dir. + +
- Fix a double-free and some backwards logic in passwd(1). +
- Finally remove the deprecated passwd.conf functionality and files. +
- Change mode_t and nlink_t from u_int16_t to u_int32_t. +
- Add weak-aliased __errno(3) function to libc and bump all library major versions. +
- Have ntpd(8) return decent server statistics to the client, including the stratum, reference time and synchronisation status. +
- Ignore obviously malformed queries in ntpd(8). +
- Use socketpair(2) instead of pipe(2) in ntpd(8). +
- In pkg_create(1), mark links as what they are instead of computing a size and checksum for them. + + +
- When pkg_add(1) detects a file conflict, helpfully list the clashing file's originating package. +
- strtoul(3) -> strtonum(3) in mg(1). +
- Deal with count==0 correctly in newsyslog(8). +
- Save process context in namei(9) avoiding a crash (PR#3842). +
- Back out IPv6 fragment reassembly under the pf(4) scrub directive, it's not ready yet. +
- Have pf(4) create a group when adding a dynamic interface that's not yet plumbed in. +
- More usb(4) fixes from NetBSD. +
- An endianness fix in nm(1). +
- Fix lockup when unmounting a union filesystem. + +
- Fix TCP NFS mount hangs after a server reset. +
- Scale ntpd(8)'s query interval based on the local clock offset. More work to come. +
- Endianness fixes to ehci(4) from NetBSD. +
- Remove descriptions of partition types from fdisk(8/i386), shrinking the executable. + +
- HP-UX compatibility stuff for hppa. +
- Fix sed(1) failure when the last character of the line buffer was a backslash. From FreeBSD and NetBSD. +
- strtonum(3)ify procmap(1). +
- Fix cd9660 buffer writing code. +
- Improve patch(1)'s detection of whether or not a patch has already been applied. +
- Miscellaneous cleanup in reboot(8). +
- Don't use strlcpy(3) on a string that's not null-terminated in ftp(1). +
- Some ANSI prototypes in games, sbin and usr.sbin. +
- Don't update the clock in ntpd(8) without data. +
- When saving a file, have mg(1) check if it's null terminated and prompt the user to add it if desired. +
- Rework ntpd(8)'s DNS handling to better deal with responses containing multiple addresses. Two keywords, 'server' and 'servers', with different semantics. +
- Set the correct poll(2) timeout in ntpd(8). + +
- A couple of network mask issues with pf(4) tables. +
- Fix a few missing close(2) and free(3) calls in an isakmpd(8) error path. +
- Fix overwriting of virtual MAC address by carp(4) on FDDI interfaces. +
- Don't mistakenly skip a file in rcp(1) and scp(1) by mistake when fchmod(2) fails twice. +
- Sync gdb(1)'s kvm interface with FSF, adding 'kvm proc' and 'kvm pcb' commands. + +
- Check for stat(2) failure in pkg_add(1)'s virtual filesystem. +
- Fix a couple of MRT bugs in ntpd(8). +
- Open the dhclient(8) script execution window from 1 to 3 seconds. +
- Return -1 from ftw(3) and nftw(3) if fts_close(3) fails without returning an error. +
- Fix a memory leak in isakmpd(8). +
- Better client responses from ntpd(8). +
- Better time handling code for ntpd(8). +
- Fix a systrace(1) problem where argv[0] would be normalised and so break scripts that depend on the original path. +
- Stop logging ntpd(8) responses with bad cookies, so attackers can't spam the log files. Back off logging in general. +
- Don't listen by default in ntpd(8). New 'listen on' directive must be used instead. +
- Allow for multiple IP addresses associated with hostnames listed in ntpd.conf(5). +
- Add a 'trustlevel' for ntpd(8) peers, using the peer's timely network responses to judge its worthiness to affect the clock offset, and to set how often queries are sent. + +
- Implement filtering on peer replies in ntpd(8). +
- Fix a couple of sizeof(wrongthing) in ntpd(8). +
- New -R option fro ftp-proxy(8) allowing pf(4) to safely accept client PASV-mode connections to a protected FTP server. +
- Have ntpd(8) log the IP address NTP replies and incorrect cookies are received from. +
- Allow and resolve hostnames in ntpd.conf(5). +
- Add a couple of missing initialisations in ntpd(8). +
- Set FTS_LOGICAL in ftw(3) and nftw(3) (unless FTS_PHYSICAL is explicitly passed in to the latter) as required by fts(3). +
- Some string cleaning and other fixes to ul(1). +
- Back out the bogus fix for the TCP simultaneous close bug from TCP/IP Illustrated vol. 2, exercise 29.5. +
- Some ehci(4) fixes from NetBSD. Multiple devices can now be simultaneously active. +
- Don't require -w for writes with audioctl(1). + +
- Keep track of historical offset and delay values in ntpd(8), for later use in filtering. +
- RELIABILITY FIX: Under certain network load the kernel can run out of stack space. This was encountered in an environment using CARP on a VLAN interface. this issue initially manifested itself as an FPU-related crash on bootup.
+ A source code patch is available.
+ [Applied to stable] + - Fix a segfault in routed(8) with rtquery(8) messages from a non-local host (PR#3841). +
- Fix ntpd(8)'s conversion from seconds to microseconds. +
- Don't queue hotplug(4) events if there's no hotplugd(8) running. When the last listening daemon exits, flush pending events. +
- strtonum(3)ify chpass(1). +
- Allow the argument to fstab(5) options groupquota and userquota to be optional +
- Implement 'set nexthop blackhole' and 'set nexthop reject' in bgpd(8). +
- Give a helpful error message when pkg_create(1) fails due to a missing @name. +
- Remote the single-server limitation in ntpd(8). +
- Use adjtime(2) to sync the local clock in ntpd(8), based on the median offset from the configured servers for now. +
- Some ehci(4) updates from NetBSD. +
- Keep track of the device and inode of objects loaded by ld.so(1), so that it's no longer possible to have the same object loaded from two different locations. + +
- Die nicely if dhclient(8) can't read its config file. +
- Fix a few missing freeaddrinfo(3)s in spamd(8) +
- Drop the requirement in the installer for a 'b' partition. If one exists use it as swap, and don't allow a mount point to be created there. +
- SCHED_LOCK() before proc_stop() in issignal(), avoiding a panic from splassert(9) #ifdef MULTIPROCESSOR. +
- In ntpd(8) compute the local clock offset as per RFC 2030 section 5. +
- Make the backspace and delete keys do the right thing by default in xterm(1).
- calloc(3) the right structure in ntpd(8) client_peer_init().
- Some cleanup in lam(1). *************** *** 172,178 ****
- Shrink the dhclient(8) die-on-RTM_DELADDR window to one second.
- Remove another stat(2)-then-open(2) from isakmpd(8). !
- Enable ahd(4) by default for i386.
- Unbreak phase 1 IPV[46]_ADDR_SUBNET IDs in isakmpd.conf(5)
- New config option 'Acquire-Only' (-a on the command line) for isakmpd(8), to stop the daemon playing with existing flows.
- Add cdboot(8), a CD-specific second-stage bootstrap for i386. --- 385,391 ----
- Shrink the dhclient(8) die-on-RTM_DELADDR window to one second.
- Remove another stat(2)-then-open(2) from isakmpd(8). !
- Enable ahd(4) by default for i386.
- Unbreak phase 1 IPV[46]_ADDR_SUBNET IDs in isakmpd.conf(5)
- New config option 'Acquire-Only' (-a on the command line) for isakmpd(8), to stop the daemon playing with existing flows.
- Add cdboot(8), a CD-specific second-stage bootstrap for i386. *************** *** 184,190 ****
- Only ignore dhclient(8)-generated RTM_DELADDR messages for a five-second window after process startup, so that new instances of dhclient (started outside this window) cause the older instance to die like before.
- Teach mkhybrid(8) how to create an El Torito no-emulation boot CD (for i386), with a 2048-byte boot sector.
- Import the generic IEEE 802.11 framework from FreeBSD and NetBSD. !
- Fix probe hangs on some ahd(4) cards.
- In the X server, fix malloc corruption when sending multiple glyphs to RenderAddGlyphs() (XFree86 bugzilla #1276, freedesktop.org bugzilla #349).
- Rewrite mount(8)'s mount options parser, making it more robust and removing the need for duplicate code in mount_nfs(8) (PR#3642).
- Fix some logic errors introduced in recent string changes to cron(8). --- 397,403 ----
- Only ignore dhclient(8)-generated RTM_DELADDR messages for a five-second window after process startup, so that new instances of dhclient (started outside this window) cause the older instance to die like before.
- Teach mkhybrid(8) how to create an El Torito no-emulation boot CD (for i386), with a 2048-byte boot sector.
- Import the generic IEEE 802.11 framework from FreeBSD and NetBSD. !
- Fix probe hangs on some ahd(4) cards.
- In the X server, fix malloc corruption when sending multiple glyphs to RenderAddGlyphs() (XFree86 bugzilla #1276, freedesktop.org bugzilla #349).
- Rewrite mount(8)'s mount options parser, making it more robust and removing the need for duplicate code in mount_nfs(8) (PR#3642).
- Fix some logic errors introduced in recent string changes to cron(8). *************** *** 515,527 ****
- SECURITY FIX: With the introduction of IPv6 code in xdm(1), one test on the 'requestPort' resource was deleted by accident. This makes xdm create the chooser socket even if XDMCP is disabled in xdm-config, by setting requestPort to 0. See XFree86 bugzilla for details.
A source code patch is available.
[Applied to stable] ! - Fix a boot-time crasher in ahd(4).
- Add (to i386 and amd64) ehci(4), a USB Enhanced Host Controller Interface driver, for USB 2.0 support.
- Finally implement StackGhost buffer overflow exploit protection on sparc.
- Correct a missing splx(9) in an igmp_joingroup() error path.
- Fix VFS corruption (due to gcc(1)) on i386 by out-of-lining the spl(9) functions. !
- Fix size_t != off_t truncation in ahd(4).
- Make vmstat(8)'s disk columns wide enough to show transfer numbers for modern disks without writing into the next column.
- Change the pf(4) anchor path component separator from ':' to '/'. pfctl(8) now requires any anchor spec containing the separator to be in quotes. --- 728,740 ----
- SECURITY FIX: With the introduction of IPv6 code in xdm(1), one test on the 'requestPort' resource was deleted by accident. This makes xdm create the chooser socket even if XDMCP is disabled in xdm-config, by setting requestPort to 0. See XFree86 bugzilla for details.
A source code patch is available.
[Applied to stable] ! - Fix a boot-time crasher in ahd(4).
- Add (to i386 and amd64) ehci(4), a USB Enhanced Host Controller Interface driver, for USB 2.0 support.
- Finally implement StackGhost buffer overflow exploit protection on sparc.
- Correct a missing splx(9) in an igmp_joingroup() error path.
- Fix VFS corruption (due to gcc(1)) on i386 by out-of-lining the spl(9) functions. !
- Fix size_t != off_t truncation in ahd(4).
- Make vmstat(8)'s disk columns wide enough to show transfer numbers for modern disks without writing into the next column.
- Change the pf(4) anchor path component separator from ':' to '/'. pfctl(8) now requires any anchor spec containing the separator to be in quotes. *************** *** 537,543 ****
- Use the right buffer size for strlcpy(3) in libreadline.
- Zero the ifreq structure before use when fetching interface info in pfctl(8).
- Fix a missing strdup(3) error check in bgpd(8). !
- Start work on adding the ahd(4) Adaptec PCI/PCI-X Ultra320 SCSI driver from FreeBSD.
- Enable the fancy new i386 pagezero code by not resetting it to its old value after setting it up.
- Allow anchors within anchors in pf(4). More work to come. --- 750,756 ----
- Use the right buffer size for strlcpy(3) in libreadline.
- Zero the ifreq structure before use when fetching interface info in pfctl(8).
- Fix a missing strdup(3) error check in bgpd(8). !
- Start work on adding the ahd(4) Adaptec PCI/PCI-X Ultra320 SCSI driver from FreeBSD.
- Enable the fancy new i386 pagezero code by not resetting it to its old value after setting it up.
- Allow anchors within anchors in pf(4). More work to come. *************** *** 552,558 ****
- Add word boundary tests to the regexes that find @-commands in pkg_add(1) etc. packing lists.
- Fix SIGINT handling in sftp(1).
- Upgrade file(1) to version 4.09. !
- Updates to aic79xx code from FreeBSD in preparation for the upcoming ahd(4) driver.
- Stop some fxp(4) devices creating PCI errors in 10Mbps mode by disabling 'dynamic standby mode' in the EEPROM. From NetBSD.
- Handle CRC errors in fxp(4). --- 765,771 ----
- Add word boundary tests to the regexes that find @-commands in pkg_add(1) etc. packing lists.
- Fix SIGINT handling in sftp(1).
- Upgrade file(1) to version 4.09. !
- Updates to aic79xx code from FreeBSD in preparation for the upcoming ahd(4) driver.
- Stop some fxp(4) devices creating PCI errors in 10Mbps mode by disabling 'dynamic standby mode' in the EEPROM. From NetBSD.
- Handle CRC errors in fxp(4). *************** *** 611,617 ****
- Don't print the sendmail(8) version if the helpfile is missing.
- Build sendmail(8) with -D_FFR_QUEUERETURN_DSN, allowing faster expiration of spam bounces.
- Unbreak checksum generation when using pf(4) scrub random-id. !
- Change pf(4) routing loop detection so that visiting a packet more than four times is an error, instead of more than once.
- Don't abort lint(1) because a child process fails, just move onto the next file.
- When doing user mounts, inherit the MNT_NOEXEC flag from the mount point. This stops users bypassing noexec by null-mounting the filesystem on top of itself. --- 824,831 ----
- Don't print the sendmail(8) version if the helpfile is missing.
- Build sendmail(8) with -D_FFR_QUEUERETURN_DSN, allowing faster expiration of spam bounces.
- Unbreak checksum generation when using pf(4) scrub random-id. !
- Change pf(4) routing loop detection so that visiting a packet more than four times is an error, instead of more than once.
! [Applied to stable] - Don't abort lint(1) because a child process fails, just move onto the next file.
- When doing user mounts, inherit the MNT_NOEXEC flag from the mount point. This stops users bypassing noexec by null-mounting the filesystem on top of itself.
***************
*** 1083,1089 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.930 2004/08/25 20:38:58 jaredy Exp $