Annotation of www/plus.html, Revision 1.922
1.919 deraadt 1:
1.863 naddy 2: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.14 deraadt 3: <html>
4: <head>
1.424 deraadt 5: <title>OpenBSD-current changes</title>
1.728 horacio 6: <link rev="made" href="mailto:www@openbsd.org">
1.14 deraadt 7: <meta name="resource-type" content="document">
1.716 deraadt 8: <meta name="description" content="OpenBSD-current changes">
9: <meta name="keywords" content="openbsd,current,changes">
1.14 deraadt 10: <meta name="distribution" content="global">
1.903 miod 11: <meta name="copyright" content="This document copyright 1996-2004 by OpenBSD.">
1.14 deraadt 12: </head>
13:
1.728 horacio 14: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.14 deraadt 15:
1.828 jsyn 16: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.64 downsj 17: <p>
1.915 deraadt 18: <h2><font color="#e00000">Changes made between OpenBSD 3.5 and OpenBSD-current</font></h2>
1.863 naddy 19: <hr>
1.14 deraadt 20:
21: <p>
1.823 jsyn 22: This is a partial list of the major machine-independent changes
1.602 aaron 23: (i.e., these are the changes people ask about most often). Port
1.29 deraadt 24: specific changes have also been made, and are sometimes mentioned
1.728 horacio 25: in the pages for the specific <a href="plat.html">platforms</a>.
1.14 deraadt 26:
1.17 deraadt 27: <p>
1.725 naddy 28: Changes to the <a href="ports.html">ports</a> collection are documented
1.747 naddy 29: <a href="portsplus/index.html">here</a>.
1.725 naddy 30:
31: <p>
1.863 naddy 32: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.185 deraadt 33:
34: <p>
1.186 deraadt 35: <h3>
1.846 deraadt 36: For changes in other releases, click below:<br>
37: <a href="plus20.html">2.0</a>,
38: <a href="plus21.html">2.1</a>,
39: <a href="plus22.html">2.2</a>,
40: <a href="plus23.html">2.3</a>,
41: <a href="plus24.html">2.4</a>,
42: <a href="plus25.html">2.5</a>,
43: <a href="plus26.html">2.6</a>,
44: <a href="plus27.html">2.7</a>,
45: <a href="plus28.html">2.8</a>,
46: <a href="plus29.html">2.9</a>,
47: <a href="plus30.html">3.0</a>,
48: <a href="plus31.html">3.1</a>,
1.868 deraadt 49: <a href="plus32.html">3.2</a>,
1.889 david 50: <a href="plus33.html">3.3</a>,
1.916 david 51: <a href="plus34.html">3.4</a>,
1.915 deraadt 52: <a href="plus35.html">3.5</a>.
1.422 deraadt 53: <br>
1.186 deraadt 54: </h3>
55:
56: <p>
1.863 naddy 57: <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
1.921 deraadt 58: The following list sums up (almost) all the changes made up to April 25.
1.847 deraadt 59: <p>
60:
1.422 deraadt 61: <ul>
1.921 deraadt 62: <!-- ^ 20040426 -->
63: <li>Since <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isprint&sektion=3">isprint(3)</a> doesn't consider all whitespace printable, also use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isspace&sektion=3">isspace(3)</a> for the binary file test in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>.
64: <li>Fix float -> quad conversion in libc.
1.922 ! henning 65: <li>Prettier output from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a>.
1.921 deraadt 66: <li>Permit multiple default routes.
67: <li>A few more unionfs fixes.
68: <li>Respect access rights on a union filesystem (PR#745).
69: <li>Add a few pieces missed in the merge of OpenSSL 0.9.7d.
70: <li>Add input queue congestion flag support to a few interfaces that can't use the new IF_INPUT_ENQUEUE macro.
71: <li>Prevent an endless loop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> with 'route-to lo0' rules (PR#3736).
72: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a> run <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> to change the rulebase instead of sucking in code from pfctl and doing it itself.
73: <li>Set MINCLSIZE back to its smaller pre-KAME IPv6 value, so now clusters will be used more often.
74: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a>, purge only a specific expired state instead of doing an expensive purge all expired states while running at a high <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spl&sektion=9">spl(9)</a>.
75: <li>Make sure the local address and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> neighbor address are of the same address family.
76: <li>Use '|' instead of ':' as the field separator for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> database keys, in preparation for future IPv6 support.
77: <li>Fix a potential null dereference in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> application utility code.
78: <!-- sbreserve() sb_mbmax -->
79: <li>Give <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=routed&sektion=8">routed(8)</a> a local copy of the radix tree code, so it doesn't get (re)broken by net/radix.c changes.
80: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssl&sektion=3">ssl(3)</a> S/MIME work again.
81: <li>Add 'neighbor cloning' to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, allowing a configuration to be specified for a network/prefixlength pair as well as the peer IP address. The configuration is cloned for each new peer in the given address range.
82: <!-- TCPCTL_DROP XXX -->
83: <li>Some string cleaning in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&sektion=4">ddb(4)</a>.
84: <li>Fix a missing return statement in in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s control connection error path.
85: <li>Add multipath support to the radix tree, allowing multiple routes to a single destination (though it won't actually get you anywhere just yet). From KAME.
86: <li>Send <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> packets for IPv6 protocols other than TCP, UDP and ICMP.
87: <li>Sync kernel radix tree code with 4.4BSD-Lite2 via NetBSD.
88: <li>Don't add a PF_GENERATED tag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> synproxy generated packets for the second handshake, so they can match rules (and create state) on another interface.
89: <!-- ^ 20040425 -->
90: <li>Add a 'probability' modifier for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> rules, setting the likelihood with which a rule will trigger.
91: <li>Greatly simplify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>'s hostname/address lookup code.
92: <li>Since OpenBSD has <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openpty&sektion=3">openpty(3)</a>, we may as well have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&sektion=8">telnetd(8)</a> use it.
93: <li>Initial support for IPv6 transport in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
94: <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> config files to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=changelist&sektion=5">changelist(5)</a> and /etc/mtree/special.
95: <li>Some additional TCP option length paranoia in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s normaliser.
96: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> display the new tcps.rcvacktooold statistic counter.
97: <li>Sync <tree.h> with Niels Provos' version to get rid of a compiler warning for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=RB_NEXT&sektion=3">RB_NEXT(3)</a>.
98: <!-- ^ 20040424 -->
99: <li>Port the gcc2 bounds checking support to gcc3, enabled with -Wbounded (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&sektion=1">gcc-local(1)</a>).
100: <li>Add some CMSG_ macros to get proper alignment in portalfs. From NetBSD.
101: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, make sure the KEY_LENGTH attribute is present when checking AES proposals as this is required when acting as responder to SafeNet peers.
102: <li>Silence <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> errors in the privileged <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> process.
103: <li>Don't display rubbish on the first output line from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a>, wait for the stats to stabilise.
104: <!-- ^ 20040423 -->
105: <li>Fix the calculation of a raw IPv6 UDP packet's checksum.
106: <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>'s ping probes, just use the pid for the ICMP id like <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ping&sektion=8">ping(8)</a> does, instead of some architecture-dependent wierdness.
107: <!-- ^ 20040422 -->
108: <li>Merge in new Omron LUNA port (luna88k), based on OpenBSD/mvme88k, NetBSD/luna68k and CMU Mach.
109: <li>As with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>, set a write filter and lock the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptor before privilege drop in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>.
110: <!-- ^ 20040421 -->
111: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pw_copy&sektion=3">pw_copy(3)</a> to take the old entry as an additional parameter, allowing both a change of username and a check that the file hasn't changed since it was last read (fixes PR#3698). Adapted from FreeBSD.
112: <li>Set a write filter and lock <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> file descriptor before dropping privileges.
113: <li>Drop the port-changing options in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a> too, always use standard ports.
114: <li>New TCP stat counter tcps.rcvacktooold, counts the number of times we drop very old ACK packets when the sequence number isn't exactly right.
115: <li>Set the km_page allocator's low watermark to a value that allows the system to boot.
116: <li>Switch the build over to the new, improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>.
117: <li>Remove the -p (listen port) option of new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>.
118: <!-- ^ 20040420 -->
119: <li>Bump the default kern.maxclusters to a value high enough to deter all but the most determined tweakers.
120: <li>Remove the GATEWAY <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option now that both IP forwarding and mbuf cluster allocation are configurable using <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>.
121: <li>Introduce a new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a> kern.maxclusters controlling (oddly enough) the maximum number of mbuf clusters. This deprecates the much-abused NMBCLUSTERS <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option.
122: <li>Use the km_page allocator as the backend for the mbuf and mbuf cluster pools.
123: <li>New km_page <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a> allocator running in an interrupt-safe kernel thread (kmthread).
124: <li>Resource starvation checks for sockets:
125: <ul>
126: <li>Check the level of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> cluster utilisation when doing an accepting a listen socket, and fail if usage is greater than 95% of the hard limit.
127: <li>New API sbcheckreserve() returns ENOBUFS if more than 50% of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> clusters are in use
128: <li>Use sbcheckreserve() when accepting a connection, and on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setsockopt&sektion=2">setsockopt(2)</a> for SO_SNDBUF and SND_RCVBUF, and allocate minimal buffers in in low-memory situations.
129: </ul>
130: <li>Stop propolice tripping an assert in gcc3.
131: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> display an error if it can't open the /var/db/spamd database for writing, and return a proper error code.
132: <li>Cure the angst in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> caused by the non-existence of the /nonexistent directory.
133: <li>Correct new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>'s handling of very long lease times (PR#2888).
134: <li>Fix a propolice bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> and unbreak MySQL (mysql bug id 1442).
135: <!-- ^ 20040419 -->
136: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> perform strict permission checks on ~/.ssh/config files and abort unless they're correct.
137: <li>If kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> and/or <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipcomp&sektion=4">ipcomp(4)</a> processing is disabled by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>, pass any packets through as raw IP to give userland a chance to handle them.
138: <li>Sync the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> driver with FreeBSD.
139: <li>Tidy up <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4">usb(4)</a> kernel configs in line with recent i386 changes.
140: <li>Restore <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=siop&sektion=4">siop(4)</a>'s ability to detect SCSI options after the recent probe changes.
141: <li>Since <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> can now be invoked legitimately without an interface, don't abort when the user doesn't give any options.
142: <!-- ^ 20040418 -->
143: <li>New _tftpd user and group.
144: <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m_pullup2&sektion=9">m_pullup2(9)</a> copies the M_CLUSTER flag when it creates a new mbuf (PR#3740).
1.920 deraadt 145: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> block unconditionally when the input queue congestion flag is set, instead of doing CPU-intensive rule tests.
146: <li>If an interface input queue becomes full, set a new congestion flag in the queue structure. Since a full queue usually indicates processing overload, this flag can be used to allow other subsystems to cooperate in easing the situation.
147: <!-- ^ 20040417 -->
148: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> show the number of mbuf clusters in use rather than the number of pages.
149: <li>Fix a ufs directory-related panic (PR#3672). Fix from FreeBSD.
150: <li>Have the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server check for attempts by a client to walk up the directory tree illegally.
151: <li>Perform some additional checks on the paths fed to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> client by the remote server.
152: <li>Some address family agnosticism in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
153: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a> show IPv6 peer addresses in neighbour view.
154: <!-- ^ 20040416 -->
155: <li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> doesn't need to continuously reopen the leases file for writing, have it <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop privileges after starting up.
156: <li>Only open the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> leases file once instead of every time it needs to be written.
157: <li>Set up new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>'s <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> listen filter for the right port.
158: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a> do a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop its privileges.
159: <li>Massive <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9">style(9)</a> application to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
160: <li>Stop another instance of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> from unlinking a socket that's in use.
161: <li>TCP packets are now allowed to have IPv4 options.
162: <li>Begin work of separating binary emulation type from the executable file format.
163: <!-- ^ 20040415 -->
164: <li>New user and group _mopd, for some obscure reason related to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
165: <li>Enable all supported USB devices in the i386 GENERIC config.
166: <li>Pass the jobname to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a>'s input filter via the -j option, some filters need it.
167: <li>When the syncache aborts a connection, don't set an ACK in the RST packet.
168: <li>Add entries for all supported USB devices to the GENERIC config on sparc64.
169: <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a>, add cases for sha2 algorithms in swcr_authcompute().
170: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=1">systat(1)</a> screen updates after resuming from a ^Z.
171: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> antispoof rules work with dynamic interfaces.
172: <li>Match on all characters of the interface name in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> parser.
173: <li>Make sure privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> transitions into STATE_RUN even when writing to stdout with '-w -'.
174: <li>Implement AI_NUMERICSERV (from RFC3493) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a>.
175: <li>Since the UDP checksum in mandatory in IPv6, drop any input packets where it's absent and make sure it's set even for error output.
176: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> cleanup:
177: <ul>
178: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>.
179: <li>Remove pidfile code.
180: <li>Steal some already-sanitised code from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>.
181: <li>Remove code to handle network access methods we don't care about, only <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> is necessary here.
182: </ul>
183: <!-- ^ 20040414 -->
184: <li>Break out <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a> into usr.sbin/dhcpd and begin The Process.
185: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&sektion=8">lpd(8)</a> treat 'o' format files (PostScript) from MacOS 10.1 the same as 'l', not 'f', since PostScript can contain binary data. From FreeBSD.
186: <li>Parse and handle RFC 2858 Multiprotocol Extensions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
187: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=restore&sektion=8">restore(8)</a> to recover files larger than 4GB by using size_t instead of long.
188: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> retry up to ten times after a second's delay for interfaces showing no link.
189: <li>More careful IKE payload parsing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>.
190: <li>New _PATH_DEVFD and _PATH_VAREMPTY constants in <paths.h>.
191: <li>Fix a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
192: <li>Have new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a> do a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chroot&sektion=2">chroot(2)</a> to /var/empty and drop privileges.
193: <li>In libpthread, update curthread immediately after a thread switch.
194: <li>New _dhcp user and group for, funnily enough, the DHCP programs.
195: <!-- ^ 20040413 -->
196: <li>Refactor the installer's network initialisation code into IPv4-specific sections in preparation for IPv6.
197: <li>Start surgery on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8">dhcrelay(8)</a>:
198: <ul>
199: <li>Move to /usr/src/usr.sbin/dhcrelay.
200: <li>Kill pidfile code.
201: <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=daemon&sektion=3">daemon(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> instead of DIY.
202: </ul>
203: <li>Huge cleanup of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mopd&sektion=8">mopd(8)</a>.
204: <li>Implement a rate limit for TCP ACKs of 100pps, and use this more general mechanism for in-window SYN handling too.
205: <li>Safely handle aborts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> etc. without tripping the recursive call handler by mistake.
206: <li>Fix reliability problems with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdt&sektion=4">gdt(4)</a>.
207: <!-- ^ 20040412 -->
1.919 deraadt 208: <li>Fix an accidental busy-wait in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>.
209: <li>Increase the maximum number of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices to 992. See the <a href="http://www.openbsd.org/faq/upgrade-minifaq.html">Upgrading Mini-FAQ</a> item 3.5.1 for upgrade instructions.
210: <li>Fix a typo in kern/tty_pty.c when generating <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> device filenames, soon to be exposed by changes to pty.
211: <li>Compatiblity fixes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a>.
212: <!-- ^ 20040411 -->
213: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf&sektion=3">snprintf(3)</a>'s handling with size==0, in line with a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vsnprintf&sektion=3">vsnprintf(3)</a> change (rev. 1.5) from years ago.
214: <li>Fix a segmentation fault in Xlib when a .Xauthority file contains IPv6 XDM-AUTHORIZATION-1 data (NetBSD PR xsrc/25098).
215: <li>Rearrange the GENERIC config file so clonable interfaces are together, and without the now-unnecessary device count.
1.918 deraadt 216: <!-- ^ 20040410 -->
217: <li>When libpthread is <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>ing for read- or writability of an fd on behalf of a thread, check the ERR, HUP and NVAL flags as well as the read or write flags.
218: <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uudecode&sektion=1">uudecode(1)</a> with FreeBSD, including base64 support.
219: <li>Stop a number of network interfaces moaning about a failed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a> allocations, the complaint uses mbufs and just makes things worse.
220: <li>Pass SIGINT and SIGQUIT through to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>'s privsep child.
221: <li>Move the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> altq, OS fingerprint and table <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a>s from the default (interrupt context) kmem allocator to the much-larger nointr allocator.
1.919 deraadt 222: <li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog.conf&sektion=5">newsyslog.conf(5)</a> doesn't list a user or group, create new files with the uid or gid from the existing file.
1.918 deraadt 223: <li>Force <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> to use the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> implementation instead of its own.
224: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> check that the file it's trying to open isn't really a directory.
225: <!-- ^ 20040409 -->
226: <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> optimiser fixes for mvme88k
227: <li>Swap the last two parameters to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=TAILQ_FOREACH_REVERSE&sektion=3">TAILQ_FOREACH_REVERSE(3)</a> in line with FreeBSD and NetBSD.
228: <li>Use a more efficient <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> size when displaying long lines in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=less&sektion=1">less(1)</a>. Speeds things up when, for example, your system crashes in the middle of a build leaving a pile of linefeedless binary crap in the typescript file.
229: <li>After going to the trouble of saving errno before it gets overwritten, use the saved value in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>'s error output.
230: <li>Don't try to close invalid file descriptors in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> privsep code.
231: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> set the timezone before privsep so the child has the right zone settings.
232: <li>Within <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>'s new lease file naming scheme, allow for the -l filename override.
233: <li>On sparc and sparc64, don't compare a RAMDISK kernel's root filesystem time with the system time, they're unlikely to have much in common.
234: <!-- ^ 20040408 -->
235: <li>Zero out the key data pointer for unknown <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> key types.
236: <li>Merge in Perl 5.8.3 and <!-- 20040408 --> OpenSSL 0.9.7d. No lame new licenses for a change.
237: <li>Now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> needs an instance per interface, having a single lease file won't do so use /var/db/dhclient.leases.<ifname>.
238: <li>Make sure the list dereference when deleting all SAs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> comes before the delete operation that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=free&sektion=3">free(3)</a>s the list node.
239: <li>Fix /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.local&sektion=8">rc.local(8)</a>'s handling of ntpd_flags.
240: <li>Unbreak pxeboot(<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=i386">8/i386</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=amd64">8/amd64</a>) build under gcc3.
241: <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> to work on more than the first physical interface found.
242: <li>In several programs, fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a> calls containing option letters for which there's no corresponding case handler.
243: <li>ISO C function declarations for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a>.
244: <li>Fix a sizeof(pointer) bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s IPv6 options parser.
245: <li>Fix some misplaced braces in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>, making 'route add' a bit more -q.
246: <li>Enable /dev/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=4">crypto(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hifn&sektion=4">hifn(4)</a> on cats machines.
247: <!-- ^ 20040407 -->
248: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>'s file renaming and copying operations set the same permissions in all cases.
249: <li>Fix double call of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ktrace&sektion=2">ktrace(2)</a> signal trap handler. <!-- XXX -->
250: <li>Add missing prototypes (in <pwd.h>) for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bcrypt&sektion=3">bcrypt(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=md5crypt&sektion=3">md5crypt(3)</a>.
251: <li>Fix some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> optimisation bugs on mvme88k.
252: <li>Fix a sizeof(wrongthing) bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a> that was breaking 64-bit machines.
253: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> print IKE DELETE payload contents.
254: <li>Remove the installer's special-case upgrade of the OpenSSL /usr/include symlinks.
255: <li>Fix a double-free in libpthread (PR#3730).
256: <li>Reenable libm compiler optimisation on sparc64, since it works properly with gcc3.
257: <!-- ^ 20040406 -->
258: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&sektion=3">sscanf(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtol&sektion=3">strtol(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newsyslog&sektion=8">newsyslog(8)</a>.
259: <li>Don't initialise <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncurses&sektion=3">ncurses(3)</a> until after options processing in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=backgammon&sektion=6">backgammon(6)</a>.
260: <li>Plug the new-and-improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> into the standard build.
261: <li>Fix a sizeof(pointer) bugs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sup&sektion=1">sup(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=visudo&sektion=8">visudo(8)</a>.
262: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>'s cache of m_tag_get() <!-- NOMAN --> results actually work.
263: <li>Check for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fdopen&sektion=3">fdopen(3)</a> failure in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vacation&sektion=1">vacation(1)</a>.
264: <li>3.5 -> 3.5-current.
265: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wskbd&sektion=4">wskbd(4)</a>'s AltGr key handling so shift-altgr-other has the same effect as altgr-shift-other.
266: <li>Never allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> states propogated via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to overwrite newer states held locally. If an overwrite is attempted, broadcast the newer version to the network to speed resynchronisation.
267: <li>Under Linux emulation, pass <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=madvise&sektion=2">madvise(2)</a> straight through to the native syscall.
268: <!-- ^ 20040405 -->
269: <li>On receipt of an in-window TCP SYN (Stevens vol.II p.964), return a 100pps rate-limited ACK instead of blindly RST'ing the connection.
270: <li>Don't try to recreate the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xfs&sektion=1">xfs(1)</a> logfile after dropping privileges.
271: <li>Don't abort <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xfs&sektion=1">xfs(1)</a> gracelessly when handling an unimplemented protocol request.
1.917 deraadt 272: <!-- ^ 20040404 -->
273: <li>Many manual page fixes.
274: <li>In a number of programs, don't close files that are known to be not open.
275: <li>Fix a missing initialisation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s privsep code.
276: <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s -v logging option do something useful.
277: <!-- ^ 20040403 -->
278: <li>Fix line breaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>'s log output.
279: <li>Allow non-GNU ANSI compilers (e.g. TenDRA) to build again by changing 'static inline' to 'static __inline'.
280: <li>Don't close descriptors we know aren't open in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>.
281: <li>Drop arc4random_8() api from the kernel.
282: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rfork&sektion=2">rfork(2)</a> so the RFMEM flag gives complete vmspace sharing including the stack, in line with other implementations.
283: <li>Add --line-buffered option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=grep&sektion=1">grep(1)</a> etc.
284: <li>Remove some unbounded recursions in the libc regex engine, found with certain expressions containing backreferences.
285: <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ls&sektion=1">ls(1)</a>' column alignment when using the -h option.
286: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=axe&sektion=4">axe(4)</a> USB Ethernet driver.
287: <!-- ^ 20040402 -->
288: <li>Fix an off-by-one in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>.
289: <li>Better bounds checking in the ramdisk's strategy() routine.
290: <li>Limit the trust between local and remote instances of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcp&sektion=1">rcp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> programs.
291: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a>'s -p option so that, when used without -s, it shows a list of sockets for the given protocol.
292: <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcmdsh&sektion=3">rcmdsh(3)</a> work on hosts without an IPv4 address.
293: <li>Initialise the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kqueue&sektion=2">kqueue(2)</a> subsystem in kernel main() instead of on first use.
294: <!-- ^ 20040401 -->
295: <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=openssl&sektion=1">openssl(1)</a>'s s_client command, complete with the usual '-4' and '-6' switches.
296: <li>Reorder checks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> so that the IP options check isn't skipped just because UseDNS=no.
297: <li>Make /usr/src/Makefile's cross-tools target work again.
298: <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a> properly use the exec'd program's basename as argv[0] if no arguments are specified.
299: <li>Fix includes search order in GNU <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a> to help cross-ld builds.
300: <li>Don't byte-swap a variable we'll need later in its original order in GNU <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a>.
301: <li>On an msdos filesystem with long filenames support enabled, fix some false-positive name matches when an integer multiple of 13 characters match. From NetBSD.
302: <li>Some portability fixups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
303: <li>tcpmd5 changes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>:
304: <ul>
305: <li>Allow either the source or destination to be a wildcard in SA lookups (netinet/ip_ipsp.c:gettdbbysrcdst()).
306: <li>Add support for the wildcard to pfkeyv2.
307: <li>Use the new pfkeyv2 wildcard support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> and remove the local address requirement for md5sig.
308: </ul>
309: <!-- ^ 20040331 -->
310: <li>Unbreak libc's regex engine compilation with -DREDEBUG.
311: <li>Change /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a> so that a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a> banner (configured via $spamd_flags) may contain spaces (PR#3720).
312: <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> how to expand GNU tar long links. From NetBSD.
313: <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>'s handling of filename-too-long errors so it just fails the syscall instead of stopping the process. Fixes PR#3140.
314: <li>Some ELF name translation fixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm&sektion=1">nm(1)</a>.
315: <li>Add /etc/rc.conf.local to /etc/mtree/special.
316: <li>Lots more activity on the SMP branch.
317: <li>Wrap <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> installation operations in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=perl&sektion=1">perl(1)</a> eval{} blocks so it's possible to at least register what did work.
318: <li>Unknown entry types in a packing list now result in an error.
319: <!-- ^ 20040330 -->
1.422 deraadt 320: </ul>
321: <p>
1.203 deraadt 322:
1.95 deraadt 323: This list mentions mostly platform-independent changes. For a list of changes
324: made in a particular platform, please check the page for that platform. If you
325: find them not listed there, the changes are either (1) not being documented or
326: (2) are documented here.<br><br>
1.14 deraadt 327:
328: <hr>
1.424 deraadt 329: <p>
330: <h3>
1.846 deraadt 331: For changes in other releases, click below:<br>
332: <a href="plus20.html">2.0</a>,
333: <a href="plus21.html">2.1</a>,
334: <a href="plus22.html">2.2</a>,
335: <a href="plus23.html">2.3</a>,
336: <a href="plus24.html">2.4</a>,
337: <a href="plus25.html">2.5</a>,
338: <a href="plus26.html">2.6</a>,
339: <a href="plus27.html">2.7</a>,
340: <a href="plus28.html">2.8</a>,
341: <a href="plus29.html">2.9</a>,
342: <a href="plus30.html">3.0</a>,
343: <a href="plus31.html">3.1</a>,
1.868 deraadt 344: <a href="plus32.html">3.2</a>,
1.889 david 345: <a href="plus33.html">3.3</a>,
1.916 david 346: <a href="plus34.html">3.4</a>,
1.915 deraadt 347: <a href="plus35.html">3.5</a>.
1.424 deraadt 348: <br>
349: </h3>
350:
351: <hr>
1.729 horacio 352: <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a>
353: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.922 ! henning 354: <br><small>$OpenBSD: plus.html,v 1.921 2004/04/26 17:33:31 deraadt Exp $</small>
1.14 deraadt 355:
356: </body>
357: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www