Annotation of www/plus.html, Revision 1.882
1.863 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.14 deraadt 2: <html>
3: <head>
1.424 deraadt 4: <title>OpenBSD-current changes</title>
1.728 horacio 5: <link rev="made" href="mailto:www@openbsd.org">
1.14 deraadt 6: <meta name="resource-type" content="document">
1.716 deraadt 7: <meta name="description" content="OpenBSD-current changes">
8: <meta name="keywords" content="openbsd,current,changes">
1.14 deraadt 9: <meta name="distribution" content="global">
1.810 horacio 10: <meta name="copyright" content="This document copyright 1996-2002 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.728 horacio 13: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.14 deraadt 14:
1.828 jsyn 15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.64 downsj 16: <p>
1.869 david 17: <h2><font color="#e00000">Changes made between OpenBSD 3.3 and OpenBSD-current</font></h2>
1.863 naddy 18: <hr>
1.14 deraadt 19:
20: <p>
1.823 jsyn 21: This is a partial list of the major machine-independent changes
1.602 aaron 22: (i.e., these are the changes people ask about most often). Port
1.29 deraadt 23: specific changes have also been made, and are sometimes mentioned
1.728 horacio 24: in the pages for the specific <a href="plat.html">platforms</a>.
1.14 deraadt 25:
1.17 deraadt 26: <p>
1.725 naddy 27: Changes to the <a href="ports.html">ports</a> collection are documented
1.747 naddy 28: <a href="portsplus/index.html">here</a>.
1.725 naddy 29:
30: <p>
1.863 naddy 31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.185 deraadt 32:
33: <p>
1.186 deraadt 34: <h3>
1.846 deraadt 35: For changes in other releases, click below:<br>
36: <a href="plus20.html">2.0</a>,
37: <a href="plus21.html">2.1</a>,
38: <a href="plus22.html">2.2</a>,
39: <a href="plus23.html">2.3</a>,
40: <a href="plus24.html">2.4</a>,
41: <a href="plus25.html">2.5</a>,
42: <a href="plus26.html">2.6</a>,
43: <a href="plus27.html">2.7</a>,
44: <a href="plus28.html">2.8</a>,
45: <a href="plus29.html">2.9</a>,
46: <a href="plus30.html">3.0</a>,
47: <a href="plus31.html">3.1</a>,
1.868 deraadt 48: <a href="plus32.html">3.2</a>,
49: <a href="plus33.html">3.3</a>.
1.422 deraadt 50: <br>
1.186 deraadt 51: </h3>
52:
53: <p>
1.863 naddy 54: <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
1.882 ! deraadt 55: The following list sums up (almost) all the changes made up to June 30.
1.847 deraadt 56: <p>
57:
1.422 deraadt 58: <ul>
1.882 ! deraadt 59: <!-- ^ 20030701 -->
! 60: <li>Under-the-hood improvements to speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>.
! 61: <li>Add some buffer management functions for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables.
! 62: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unifdef&sektion=1">unifdef(1)</a> fixes from FreeBSD.
! 63: <li>Reset <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> interface statistics when the loginterface is changed (PR#3332.)
! 64: <li>Properly purge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags when flushing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> filter rules.
! 65: <li>Don't generate an icmp6 redirect if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rewrote the destination address.
! 66: <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>'s gzip compatibility with silly configure scripts that expect 'gzip -h' to return success.
! 67: <!-- ^ 20030630 -->
! 68: <li>First pass at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> normalisation of IPv6 packets. No fragment reassembly yet.
! 69: <li>Improvements to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lm&sektion=4">lm(4)</a> hardware sensor driver.
! 70: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> respond more usefully to gzip CRC errors.
! 71: <li>Many manual page fixes and cleanups.
! 72: <!-- ^ 20030629 -->
! 73: <li>Fix some target probe problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>.
! 74: <li>Unbreak string printing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=locate&sektion=1">locate(1)</a>.
! 75: <li>Fix mdoc bug that put random blank lines into manpages. From NetBSD.
! 76: <li>Better type checking for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> atomic I/O.
! 77: <li>Don't give <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> interfaces an IPv6 link-local address.
! 78: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> now logs pidfile creation errors.
! 79: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> to log output via syslog. Controlled via sysctl ddb.log.
! 80: <!-- ^ 20030628 -->
! 81: <li>Handle IPv6 neighbor discovery timers more quickly and with greater accuracy.
! 82: <li>Make the installer mount all possible swap before creating devices, in an attempt to stop MAKEDEV bombing through lack of memory.
! 83: <li>Make sure getanswer() (called by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gethostbyname&sektion=3">gethostbyname(3)</a> etc.) doesn't stray past the end of its reply packet.
! 84: <li>Remove a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&sektion=8">arp(8)</a>.
! 85: <li>Fix string cleanup breakage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>.
! 86: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a> gzip code on big-endian architectures.
! 87: <li>Some more agressive string fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>.
! 88: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>' -t option.
! 89: <li>Add kqueue support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ugen&sektion=4">ugen(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhid&sektion=4">uhid(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uscanner&sektion=4">uscanner(4)</a>. From NetBSD.
! 90: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tag lookup for DIOCCHANGERULE.
! 91: <li>Fix a subtle tag reference count bug in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
! 92: <li>Add alaw <-> ulaw conversion to the kernel ( alaw_to_mulaw(), mulaw_to_alaw() )
! 93: <!-- ^ 20030627 -->
! 94: <li>Check that the argument to "-o ProxyCommand" exists on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> command line, instead of dumping core.
! 95: <!-- XXX held back <li>Mark up many common libc and other functions for the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> bounds checker. -->
! 96: <li>Add a simple static bounds checker to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>. (See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>.)
! 97: <li>Switch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff3&sektion=1">diff3(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sdiff&sektion=1">sdiff(1)</a> to use libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt_long&sektion=3">getopt_long(3)</a>.
! 98: <li>Add USD Beginners Guide document, and some historical papers.
! 99: <li>Add USD docs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=awk&sektion=1">awk(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ed&sektion=1">ed(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a>, and PSD docs for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lint&sektion=1">lint(1)</a> (as xlint) and the ms macros.
! 100: <li>Fix temp file handling and an off-by-one in BSD diff.
! 101: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isp&sektion=4">isp(4)</a>'s PCI probe.
! 102: <li>Pad the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a> script data scructure to 256 bytes to avoid cache problems.
! 103: <!-- ^ 20030626 -->
! 104: <li>Fix an endianness bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
! 105: <li>Add unified diff support to the BSD diff.
! 106: <li>Have asn1_compile use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a>.
! 107: <li>Function prototype cleanup all over the tree.
! 108: <li>New extensible bufq mechanism for manipulating buf queues, only in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wd&sektion=4">wd(4)</a> for now.
! 109: <li>Add -C option support (number of lines of context) to the BSD diff.
! 110: <li>Fix some suspect type conversions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
! 111: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a> to tag packets for later use in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rules. Oh yes.
! 112: <li>Fix backwards arguments when seeking within gzipped files in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
! 113: <li>Major cleanup (safe string functions, signal race avoidance) in the recently imported BSD diff.
! 114: <li>Fix division-by-zeros in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atapiscsi&sektion=4">atapiscsi(4)</a> that could occur when the system is unable to determine even the unit's blocksize.
! 115: <li>Add diff program from 4.3BSD Reno. Much work to be done.
1.881 deraadt 116: <!-- ^ 20030625 -->
117: <li>Add i386 a.out emulation for dynamic binaries.
118: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -w option.
119: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s -E, -F and -G options override the program name, and mutually exclusive.
120: <li>Make fgrep functionality of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> work.
121: <li>Unbreak POSIX:: functions under Perl 5.8.0.
122: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s route-to option work for IPv6 link-local addresses.
123: <li>Reintroduce some routing socket code (lost in a previous update) that could cause less-specific routes to be updated by mistake.
124: <li>Lots of int -> u_int in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
125: <li>IPv6 neighbour discovery updates from KAME.
126: <!-- ^ 20030624 -->
127: <li>Avoid using regexes completely for simple string searches in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
128: <li>Improve the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>-based <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&sektion=1">zmore(1)</a> script and install instead of the GNU gzip version.
129: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&sektion=1">kdump(1)</a> about many more dev/, net*/ and crypto/ ioctls.
130: <li>Remove the unnecessary (and broken) printf builtin from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>.
131: <li>Don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=printf&sektion=1">printf(1)</a> since this causes formats beginning with a hyphen to be interpreted as flags.
132: <li>Add a simple <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=zmore&sektion=1">zmore(1)</a> script using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compress&sektion=1">compress(1)</a>.
133: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pcmcia&sektion=4">pcmcia(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> support for sparc.
134: <li>Install a host route for a point-to-point interface even if a connected net route via a broadcast interface exists (NetBSD PR 21903.)
135: <li>Check for nfds<0 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>. <!-- Uh-oh. -->
136: <li>Better temp file handling in XFree's <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gccmakedep&sektion=1">gccmakedep(1)</a>.
137: <li>Temporarily work around a tables-related use-after-free in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
138: <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>'s detection of binary files, and add/fix a number of compatibility options.
139: <li>Improvements to the installer's handling of network settings when upgrading.
140: <!-- ^ 20030623 -->
141: <li>Remove <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ypserv&sektion=8">ypserv(8)</a> files without copyright information.
142: <li>Install freegrep as {e,f,z,ze,zf}grep as well as <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a>.
143: <li>Upgrade (non-GNU) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> to freegrep 0.16.
144: <li>Remove GNU grep and (most of) GNU gzip from the tree. BSD-licensed alternatives do the same jobs.
145: <li>Reenable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> library load order randomiser, with fixes.
146: <!-- ^ 20030622 -->
147: <li>Make user filename selection in the installer more robust.
148: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fflush&sektion=3">fflush(3)</a> stdout when doing continuous queue monitoring with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
149: <li>Add fine-grained counters for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> state entries, allowing for traffic reporting via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>.
150: <li>Add per-process exec/fork/exit hooks, use them the fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brk&sektion=2">brk(2)</a> under Linux emulation, and so fix Java.
151: <!-- ^ 20030621 -->
152: <li>Add MSS support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s synproxy.
153: <li>Initialise properly before calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getusershell&sektion=3">getusershell(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=su&sektion=1">su(1)</a>.
154: <li>More helpful <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> BAD ICMP debug message.
155: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> print some log messages when giving up on a response to the last message.
156: <!-- XXX frame pointer canonicalisation fix for propolice gnu/egcs/gcc/combine.c r1.3-1.4 -->
157: <!-- ^ 20030620 -->
158: <li>Use _PW_NAME_LEN instead of a hard-coded 8 char username limit in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
159: <li>Remove roll-your-own string functions from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
160: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=comsat&sektion=8">comsat(8)</a> use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fseeko&sektion=3">fseeko(3)</a> instead of fseek().
161: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a> now generates much prettier ANSI C code.
162: <li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> '-nolisten tcp' change.
163: <li>Plug some memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
164: <li>Strip the newline from user input when requesting a continuation filename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> (PR#3324.)
165: <!-- ^ 20030619 -->
166: <li>Fix a bug that condemned <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fortune&sektion=6">fortune(6)</a> to be always inoffensive.
167: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> return ENOBUFS on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> failure instead of causing a panic (PR#2235,PR#2236,PR#2640.)
168: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>'s handling of builtin and user macros more consistent, and allow pushdef to work for builtins.
169: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> now passes '-nolisten tcp' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=Xserver&sektion=1">Xserver(1)</a> by default for local display :0.
170: <li>Re-enable UDMA mode 5 for HPT370A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a> devices, now that timing and interrupt problems are fixed.
171: <li>Fix a sizeof oops that broke <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s -N option.
172: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hme&sektion=4">hme(4)</a> now advertises its VLAN capability.
173: <li>Properly display no-route addresses when expanding label macros in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
174: <li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> smartcard key fix, it violates PKCS#1.
175: <li>When the expansion of the $srcaddr or $dstaddr label macro is a table, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> print the table name instead of garbage.
176: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> on diskless machines (PR#3322.)
177: <li>Relax <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rtadvd.conf&sektion=5">rtadvd.conf(5)</a> syntax, removing the need for the addrs option.
178: <!-- ^ 20030618 -->
179: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getifaddrs&sektion=3">getifaddrs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=amd&sektion=8">amd(8)</a>, fixing the 'wire' location selector.
180: <li>Return the correct error message if the user tries to kill a non-existent process from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
181: <!-- ^ 20030617 -->
182: <li>Add a few missing dead-key composition entries (PR#3295, with an entry for cedilla as well as for double-quote.)
183: <li>Avoid a null deref in cnkqfilter() (/dev/console <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> crash, PR#3317.)
184: <li>Fix a logic bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mtree&sektion=8">mtree(8)</a> that was making -U return an error just like -u.
185: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&sektion=1">ssh-add(1)</a> redisplay the key comment when prompting after a bad passphrase.
186: <li>Fix "bad decrypted len" errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when using smartcard-stored public keys (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=592">592</a>.)
187: <li>Updates for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>, support freeing of old policies and escaping of special characters.
188: <li>Better byte-swapping behaviour in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>, fixing mac address reads on big-endian architectures.
189: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> fix up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5">resolv.conf(5)</a>'s permissions.
190: <!-- ^ 20030616 -->
191: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> losing ID information when rekeying.
192: <!-- ^ 20030615 -->
193: <li>Add new '-c class' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=encrypt&sektion=1">encrypt(1)</a>, which will use the login class to select the password cipher.
194: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> on ptys (PR#3209.)
195: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>, only check login class validity when the login class is set.
196: <li>Fix some sizeof oopses in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a>.
197: <li>Allocate cleared memory for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> payload buffers.
198: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> TCP state checks when using a combination of asymmetric window scaling and SACK.<br>
199: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
200: <!-- ^ 20030614 -->
201: <li>Add __LP64__ and _LP64 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpp&sektion=1">cpp(1)</a> predefined macros for alpha and sparc.
202: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> with FreeBSD updates and enable on sparc64.
203: <li>Add -0 (zero) flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> allowing the filename separator to be a NUL instead of a newline (PR#3310.)
204: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>, don't close the descriptor we just created with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&sektion=2">dup2(2)</a>.
205: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> allows dots in usernames consistent with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes.
206: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s show anchor command now respects the 'quiet' flag.
207: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a> respect symlinks.
208: <li>Remove obsolete Rijndael code from libcrypto.
209: <li>Support more Intel Fast Ethernet and Gigabit Ethernet cards.
210: <li>Use real varargs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a> instead of hacking it.
211: <!-- ^ 20030613 -->
212: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> now use the key label from a PKCS#12 cert if one is available, instead of just showing 'smartcard key.'
213: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=security&sektion=8">security(8)</a> complaining about usernames ending in '$'.
214: <li>Speed up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> traced macros, helps with recent GNU autoconf.
215: <li>Make queues work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> interfaces. Not recommended (should assign to tun, then queue on physical interface) but sometimes necessary, e.g. for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a>.
216: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> don't apply a netmask to an interface name.<br>
217: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
218: <li>Allow the kernel to compile with NFS but without FIFO.
219: <li>POSIXify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xargs&sektion=1">xargs(1)</a>, mostly from FreeBSD.
220: <!-- ^ 20030612 -->
221: <li>Much ansification and de-registering.
222: <li>Add NAT-T dump support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
223: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a> lifetime and confirmation features work with smartcard keys.
224: <li>Build <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bs&sektion=6">bs(6)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hunt&sektion=6">hunt(6)</a> again now that they have good licenses.
225: <li>Add option MFS to the kernel on several architectures, to fix upgrade breakage.
226: <li>Some RFC3542 Advanced Sockets API for IPv6 updates.
227: <li>Add an ARM target for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>.
228: <!-- ^ 20030611 -->
229: <li>De-uglify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient-script&sektion=8">dhclient-script(8)</a>, and (mostly) fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5">resolv.conf(5)</a> update problems.
230: <li>Allow zero intervals in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> config files.
231: <li>Fix a missing initialisation in pf_test() and avoid random state table additions.
232: <li>Add login class support (-class option) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adduser&sektion=8">adduser(8)</a>.
233: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> now tells sendmail to deliver in the foreground.
234: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rmail&sektion=8">rmail(8)</a> pass the -G flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> as expected.
235: <li>Install <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs2log&sektion=1">rcs2log(1)</a> properly (PR#3298.)
236: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> check that a login class exists before using it (PR#2699.)
237: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> changes from NetBSD:<br>
238: <ul>
239: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=useradd&sektion=8">useradd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usermod&sektion=8">usermod(8)</a> now check that the encrypted password length is correct.
240: <li>Log user and group modifications via syslog.
241: <li>Pickier command line option checks.
242: <li>When deleting a user including the profile, remove all references to that user from /etc/group.
243: <li>Checks that a group is in the local files (not from YP) before attempting to modify it.
244: </ul>
245: <li>Don't allow /dev/crypto to be opened at all if the kernel is compiled without the CRYPTO option.<br>
246: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
247: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=2">mount(2)</a> return EROFS instead of EPERM when trying to mount a dirty filesystem.
248: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> more robust when faced with unknown ID types.<br>
249: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
250: <li>Change the timer pthread uses, allowing threaded apps to be profiled.
251: <!-- ^ 20030610 -->
252: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a> to detect negative numbers in pid files.
253: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> busy-waiting when waiting for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to do its work.
254: <li>Better CDDB input checking for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdio&sektion=1">cdio(1)</a>.
255: <li>Make the byte order more uniform in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat code.
256: <li>Back out tcp_trace IPv6 changes and fix PR#3283.
257: <li>Stability fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a> when under heavy load.<br>
258: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
259: <!-- ^ 20030609 -->
260: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>'s -e and -f to accept both month-day-year and seconds-since-epoch times. From NetBSD.
261: <li>Detect oversized usernames in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>.
262: <li>Check for oversize group names to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> and fail the command.
263: <li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>.
264: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>'s patsubst command now accepts null patterns. This appears to fix GNU Autoconf 2.57.
265: <li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table on an anchor rule creates a real anchor, so <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> works the way one expects.
1.880 deraadt 266: <!-- ^ 20030608 -->
267: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> (with the -ss option) printing IPv4 address/netmask pairs as a.b.c.d/128.
268: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=identd&sektion=8">identd(8)</a> run by default as user _identd if possible, and fall back to user nobody if that fails.
269: <li>Replace setjmp/longjmp in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> with interruptible system calls.
270: <!-- ^ 20030607 -->
271: <li>Avoid a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fontconfig&sektion=3">fontconfig(3)</a> when $HOME is not set.
272: <li>Fix the addition of /usr/local/lib/X11/fonts to /etc/fonts.conf.
273: <li>Don't use M_WAIT in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atalk&sektion=4">atalk(4)</a>.
274: <li>Don't forward IPv6 multicasts to an interface that's no longer around to receive them.
275: <!-- ^ 20030606 -->
276: <li>Add large file support to distrib/special/more.
277: <!-- ^ 20030605 -->
278: <li>Teach distrib/special/more how to handle arbitrarily long lines and \r\n line endings.
279: <li>Set <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rusers&sektion=1">rusers(1)</a>' column width to 80 if stdout isn't a tty.
280: <!-- ^ 20030604 -->
281: <li>Add generic '-fno-builtin-<function>' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>.)
282: <li>Kill the parent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> process when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> or <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> receive a signal (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=241">241</a>.)
283: <li>Only drop setgid privileges the once in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
284: <li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> challenge/response and keyboard-interactive authentication methods if there's a host key mismatch, to reduce the likelihood of MiTM attacks catching out ignorant users (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=580">580</a>.)
285: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s --More-- prompt more --less--, less More, and more POSIX.
286: <li>Fix distrib/special/more on machines with unsigned chars.
287: <li>Simply and fix tty handing in /distrib/special/more.
288: <!-- ^ 20030603 -->
289: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=event&sektion=3">event(3)</a> honouring EVENT_NOKQUEUE when running set[ug]id.
290: <li>Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> library load order randomiser, it seems to be exposing bugs elsewhere.
291: <li>Provide a fast path for userland <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a> requests, bypassing the kernel queues where possible.
292: <li>Add some tag-related utility functions in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
293: <!-- ^ 20030602 -->
294: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> process 'show' options before options that change the rulebase.
295: <li>Huge license cleanup all over the tree.
1.881 deraadt 296: <li>Fix random lockups of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cac&sektion=4">cac(4)</a> devices.<br>
297: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.880 deraadt 298: <li>Deprecate the dangerous VerifyReverseMapping <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> option, and replace with new UseDNS option (enabled by default.)
299: <li>Install OpenSSL include files in /usr/include/openssl instead of ../ssl.
300: <li>Remove the advertising clause from many license statements.
301: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt_long&sektion=3">getopt_long(3)</a> for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>, instead of the old implementation.
302: <li>Remove a potential double-free from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
303: <!-- ^ 20030602 -->
304: <li>Fix a bad string bounds check in libedit.
305: <li>String cleaning bootblocks for all architectures. Now only bind and src/gnu use unsafe string functions.
306: <li>Fix a few long-missing initialisations, so we don't end up using random stack noise as a hint to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm_map&sektion=9">uvm_map(9)</a> via uvm_km_suballoc().
307: <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a>'s symbol table lookup algorithm.
308: <!-- ^ 20030601 -->
309: <li>Properly mask off all but the last 8 bits of status in WSTOPSIG and WEXITSTATUS.
310: <li>Add preliminary LBA support to the i386 bootloader.
311: <!-- ^ 20030531 -->
312: <li>Build a dynamic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com_err&sektion=3">com_err(3)</a> library.
313: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pmdb&sektion=1">pmdb(1)</a> to the default build.
314: <li>Fix timeout signedness bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bridge&sektion=4">bridge(4)</a>.
315: <li>Some deeper string cleaning in bind9.
316: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pmdb&sektion=1">pmdb(1)</a> dumping core when the program to be run doesn't exist.
317: <li>Add LD_NORANDOM to the list of environment variables that get zapped when running setuid/setgid.
318: <li>Load dynamic libraries in random order, to reduce the probability of an attacker guessing the address of the loaded code. Define LD_NORANDOM to disable.
319: <!-- ^ 20030530 -->
1.881 deraadt 320: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> more robust by accept non-DHCPNAK messages with yiaddr=0.0.0.0, as sent by some common DHCP servers that ignore the RFC.<br>
321: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
1.880 deraadt 322: <li>Reorder the sections in many manpages.
323: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=seteuid&sektion=2">sete[ug]id(2)</a> as well as set[ug]id() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when doing privsep and when permanently setting the [ug]id.
324: <li>When setting the tcp6 mss, fetch the link mtu using IN6_LINKMTU() (which takes neighbour discovery mtu settings into account) instead of always using the interface mtu.
325: <li>Allow numeric uid and gid in systrace, and '<' and '>' operators for ids.
326: <li>Add support for IPv6 jumbograms.
327: <li>Fix some bugs IPv6-related bugs in tcp_trace().
328: <!-- ^ 20030529 -->
329: <li>Incorporate distrib/special/more's helpfile into the program itself.
330: <li>Fix the endianness of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fxp&sektion=4">fxp(4)</a>'s statistics for netstat -i.
331: <li>Fix tab expansion, handle EDITOR not being a full pathname, and much cleanup in distrib/special/more,
332: <!-- ^ 20030528 -->
333: <li>Add pthread support for vax.
334: <li>Don't risk an M_WAIT deadlock when processing raw IP output.
335: <li>Make libwrap check for <a href="http://www.kame.net/newsletter/20030527/">bogus PTR records</a> containing numeric IP address in string form.
336: <!-- ^ 20030527 -->
337: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=df&sektion=1">df(1)</a> use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fmt_scaled&sektion=3">fmt_scaled(3)</a> stuff in libutil.
338: <!-- XXX query src/sys/arch/i386/include/pmap.h#rev1.33 -->
339: <li>Fix a few bad *printf format strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
340: <li>Install the mod_ssl headers under /usr/lib/apache/include/
341: <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trpt&sektion=8">trpt(8)</a>.
1.878 deraadt 342: <!-- ^ 20030526 -->
343: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a>'s XDMCP queries (XFree86 bug <a href="http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=277">#277</a>.)
344: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> binat rules after recent netmask check changes.
345: <!-- ^ 20030525 -->
346: <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s netmask validity check.
347: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> properly free buffers and initialise pointers when working on tables.
348: <li>Push <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> syslog output through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&sektion=3">strnvis(3)</a> first.
349: <!-- ^ 20030524 -->
350: <li>Fix an fdset leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
351: <!-- ^ 20030523 -->
352: <li>Remove unsafe <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sprintf&sektion=9&manpath=OpenBSD+3.3">sprintf(9)</a> and vsprintf() functions from the kernel.
353: <!-- ^ 20030522 -->
1.880 deraadt 354: <li>Ignore media changes for the first command issued to an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sd&sektion=4">sd(4)</a> device. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/scsi/sd.c#rev1.61">checkin comment</a> for details.
1.878 deraadt 355: <li>Match kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vprintf&sektion=9">vprintf(9)</a> prototype to that of userland.
356: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getconf&sektion=1">getconf(1)</a> return _POSIX_PATH_MAX instead of _POSIX_PIPE_MAX when asked for the former.
357: <!-- ^ 20030521 -->
358: <li>Now that kernels are built with propolice, build modules with it too.
359: <li>New hardware monitoring sensors driver <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=it&sektion=4">it(4)</a>.
360: <li>Fix endianness problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a> that caused multicast reception to fail when using Centaur chips.
361: <li>Add a missing initialisation in altq HFSC.
362: <li>Add read-only NTFS support, ported from NetBSD. Not enabled in GENERIC.
363: <li>Add a flag to reverse the stereo on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&sektion=4">auich(4)</a>.
364: <!-- ^ 20030520 -->
365: <li>Limit the return value of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nice&sektion=3">nice(3)</a> to -NZERO ≤ nice ≤ NZERO, where NZERO=20.
366: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> fail hard when fed invalid hostnames and netmasks.
367: <li>Many games fixes from NetBSD.
368: <li>Allow the i386 and hppa bootloaders to skip the interactive portion altogether.
369: <li>Fix a badly broken switch statement affecting SO_DEBUG in tcp_input.c.
370: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a> from checking if the printed file is an executable. Leave this to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> filters.
371: <li>Use a decay filter to get better altq throughput statistics out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
372: <!-- ^ 20030519 -->
373: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s do_log(), use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog_r&sektion=3">syslog_r(3)</a> in code that can be called from a signal handler.
374: <li>Severely restrict the paths that privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> can read from and write to.
375: <li>Use sockaddr_storage instead of sockaddr in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> to fix interface rescanning.
376: <li>Keep X.509 private keys only in the privileged part of privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
377: <li>When using the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> SYN proxy, make sure ACKs are sent with the correct window size.
378: <li>Wait longer for slow USB devices to be ready for attachment.
379: <!-- ^ 20030518 -->
380: <li>Don't build libperl in the libraries pass of 'make build', as we want Perl's configure to pick up details of the libraries that the build may be changing. Another leapfrog-in-waiting.
381: <li>Add regen target in libkrb5 to remove (again) the dependency on an up-to-date asn1_compile.
382: <li>Complain more consistently about a missing 80-wire IDE cable (for UDMA mode > 2.)
383: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> when printing strings out of struct utmp, since those strings aren't null terminated.
384: <li>Don't ARP for our IP address aliases, treat them as local.
385: <li>Merge in a number of USB SCSI device updates from NetBSD.
386: <li>Add experimental support for aes-ctr <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> ciphers.
387: <li>Apply some of the USB SCSI improvements to the FireWire code as well.
388: <li>Add string length bounds to an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s rhosts auth code.
389: <li>Pull in a fix for directory creation under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
390: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rdr rules with address pools using bitmask and source-hash address selection.
391: <li>Allow inverse matching of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tags.
392: <li>Fix media handling for Intel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a> devices.
393: <!-- ^ 20030517 -->
394: <li>Use the right buffer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s connection handler.
1.880 deraadt 395: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vfprintf&sektion=3">vfprintf(3)</a> when more memory is needed to store arguments. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdio/vfprintf.c#rev1.19">checkin comment</a> for why.
1.878 deraadt 396: <li>New Renegotiate-on-HUP option for the [general] section of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd.conf&sektion=5">isakmpd.conf(5)</a> will cause all Phase 2 SAs to be renegotiated.
397: <li>Fix a couple of signedness nits in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>.
398: <li>Improvements to USB SCSI support.
399: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>'s up and down cursor movement.
400: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> use the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&sektion=2">dup2(2)</a> instead of its own.
401: <li>Fare thee well, Kerberos IV.
402: <li>Another big-bucks firewall feature performed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>: TCP SYN proxy, enabled with 'synproxy state' (this implies modulate state.)
403: <li>New AddressFamily option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> that works like the -4 and -6 command line options (portable OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=534">bug 534</a>.)
404: <li>Allow address comparison in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> to work on sparc64.
405: <li>Prevent a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a> crash with a config file consisting of only invalid input.
406: <!-- ^ 20030516 -->
407: <li>Don't assume that rt->rt_ifp is valid in IPv6 neighbour discovery.
408: <li>Add new ConnectTimeout option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
409: <li>Disable Kerberos options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> programs if Kerberos isn't compiled in, and warn if they're used.
410: <li>Have 'ssh -V' print the OpenSSL version properly, instead of trying to %s on a long.
411: <li>Repair IPsec forwarding for IPv6, fixing PR#3231.
412: <li>Fix a hang in libwrap when the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hosts_access&sektion=5">hosts_access(5)</a> file has a line containing > 2048 characters. (NetBSD pr#15025.)
413: <li>Add multi-column output to the ls command of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>.
414: <li>Wash untrusted input to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mail&sektion=1">mail(1)</a> through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a> before display.
415: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, don't store the private key in data structures we pass around a lot.
416: <li>Fix a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=freerrset&sektion=3">freerrset(3)</a> in new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> dnsfp code.
417: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fmt_scaled&sektion=3">fmt_scaled(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scan_scaled&sektion=3">scan_scaled(3)</a> functions in libutil, for writing and reading numbers with human-readable scales.
418: <li>Like for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a>, add a -q option to shut <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mixerctl&sektion=1">mixerctl(1)</a>'s -w option up.
419: <li>Preliminary privilege separation support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, not enabled by default for now.
420: <li>Fix deregistration of per-authentication method handlers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
421: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&sektion=8">faithd(8)</a> specify IPPROTO_TCP explicitly in anticipation of a day when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> supports sctp.
422: <!-- ^ 20030515 -->
423: <li>Prepare to move all KerberosV libraries to /usr/lib.
424: <li>More TCP scrubbing: Modulate TCP timestamps to frustrate NAT detection and prevent remote uptime guesses. New scrub option 'reassemble tcp'.
425: <li>Kill more unwanted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le(4)</a> 'lost carrier' moans.
426: <li>Remove the rather short-lived kernel option LONGRUN, it's now standard except SMALL_KERNEL is defined.
427: <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tagging support for rdr and binat rules.
428: <li>Add _isakmpd user and group for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> privsep.
429: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> clients to send a BREAK to the remote server if it supports it (SSHv2 only.)
430: <li>Add _kdc and _kadmin users and groups for the respective KerberosV <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&sektion=8">kdc(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmind&sektion=8">kadmind(8)</a> daemons.
431: <li>On i386, support Transmeta LongRun power management (kernel option LONGRUN, enabled by default.)
432: <li>Add a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tag for each rule that matches, not just the last one.
433: <li>Remove gated stuff from /etc/rc and /etc/rc.conf.
434: <li>Add experimental support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> host key fingerprint verification using DNS records (dnsfp.) Not built by default. See src/usr.bin/ssh/README.dns for details and build instructions.
435: <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> map_pages() failure test on 64-bit architectures.
436: <li>Back out many recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> changes until they're working right.
437: <li>Disable KerberosIV support in XFree.
438: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> privsep children die when the monitor parent goes away (OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=560">bug 560</a>.)
439: <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a> to use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> link type too.
440: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> and libpcap about the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> link type in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>.
441: <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> support for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">pflog(4)</a> link type to the 'official' and more extensible version from the <a href="http://www.tcpdump.org/">libpcap</a> people.
442: <li>Start stripping out KerberosIV support from programs.
443: <li>When handling a numeric nodename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>, set the canonical hostname to the numeric address as per <a href="http://www.ietf.org/rfc/rfc3493.txt">RFC3493</a>.
444: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a>'s VIS_SAFE behaviour match the manpage w.r.t <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isgraph&sektion=3">isgraph(3)</a>.
445: <li>Allow tags to be specified for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> block rules (which aren't allowed to keep state.)
446: <li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> scrub keyword to take a protocol specifier again.
447: <li>Remove KerberosIV support from KerberosV code.
448: <li>Add packet tag support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat rules.
449: <li>Correct a string length problem and a missing null init in libreadline.
450: <li>Add kerberos-over-ssh2 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
451: <li>Reapply the move of Ethernet definitions to <net/ethertypes.h>, but this time have <netinet/if_ether.h> read them in for compatibility reasons.
452: <li>New -q flag for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a> to suppress output from the -w option.
453: <li>Fix a circular dependency by removing libtelnet, instead compile the code directly into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&sektion=1">telnet(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a> from files in libexec/telnetd.
454: <li>Move contents of libkafs into libkrb5, leave libkafs as an empty dummy library.
455: <li>Fix a use-after-free in the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tagging code in the kernel.
456: <li>Enable the increasingly popular <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> driver by default on i386 RAMDISK* kernels.
457: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&sektion=1">rdist(1)</a> with freerdist version 0.92, minus the compress option.
458: <li>Don't build KerberosIV programs. Libraries still built for the moment.
459: <li>Move blktochr() and chrtoblk() into kernel MI code.
460: <li>Add [bc]devsw_lookup() kernel convenience functions.
461: <!-- ^ 20030514 -->
462: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> make sure packet tagging is only used on stateful filter rules.
463: <li>Add NO_PROPOLICE kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option to build the kernel without the stack protector. Handy for install media.
464: <li>Fix a string length off-by-one in libreadline.
465: <li>Add userland portion of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> packet tagging support.
466: <li>Disable afs until it can be made to work sans KerberosIV.
467: <li>Force global 'time' structure to be quad_t aligned, unbreaking sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=microtime&sektion=9">microtime(9)</a> and possibly other things too.
468: <li>Add support in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> for tagging packets, and filtering based on those tags.
469: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> tag PACKET_TAG_PF_TAG.
470: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lndir&sektion=1">lndir(1)</a> doesn't try to use -1 as an array index when reading a directory.
471: <li>On ELF architectures, support the blocking of thread switches during non-thread-safe dynamic loader operations.
472: <li>Sync ELF identification indexes with the <a href="http://www.caldera.com/developers/gabi/2000-07-17/ch4.eheader.html">System V ABI</a> specs.
473: <li>Stop AM7990 (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&sektion=4&arch=i386">le(4)</a>) devices emitting 'lost carrier' messages.
474: <li>Back out <netinet/if_ether.h> changes after they caused userland meltdown.
475: <li>Add propolice stack-smash protector support to the kernel, and build the kernel using it on architectures that support propolice.
476: <li>Re-enable NULLFS, UMAPFS and UNION in the GENERIC kernel.
477: <li>Move Ethernet definitions from <netinet/if_ether.h> to new <net/ethertypes.h>, like NetBSD.
478: <li>Disable Kerberos V-to-IV conversion in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb5&sektion=8">login_krb5(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb5-or-pwd&sektion=8">login_krb5-or-pwd(8)</a>
479: <li>Stop building <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb4&sektion=8">login_krb4(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb4-or-pwd&sektion=8">login_krb4-or-pwd(8)</a>.
480: <li>Remove references to krb4 from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&sektion=5">login.conf(5)</a>.
481: <li>Changes to the way protection fault traps are handled on i386, see the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/machdep.c#rev1.229">checkin comment</a> for details and Intel abuse.
482: <li>Merge in <a href="http://www.pdc.kth.se/heimdal/">Heimdal</a> KerberosV 0.6.
483: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> from accepting usernames beginning with a slash.
484: <li>Don't report unsupported <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">scsi(4)</a> devices as offline.
485: <!-- ^ 20030513 -->
486: <li>When testing TCP window sizes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, don't apply the window scaling factor for SYN packets. Do, however, apply the scaling factor when testing ACKs.
487: <li>Fix a bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> that was causing recursive dependency searches to fail.
488: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> definitions for NAT-T, IKEv2 and EAP.
489: <li>Locking and other fixes to unionfs.
490: <li>Add BLOCK_SIZE attribute to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, and rename AES ESP transform to AES_128_CBC.
491: <li>Add UDP encapsulation type definitions (not code) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> with an eye to future NAT-T support.
492: <li>Adapt nullfs and umapfs to use common code from genfs.
493: <li>New genfs code for layered filesystem support.
494: <li>Wash print queue names through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&sektion=3">vis(3)</a> before output.
495: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ctags&sektion=1">ctags(1)</a> to understand '//' comments, ignore declarations of function types, and accept __attribute__. From NetBSD.
496: <li>Correctly check for empty output from an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> command (PR#3252.)
497: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a> command 'show proc' which, er, shows process information.
498: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> to version 0.6.2.
499: <li>Improvements and bugfixes to the installer's handing of ftp and http downloads.
500: <li>Reorder <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> IPv6 address comparison to check the least-significant bits first, since these are more likely to differ.
501: <li>Make sure the state search trees are properly in initialised when attaching <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>.
502: <li>Remove a number of KerberosV files that are not used by OpenBSD.
503: <li>When doing pubkey authentication in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, prefer agent-stored keys that are referred to in the config file. This can reduce the likelihood of the server disconnecting before it gets to a valid key when the agent is storing many keys.
504: <li>Start preparations to remove KerberosIV.
505: <li>Remove a number of redundant declarations in games/. From NetBSD.
506: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a> now recognises Ogg Vorbis audio files.
507: <li>Use the asn1_compile in src/usr.bin instead of that in src/kerberosV.
508: <li>More string fixes to libreadline, this time with no ABI changes.
509: <li>Fix a sign overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>.
510: <li>Merge in OpenSSL 0.9.7b (without IDEA, MDC2 and RC5.)
511: <li>Implement adaptive state table timeouts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>, reducing the state timeout value inversely with the number of states present.
512: <!-- ^ 20030512 -->
513: <li>Break asn1_compile out from KerberosV into src/usr.bin.
514: <li>First phase of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> stateful TCP scrubbing: Frustrate TTL-based NIDS evasion by determining on the fly the highest TTL, and enforcing it as the minimim TTL for all subsequent packets.
515: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, Do the xstrdup() of the remote_name inside channel_new() instead of making the caller do it.
516: <li>Start to fix the annoying asn1_compile leapfrog problem when upgrading KerberosV by putting the generated files into the tree.
517: <li>Make sure a hole at the end of a sparse file created by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=install&sektion=1">install(1)</a> actually gets written on all filesystems.
518: <li>The installer now accepts absolutely absolute paths (relative to the installer's root directory, not the virtual mountpoint) for local sets.
519: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>'s -e option fail gracefully if the user specifies an SSH1 key. (NetBSD pr#20550.)
520: <li>Avoid offence to Klingons by spelling 'Kang' correctly. <!-- No, really. -->
521: <li>Merge in <a href="http://www.pdc.kth.se/heimdal/">Heimdal</a> KerberosV 0.6rc1.
1.877 deraadt 522: <li>Since mfs doesn't try to force an unmount on receipt of a signal, there's no need to try to fix up processes' working dirs - the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a> will fail.
523: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s handling of the IPV6_ADDR ID-type.
1.878 deraadt 524: <li>Remove an unnecessary <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntohs&sektion=3">ntohs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, unbreaking 'nat ... -> $if port n' rules.
1.877 deraadt 525: <!-- ^ 20030511 -->
526: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> return keyword now generates an ICMP unreachable message for all protocols other than TCP (rather than just UDP and ICMP.)
527: <li>Have the compiler generate warnings if unsafe string functions are used in the kernel.
528: <li>Back out libreadline string fixes until static build works.
529: <li>Consign <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=swapon&sektion=2&manpath=OpenBSD+2.5">swapon(2)</a> to COMPAT_25 in favour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=swapctl&sektion=2">swapctl(2)</a>.
530: <li>Clear unused and/or invalid globals in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> to prevent confusion.
531: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> to spot (and reject) the new 'load...from' syntax.
532: <li>Support loading of anchors from the main <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> ruleset with new syntax 'load anchorname:rulesetname from filename'.
533: <!-- ^ 20030510 -->
534: <li>Allow for the null-terminator when calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcvt&sektion=3">gcvt(3)</a>.
535: <li>Remove a number of unnecessary executable mappings in the kernel, e.g. framebuffers and page tables don't really need to be x.
536: <!-- ^ 20030509 -->
537: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sha2&sektion=3">sha2(3)</a> digest support to libc.
538: <li>Clear libc digest buffers allocated on the stack with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memset&sektion=3">memset(3)</a> before returning.
539: <li>Move <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setrgid&sektion=3">setrgid(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setruid&sektion=3">setruid(3)</a> from libc to libcompat.
540: <li>Move <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=insque&sektion=3">insque(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lsearch&sektion=3">lsearch(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=remque&sektion=3">remque(3)</a> from libcompat to libc, since they are now POSIX functions.
541: <li>Don't leak socket fds in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> queue code, otherwise we can hit the file limit if many queues are defined.
542: <li>Fix a number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readlink&sektion=2">readlink(2)</a> calls that forgot to leave space for the null-terminator that needs to be added manually.
543: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p5.
544: <li>Add support for the userland portions of XFree86 <a href="http://dri.sourceforge.net/">DRI</a>. Not yet enabled by default.
545: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a>, null-terminate the string returned by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=readlink&sektion=2">readlink(2)</a> before passing it on.
1.880 deraadt 546: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>'ing of the dynamic linker hints file when the file size exceeds one page.<br>
547: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
1.877 deraadt 548: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> from inlining <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strcpy&sektion=3">strcpy(3)</a> so it can be more easily spotted in object files.
549: <!-- ^ 20030508 -->
550: <li>Add missing device name parameter when printing a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nofn&sektion=4">nofn(4)</a> RNG underflow error.
551: <li>Fix a bad sizeof() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xedit&sektion=1">xedit(1)</a>.
552: <li>Fix some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> off-by-ones in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makepsres&sektion=1">makepsres(1)</a>.
553: <li>Remove a string memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a>.
554: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xclock&sektion=1">xclock(1)</a>'s default behaviour back to -norender.
555: <li>Fix a few instances of sizeof(pointer instead of object) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=expand&sektion=1">expand(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lbxproxy&sektion=1">lbxproxy(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyinit&sektion=1">skeyinit(1)</a> and in the Kerberos IV and BIND libraries.
556: <li>Plug a memory leak in the kernel ELF loader.
557: <li>In the installer, give the -h option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&sektion=1">tar(1)</a> so symlinks on the existing system are honoured.
558: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> try active FTP if passive mode fails. This was missed out in the recent upgrade.
559: <!-- ^ 20030507 -->
560: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&sektion=1">rdist(1)</a> use POSIX <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=regex&sektion=3">regex(3)</a>.
561: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&sektion=1">rdist(1)</a> to cope with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcmdsh&sektion=3">rcmdsh(3)</a>'s new ability to handle command line options.
1.880 deraadt 562: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rdr and binat rules work again on protocols other than TCP, UDP and ICMP.<br>
563: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
1.877 deraadt 564: <li>After a forced unmount, try to change process back into real directories now that namei() won't do lookups under the old mountpoint.
565: <li>Stop namei() doing lookups on unmounted volumes, prevents crashes with forced unmounts. From NetBSD.
566: <li>Don't use M_WAITOK to sleep on failures when allocating hashtables for IP protocols (in_pcbinit()). Fail and panic.
567: <li>Pretty up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a> display units for hw.sensors.
568: <li>Only do <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setusercontext&sektion=3">setusercontext(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyaudit&sektion=1">skeyaudit(1)</a> when running as root.
569: <li>Don't use string functions on non-strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sd&sektion=4">sd(4)</a>.
570: <li>Kill a small <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
571: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyinfo&sektion=1">skeyinfo(1)</a>, convert the username to seven-bit before doing the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeylookup&sektion=3">skeylookup(3)</a>.
572: <li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsirand&sektion=8">fsirand(8)</a> functionality built into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a> non-optional.
573: <!-- ^ 20030506 -->
574: <li>Allow command-line arguments in rshprog passed to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcmdsh&sektion=3">rcmdsh(3)</a>.
575: <li>Add backquote to the list of characters escaped in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a>'s vi-{esc,tab}complete mode.
576: <li>Fix a couple of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> off-by-ones in afs and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=makeinfo&sektion=1">makeinfo(1)</a>.
577: <li>Write the correct amount of data when disconnecting <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tip&sektion=1">tip(1)</a> on biz22.
578: <li>Another memory layout change on i386 to allow a larger MAXDSIZ (see the tech@ <a href="http://marc.theaimsgroup.com/?l=openbsd-tech&m=105216246825100&w=2">archive</a> for details.)
579: <li>Add a mail mode to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> that does proper line wrapping, and add the '-f' command line option to set the mode.
580: <li>Properly restore the syncer vnode if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&sektion=2">unmount(2)</a> fails.
581: <!-- ^ 20030505 -->
582: <li>Use the right buffer size for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&sektion=3">getcwd(3)</a> to avoid unnecessary truncation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a>.
583: <li>Replace local (and wrong) basename logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ln&sektion=1">ln(1)</a> with a call to the real <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=basename&sektion=3">basename(3)</a>.
1.878 deraadt 584: <li>Don't leak an mbuf when dropping non-ARPHRD_ETHER arp packets.<br>
585: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
1.877 deraadt 586: <!-- ^ 20030504 -->
587: <li>Compatibility improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ossaudio&sektion=3">ossaudio(3)</a>, mostly from NetBSD.
588: <li>Ditch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_mfs&sektion=8">mount_mfs(8)</a>'s homespun malloc() in favour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>.
589: <li>Prevent a couple of use-after-frees in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
590: <li>Defensively zero the m_flags field in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> structures allocated on the stack.
1.876 deraadt 591: <!-- ^ 20030503 -->
592: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=what&sektion=1">what(1)</a> more POSIX-compliant.
593: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyaudit&sektion=1">skeyaudit(1)</a> leaking file descriptors in -a mode, and be more paranoid about stdin, stdout and stderr.
594: <li>Add Doug Gwyn's portable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=alloca&sektion=3">alloca(3)</a> on platforms for which no assembler version yet exists, and use instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a>'s alloca().
595: <li>Greatly improved SIS chipset support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&sektion=4">pciide(4)</a>.
596: <!-- ^ 20030502 -->
597: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=eso&sektion=4">eso(4)</a> work on sparc64 and (probably) macppc.
598: <li>A number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnode&sektion=9">vnode(9)</a> fixes and additions. See the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c#rev1.90">checkin comment</a> for details.
599: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> to 2.8.4release, patchset 1d, including IPv6 support.
600: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> antispoof rules to have labels.
601: <!-- ^ 20030501 -->
602: <li>Keep trying to unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apachectl&sektion=8">apachectl(8)</a> restarts for shared modules when running under the chroot.
603: <li>Improve forward compatiblity of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&sektion=8">fsck_ffs(8)</a> by comparing only what we understand instead of trying to ignore what we don't.
604: <li>Make the newly deprecated omsync() work under NetBSD emulation.
1.878 deraadt 605: <li>Several <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strvis&sektion=3">strvis(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&sektion=3">strnvis(3)</a> changes, all part of the continuing Battle for Safe String Functions.
606: <li>Fix some pthreads signal bugs that were causing MySQL to crash (PR#3179, PR#3238.)<br>
607: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
1.876 deraadt 608: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables to be loaded into anchors. <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> table options except show and flush now honour -a.
609: <!-- ^ 20030430 -->
610: <li>Have the dynamic linker stub functions in libc return -1 if called from a statically linked program.
611: <li>Only build shared libXv if the target arch supports shared libraries.
612: <li>Consign the omsync() system call to COMPAT_25 obscurity.
613: <li>Fix parsing of the noac option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a>.
614: <li>In netinet/tcp_input.c, correct a long-standing typo made when applying a deadlock-avoidance bug fix (TCP/IP Illustrated volume 2 fig. 28.30.)
615: <li>Fix a crasher in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lkm&sektion=4">lkm(4)</a>, tripped when loading a module twice.
616: <!-- ^ 20030429 -->
617: <li>Make ELF <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dlfcn&sektion=3">dlfcn(3)</a> calls thread-safe.
618: <li>Add /usr/local/lib/X11/fonts to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fontconfig&sektion=3">fontconfig(3)</a>'s search list, to help ports.
619: <li>Add some missing X server key definitions.
620: <li>Re-introduce the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>-has-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>'s-signature change, once again renaming the old syscall to omquery().
621: <li>Only close the keyfile once in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyaudit&sektion=1">skeyaudit(1)</a> -a mode.
622: <li>Do a return from main() instead of an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=3">exit(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&sektion=8">spamd-setup(8)</a>,
623: <li>Fix some more unbounded <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> calls in KerberosIV, still more to come.
624: <li>Lock earlier when doing vnode ops in procfs to avoid a possible race condition.
625: <!-- ^ 20030428 -->
626: <li>Remove a potential double-free in the XFree wsfb driver.
627: <li>Prepare <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table structures for anchor support.
628: <li>Much string cleanup in sys/dev.
629: <li>Fix the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> fifo 'C set' command (PR#3148.)
630: <!-- ^ 20030427 -->
1.875 deraadt 631: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> to eliminate some string length guesswork in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpcgen&sektion=1">rpcgen(1)</a>.
632: <li>Allocate enough space for a *printf() %u in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.yppasswdd&sektion=8">rpc.yppasswdd(8)</a>.
633: <li>Correct libXp's shared library dependencies
634: <li>Fix fat32 filesystem corruption when renaming directories.
635: <!-- ^ 20030426 -->
636: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lm&sektion=4">lm(4)</a> (National Semiconductor LM78, LM79 and compatible) and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=viaenv&sektion=4">viaenv(4)</a> (VT82C686A South Bridge) hardware monitor drivers, adapted from NetBSD to use the new sysctl hw.sensor interface.
637: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=funopen&sektion=3">funopen(3)</a>'s declaration match its prototype (PR#3236.)
638: <li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>-uses-mmap() API change.
639: <li>Add new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> node hw.sensors for, er, hardware monitoring sensors.
640: <li>Don't assume that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> failures won't clobber the tempfile name in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mktemp&sektion=1">mktemp(1)</a>.
641: <li>In the IPv4 case of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inet_net_pton&sektion=3">inet_net_pton(3)</a>, infer the netmask the same way for all address classes (i.e. don't assume multicast networks are always */4.)
642: <li>Be more portable and check the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> return value against -1 in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
643: <li>Add size bounds to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=edquota&sektion=8">edquota(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&sektion=1">tn3270(1)</a>.
644: <li>Match <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a>'s function signature to that of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&sektion=2">mmap(2)</a>.
1.880 deraadt 645: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> nat proxy port allocation for manually specified ranges.<br>
646: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
1.875 deraadt 647: <li>If one is given, properly copy the second port of a nat proxy spec in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>.
648: <!-- ^ 20030425 -->
649: <li>Fix a bad <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> bound in the AFS library (PR#3228.)
650: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf&sektion=3">asprintf(3)</a> to fix some buffer length problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pdisk&sektion=8&arch=mac68k">pdisk(8/MAC68K)</a>
651: <li>When handling the packet size option in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&sektion=8">traceroute(8)</a>, bounds check the right variable.
652: <li>Properly detect EOF when generating policy interactively.
653: <!-- ^ 20030424 -->
654: <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a> generating syslog messages on startup.
655: <li>Swap a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strchr&sektion=3">strchr(3)</a> for a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strrchr&sektion=3">strrchr(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5&sektion=1">md5(1)</a>.
656: <li>When upgrading, treat the /altroot filesystem like a 'noauto' filesystem and omit it from the upgrade fstab.
657: <!-- ^ 20030423 -->
1.874 deraadt 658: <li>Do a proper bounds check when reading in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> news server name from a file.
659: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s glob now does tilde and brace expansion as well.
660: <!-- ^ 20030422 -->
661: <li>On <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gre&sektion=4">gre(4)</a> IP input, use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_pullup&sektion=9">m_pullup(9)</a> instead of assuming the header is in the first mbuf's data region.
662: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> stop parsing command line arguments after a '--'.
663: <li>Better bounds checks when expanding curly braces in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
664: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>, don't set the object load_size field to a negative value because this is likely to be wrong.
665: <!-- ^ 20030421 -->
666: <li>Copy the null at the end of the name when adding a realm in Kerberos V.
667: <!-- ^ 20030420 -->
668: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> die the way it should when authpf.conf is missing (PR#3217.)
1.876 deraadt 669: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ubsec&sektion=4">ubsec(4)</a> output statistics.
1.874 deraadt 670: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> with its CVS and bump the version to 1.6.7p4.
671: <li>Some typedef perfectionism in libwrap.
672: <li>String cleanup and extra paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rd&sektion=4">rd(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a>.
673: <li>The string cleanup drive continues.
674: <li>Add support for the Davicom DM9009 chip to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&sektion=4">dc(4)</a>.
675: <!-- ^ 20030419 -->
676: <li>Help <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> further by making <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> return EINVAL (instead of ENOMEM) if MAP_FIXED was requested but is unavailable.
677: <li>New -x option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_msdos&sektion=8">mount_msdos(8)</a> to automagically make directories executable if they're readable.
678: <li>Unbreak Emacs 21 by fixing a problem with the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> part of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>.
679: <!-- ^ 20030418 -->
680: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tun&sektion=4">tun(4)</a> work when only IPv6 endpoints are specified.
1.872 deraadt 681: <li>Add 4.3BSD's more command for use on some floppies instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>. More is less.
682: <li>Change some return values in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> from char to int.
683: <!-- ^ 20030417 -->
684: <li>Changes to support the new <a href="http://marc.theaimsgroup.com/?l=openbsd-misc&m=105056000801065&w=2">i386 W^X</a> scheme.
685: <li><a href="http://marc.theaimsgroup.com/?l=openbsd-misc&m=105055555830978&w=2">Move</a> i386 to ELF, a binary upgrade is required for now.
686: <li>Use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> syscall in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>, i386 only for now.
687: <li>Avoid teeth-gnashing delays by making the installer use 'route -n show' instead of 'route show'.
688: <li>In the kernel ELF loader, use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uvm&sektion=9">uvm(9)</a> to make sure that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> doesn't overwrite an area that's already in use.
689: <li>Fix a buffer overflow that was causing a crash in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> (PR#3090.)
690: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apachectl&sektion=8">apachectl(8)</a> now honours $httpd_flags from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>.
1.874 deraadt 691: <li>Remove a race condition in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_mfs&sektion=8">mount_mfs(8)</a>.
1.872 deraadt 692: <!-- ^ 20030416 -->
693: <li>Fix some allocation bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
694: <li>In the kernel's standalone ISO9660 driver, collapse extra slashes in the pathname. This allows files to be loaded from the root of a cd.
695: <li>Uncomment the line that unloads <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> shared modules on a server shutdown or restart.
696: <li>Many string fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>, more to come.
697: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> can now display basic HFSC stats.
1.876 deraadt 698: <li>Much cleanup in elf2ecoff(1) (not installed by default.)
1.872 deraadt 699: <li>Allocate the right <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> buffer size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rip6query&sektion=8">rip6query(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route6d&sektion=8">route6d(8)</a>.
700: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=audioctl&sektion=1">audioctl(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size&sektion=1">size(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a>'s return value for pointer arithmetic.
701: <!-- ^ 20030415 -->
702: <li>Back out the 'long ATAPI detection delay' fix due to problems with some devices.
1.873 deraadt 703: <li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=globfree&sektion=3">globfree(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>.
1.872 deraadt 704: <li>Correct a number of short space allocations for *printf() integer-to-string conversions.
1.876 deraadt 705: <li>Fix some problems with the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> OpenBSD logo, caused by the XFree86 4.3.0 merge.
706: <li>Don't increment the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> sequence number until we know the packet has been successfully queued for sending.
1.872 deraadt 707: <li>Include the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a> job number in the process title.
708: <li>Put <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>'s help text back into a separate file, and allow a reduced-size build for the boot floppies.
709: <li>Stop using hardcoded SOCK_* types when creating sockets in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, to facilitate ssh-over-<a href="http://www.sctp.de/sctp.html">sctp</a>.
710: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> unlink its fifo and pid file on a clean shutdown (PR#3199.)
711: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> to send zero-length packets with the -s0 option.
712: <li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a> buffer length fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
713: <!-- ^ 20030414 -->
714: <li>Add new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mquery&sektion=2">mquery(2)</a> system call, to provide hints (especially to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>) on where to put memory mappings.
715: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a> leaves space for the trailing null when displaying <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=open&sektion=2">open(2)</a> flags.
716: <li>Fix bad format strings in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=extattrctl&sektion=8">extattrctl(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
717: <li>Prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=timeout_add&sektion=9">timeout_add(9)</a> from wrapping around on machines with a long uptime.
718: <li>Fix some bogus size_t values in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grops&sektion=1">grops(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>.
719: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> to version 381.
720: <!-- ^ 20030413 -->
1.871 deraadt 721: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> set file descriptor limits with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setrlimit&sektion=2">setrlimit(2)</a>.
722: <li>Relax the license on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat&sektion=3">strlcat(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> to encourage their bundling with other programs.
723: <li>Initial support for HFSC queueing, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>-style.
724: <li>Back out recent 'X looks like a package' stuff.
725: <li>Merge in expat-1.95.4 from XFree86-current.
726: <li>Fix long delays when detecting ATAPI devices.
727: <!-- ^ 20030412 -->
728: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a>'s Makefile now honours the LDSTATIC flag.
729: <li>Move queue ID assignment into the kernel and away from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, solving a bunch of problems.
730: <!-- ^ 20030411 -->
731: <li>Back out the earlier fix for PR#2230, which is a no-op since zombies aren't on the allproc list being scanned.
732: <li>De-allocate bus space on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> device failures.
733: <li>Only print the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a> -d prompt if there's enough space left on the status line (PR#3189.)
734: <!-- ^ 20030410 -->
735: <li>When fixing up process root and working directories after a filesystem mount, leave zombies well alone. (PR#2230.) <!-- Yes, #2230, not #2030 as the committer said. Grr. -->
736: <li>Fix an off-by-one in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=9">malloc(9)</a> diagnostic code.
737: <li>Correctly initialise xkb memory in the X server.
738: <li>Plug some file descriptor leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xman&sektion=1">xman(1)</a> (PR#3186.)
739: <li>Fix a broken sizeof() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> when allocating a new sentinel_info.
740: <li>Demote the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> 'missing CRL dir' moan to a debug message. <!-- Someone must really hate that warning. -->
741: <li>The kernel pf_state structure now points to both a rule and an anchor, so states created on anchors can use rule options properly.
742: <li>Create the /etc/isakmpd/crls directory from 4.4BSD.dist to stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> complaining about its absence.
743: <li>Strip trailing whitespace before parsing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> options (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=528">528</a>.)
744: <li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>'s Kerberos IV support.
745: <!-- ^ 20030409 -->
746: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select(2)</a> error handling.
747: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a> now remembers the previous 'M-x compile' command.
748: <li>Add a missing free() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a>'s dbm processing.
749: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>.
750: <!-- ^ 20030408 -->
751: <li>Change some old-style <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a>s (user.group) to POSIX user:group style.
752: <li>Fix a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=savecore&sektion=8">savecore(8)</a>.
753: <li>Add some missing NetBSD copyright information to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a>.
754: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktutil&sektion=8">ktutil(8)</a> work properly over the network.
755: <li>Improvements to string handling (not str[ln]* for once) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adventure&sektion=6">adventure(6)</a>.
756: <li>Add fake package information so ports can check for XF4 installation.
757: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&sektion=1">csh(1)</a> for XFree distrib scripts.
758: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> reject invalid ICMP types (>40) and codes (>255.)
759: <li>Fix a typo in the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> rekeying code that was causing the wrong packet state counter to be fetched.
760: <!-- ^ 20030407 -->
761: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p3.
762: <li>Handle buffer length for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> properly in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kvm_mkdb&sektion=8">kvm_mkdb(8)</a>.
763: <li>Many fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>.
764: <li>Improve (as part of string function fixes) <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a>'s handling of old-style + and - format specifiers.
765: <!-- ^ 20030406 -->
766: <li>Don't treat disklabel fields d_packname and d_typename as null-terminated fields when they're not.
767: <li>Fix a bounds-check off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lam&sektion=1">lam(1)</a>.
768: <li>Simplify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>'s parsing of CIDR masks.
769: <li>Add 'queue foo on $i_bar' syntax to allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> queue specs to apply only to specified interfaces.
770: <li>Add 230400 to the list of speeds supported by termios under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=compat_linux&sektion=8">compat_linux(8)</a>.
771: <li>Use the default rule when a packet passes due to the implicit 'pass all' at the top of the rulebase, eliminating many NULL tests.
772: <li>Add a `default' <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rule and use it to store the default timeouts.
773: <li>Add some shared library version updates missed in the XFree86 4.3.0 merge.
774: <!-- ^ 20030405 -->
775: <li>Many string function fixes all over the tree.
776: <li>Fix a bad bounds check in OpenSSL's ASN.1 parser.
777: <!-- ^ 20030404 -->
778: <li>Back out the earlier realloc() change to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
779: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sectok_fmt_fid&sektion=3">sectok_fmt_fid(3)</a> to take a string length parameter, and crank libsectok's major version for the new API.
780: <li>With the XFree86 4.3.0 merge, add an additional definition so that ports libs end up in /usr/local/lib/X11.
781: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to 1.6.7p2.
782: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a>'s empty group test (PR#3178.)
783: <li>Improve PRIQ queue id assignment, so same-priority queues on different interfaces work properly.
784: <!-- ^ 20030403 -->
785: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> instead of leaking memory in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
786: <li>Some cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
787: <li>Add a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> (OpenSSH bug <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=526">#526</a>.)
1.876 deraadt 788: <li>When an interface doesn't support <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=altq&sektion=9">altq(9)</a>, have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> print the interface name in the error message.
1.871 deraadt 789: <li>Add automatic <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> rekeying in accordance with the current secsh newmodes draft, and fix some rekeying bugs.
790: <!-- ^ 20030402 -->
791: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> notification of immediate-mode <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> events (PR#3175.)
792: <li>Merge in XFree86 4.3.0.
793: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sudo&sektion=8">sudo(8)</a> to version 1.6.7p1, to fix some overzealous paranoia.
794: <li>Bump OpenSSH version to 3.6.1.<br>
795: <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
796: <!-- ^ 20030401 -->
797: <li>Fix an mbuf leak in icmp6.
798: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&sektion=1">ftp(1)</a> treat empty environment variables as if they were unset.
799: <li>Fix some use-after-FREE when handling crypto errors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a>.
800: <li>Add a missing splx() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a>.
801: <li>Clean up and additional paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setusercontext&sektion=3">setusercontext(3)</a>.
802: <li>Only remove a kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rule structure when no states refer to it.
803: <!-- ^ 20030331 -->
804: <li>Helpfully, allow netinet/tcp_debug.c to compile when TCP_DEBUG is defined.
805: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>'s probe of dual-channel 7899 cards.
806: <li>Use snprintf to construct device names in the kernel, instead of hand-rolling.
807: <li>Give a more consistent message when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a> is aborted one way or another by the user.
808: <li>Begin the process of <a href="http://marc.theaimsgroup.com/?l=openbsd-misc&m=104958817430379&w=2">eradicating</a> the remaining strcpy, sprintf, and strcat calls from the tree.
809: <!-- ^ 20030330 -->
810: <li>Fix logging bustage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>.
811: <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to 8.12.9 to fix a buffer overflow in address parsing. Note that this fix went onto the OpenBSD 3.3 CDs and so is not a 3.3 erratum.
1.870 deraadt 812: <li>More fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iha&sektion=4">iha(4)</a>.
813: <!-- ^ 20030329 -->
814: <li>Stop pmdb dumping core on stripped executables.
815: <li>Show in log output the list against which <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> matched.
816: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> report exactly how much of the filthy spammer's time was wasted.
817: <li>Add a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strdup&sektion=3">strdup(3)</a> error check in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pwd_mkdb&sektion=8">pwd_mkdb(8)</a>.
818: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_passwd&sektion=8">login_passwd(8)</a> from setuid(root) to setuid(_shadow).
819: <li>Remove OCHIO* binary compatability hacks from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ch&sektion=4">ch(4)</a>. <!-- Warned about in the checkin on 17 Oct 2002 -->
820: <!-- ^ 20030328 -->
821: <li>When retrieving the size of a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ccd&sektion=4">ccd(4)</a> device, check the device is initialised before attempting to open it.
822: <li>Add USER_LDT to the list of kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=options&sektion=4">options(4)</a> controllable via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>.
823: <li>Sync the SMP branch to 3.3.
824: <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iha&sektion=4">iha(4)</a>'s REQUEST_SENSE handling based on hard-won experience with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=osiop&sektion=4">osiop(4)</a>.
825: <li>Actually look for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a> -q option when calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>.
826: <li>Fix handling of -f and -h options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&sektion=1">lpr(1)</a>.
827: <li>Improve error handling for invalid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> cbq and priq flags.
1.878 deraadt 828: <li>3.3 -> 3.3-current.
1.870 deraadt 829: <!-- ^ 20030327 -->
1.422 deraadt 830: </ul>
831: <p>
1.203 deraadt 832:
1.95 deraadt 833: This list mentions mostly platform-independent changes. For a list of changes
834: made in a particular platform, please check the page for that platform. If you
835: find them not listed there, the changes are either (1) not being documented or
836: (2) are documented here.<br><br>
1.14 deraadt 837:
838: <hr>
1.424 deraadt 839: <p>
840: <h3>
1.846 deraadt 841: For changes in other releases, click below:<br>
842: <a href="plus20.html">2.0</a>,
843: <a href="plus21.html">2.1</a>,
844: <a href="plus22.html">2.2</a>,
845: <a href="plus23.html">2.3</a>,
846: <a href="plus24.html">2.4</a>,
847: <a href="plus25.html">2.5</a>,
848: <a href="plus26.html">2.6</a>,
849: <a href="plus27.html">2.7</a>,
850: <a href="plus28.html">2.8</a>,
851: <a href="plus29.html">2.9</a>,
852: <a href="plus30.html">3.0</a>,
853: <a href="plus31.html">3.1</a>,
1.868 deraadt 854: <a href="plus32.html">3.2</a>,
855: <a href="plus33.html">3.3</a>.
1.424 deraadt 856: <br>
857: </h3>
858:
859: <hr>
1.729 horacio 860: <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
861: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.882 ! deraadt 862: <br><small>$OpenBSD: plus.html,v 1.881 2003/07/28 15:15:55 deraadt Exp $</small>
1.14 deraadt 863:
864: </body>
865: </html>